$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft File: tN_eECSMkMVYSwFupua0nnge2CA.mft (raw, json) Hash identifier: GtBo07REDYQ2mTRZvxaUHHIysyswMOXkxzUtlM6n030= Subject key identifier: 1D:38:E8:42:9D:EF:13:F4:6B:C8:68:FA:D3:BA:6A:5A:42:B9:41:AF Authority key identifier: B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20 Certificate issuer: /CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820 Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft Manifest number: 0687 Signing time: Wed 14 May 2025 22:19:01 +0000 Manifest this update: Wed 14 May 2025 22:19:00 +0000 Manifest next update: Wed 21 May 2025 22:19:00 +0000 Files and hashes: 1: tN_eECSMkMVYSwFupua0nnge2CA.crl (hash: LUTjGTOx+Foj47SBCZ2pfR49CzBjrAOGPfA8+Mu8HyM=) 2: 9E9FA4C40AB011EC8906F464C4F9AE02.roa (hash: y+B4buIfbruqaejaK6x75+RSn7pa5KBjABUZlRGt/q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A5B, serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820 Validity Not Before: May 14 22:19:00 2025 GMT Not After : May 21 22:19:00 2025 GMT Subject: CN=682516d4-71e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:bd:93:68:43:05:ab:78:df:a7:a9:d3:a1: 2b:d8:e0:5b:ff:1f:7c:ca:a1:f3:46:0b:02:82:d9: 56:22:0f:fe:a4:d2:ba:fb:aa:6c:56:7e:ed:83:30: c9:08:02:cc:b3:0e:79:cc:9c:96:9f:7d:49:95:6f: 21:c2:df:c1:6c:9f:e3:01:9a:5e:e6:b7:af:e2:47: 94:cd:0a:fd:7b:f3:33:af:33:ce:c5:ff:f8:54:66: 15:a3:04:20:be:25:10:d3:39:6f:3d:97:93:8e:71: 2b:61:79:61:ce:f6:d5:b5:8e:bb:32:fb:6b:71:a7: 13:55:93:ad:c6:17:73:35:98:71:91:97:40:56:5a: 21:c1:15:7c:7f:dd:30:42:0c:3f:aa:f2:d8:25:54: b0:81:95:f9:5c:7b:b5:ad:99:d2:bd:10:6f:a1:01: 7b:fe:a5:60:43:9c:77:b0:92:4c:13:b3:2d:5c:1c: 25:1c:ba:57:2d:96:e2:45:60:a9:22:ed:d7:c0:8f: 38:a4:9a:92:25:5d:9c:2a:9d:b0:4a:58:7a:36:db: 37:17:87:60:3f:8c:03:e2:76:ea:3c:2e:68:d4:e5: f4:d7:15:47:d8:52:ee:cf:3c:8c:24:f4:5f:0d:90: 35:20:3e:a8:ae:4d:80:e8:0d:0f:10:d8:3e:de:36: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:38:E8:42:9D:EF:13:F4:6B:C8:68:FA:D3:BA:6A:5A:42:B9:41:AF X509v3 Authority Key Identifier: keyid:B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:a5:0a:ab:85:0b:eb:72:36:81:cf:7e:80:a1:cf:73:c8:c1: c1:39:8a:25:09:7b:62:0f:d9:3b:76:a3:e7:b3:e7:5c:f2:ed: 5b:fb:b4:ac:a4:f0:e8:6a:78:be:30:a4:2f:ed:c7:31:d7:a2: 4a:17:ea:0c:39:6b:bb:10:9f:4f:63:eb:b1:50:8a:00:5d:34: 0a:f3:22:24:84:4e:52:ff:fc:7c:39:ff:1a:35:98:0a:35:a0: 25:fc:7b:25:70:46:20:9b:53:b7:6b:a2:6a:b4:e3:ff:17:dd: 27:eb:cb:a1:c6:74:d4:95:9f:ef:f6:58:e7:0f:d1:b7:66:0c: f6:b8:0c:df:63:93:71:70:00:00:1e:5f:d7:0f:fd:30:93:4a: 15:d8:d1:e8:de:84:43:b5:3d:bb:0b:17:7c:3a:9a:5c:88:c4: dd:95:5e:13:2c:bf:3b:1f:09:76:92:1d:56:cd:02:28:00:11: 98:3f:4f:4e:67:86:9f:2c:cd:1e:bb:05:20:c5:da:cf:fe:a6: e5:e0:91:ed:9e:e7:5b:21:cd:c6:fd:db:b0:e3:02:c3:04:9c: af:78:dd:42:8e:92:03:8a:a7:9d:ef:67:0c:f5:87:d6:86:06: f3:3a:5f:d1:77:45:80:3f:a0:c3:4c:e7:0a:38:97:59:32:a4: 6f:8d:f4:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNUIxMTAvBgNVBAUTKEI0REZERTEwMjQ4QzkwQzU1ODRCMDE2RUE2RTZCNDlF NzgxRUQ4MjAwHhcNMjUwNTE0MjIxOTAwWhcNMjUwNTIxMjIxOTAwWjAYMRYwFAYD VQQDEw02ODI1MTZkNC03MWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVi9k2hDBat436ep06Er2OBb/x98yqHzRgsCgtlWIg/+pNK6+6psVn7tgzDJ CALMsw55zJyWn31JlW8hwt/BbJ/jAZpe5rev4keUzQr9e/MzrzPOxf/4VGYVowQg viUQ0zlvPZeTjnErYXlhzvbVtY67MvtrcacTVZOtxhdzNZhxkZdAVlohwRV8f90w Qgw/qvLYJVSwgZX5XHu1rZnSvRBvoQF7/qVgQ5x3sJJME7MtXBwlHLpXLZbiRWCp Iu3XwI84pJqSJV2cKp2wSlh6Nts3F4dgP4wD4nbqPC5o1OX01xVH2FLuzzyMJPRf DZA1ID6ork2A6A0PENg+3jbM6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB046EKd 7xP0a8ho+tO6alpCuUGvMB8GA1UdIwQYMBaAFLTf3hAkjJDFWEsBbqbmtJ54Htgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE1Qi8xMUU5NkIzNDcw MTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtNVllTd0Z1cHVhMG5uZ2Uy Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROX2VFQ1NNa01WWVN3RnVwdWEwbm5nZTJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE1Qi8xMUU5NkIzNDcwMTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtN VllTd0Z1cHVhMG5uZ2UyQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwpQqrhQvrcjaBz36Aoc9zyMHBOYolCXtiD9k7dqPns+dc8u1b+7Ss pPDoani+MKQv7ccx16JKF+oMOWu7EJ9PY+uxUIoAXTQK8yIkhE5S//x8Of8aNZgK NaAl/HslcEYgm1O3a6JqtOP/F90n68uhxnTUlZ/v9ljnD9G3Zgz2uAzfY5NxcAAA Hl/XD/0wk0oV2NHo3oRDtT27Cxd8OppciMTdlV4TLL87Hwl2kh1WzQIoABGYP09O Z4afLM0euwUgxdrP/qbl4JHtnudbIc3G/duw4wLDBJyveN1CjpIDiqed72cM9YfW hgbzOl/Rd0WAP6DDTOcKOJdZMqRvjfRt -----END CERTIFICATE-----Generated at Fri May 16 10:05:59 2025 by rpki-client