$ rpki-client -vvf rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft File: EdV6dX7VZXXQSeQpyOxzelYFC3k.mft (raw, json) Hash identifier: Yrg7k+90tuxNUqpBkdmsEkZ78WnFit2EKtcicjNW910= Subject key identifier: 1F:97:34:88:1F:65:39:79:F8:2D:F5:05:DC:8F:0A:0A:AB:36:2A:04 Authority key identifier: 11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79 Certificate issuer: /CN=A91672F2/serialNumber=11D57A757ED56575D049E429C8EC737A56050B79 Certificate serial: 0EDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft Manifest number: 0ED7 Signing time: Sat 10 May 2025 17:32:20 +0000 Manifest this update: Sat 10 May 2025 17:32:20 +0000 Manifest next update: Sat 17 May 2025 17:32:20 +0000 Files and hashes: 1: EdV6dX7VZXXQSeQpyOxzelYFC3k.crl (hash: wQXxrS5dtsVSJ/2G3Tj82W/077fvFMDoqFVAeAA5adA=) 2: 6F89ECBE80D611E99C76DF63C4F9AE02.roa (hash: aXwfGlxqPqu7b393NAPdLMtIQdRhwXxgAFjX3VEBtag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3806 (0xede) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91672F2, serialNumber=11D57A757ED56575D049E429C8EC737A56050B79 Validity Not Before: May 10 17:32:20 2025 GMT Not After : May 17 17:32:20 2025 GMT Subject: CN=681f8da4-446b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3f:ce:c4:e0:1e:95:9d:2e:63:ce:ee:54:1f: b2:31:1e:39:c2:6b:98:9d:c0:e2:ef:84:45:44:f7: a3:ae:28:8b:05:d3:23:a6:01:1e:84:5f:0b:23:13: 31:2c:44:ec:4c:1a:d2:b8:82:08:f4:7d:29:25:87: 31:7b:d5:b9:5f:37:7b:41:69:73:9e:01:17:ee:ba: 68:9a:23:9a:5a:74:09:7d:a8:a6:ba:d6:eb:1e:68: 9d:15:cb:c0:5f:c3:dc:63:3d:48:d4:1a:14:2f:06: bc:13:21:20:61:de:1d:e0:5f:22:e0:1a:5b:85:fc: 18:e9:9a:a3:ad:b5:45:56:0e:b9:ae:5a:05:e8:8d: b0:ef:f1:b4:f2:5b:47:4f:fe:9c:d9:c7:bb:ed:d7: d3:c1:89:94:2c:99:f0:b3:a8:26:80:c4:c9:13:69: f0:dd:91:80:2e:6c:69:1a:5e:cf:3a:6d:d2:a8:f5: 37:40:c9:f7:66:58:48:d3:d4:d6:78:bd:06:29:b0: 28:fa:2d:d2:8d:a7:aa:3a:36:e2:fa:27:6e:cc:1b: 6b:f2:cb:ea:8c:eb:c2:3a:f8:62:44:82:6c:ca:10: 4b:4b:f7:91:3d:0e:42:10:d1:64:a2:b3:72:16:db: 69:3c:8f:e2:3e:d1:18:cf:4a:9f:32:b0:c5:ee:5e: 9e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:97:34:88:1F:65:39:79:F8:2D:F5:05:DC:8F:0A:0A:AB:36:2A:04 X509v3 Authority Key Identifier: keyid:11:D5:7A:75:7E:D5:65:75:D0:49:E4:29:C8:EC:73:7A:56:05:0B:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdV6dX7VZXXQSeQpyOxzelYFC3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91672F2/DD8EC1C880D411E9A9C9C75EC4F9AE02/EdV6dX7VZXXQSeQpyOxzelYFC3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:15:44:b9:07:a7:4f:00:35:37:12:ff:1b:5f:6e:f4:ce:ec: c4:f4:68:df:de:1d:77:6f:25:81:5c:d8:1f:62:2e:f2:94:1c: 5c:fa:1e:6e:01:dd:91:f9:5a:32:f1:30:03:b5:fa:fb:66:4c: 36:ec:6c:d0:01:e7:c7:38:e7:d9:8c:08:a8:cc:95:b1:32:7f: 74:8a:85:65:6e:3b:a4:c3:1c:58:99:cd:2f:86:d2:a0:f7:91: d4:56:36:e0:3b:50:2d:49:5a:e8:ea:ac:ef:62:08:f6:6d:fe: a1:b6:7f:45:47:dd:a1:27:fc:fe:e2:d4:69:4d:52:b1:cf:31: 23:5f:ff:3f:88:b4:48:fc:03:35:9c:a4:c6:1b:97:ed:d4:18: fd:89:a5:e8:49:2f:8c:c1:34:f2:81:7a:86:6c:03:2b:ed:a5: f4:5d:2d:14:57:89:56:ce:82:16:cf:bf:27:d1:3c:5c:83:ec: cc:f0:13:94:5c:15:66:22:98:f8:89:4d:a3:80:c9:08:f6:36: ea:e5:28:fe:34:47:ba:e3:83:16:90:71:2e:f3:4a:cd:87:62: cb:e1:ab:a2:3e:32:d2:22:88:f8:79:40:7d:42:3a:e9:88:ab: 35:7d:db:d8:f8:37:bd:38:0f:41:b3:46:d0:b8:42:c8:55:c0: 54:d0:94:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcyRjIxMTAvBgNVBAUTKDExRDU3QTc1N0VENTY1NzVEMDQ5RTQyOUM4RUM3MzdB NTYwNTBCNzkwHhcNMjUwNTEwMTczMjIwWhcNMjUwNTE3MTczMjIwWjAYMRYwFAYD VQQDEw02ODFmOGRhNC00NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnj/OxOAelZ0uY87uVB+yMR45wmuYncDi74RFRPejriiLBdMjpgEehF8LIxMx LETsTBrSuIII9H0pJYcxe9W5Xzd7QWlzngEX7rpomiOaWnQJfaimutbrHmidFcvA X8PcYz1I1BoULwa8EyEgYd4d4F8i4BpbhfwY6ZqjrbVFVg65rloF6I2w7/G08ltH T/6c2ce77dfTwYmULJnws6gmgMTJE2nw3ZGALmxpGl7POm3SqPU3QMn3ZlhI09TW eL0GKbAo+i3SjaeqOjbi+iduzBtr8svqjOvCOvhiRIJsyhBLS/eRPQ5CENFkorNy FttpPI/iPtEYz0qfMrDF7l6egQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+XNIgf ZTl5+C31BdyPCgqrNioEMB8GA1UdIwQYMBaAFBHVenV+1WV10EnkKcjsc3pWBQt5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzJGMi9ERDhFQzFDODgw RDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpYWFFTZVFweU94emVsWUZD M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkVjZkWDdWWlhYUVNlUXB5T3h6ZWxZRkMzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzJGMi9ERDhFQzFDODgwRDQxMUU5QTlDOUM3NUVDNEY5QUUwMi9FZFY2ZFg3VlpY WFFTZVFweU94emVsWUZDM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwFUS5B6dPADU3Ev8bX270zuzE9Gjf3h13byWBXNgfYi7ylBxc+h5u Ad2R+Voy8TADtfr7Zkw27GzQAefHOOfZjAiozJWxMn90ioVlbjukwxxYmc0vhtKg 95HUVjbgO1AtSVro6qzvYgj2bf6htn9FR92hJ/z+4tRpTVKxzzEjX/8/iLRI/AM1 nKTGG5ft1Bj9iaXoSS+MwTTygXqGbAMr7aX0XS0UV4lWzoIWz78n0Txcg+zM8BOU XBVmIpj4iU2jgMkI9jbq5Sj+NEe644MWkHEu80rNh2LL4auiPjLSIoj4eUB9Qjrp iKs1fdvY+De9OA9Bs0bQuELIVcBU0JQd -----END CERTIFICATE-----Generated at Sun May 11 15:05:50 2025 by rpki-client