$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: Aiq8pIgUCUjvd5n54KkgjgOl1zaa8UfngMiw3WMvfxw= Subject key identifier: 64:5D:ED:B4:53:AC:10:71:12:DE:B2:E8:B8:9A:6C:56:EB:95:AA:68 Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0AF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0AE9 Signing time: Fri 30 May 2025 19:36:57 +0000 Manifest this update: Fri 30 May 2025 19:36:56 +0000 Manifest next update: Fri 06 Jun 2025 19:36:56 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: AdgT/4VDWaEDtIhcWj55RRLDEig0SZR7ArFGXjP99fE=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: x6v+AqgjPFRVX68ne0JC+xRgXtO5WMJX4uQIZ5czHsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Validity Not Before: May 30 19:36:56 2025 GMT Not After : Jun 6 19:36:56 2025 GMT Subject: CN=683a08d9-4ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:29:5a:78:16:a2:b9:1c:35:30:81:7c:03: a0:0e:a1:5e:f8:5b:da:9e:76:e8:fa:9c:ec:3f:f5: d6:d8:c8:c0:9c:30:a3:1c:2f:51:ae:d1:45:2e:56: 30:cd:7c:ad:43:93:85:90:2c:29:0a:22:64:ad:04: 36:3f:d2:fc:36:0b:b7:86:2c:5f:03:fb:8f:15:8d: 77:49:f5:bc:ab:d4:68:96:b6:11:4c:74:2e:51:5b: 65:4a:5d:ba:76:aa:42:6a:d1:ad:37:15:e7:b9:3f: 4f:a3:39:c6:61:a0:36:97:f7:1e:39:67:52:a9:29: 10:fc:62:7e:aa:7e:64:d4:6f:6f:23:3d:c9:27:54: 22:99:25:a5:19:f7:3d:0b:71:6e:95:11:b0:e7:c1: 7e:0c:63:cd:03:88:b0:58:f8:c9:1e:dc:87:11:f9: 04:82:c2:e9:fd:0f:b5:92:e8:c6:73:2c:c9:2d:8f: 92:55:ed:33:3e:34:aa:e6:6d:60:62:ce:0a:c5:65: 61:be:cd:e3:78:3c:a4:10:88:8c:92:4a:e3:eb:0e: f1:72:67:16:48:b0:34:af:f6:e7:f7:07:51:5f:e1: 3e:05:8f:c1:1d:92:98:90:50:d7:9d:08:25:d3:37: 2c:cb:8c:b6:5d:e6:af:22:91:3d:68:35:ec:40:63: a3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5D:ED:B4:53:AC:10:71:12:DE:B2:E8:B8:9A:6C:56:EB:95:AA:68 X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:57:0c:21:de:03:be:a8:58:6c:93:9c:76:f4:4d:ea:6f:e3: 66:21:4f:91:71:2e:32:43:c3:e9:f2:30:d5:50:6b:9b:fc:ac: a6:c2:98:26:b7:d9:fd:c9:bc:81:6b:e2:a1:b1:72:20:63:29: 38:f6:15:78:c0:e6:f9:eb:49:07:66:44:02:fb:77:3b:6b:20: c5:49:54:ea:e9:d0:7f:d7:10:a0:f4:17:8d:50:43:96:f0:11: ec:c9:a4:17:10:9b:78:f0:f2:cc:2f:6e:29:82:1e:21:67:42: 64:ae:f3:42:d5:ab:3b:c8:1a:66:1d:22:c7:9c:21:92:23:fc: da:06:3b:fe:e7:db:a8:74:f0:f8:c7:37:5e:4a:a1:4c:40:b4: 4c:2c:a8:3f:a5:06:ce:63:46:7c:37:69:78:0d:8a:64:ed:91: 1c:0a:f2:17:68:d4:e7:f2:c2:1c:83:6a:79:56:33:c3:b0:aa: 2d:85:c8:9f:b9:3b:29:a8:c1:23:66:50:ec:ef:2e:9f:26:fe: 03:54:4e:44:60:9e:56:c4:ef:73:1b:50:06:50:90:c1:2f:2a: 4b:00:fd:20:bc:b3:c6:2b:cd:2a:65:86:78:ea:1b:33:8e:a8: e9:22:52:c9:11:07:24:2d:df:b8:d7:91:ab:5b:ce:ce:28:4a: 7e:59:33:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjUwNTMwMTkzNjU2WhcNMjUwNjA2MTkzNjU2WjAYMRYwFAYD VQQDEw02ODNhMDhkOS00YWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3wpWngWorkcNTCBfAOgDqFe+Fvannbo+pzsP/XW2MjAnDCjHC9RrtFFLlYw zXytQ5OFkCwpCiJkrQQ2P9L8Ngu3hixfA/uPFY13SfW8q9RolrYRTHQuUVtlSl26 dqpCatGtNxXnuT9PoznGYaA2l/ceOWdSqSkQ/GJ+qn5k1G9vIz3JJ1QimSWlGfc9 C3FulRGw58F+DGPNA4iwWPjJHtyHEfkEgsLp/Q+1kujGcyzJLY+SVe0zPjSq5m1g Ys4KxWVhvs3jeDykEIiMkkrj6w7xcmcWSLA0r/bn9wdRX+E+BY/BHZKYkFDXnQgl 0zcsy4y2XeavIpE9aDXsQGOjoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRd7bRT rBBxEt6y6LiabFbrlapoMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdVwwh3gO+qFhsk5x29E3qb+NmIU+RcS4yQ8Pp8jDVUGub/Kymwpgm t9n9ybyBa+KhsXIgYyk49hV4wOb560kHZkQC+3c7ayDFSVTq6dB/1xCg9BeNUEOW 8BHsyaQXEJt48PLML24pgh4hZ0JkrvNC1as7yBpmHSLHnCGSI/zaBjv+59uodPD4 xzdeSqFMQLRMLKg/pQbOY0Z8N2l4DYpk7ZEcCvIXaNTn8sIcg2p5VjPDsKothcif uTspqMEjZlDs7y6fJv4DVE5EYJ5WxO9zG1AGUJDBLypLAP0gvLPGK80qZYZ46hsz jqjpIlLJEQckLd+415GrW87OKEp+WTO0 -----END CERTIFICATE-----Generated at Sat May 31 17:22:13 2025 by rpki-client