$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft File: e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft (raw, json) Hash identifier: 5EQgeUK1PXGQ3N5MZJP3KzvAhAuAiTRDtroO1Z7vhqY= Subject key identifier: C7:E4:6B:13:F6:64:34:F3:C8:99:D1:CD:64:47:52:68:B7:10:56:0D Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft Manifest number: 013E Signing time: Wed 02 Jul 2025 16:37:50 +0000 Manifest this update: Wed 02 Jul 2025 16:37:49 +0000 Manifest next update: Wed 09 Jul 2025 16:37:49 +0000 Files and hashes: 1: e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl (hash: Uk8pqOEbcqb8mi8/sG5Ptbx5tbMTrlOo1gS5j1deZJY=) 2: 21A970BC737211EEB3112437C4F9AE02.roa (hash: aUIyfh4rOAFfQ6V1QGk9Ci9jD2H4crp4Ilb6Y+4J9lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: Jul 2 16:37:49 2025 GMT Not After : Jul 9 16:37:49 2025 GMT Subject: CN=6865605d-e9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:86:1d:f9:f9:ea:d7:63:95:73:87:55:28:54: 25:35:44:d4:4a:1b:55:50:56:52:93:c0:97:88:ab: fa:8b:f9:63:16:e2:72:a1:d9:15:1e:f8:40:bf:c2: f7:73:64:29:ec:64:44:c8:0e:0c:4c:90:08:28:8b: 23:58:d3:34:73:c6:7e:c3:b1:a3:67:3f:37:d1:7c: 39:0c:6c:b4:a8:83:ad:72:10:12:79:48:e9:43:3a: 2f:c1:fe:9b:2a:dd:0d:0a:9a:46:8e:36:4b:de:8f: 0c:cc:e4:f7:a5:f0:4d:e3:56:84:0d:85:54:67:a7: 86:72:78:32:dd:fd:2c:c5:41:24:6d:5c:6a:4a:ca: 56:2c:8d:20:ca:2a:e6:4e:07:9a:38:26:ce:68:96: 92:d3:98:fc:f0:f7:a7:24:86:a7:dd:c0:a6:28:67: e4:61:72:4d:e9:fe:92:41:80:ad:32:5a:a9:c1:85: 57:2f:67:96:37:8d:7f:bb:43:65:c3:e1:3b:fe:fd: 81:e5:9e:6e:0b:a0:77:96:b0:f6:27:3c:71:87:df: fd:6d:24:56:f2:0b:60:28:e4:df:71:e6:bf:fb:ce: 89:36:e5:af:6d:1c:e6:0c:17:9e:df:69:02:4b:7a: 6e:62:10:df:58:75:ce:44:c1:5d:81:5e:18:9d:b8: 4b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E4:6B:13:F6:64:34:F3:C8:99:D1:CD:64:47:52:68:B7:10:56:0D X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:1f:92:ee:13:79:c9:1d:92:39:ef:2c:b7:71:7e:1d:c5:4b: 08:fd:86:30:94:a0:90:71:54:6b:41:6c:c0:21:22:05:88:2d: cb:c3:df:17:f4:38:8b:cf:4e:cf:f9:a7:2e:63:24:d7:ac:fa: ca:aa:2e:1b:5d:49:87:fe:47:ff:4b:05:c4:e1:4e:58:ac:b1: 67:3c:2e:bb:fc:a0:a0:4e:6f:4b:5f:d2:70:3b:fc:f6:5d:af: ec:bd:05:bc:a7:f4:9a:7f:23:74:e4:fc:c0:5f:cb:a2:c6:84: 4c:f7:fb:59:40:87:74:8e:dc:d8:35:48:79:86:41:31:6f:bf: 70:98:74:11:5f:2d:fe:b1:8b:2f:df:98:f2:b5:9d:c1:79:6b: 20:37:0b:e3:6a:f2:5d:ca:46:b3:65:12:10:24:b5:c8:57:c6: c9:dc:29:3f:47:fd:e1:54:6d:ce:85:ef:ee:0a:34:a1:ff:5f: 28:12:89:f5:33:6b:eb:f4:9d:9a:22:35:a8:fb:8b:4f:28:0a: 3d:9c:e2:d7:84:45:d6:d2:75:2e:bc:39:e0:89:de:e9:49:94: 85:8d:2a:d5:81:92:78:31:15:e3:e1:e7:11:1d:f3:94:55:54: 21:35:12:8f:f0:45:1c:f9:52:66:a0:71:a3:d6:54:a3:73:ba: 43:0d:28:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKDdCOUNFREM4MzI4MDI4QTc0NTZFOUM0MTRCQjc3REFG RUJDRTc2NUYwHhcNMjUwNzAyMTYzNzQ5WhcNMjUwNzA5MTYzNzQ5WjAYMRYwFAYD VQQDEw02ODY1NjA1ZC1lOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYYd+fnq12OVc4dVKFQlNUTUShtVUFZSk8CXiKv6i/ljFuJyodkVHvhAv8L3 c2Qp7GREyA4MTJAIKIsjWNM0c8Z+w7GjZz830Xw5DGy0qIOtchASeUjpQzovwf6b Kt0NCppGjjZL3o8MzOT3pfBN41aEDYVUZ6eGcngy3f0sxUEkbVxqSspWLI0gyirm TgeaOCbOaJaS05j88PenJIan3cCmKGfkYXJN6f6SQYCtMlqpwYVXL2eWN41/u0Nl w+E7/v2B5Z5uC6B3lrD2Jzxxh9/9bSRW8gtgKOTfcea/+86JNuWvbRzmDBee32kC S3puYhDfWHXORMFdgV4YnbhLlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfkaxP2 ZDTzyJnRzWRHUmi3EFYNMB8GA1UdIwQYMBaAFHuc7cgygCinRW6cQUu3fa/rznZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS9DNkRENTFCNDcz NkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtLZEZicHhCUzdkOXItdk9k bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2RsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi9lNXp0eURLQUtL ZEZicHhCUzdkOXItdk9kbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVH5LuE3nJHZI57yy3cX4dxUsI/YYwlKCQcVRrQWzAISIFiC3Lw98X 9DiLz07P+acuYyTXrPrKqi4bXUmH/kf/SwXE4U5YrLFnPC67/KCgTm9LX9JwO/z2 Xa/svQW8p/SafyN05PzAX8uixoRM9/tZQId0jtzYNUh5hkExb79wmHQRXy3+sYsv 35jytZ3BeWsgNwvjavJdykazZRIQJLXIV8bJ3Ck/R/3hVG3Ohe/uCjSh/18oEon1 M2vr9J2aIjWo+4tPKAo9nOLXhEXW0nUuvDngid7pSZSFjSrVgZJ4MRXj4ecRHfOU VVQhNRKP8EUc+VJmoHGj1lSjc7pDDSi7 -----END CERTIFICATE-----Generated at Thu Jul 3 23:16:37 2025 by rpki-client