$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json) Hash identifier: 5j0LSjndDrYY8Eom+pOPFTJWn5y1BPXSrSxmemh9Iuw= Subject key identifier: 90:B6:34:22:8B:A3:1E:36:0F:36:3A:B3:C8:C4:9F:16:F4:7C:60:62 Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft Manifest number: 85 Signing time: Thu 03 Jul 2025 06:52:15 +0000 Manifest this update: Thu 03 Jul 2025 06:52:14 +0000 Manifest next update: Thu 10 Jul 2025 06:52:14 +0000 Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: MF6/17pK9ctXC9qKSub9E9dYUMQpsjVFe7uQ+jxzDKY=) 2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: X4btbpCoiYoIXbuMOSmCOyUWCj9oTbrBupewiVqB8lU=) 3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: aPfjmDHXujlDq60sfxkeUX3+9b02nUsv2TYNf5bZEBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Validity Not Before: Jul 3 06:52:14 2025 GMT Not After : Jul 10 06:52:14 2025 GMT Subject: CN=6866289f-6bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:d2:10:49:e9:f4:de:77:b3:ec:5e:c1:99: fb:7f:07:5f:38:3a:8a:68:ad:cf:8f:92:db:14:9c: 7d:ba:86:0f:fd:f6:fa:3c:13:ce:89:b9:28:6b:08: 60:6c:62:8c:63:80:b0:69:d4:a3:89:84:83:8b:fb: 8b:d1:70:96:8f:d1:97:90:53:7b:52:85:d7:42:f5: 2f:69:d2:c0:c3:21:cc:71:fe:f3:b1:87:31:b9:83: 96:2c:b6:13:04:2a:5d:ea:cd:ac:10:59:6b:62:ac: b4:7b:b1:d4:66:75:dd:0a:52:0c:4c:38:3f:45:f0: 04:d3:6a:22:6e:c1:f3:6b:b6:fe:83:18:97:fd:39: 3e:5d:6d:91:3e:27:03:2c:35:5c:7d:bb:4d:51:5b: 3a:42:d6:98:74:83:42:99:22:57:fd:d5:2a:05:5d: b1:74:e5:5a:60:1a:d9:6f:4b:97:6e:61:4f:d9:4e: c9:b5:12:73:bf:20:ad:43:c3:f0:d3:62:d6:9c:3a: f0:44:29:ac:f3:af:db:ca:dc:93:b4:89:2a:d8:12: de:ac:22:5d:fd:fb:3e:ab:21:dd:88:cb:ed:5a:cc: 9e:3b:07:af:24:68:b3:f2:d3:7d:50:75:14:b7:03: ce:0f:0a:c9:4b:7e:e1:3b:92:ea:78:df:42:c4:30: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B6:34:22:8B:A3:1E:36:0F:36:3A:B3:C8:C4:9F:16:F4:7C:60:62 X509v3 Authority Key Identifier: keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:56:f4:af:a4:c2:da:6a:f6:e8:10:29:d8:63:56:8d:9b:2d: 11:9d:a2:f2:95:38:bc:7d:a3:3c:7c:34:e2:eb:68:b8:45:e0: 10:d2:2c:9f:1f:8e:e3:f1:0b:88:d7:a1:ee:04:4f:b1:2e:c7: d9:8c:b8:1f:7a:02:f5:2d:0e:89:69:e0:a7:78:2d:d3:e5:08: 14:48:65:4e:ce:52:b3:0e:83:49:9b:44:40:10:8f:70:da:6e: 93:9d:01:b4:fd:44:15:b7:5f:34:b2:b2:87:5b:ba:28:a3:cd: 01:ea:a8:bb:1d:63:c9:e3:f0:6e:1c:19:cb:f4:d4:d7:5c:40: 4c:75:d9:0b:58:fa:6c:1a:f6:a1:79:f4:d3:e6:40:c7:59:b1: 5d:7b:bc:49:e5:cc:0f:f1:78:94:dd:05:e8:dd:b0:1e:a6:04: 9a:c8:a7:dd:3f:d5:dd:25:dd:85:da:5c:d9:1d:cc:6c:5e:48: 6d:a3:18:eb:70:05:55:b7:d2:a2:dc:56:1b:bd:1d:35:f5:7f: 34:a3:dd:24:60:20:c4:5e:73:c4:10:b0:19:49:c7:f5:e7:e1: 7c:4a:4b:df:d2:4a:bc:c8:43:c9:c9:1d:f1:8f:66:d1:d2:31: 56:65:84:d3:7a:16:14:01:9c:2b:b8:1b:cd:82:98:2b:3e:0e: 01:9e:32:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTQxMTAvBgNVBAUTKDc5MjBGOENBODRFQzkxM0M2OUE5OEQ1NDM3MTIwOUI0 MzRDMzMxOTEwHhcNMjUwNzAzMDY1MjE0WhcNMjUwNzEwMDY1MjE0WjAYMRYwFAYD VQQDEw02ODY2Mjg5Zi02YmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQzSEEnp9N53s+xewZn7fwdfODqKaK3Pj5LbFJx9uoYP/fb6PBPOibkoawhg bGKMY4CwadSjiYSDi/uL0XCWj9GXkFN7UoXXQvUvadLAwyHMcf7zsYcxuYOWLLYT BCpd6s2sEFlrYqy0e7HUZnXdClIMTDg/RfAE02oibsHza7b+gxiX/Tk+XW2RPicD LDVcfbtNUVs6QtaYdINCmSJX/dUqBV2xdOVaYBrZb0uXbmFP2U7JtRJzvyCtQ8Pw 02LWnDrwRCms86/bytyTtIkq2BLerCJd/fs+qyHdiMvtWsyeOwevJGiz8tN9UHUU twPODwrJS37hO5LqeN9CxDBqEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJC2NCKL ox42DzY6s8jEnxb0fGBiMB8GA1UdIwQYMBaAFHkg+MqE7JE8aamNVDcSCbQ0wzGR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1NC83OUY4OTk4Mjkz NTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tUeHBxWTFVTnhJSnREVERN WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1aRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1NC83OUY4OTk4MjkzNTYxMUVGQThFREVCMzNDNEY5QUUwMi9lU0Q0eW9Uc2tU eHBxWTFVTnhJSnREVERNWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDVvSvpMLaavboECnYY1aNmy0RnaLylTi8faM8fDTi62i4ReAQ0iyf H47j8QuI16HuBE+xLsfZjLgfegL1LQ6JaeCneC3T5QgUSGVOzlKzDoNJm0RAEI9w 2m6TnQG0/UQVt180srKHW7ooo80B6qi7HWPJ4/BuHBnL9NTXXEBMddkLWPpsGvah efTT5kDHWbFde7xJ5cwP8XiU3QXo3bAepgSayKfdP9XdJd2F2lzZHcxsXkhtoxjr cAVVt9Ki3FYbvR019X80o90kYCDEXnPEELAZScf15+F8Skvf0kq8yEPJyR3xj2bR 0jFWZYTTehYUAZwruBvNgpgrPg4BnjIa -----END CERTIFICATE-----Generated at Fri Jul 4 19:21:05 2025 by rpki-client