$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft File: e8dWLzeFS9JjniQQ1nPld8v7MR8.mft (raw, json) Hash identifier: mXgVdFH1q7xYGZk3TRbcW8u2Cw/zjN/3dMyaVV/ghHU= Subject key identifier: 19:98:8E:EB:18:1A:FE:30:35:A7:C3:1B:C6:4A:BD:C0:FF:D3:4C:45 Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F Certificate issuer: /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft Manifest number: 3B Signing time: Sat 31 May 2025 07:10:08 +0000 Manifest this update: Sat 31 May 2025 07:10:07 +0000 Manifest next update: Sat 07 Jun 2025 07:10:07 +0000 Files and hashes: 1: e8dWLzeFS9JjniQQ1nPld8v7MR8.crl (hash: 9RS4dAPOqlDWMfmeo6sjE6/3xNHLAWq95cYJfQOHJ3o=) 2: C6D4BDF8ECFC11EF9447031DC4F9AE02.roa (hash: vKvGvc7f1ooIQwok9o5vzvjlKuAVRyu9TkNTlmBt1ZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Validity Not Before: May 31 07:10:07 2025 GMT Not After : Jun 7 07:10:07 2025 GMT Subject: CN=683aab50-536b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:13:ac:a9:c9:cd:0d:35:7c:19:1a:ce:f4: cd:f6:60:36:34:dc:b5:8d:ba:bf:cd:69:ec:48:ff: 27:d2:0e:29:e8:25:c9:bf:10:68:aa:8b:d3:0e:ea: 7b:85:31:86:ea:83:b9:45:14:4e:7c:7c:56:65:5a: de:a5:2e:0f:3a:50:c6:dc:a6:7c:71:c2:d7:8e:d6: 12:da:e5:44:6e:e6:60:19:5a:3e:da:51:05:9c:3f: 79:03:c8:4e:95:c4:13:ea:b4:f9:44:cb:0d:73:ac: 27:94:bd:ac:35:4c:67:96:c2:f1:4b:0f:42:3b:fc: 35:0c:37:ad:f8:0a:63:bb:8d:05:85:af:3d:42:ff: 0f:ec:3e:89:37:8e:df:f4:25:09:61:06:7a:db:39: cd:a4:19:3a:e7:4a:fd:4a:39:e1:fe:85:72:50:34: ba:bf:e5:4c:de:78:11:f5:e1:4c:70:c8:be:f5:9c: ad:4d:e0:bf:83:0b:0a:c7:b3:c2:69:cb:f9:c6:ac: 1a:36:dc:9e:10:09:d5:1d:e7:17:55:25:c7:0b:09: 37:d5:3f:6c:fa:37:b5:ce:2e:5e:c8:01:c6:68:69: 8a:bb:c5:b5:cf:8c:0e:8f:09:37:a3:44:d6:32:ae: 45:94:0a:29:6a:ae:1b:02:98:81:32:53:8b:99:05: 6e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:98:8E:EB:18:1A:FE:30:35:A7:C3:1B:C6:4A:BD:C0:FF:D3:4C:45 X509v3 Authority Key Identifier: keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:d7:a1:b6:3c:03:db:e3:2a:1c:97:cc:c1:c7:f9:bb:0f:73: 0a:54:e1:cd:07:c7:4d:d0:f0:f2:6d:4d:25:5c:17:dc:ea:15: 92:96:07:ef:34:08:8f:aa:df:fa:3c:ee:8f:6e:8d:5b:6f:06: 3b:d1:0a:3a:c4:59:bf:8d:a2:cb:57:b8:1b:df:a0:35:42:95: 5b:3d:04:57:37:cc:3e:64:f5:66:be:e4:28:20:0f:9d:a0:44: eb:71:50:7b:99:63:75:1e:a3:23:27:7b:eb:ce:38:af:16:ef: ed:fb:92:45:13:1e:91:97:03:a3:72:2b:ba:1b:ab:56:25:31: bc:3b:3f:12:58:2e:7f:fc:20:4a:f8:da:40:51:86:bd:1c:e5: 74:af:60:f9:4f:95:5b:ef:0d:80:64:0b:ca:14:69:02:9e:5d: d1:5e:0e:58:10:c6:57:30:86:e9:b2:17:0b:a6:fa:5c:b8:1d: 4a:33:d5:b3:3b:52:5a:8a:8d:8f:ea:c0:9a:e6:db:fd:07:b4: 63:de:e8:22:c3:18:d0:98:8b:15:65:db:0d:53:e8:9d:74:80: 27:0d:2a:9f:3f:4f:44:7d:12:94:1f:55:a5:d5:1d:fc:9b:15: 40:7d:61:e0:0d:c9:56:ea:07:ae:81:fc:48:a9:45:6e:6b:3b: 9c:49:3d:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzZDMjExMC8GA1UEBRMoN0JDNzU2MkYzNzg1NEJEMjYzOUUyNDEwRDY3M0U1NzdD QkZCMzExRjAeFw0yNTA1MzEwNzEwMDdaFw0yNTA2MDcwNzEwMDdaMBgxFjAUBgNV BAMTDTY4M2FhYjUwLTUzNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZkBOsqcnNDTV8GRrO9M32YDY03LWNur/NaexI/yfSDinoJcm/EGiqi9MO6nuF MYbqg7lFFE58fFZlWt6lLg86UMbcpnxxwteO1hLa5URu5mAZWj7aUQWcP3kDyE6V xBPqtPlEyw1zrCeUvaw1TGeWwvFLD0I7/DUMN634CmO7jQWFrz1C/w/sPok3jt/0 JQlhBnrbOc2kGTrnSv1KOeH+hXJQNLq/5UzeeBH14UxwyL71nK1N4L+DCwrHs8Jp y/nGrBo23J4QCdUd5xdVJccLCTfVP2z6N7XOLl7IAcZoaYq7xbXPjA6PCTejRNYy rkWUCilqrhsCmIEyU4uZBW7ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGZiO6xga /jA1p8Mbxkq9wP/TTEUwHwYDVR0jBBgwFoAUe8dWLzeFS9JjniQQ1nPld8v7MR8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzNkMyLzUwRkI5MDcwRUMz OTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlKam5pUVExblBsZDh2N01S OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZThkV0x6ZUZTOUpqbmlRUTFuUGxkOHY3TVI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz NkMyLzUwRkI5MDcwRUMzOTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlK am5pUVExblBsZDh2N01SOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKvXobY8A9vjKhyXzMHH+bsPcwpU4c0Hx03Q8PJtTSVcF9zqFZKWB+80 CI+q3/o87o9ujVtvBjvRCjrEWb+NostXuBvfoDVClVs9BFc3zD5k9Wa+5CggD52g ROtxUHuZY3UeoyMne+vOOK8W7+37kkUTHpGXA6NyK7obq1YlMbw7PxJYLn/8IEr4 2kBRhr0c5XSvYPlPlVvvDYBkC8oUaQKeXdFeDlgQxlcwhumyFwum+ly4HUoz1bM7 UlqKjY/qwJrm2/0HtGPe6CLDGNCYixVl2w1T6J10gCcNKp8/T0R9EpQfVaXVHfyb FUB9YeANyVbqB66B/EipRW5rO5xJPQc= -----END CERTIFICATE-----Generated at Sat May 31 16:52:17 2025 by rpki-client