$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft File: eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json) Hash identifier: H8XSEdLonwv/Z1QDeRrtylMHxf1HFciNNwVcwN3iXVs= Subject key identifier: CA:FD:25:60:BB:0F:AB:3A:CA:59:7A:A2:96:5B:05:C0:E9:50:D8:AF Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D Certificate issuer: /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Certificate serial: 1CFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft Manifest number: 1CF2 Signing time: Sat 10 May 2025 16:05:53 +0000 Manifest this update: Sat 10 May 2025 16:05:53 +0000 Manifest next update: Sat 17 May 2025 16:05:53 +0000 Files and hashes: 1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: tfV8b54Mlqwju0T4+J8j+UPfTU3AB1+MJKyBAqvJ1FI=) 2: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: djG4mlXw26i8Pdv1t32X7f3gUOAe2ux1BErj6m1pRZU=) 3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=) 4: DBB62584510F11EE91E98858C4F9AE02.roa (hash: eUZl6xYTmnN5IXCb/B1kt6lwOE4wAzzohcEkE00c85k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7419 (0x1cfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D Validity Not Before: May 10 16:05:53 2025 GMT Not After : May 17 16:05:53 2025 GMT Subject: CN=681f7961-6634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:15:51:7d:07:61:83:52:b0:03:41:9a:85:a4: 8b:8d:76:e4:6a:a2:e5:1e:b3:d1:bf:6f:e9:39:6c: 07:98:9f:a9:6e:46:d8:0c:e5:41:01:04:ae:b0:fa: d7:97:ec:82:27:91:e5:47:c0:d4:22:dc:06:29:16: 4c:f3:20:80:07:99:67:0e:45:75:8d:9b:73:15:60: 15:a7:f2:66:5f:92:0a:32:cd:1a:17:7b:35:78:3d: 12:c0:3f:df:43:be:e6:c7:9f:aa:c8:69:71:6a:17: d3:ec:36:86:f1:50:04:47:83:05:b0:64:36:47:c5: 8b:35:71:76:3b:0f:27:4e:a7:0c:b4:16:8a:c3:e7: 94:e1:1e:44:34:b8:3a:d0:73:13:db:ba:42:f3:c4: 48:d3:b8:85:30:dd:f4:36:48:cc:3c:ce:7f:0c:17: c4:c7:d6:37:42:82:39:6c:9c:be:ce:58:a2:14:96: 22:de:87:f3:b2:d1:2e:bb:df:e3:0b:97:90:29:ca: a4:1c:a1:06:09:c6:7e:12:a5:aa:f8:86:61:5f:b3: d5:6b:cf:e7:14:05:01:66:01:40:97:02:76:ea:17: 49:09:7e:2e:16:93:03:a0:06:e8:82:21:27:6f:27: 2c:8c:0d:14:4d:6d:81:83:c3:f1:da:16:f3:2b:30: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FD:25:60:BB:0F:AB:3A:CA:59:7A:A2:96:5B:05:C0:E9:50:D8:AF X509v3 Authority Key Identifier: keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:24:a0:76:f7:1a:8a:b0:80:4d:3e:2a:89:d4:df:17:5f:d6: b9:c3:1b:67:92:21:db:46:2b:ef:0b:d2:4c:4e:74:37:51:67: 03:66:5f:5d:76:85:96:bc:4d:1f:95:14:3c:2c:56:2d:40:94: 66:51:8a:cd:b8:5f:50:96:01:5b:53:dc:d3:5a:df:55:91:66: 89:ee:ae:ed:61:48:c9:ad:fb:8d:88:26:23:28:1c:ad:27:13: ed:78:37:63:60:99:07:3d:95:29:02:5d:fc:2e:93:23:2e:de: e8:95:0a:f1:12:e5:87:88:86:5e:b2:0c:d1:27:db:08:cb:2f: 15:4f:ea:5f:d8:27:2f:45:ae:87:82:05:c1:d9:43:45:4f:b7: 8d:f2:b7:3d:89:ef:0c:49:38:93:10:a8:49:29:fc:7a:06:f6: ee:15:dd:dd:eb:ba:36:d6:99:ac:2b:80:df:11:89:c1:21:d7: ce:27:d5:32:d0:ce:37:af:76:4b:1a:96:e8:35:ea:f3:1a:60: 54:98:dc:c8:76:cf:52:95:ea:29:97:6f:4e:f4:36:9e:14:03: 5d:08:ae:d4:1e:6d:8a:93:f3:5a:d7:18:5d:78:32:17:0e:3e: 08:d7:76:a3:c6:32:40:3b:71:a1:c1:68:05:a6:79:f9:7b:3f: a7:de:a4:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBNEExMTAvBgNVBAUTKDc4OTIwNjRERDQ1Qjk3RUQwOTQ3MUVCMDU0NTFFQUMw OThDOUNCM0QwHhcNMjUwNTEwMTYwNTUzWhcNMjUwNTE3MTYwNTUzWjAYMRYwFAYD VQQDEw02ODFmNzk2MS02NjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRVRfQdhg1KwA0GahaSLjXbkaqLlHrPRv2/pOWwHmJ+pbkbYDOVBAQSusPrX l+yCJ5HlR8DUItwGKRZM8yCAB5lnDkV1jZtzFWAVp/JmX5IKMs0aF3s1eD0SwD/f Q77mx5+qyGlxahfT7DaG8VAER4MFsGQ2R8WLNXF2Ow8nTqcMtBaKw+eU4R5ENLg6 0HMT27pC88RI07iFMN30NkjMPM5/DBfEx9Y3QoI5bJy+zliiFJYi3ofzstEuu9/j C5eQKcqkHKEGCcZ+EqWq+IZhX7PVa8/nFAUBZgFAlwJ26hdJCX4uFpMDoAbogiEn bycsjA0UTW2Bg8Px2hbzKzDr1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMr9JWC7 D6s6yll6opZbBcDpUNivMB8GA1UdIwQYMBaAFHiSBk3UW5ftCUcesFRR6sCYycs9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE0QS83MjU3RjkzMkJD QjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwtMEpSeDZ3VkZIcXdKakp5 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VKSUdUZFJibC0wSlJ4NndWRkhxd0pqSnl6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE0QS83MjU3RjkzMkJDQjAxMUU2OTk4RTgyNTZDNEY5QUUwMi9lSklHVGRSYmwt MEpSeDZ3VkZIcXdKakp5ejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgJKB29xqKsIBNPiqJ1N8XX9a5wxtnkiHbRivvC9JMTnQ3UWcDZl9d doWWvE0flRQ8LFYtQJRmUYrNuF9QlgFbU9zTWt9VkWaJ7q7tYUjJrfuNiCYjKByt JxPteDdjYJkHPZUpAl38LpMjLt7olQrxEuWHiIZesgzRJ9sIyy8VT+pf2CcvRa6H ggXB2UNFT7eN8rc9ie8MSTiTEKhJKfx6BvbuFd3d67o21pmsK4DfEYnBIdfOJ9Uy 0M43r3ZLGpboNerzGmBUmNzIds9Sleopl29O9DaeFANdCK7UHm2Kk/Na1xhdeDIX Dj4I13ajxjJAO3GhwWgFpnn5ez+n3qS8 -----END CERTIFICATE-----Generated at Mon May 12 13:29:21 2025 by rpki-client