$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft File: eI-02WtgHbphbd3JnP5GXWDDjyE.mft (raw, json) Hash identifier: zQmrb1pqsMEM9OToj4c2vpkurZrrh/oeAECA5N5JbfU= Subject key identifier: EA:DF:81:20:0A:F1:40:B2:A5:5A:9F:6B:C5:6E:50:BF:01:AF:26:24 Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 Certificate issuer: /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft Manifest number: 05C7 Signing time: Tue 13 May 2025 00:07:00 +0000 Manifest this update: Tue 13 May 2025 00:06:59 +0000 Manifest next update: Tue 20 May 2025 00:06:59 +0000 Files and hashes: 1: eI-02WtgHbphbd3JnP5GXWDDjyE.crl (hash: US1Fs2sVqAmsCz5iGuULtZznsENeQ28Anj8dcB5OfGU=) 2: 960BB902A6F111EF9E720A74C4F9AE02.roa (hash: 1rri8n10jwpBG0cPzEeCjqo04ta67DC09vFzbC2jh+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119363, serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Validity Not Before: May 13 00:06:59 2025 GMT Not After : May 20 00:06:59 2025 GMT Subject: CN=68228d23-3bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:62:63:02:db:53:4b:36:65:9a:75:1b:dd: 4a:cf:a3:7e:70:62:df:74:bd:48:52:56:59:74:ed: 7b:7a:59:bc:e5:d5:32:35:e7:e0:fa:91:22:cc:db: 27:e2:20:6e:2d:e5:8a:99:1b:b7:e3:47:79:c8:ad: ee:83:67:45:56:bd:b5:a8:af:50:95:f1:8b:75:d4: a1:ae:d6:19:7c:79:48:2c:2f:04:e6:9e:d4:72:35: 8c:cd:ca:cb:74:d6:94:3e:2e:b0:6d:75:29:1e:3f: cc:6a:9d:7c:a6:4a:52:82:81:e4:6e:fe:a7:9b:4f: 62:94:f8:6f:f5:db:8e:7f:8b:46:2d:28:dc:42:11: 7b:06:24:ed:8b:8d:90:5c:b5:d2:4b:b6:c3:80:7f: b5:dd:65:9f:27:3d:6d:51:a8:c0:7b:c6:3a:eb:d2: e7:7f:4e:c1:36:ec:39:71:4d:56:09:7e:79:e5:1a: d9:a3:23:df:8a:d1:22:3b:d3:f8:2d:7a:c0:3c:e1: 6f:11:98:28:6d:e8:24:cd:99:cc:58:b6:11:d0:cc: 44:47:b3:9a:e0:64:a5:4a:33:5b:cb:f7:e7:34:1d: 0c:85:c1:ad:d2:05:05:27:a3:ef:e9:6f:49:c9:e5: 0f:2a:21:81:66:41:c0:90:1e:f2:0d:0e:79:95:7b: a4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DF:81:20:0A:F1:40:B2:A5:5A:9F:6B:C5:6E:50:BF:01:AF:26:24 X509v3 Authority Key Identifier: keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:0b:02:12:c0:35:7d:d7:3d:b5:73:69:61:9d:de:3e:1f:76: 98:4d:7e:c9:e4:ef:89:a6:ee:e7:bf:fa:92:c5:bd:4e:83:3a: e0:4f:89:6d:43:29:25:d8:9c:11:bf:ed:7e:46:f1:2e:b7:14: 24:dc:e5:33:50:8c:5e:20:e1:cf:61:e4:10:63:0d:b0:ed:41: f3:f8:7c:36:2f:f0:68:a8:db:1e:99:93:ff:22:7d:a9:73:cd: c5:0f:3d:e8:a5:61:e3:7a:22:bf:19:07:ef:c1:d8:de:0a:26: a5:d6:d3:6b:99:6c:71:cc:28:59:a5:da:b3:45:85:1f:fe:ed: 30:8b:17:9c:43:bb:16:64:c0:72:eb:2d:9c:81:f0:74:dd:85: d5:a0:74:7d:cf:49:c5:72:e2:a7:d7:73:92:77:b6:24:3d:d6: 09:25:7b:4c:24:52:1e:9b:fe:39:be:de:8b:48:91:7d:97:ed: ef:54:ab:73:9a:ca:61:44:7a:77:89:17:a2:ab:75:42:ca:dd: a9:13:69:92:2d:60:b5:77:11:9a:83:0e:3e:dd:27:cb:e1:2d: 7b:22:ac:33:0f:2b:09:91:d1:58:91:f6:dd:fb:39:86:c5:3f: ad:ba:25:de:48:e5:a8:4d:1a:2b:8b:fe:d7:89:44:5f:16:cc: a0:95:44:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx OTM2MzExMC8GA1UEBRMoNzg4RkI0RDk2QjYwMURCQTYxNkREREM5OUNGRTQ2NUQ2 MEMzOEYyMTAeFw0yNTA1MTMwMDA2NTlaFw0yNTA1MjAwMDA2NTlaMBgxFjAUBgNV BAMTDTY4MjI4ZDIzLTNiZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0G2JjAttTSzZlmnUb3UrPo35wYt90vUhSVll07Xt6Wbzl1TI15+D6kSLM2yfi IG4t5YqZG7fjR3nIre6DZ0VWvbWor1CV8Yt11KGu1hl8eUgsLwTmntRyNYzNyst0 1pQ+LrBtdSkeP8xqnXymSlKCgeRu/qebT2KU+G/1245/i0YtKNxCEXsGJO2LjZBc tdJLtsOAf7XdZZ8nPW1RqMB7xjrr0ud/TsE27DlxTVYJfnnlGtmjI9+K0SI70/gt esA84W8RmCht6CTNmcxYthHQzERHs5rgZKVKM1vL9+c0HQyFwa3SBQUno+/pb0nJ 5Q8qIYFmQcCQHvINDnmVe6T5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6t+BIArx QLKlWp9rxW5QvwGvJiQwHwYDVR0jBBgwFoAUeI+02WtgHbphbd3JnP5GXWDDjyEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MzYzLzMxRUFERkE0NUNC QTExRUM4QUExM0UyNEM0RjlBRTAyL2VJLTAyV3RnSGJwaGJkM0puUDVHWFdERGp5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUktMDJXdGdIYnBoYmQzSm5QNUdYV0REanlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5 MzYzLzMxRUFERkE0NUNCQTExRUM4QUExM0UyNEM0RjlBRTAyL2VJLTAyV3RnSGJw aGJkM0puUDVHWFdERGp5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIgLAhLANX3XPbVzaWGd3j4fdphNfsnk74mm7ue/+pLFvU6DOuBPiW1D KSXYnBG/7X5G8S63FCTc5TNQjF4g4c9h5BBjDbDtQfP4fDYv8Gio2x6Zk/8ifalz zcUPPeilYeN6Ir8ZB+/B2N4KJqXW02uZbHHMKFml2rNFhR/+7TCLF5xDuxZkwHLr LZyB8HTdhdWgdH3PScVy4qfXc5J3tiQ91gkle0wkUh6b/jm+3otIkX2X7e9Uq3Oa ymFEeneJF6KrdULK3akTaZItYLV3EZqDDj7dJ8vhLXsirDMPKwmR0ViR9t37OYbF P626Jd5I5ahNGiuL/teJRF8WzKCVRH0= -----END CERTIFICATE-----Generated at Wed May 14 04:30:24 2025 by rpki-client