$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: ckNdBdCihJ0VxOtH8dFXHbY7qWh+H4viX2eNEnKWmQw= Subject key identifier: 08:00:72:31:39:D9:53:B0:76:57:AC:97:7C:35:97:17:06:98:A1:7E Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 10C5 Signing time: Fri 30 May 2025 17:33:13 +0000 Manifest this update: Fri 30 May 2025 17:33:12 +0000 Manifest next update: Fri 06 Jun 2025 17:33:12 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: ySA98qWajzRsu+PDux/Cyahoe5IALYtgRne6x89aRjU=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=) 8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=) 9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4422 (0x1146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: May 30 17:33:12 2025 GMT Not After : Jun 6 17:33:12 2025 GMT Subject: CN=6839ebd9-0a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4b:04:1a:3b:a0:13:0b:07:a5:b4:1a:ac:72: a4:ea:be:f7:26:d2:9f:32:84:06:31:3f:dd:71:f2: b9:84:b2:98:c5:e1:fe:ad:1c:70:c2:39:4c:34:8f: 22:60:1a:cc:ae:f6:1c:67:45:de:ed:6f:3f:81:51: 2b:80:30:48:40:c6:17:b9:ff:23:48:18:6d:47:ad: a5:5b:00:f5:b4:51:1e:20:4a:42:ea:50:e8:79:d3: 8e:4f:02:b4:f6:18:b4:ca:3e:0f:81:a5:75:c3:32: 72:d7:82:93:cd:58:a2:88:40:79:4c:dc:13:7f:23: fb:f5:ef:d4:ac:76:4f:db:04:48:a9:03:58:64:0c: 78:44:cf:2e:b3:df:9d:46:b7:1c:ed:0c:0d:08:b6: ad:1d:f3:96:7e:ed:89:90:1e:78:81:8d:27:d9:05: 91:cd:2c:b0:c4:a0:a8:8b:7e:5e:e7:23:d2:ba:2e: 2d:e6:c4:01:79:6a:46:5c:5c:35:60:6b:1f:32:dc: d3:ff:ee:39:9b:81:de:34:e9:5e:54:8e:06:4e:c9: d8:ff:18:8c:46:ec:71:3b:b0:5e:fe:ae:e0:b3:e9: 69:08:10:69:1d:4f:f0:8a:ff:9e:e8:3c:47:1e:fa: da:32:7d:2c:9e:77:40:b0:57:37:71:fa:1e:c8:8c: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:00:72:31:39:D9:53:B0:76:57:AC:97:7C:35:97:17:06:98:A1:7E X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ae:0d:8c:d5:57:f1:fd:ef:8e:db:8b:7f:a3:db:c7:e9:77: 1a:70:a5:57:0d:f8:a9:43:8f:95:5f:12:36:61:a4:99:e3:20: 91:eb:cd:c2:3a:13:4b:0c:49:d5:b2:21:e3:4e:0c:13:81:03: 8b:26:d4:5b:71:f5:61:8e:7d:43:21:ff:1a:46:5e:fa:37:45: 70:80:e9:0f:8b:2a:20:df:e6:99:94:7b:2e:00:78:16:eb:09: 55:fd:cf:da:6f:c1:aa:77:fd:42:bd:48:13:a7:57:47:64:cb: c2:d5:c3:5a:81:cd:6e:36:15:e6:54:a3:ec:bd:51:f0:c9:a4: ec:04:94:90:39:dd:6a:c6:1a:eb:00:b5:2c:3e:0f:c2:de:16: c4:1a:c6:9d:42:56:ae:88:33:62:1a:18:c9:0e:63:fe:8f:35: c9:1b:88:3d:22:38:7b:e6:78:b2:1e:cb:06:f0:e2:e3:91:2b: 20:b2:ab:8e:2c:4a:8b:8d:d8:37:9a:5a:86:56:b1:3d:51:83: 46:33:80:ae:aa:fd:ce:8c:57:67:8c:88:45:1f:ae:df:a9:e5: 62:68:25:4f:f6:6f:cc:06:be:99:41:fb:b5:f8:bc:72:dd:6e: 37:17:c1:81:2d:fd:84:54:79:79:ca:51:e8:1a:6f:2e:6d:40: 54:93:bc:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwNTMwMTczMzEyWhcNMjUwNjA2MTczMzEyWjAYMRYwFAYD VQQDEw02ODM5ZWJkOS0wYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEsEGjugEwsHpbQarHKk6r73JtKfMoQGMT/dcfK5hLKYxeH+rRxwwjlMNI8i YBrMrvYcZ0Xe7W8/gVErgDBIQMYXuf8jSBhtR62lWwD1tFEeIEpC6lDoedOOTwK0 9hi0yj4PgaV1wzJy14KTzViiiEB5TNwTfyP79e/UrHZP2wRIqQNYZAx4RM8us9+d Rrcc7QwNCLatHfOWfu2JkB54gY0n2QWRzSywxKCoi35e5yPSui4t5sQBeWpGXFw1 YGsfMtzT/+45m4HeNOleVI4GTsnY/xiMRuxxO7Be/q7gs+lpCBBpHU/wiv+e6DxH HvraMn0snndAsFc3cfoeyIz0SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgAcjE5 2VOwdlesl3w1lxcGmKF+MB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5rg2M1Vfx/e+O24t/o9vH6XcacKVXDfipQ4+VXxI2YaSZ4yCR683C OhNLDEnVsiHjTgwTgQOLJtRbcfVhjn1DIf8aRl76N0VwgOkPiyog3+aZlHsuAHgW 6wlV/c/ab8Gqd/1CvUgTp1dHZMvC1cNagc1uNhXmVKPsvVHwyaTsBJSQOd1qxhrr ALUsPg/C3hbEGsadQlauiDNiGhjJDmP+jzXJG4g9Ijh75niyHssG8OLjkSsgsquO LEqLjdg3mlqGVrE9UYNGM4Cuqv3OjFdnjIhFH67fqeViaCVP9m/MBr6ZQfu1+Lxy 3W43F8GBLf2EVHl5ylHoGm8ubUBUk7w1 -----END CERTIFICATE-----Generated at Sat May 31 16:44:54 2025 by rpki-client