$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json) Hash identifier: EqGSYNO1DGtCKD5GFU/5RfZPlZkv9j0AFMnwBNL7MmI= Subject key identifier: B9:E8:31:51:63:27:F3:EA:2E:03:BF:5F:75:51:39:55:D1:C6:7F:1C Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0C7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft Manifest number: 0C6A Signing time: Fri 30 May 2025 18:30:40 +0000 Manifest this update: Fri 30 May 2025 18:30:39 +0000 Manifest next update: Fri 06 Jun 2025 18:30:39 +0000 Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: 45Q0HCy3nNT3vbYsL/nUHQZMyCqKOE6sqPRxBe0Qsn0=) 2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: IFWas/rgHa7uSrgJAOPof+Srn7iqSkG+8jyeDB/7tHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Validity Not Before: May 30 18:30:39 2025 GMT Not After : Jun 6 18:30:39 2025 GMT Subject: CN=6839f94f-e9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:81:12:52:08:7a:f1:8b:a6:b7:b2:73:e0:c7: f7:8b:d9:11:fe:2a:bb:39:50:d9:85:9e:52:41:96: db:6e:e3:4b:56:f5:aa:0d:3e:6f:b6:d3:77:54:c1: e8:07:c2:e6:62:eb:4c:cd:1a:f7:04:3d:95:a7:d8: 53:63:2f:5a:43:12:c5:85:59:24:0a:21:76:73:7e: 12:77:72:59:68:4d:86:6f:54:b0:eb:15:bc:63:c9: c1:49:55:6a:37:2a:f0:05:45:49:b5:34:b4:9e:33: 5c:f1:98:d1:06:40:63:5a:f2:9b:9e:d9:3e:11:a7: e4:cf:eb:5e:13:e4:83:7d:d7:43:cf:2d:e8:58:c1: 50:39:f8:5b:50:c2:78:50:a6:d0:85:5e:ec:73:6c: 97:86:cc:d3:36:b0:fd:bb:ad:e0:ba:e3:ab:6d:6f: 41:fd:e3:73:5f:bb:ad:5b:d1:05:d6:3a:43:71:33: 13:af:12:54:50:16:32:fa:f4:7f:6a:ef:b0:57:91: 1c:c6:03:7e:25:3d:94:52:2a:9c:4a:1e:6b:7b:b5: 07:35:8a:e2:1f:69:ca:3b:ce:a7:de:28:9e:b0:ea: af:0e:32:f0:50:79:27:5b:db:87:5b:da:27:13:52: a3:a1:c9:35:42:81:45:2d:b3:0b:ba:7e:d9:54:87: 3c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E8:31:51:63:27:F3:EA:2E:03:BF:5F:75:51:39:55:D1:C6:7F:1C X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3f:91:fa:c6:aa:d6:39:89:c6:0e:d1:13:8b:c6:55:21:c7: 71:d1:25:df:8f:05:53:64:86:5a:2e:9c:ee:d7:f8:bb:ed:51: 21:2b:1c:34:ba:cf:03:30:7b:43:31:83:a3:6c:60:30:d8:bb: 37:54:03:f8:1f:6d:86:5e:79:a2:5e:6d:ae:b7:1d:21:8f:99: f1:5a:c9:6e:97:fb:b3:d5:87:af:f3:a7:b3:a7:05:06:63:05: 0b:21:e0:7f:0d:50:e1:fd:34:69:44:82:12:31:b0:ec:93:ca: f5:84:e7:63:c6:0d:08:df:d1:c3:9e:2e:aa:22:50:59:a1:70: fe:da:9b:7e:bf:c4:19:c8:c9:08:09:27:b1:80:90:3c:da:cf: 92:f1:e2:d3:6b:39:4e:94:90:8b:5d:ed:40:2d:58:df:b8:64: ab:0b:55:ef:86:8b:e1:4b:7e:1b:9c:a8:1d:c3:5e:7f:a8:8e: 96:f8:f0:c6:56:7c:43:40:14:41:e7:72:fb:2d:be:4c:f6:94: 9e:6c:63:1a:8a:06:e4:9e:2b:72:71:0b:20:11:66:02:b7:00: 88:05:1a:e0:eb:b2:d4:9e:1c:b9:f1:d8:4b:1a:9d:73:7b:ce: 0d:fd:4a:16:23:d5:14:31:83:14:da:02:d6:01:5b:c8:61:3f: ea:51:e8:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjUwNTMwMTgzMDM5WhcNMjUwNjA2MTgzMDM5WjAYMRYwFAYD VQQDEw02ODM5Zjk0Zi1lOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IESUgh68Yumt7Jz4Mf3i9kR/iq7OVDZhZ5SQZbbbuNLVvWqDT5vttN3VMHo B8LmYutMzRr3BD2Vp9hTYy9aQxLFhVkkCiF2c34Sd3JZaE2Gb1Sw6xW8Y8nBSVVq NyrwBUVJtTS0njNc8ZjRBkBjWvKbntk+Eafkz+teE+SDfddDzy3oWMFQOfhbUMJ4 UKbQhV7sc2yXhszTNrD9u63guuOrbW9B/eNzX7utW9EF1jpDcTMTrxJUUBYy+vR/ au+wV5EcxgN+JT2UUiqcSh5re7UHNYriH2nKO86n3iiesOqvDjLwUHknW9uHW9on E1Kjock1QoFFLbMLun7ZVIc82QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnoMVFj J/PqLgO/X3VROVXRxn8cMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2 OWN4Tk83dldXTjZqa3l5NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArP5H6xqrWOYnGDtETi8ZVIcdx0SXfjwVTZIZaLpzu1/i77VEhKxw0 us8DMHtDMYOjbGAw2Ls3VAP4H22GXnmiXm2utx0hj5nxWslul/uz1Yev86ezpwUG YwULIeB/DVDh/TRpRIISMbDsk8r1hOdjxg0I39HDni6qIlBZoXD+2pt+v8QZyMkI CSexgJA82s+S8eLTazlOlJCLXe1ALVjfuGSrC1XvhovhS34bnKgdw15/qI6W+PDG VnxDQBRB53L7Lb5M9pSebGMaigbknitycQsgEWYCtwCIBRrg67LUnhy58dhLGp1z e84N/UoWI9UUMYMU2gLWAVvIYT/qUehN -----END CERTIFICATE-----Generated at Sat May 31 15:36:55 2025 by rpki-client