$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft File: edZsZKYWWi5Ms31JcA5sdhhBw5o.mft (raw, json) Hash identifier: Zh3HWuKNMlVWJagnsCZkFLJ7urCKrosDwxxNsmT/mwU= Subject key identifier: F8:55:C8:E9:C0:61:D5:BA:0E:F3:CA:87:9A:83:FB:31:FE:BA:D4:87 Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A Certificate issuer: /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Certificate serial: 13EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft Manifest number: 1396 Signing time: Fri 30 May 2025 17:09:40 +0000 Manifest this update: Fri 30 May 2025 17:09:39 +0000 Manifest next update: Fri 06 Jun 2025 17:09:39 +0000 Files and hashes: 1: edZsZKYWWi5Ms31JcA5sdhhBw5o.crl (hash: ZbiWakBTcKgol5krLkXA7Yz9nbsrkakcyf84anmfeC0=) 2: C24FF4C8050D11EA8626AD5DC4F9AE02.roa (hash: bxKpA/oFCU6TUM9crxLIgO78TFK6gY7b8jSCF6lkl2Q=) 3: 1F90160E87F211ECBEBC5339C4F9AE02.roa (hash: Ie+fFLUk+hkh8iPsi0JIDwR97rjtnpIzqO2/djh9dOA=) 4: CC7502F8670E11EC90C22B7EC4F9AE02.roa (hash: HMDXcvVMEGAxoOC++6wcObudAAOApyw/6bDY30a1r+o=) 5: 17780EF09B3C11E8A13BA63AC4F9AE02.roa (hash: bwsT9LHkujI+JrOu04/8rGiF6KuhSDYaJy2PKrf04nk=) 6: 1DE5F30A87F211ECBEBC5339C4F9AE02.roa (hash: vIOfq2VGA/o5BqEJqyV+v1G5m5lQGi2kmLP/YtnJAmE=) 7: 92F5E790172E11EA9CCC934DC4F9AE02.roa (hash: l4uHSTMAHvz3K39iQ1N6BJocMGP4W2EFJHrCsRCiw/k=) 8: 85C534069AA711EBB9BBD670C4F9AE02.roa (hash: 0Wf6MrY856EXSgNTseMSxFkk6LBzj+vW0CkBQhFM5Vo=) 9: 7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (hash: wsYRvalqXpbWZCIqLrO6x3uxF4QcGxGmLPv4fG6+ndk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5099 (0x13eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A Validity Not Before: May 30 17:09:39 2025 GMT Not After : Jun 6 17:09:39 2025 GMT Subject: CN=6839e654-33c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:8e:14:d4:7f:f8:8b:c7:f5:77:61:f1:53: fa:b5:cb:f6:c4:d5:30:c2:88:57:c8:3f:40:de:21: f0:ca:7b:a5:76:09:78:9f:82:b3:70:0d:16:c6:64: 52:17:cb:52:4b:73:13:46:5f:7f:3b:22:05:3b:3c: 38:34:fe:b1:13:74:2e:50:64:fa:e3:37:51:7d:60: 78:3c:94:70:11:eb:2c:90:ef:54:45:2a:c9:e5:94: 36:41:fe:b2:fa:b4:ad:ae:b1:b5:0b:66:52:0e:b2: b6:a1:10:3e:9f:db:62:9f:b5:dd:43:6a:0c:18:9d: 50:a3:c7:89:c6:f4:ef:5b:a2:42:d9:6d:fa:46:62: 8d:a6:f9:d1:e3:d0:9e:92:75:60:bd:1e:8b:31:94: f8:c7:47:d6:47:6b:50:3c:28:63:46:34:dd:e2:81: b3:66:35:76:6e:3b:45:b8:25:49:2c:1f:c0:d3:8a: 78:f1:c1:fb:38:af:24:d5:9b:ca:b3:3c:53:9a:04: 79:d3:de:8c:b2:d1:59:a2:f7:4b:30:2e:50:a8:d0: 5f:9c:26:54:9b:d0:b3:06:18:7e:65:c0:35:5b:cf: bd:e7:78:d8:da:11:ca:bf:de:b8:eb:44:29:d3:33: ac:4a:27:22:95:4f:2e:3b:1c:a2:e0:e0:d4:f6:8a: 24:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:55:C8:E9:C0:61:D5:BA:0E:F3:CA:87:9A:83:FB:31:FE:BA:D4:87 X509v3 Authority Key Identifier: keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:6e:9c:df:c1:b2:9f:17:6c:5d:b1:a5:e0:8d:8e:19:92:ec: e8:6e:e1:7b:cb:5c:71:85:50:8f:e6:71:84:1e:1c:88:b0:c0: f6:f7:b7:11:c2:73:e1:b2:31:17:39:e6:2d:6b:94:5d:7b:37: 09:96:c7:f5:92:43:ff:01:f1:15:21:d1:a8:26:96:7a:57:12: 72:37:6f:6c:89:9e:8b:e1:f3:b1:0d:8f:2d:4e:b6:b6:a7:0e: 0f:52:ae:37:e3:04:d4:2a:ae:18:a3:58:6f:e9:e1:5f:71:58: e0:5d:03:5b:e1:1d:3a:55:55:a6:21:44:38:2b:d4:50:92:0b: c4:a9:e4:7d:19:e3:02:f8:93:17:4e:ce:72:36:0e:07:d7:3b: d9:09:99:d4:f6:4b:89:ce:08:14:e8:98:67:95:0a:4f:8c:ad: 38:ff:78:3f:02:fc:c3:c5:7c:05:3e:14:aa:4f:b0:46:63:1b: 24:37:ff:db:0b:5e:70:98:b8:f9:7c:4b:ca:9b:2e:f7:fb:45: b9:f4:89:ba:5a:a6:2d:cd:7d:b0:d1:46:3f:3c:f3:f6:f0:77: 9b:eb:67:b8:b6:34:46:c3:d6:44:87:8a:96:1c:18:0d:c3:c1: 32:1b:2c:e5:ab:c9:d4:d2:87:3c:49:8d:31:9e:2f:44:11:cc: f4:02:bb:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM4NDcxMTAvBgNVBAUTKDc5RDY2QzY0QTYxNjVBMkU0Q0IzN0Q0OTcwMEU2Qzc2 MTg0MUMzOUEwHhcNMjUwNTMwMTcwOTM5WhcNMjUwNjA2MTcwOTM5WjAYMRYwFAYD VQQDEw02ODM5ZTY1NC0zM2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJGOFNR/+IvH9Xdh8VP6tcv2xNUwwohXyD9A3iHwynuldgl4n4KzcA0WxmRS F8tSS3MTRl9/OyIFOzw4NP6xE3QuUGT64zdRfWB4PJRwEesskO9URSrJ5ZQ2Qf6y +rStrrG1C2ZSDrK2oRA+n9tin7XdQ2oMGJ1Qo8eJxvTvW6JC2W36RmKNpvnR49Ce knVgvR6LMZT4x0fWR2tQPChjRjTd4oGzZjV2bjtFuCVJLB/A04p48cH7OK8k1ZvK szxTmgR5096MstFZovdLMC5QqNBfnCZUm9CzBhh+ZcA1W8+953jY2hHKv96460Qp 0zOsSicilU8uOxyi4ODU9ookWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhVyOnA YdW6DvPKh5qD+zH+utSHMB8GA1UdIwQYMBaAFHnWbGSmFlouTLN9SXAObHYYQcOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzg0Ny9BQ0Y5NDM1MjlB RjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dpNU1zMzFKY0E1c2RoaEJ3 NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkWnNaS1lXV2k1TXMzMUpjQTVzZGhoQnc1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzg0Ny9BQ0Y5NDM1MjlBRjMxMUU4QUFCNEQ1NURDNEY5QUUwMi9lZFpzWktZV1dp NU1zMzFKY0E1c2RoaEJ3NW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBbpzfwbKfF2xdsaXgjY4ZkuzobuF7y1xxhVCP5nGEHhyIsMD297cR wnPhsjEXOeYta5RdezcJlsf1kkP/AfEVIdGoJpZ6VxJyN29siZ6L4fOxDY8tTra2 pw4PUq434wTUKq4Yo1hv6eFfcVjgXQNb4R06VVWmIUQ4K9RQkgvEqeR9GeMC+JMX Ts5yNg4H1zvZCZnU9kuJzggU6JhnlQpPjK04/3g/AvzDxXwFPhSqT7BGYxskN//b C15wmLj5fEvKmy73+0W59Im6WqYtzX2w0UY/PPP28Heb62e4tjRGw9ZEh4qWHBgN w8EyGyzlq8nU0oc8SY0xni9EEcz0ArtK -----END CERTIFICATE-----Generated at Sat May 31 16:42:01 2025 by rpki-client