$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft File: EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft (raw, json) Hash identifier: 4qxjS3KS5kyVXwOkJNGRqnD1sY447v3vDoVAKuXn2OQ= Subject key identifier: 81:94:41:7F:2E:57:CB:7F:70:0A:AE:14:E3:42:77:3F:C7:F2:AA:D2 Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F Certificate issuer: /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Certificate serial: 1531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft Manifest number: 14FA Signing time: Fri 30 May 2025 17:01:34 +0000 Manifest this update: Fri 30 May 2025 17:01:34 +0000 Manifest next update: Fri 06 Jun 2025 17:01:34 +0000 Files and hashes: 1: EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl (hash: /HmOGUHNXqnswWNDqHttxGpnOkt+Xg+0d4H88W8yCnY=) 2: F99707CEBAC511E9A77CDE7BC4F9AE02.roa (hash: iZLozjkQrVx5Rip88rCFEDljYu/qf4k+eN+MjfIimJg=) 3: E7084A18E1FF11ED8291C918C4F9AE02.roa (hash: 22WycCO2D6eQ7c9Ztptk+GoHCg5R5HirhILZQLigfu4=) 4: E80E94F8E1FF11ED8291C918C4F9AE02.roa (hash: kECSc2k2CaiRsvSFGXMs8HjoZv1f2IbszM5+85kIArk=) 5: 065737305C9511EDABB9FA49C4F9AE02.roa (hash: A8fyC9uXabeEBw+br5m/fOOprlHijT/2fFIlwKoMBqg=) 6: E5E5AB76E1FF11ED8291C918C4F9AE02.roa (hash: CiXjYFbJpNi1ITHCA0SILZGRQg5iqEkM1Bq1AJzf7WQ=) 7: E4C72AB2E1FF11ED8291C918C4F9AE02.roa (hash: w7JrosLb1zf7bhUbagql/3rcPRQ0GPFS/s48tA3r0tk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5425 (0x1531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Validity Not Before: May 30 17:01:34 2025 GMT Not After : Jun 6 17:01:34 2025 GMT Subject: CN=6839e46e-ecec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f2:bd:73:cc:90:d8:84:89:70:51:80:8c:99: c2:a0:11:8e:3e:dd:95:da:b7:11:a1:a8:af:7c:79: e2:f7:00:2a:ff:de:ee:d2:fd:50:ed:cb:47:8b:3f: 7f:1e:4c:27:ea:b5:93:57:b3:d5:0c:82:c7:4e:4f: 40:e4:07:f9:d5:b5:c5:4e:22:e2:5a:81:89:8a:06: 1f:93:28:aa:26:9a:fe:d7:fd:aa:1f:00:85:cf:3b: d2:3c:25:ee:61:30:7c:a3:33:8f:eb:24:01:eb:4a: b1:07:34:ef:f6:d2:63:8f:64:7c:2c:59:dc:bc:a2: da:5c:6d:11:5b:46:86:3a:11:0e:b5:ba:ce:fa:c5: 7f:ae:ca:d6:e8:c5:77:bf:8d:68:cf:a9:1e:81:d6: f7:a9:61:07:6d:09:14:00:1f:e1:d1:a7:ed:68:c2: 5e:eb:3b:07:3e:b6:58:cb:b6:84:14:e1:00:73:8b: e2:23:06:ba:80:6e:7f:e1:83:33:a7:9a:94:4b:46: 8e:1a:a5:ae:15:44:38:f9:bf:a4:9f:93:6b:86:12: 8a:db:fd:16:9f:fe:a3:72:83:a7:09:69:12:30:52: 2a:95:bd:63:e9:0b:3a:88:18:aa:ca:f0:a5:0c:f4: 23:7a:9d:13:cc:45:3f:6d:81:b0:fc:63:df:f7:77: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:94:41:7F:2E:57:CB:7F:70:0A:AE:14:E3:42:77:3F:C7:F2:AA:D2 X509v3 Authority Key Identifier: keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e1:6c:fd:c2:57:24:df:2d:fe:07:75:79:86:b8:0e:91:45: 8d:dd:4d:04:39:36:c4:ae:16:cf:92:ee:56:10:bf:95:3e:c4: d7:42:94:7b:d5:ae:c5:09:43:72:e9:4e:a3:28:f5:a3:83:63: de:4e:cd:b8:e9:0a:17:22:ff:49:69:67:42:b9:d2:10:5c:b5: d2:63:a3:c4:b3:ba:26:d7:a0:3f:e6:60:9a:92:73:67:14:b2: 99:9f:15:8a:bd:06:fe:9a:c3:72:20:45:e6:c1:45:4e:01:12: 6b:b1:a5:bc:93:1a:75:2a:f1:a8:a1:74:b8:a8:15:41:7b:7a: 50:1e:0f:9b:8f:b0:ce:9c:28:dd:6e:8b:59:21:1e:7b:ef:80: 14:e0:82:fa:58:9d:7c:a0:d4:e4:2d:c3:22:2c:bc:58:9f:0e: 51:82:9e:f8:2e:49:48:15:69:8b:b6:b3:01:c1:3d:43:46:41: aa:04:f9:ac:a3:c4:f9:c2:6b:55:88:7a:86:eb:39:fd:ce:ac: 8f:15:e8:39:b0:83:08:63:12:cc:df:82:63:31:0c:e4:36:d4: 8d:b3:da:f3:88:c9:df:b0:c2:ec:62:60:c4:ce:3a:10:ff:ab: d5:8a:38:17:96:1e:15:73:a9:e4:0f:ae:d8:d4:3f:2f:78:28: 57:64:88:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE NEM2RDU3MUYwHhcNMjUwNTMwMTcwMTM0WhcNMjUwNjA2MTcwMTM0WjAYMRYwFAYD VQQDEw02ODM5ZTQ2ZS1lY2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/K9c8yQ2ISJcFGAjJnCoBGOPt2V2rcRoaivfHni9wAq/97u0v1Q7ctHiz9/ Hkwn6rWTV7PVDILHTk9A5Af51bXFTiLiWoGJigYfkyiqJpr+1/2qHwCFzzvSPCXu YTB8ozOP6yQB60qxBzTv9tJjj2R8LFncvKLaXG0RW0aGOhEOtbrO+sV/rsrW6MV3 v41oz6kegdb3qWEHbQkUAB/h0aftaMJe6zsHPrZYy7aEFOEAc4viIwa6gG5/4YMz p5qUS0aOGqWuFUQ4+b+kn5NrhhKK2/0Wn/6jcoOnCWkSMFIqlb1j6Qs6iBiqyvCl DPQjep0TzEU/bYGw/GPf93dJ5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGUQX8u V8t/cAquFONCdz/H8qrSMB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2 NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlGQy84MTA0NUUzQTU2NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1R bXg5UE5KaE9uRGJVeHRWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL4Wz9wlck3y3+B3V5hrgOkUWN3U0EOTbErhbPku5WEL+VPsTXQpR7 1a7FCUNy6U6jKPWjg2PeTs246QoXIv9JaWdCudIQXLXSY6PEs7om16A/5mCaknNn FLKZnxWKvQb+msNyIEXmwUVOARJrsaW8kxp1KvGooXS4qBVBe3pQHg+bj7DOnCjd botZIR5774AU4IL6WJ18oNTkLcMiLLxYnw5Rgp74LklIFWmLtrMBwT1DRkGqBPms o8T5wmtViHqG6zn9zqyPFeg5sIMIYxLM34JjMQzkNtSNs9rziMnfsMLsYmDEzjoQ /6vVijgXlh4Vc6nkD67Y1D8veChXZIiB -----END CERTIFICATE-----Generated at Sat May 31 17:49:38 2025 by rpki-client