$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: pfmTSa24l3mhwtp/dBuw71QrLMoOJBlFA6hJkQL51HM= Subject key identifier: DD:12:EB:5C:1D:97:08:13:49:1A:4F:B3:7C:5C:F1:D4:8B:DE:23:B9 Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 1831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 1810 Signing time: Mon 12 May 2025 16:29:14 +0000 Manifest this update: Mon 12 May 2025 16:29:14 +0000 Manifest next update: Mon 19 May 2025 16:29:14 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: D/ne0QETv7mUbTAZA3uVsMNamHX6DiO5s+lalPDNtXE=) 2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 4Q+SEdvBQGfYmmHeFRyy/2R/EHACTjORm2A/+Pw5UxE=) 3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: p3nDO3WF2LVR/VuRYdJhLml5b3M6N0ju1bV/+dQUHBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6193 (0x1831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: May 12 16:29:14 2025 GMT Not After : May 19 16:29:14 2025 GMT Subject: CN=682221da-ef4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:89:1e:25:43:0b:47:3b:ac:4d:c1:63:e5: 54:d0:74:86:0e:f0:f0:e5:b8:5a:e6:42:0b:aa:f5: a7:9d:6f:51:b6:c7:57:50:1d:93:6e:f8:a2:49:79: 0f:c6:e3:4d:dc:e7:f3:1e:fe:d7:be:6a:be:69:17: c3:9e:26:a2:d5:1b:4e:4f:40:28:5c:9a:81:0a:30: 56:b9:4d:d4:01:55:74:8f:88:89:2b:b4:c9:7e:63: ee:03:a0:0c:a0:dd:78:dd:0d:40:73:66:dc:b8:ee: d7:96:c9:c2:62:ba:9f:43:ed:8c:82:6e:6f:33:2e: 14:f3:ce:30:0c:e9:7d:d3:0a:ad:85:a3:e0:47:8c: 4f:e0:66:c8:5a:88:08:0d:35:c8:7e:6f:77:82:02: 71:24:a0:13:b6:f1:e8:27:7d:44:f4:74:35:17:80: 07:e1:f1:27:55:24:69:8c:01:76:38:9a:06:03:a7: 0c:2f:6c:49:b8:90:a3:8e:bd:08:b1:3f:64:f4:fa: 6c:3a:6a:9a:7d:6c:47:9e:6d:07:79:72:81:13:6d: 1a:1f:59:b0:55:75:b8:bb:eb:55:aa:56:dc:95:f0: 6c:f9:38:0e:78:62:40:e5:67:7e:12:08:c2:35:a0: dc:e9:b2:de:dd:09:d5:9b:09:d4:1a:12:f3:fd:a3: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:12:EB:5C:1D:97:08:13:49:1A:4F:B3:7C:5C:F1:D4:8B:DE:23:B9 X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:de:5d:2f:27:10:a5:23:df:ef:e5:14:28:ee:6f:8e:a6:ab: e8:a3:8d:06:6f:75:76:1e:d4:ac:37:d2:f3:34:7d:f1:f3:aa: 7a:47:fd:43:b4:83:46:70:43:e4:c1:df:8e:b2:db:62:ff:b7: f2:b0:0d:bf:aa:32:f4:6d:3b:21:05:64:d0:da:c8:82:95:61: 0e:df:91:1c:8a:4f:80:9d:7c:09:17:86:f3:85:5c:11:50:b7: 43:d2:7c:ec:7c:a5:5d:0a:35:48:bf:26:a8:ef:b9:c4:83:7f: 3d:91:fc:1f:30:fb:26:8a:6b:e6:46:17:8a:31:4e:e9:72:5f: e0:78:54:19:90:0b:bc:da:b0:7d:84:41:90:c9:4f:bf:71:60: 95:05:01:9a:30:f9:8d:f0:22:3d:dc:9d:1e:47:20:78:a5:6b: c4:17:6e:f6:f5:ca:2c:94:5c:50:16:67:09:67:fc:62:5e:b8: 7c:06:19:b4:92:17:47:44:bc:cc:7b:bd:60:33:be:93:b0:4a: 89:32:dd:50:a7:53:d0:ea:11:58:6c:93:0c:50:77:8c:91:58: 43:27:e0:b4:7b:c5:ff:b7:54:a2:69:68:b1:90:c2:60:b0:a7: 56:7d:a2:8a:56:a5:0f:48:28:a6:2d:b6:93:38:f3:27:5c:52: 63:29:32:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjUwNTEyMTYyOTE0WhcNMjUwNTE5MTYyOTE0WjAYMRYwFAYD VQQDEw02ODIyMjFkYS1lZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMSJHiVDC0c7rE3BY+VU0HSGDvDw5bha5kILqvWnnW9RtsdXUB2TbviiSXkP xuNN3OfzHv7Xvmq+aRfDniai1RtOT0AoXJqBCjBWuU3UAVV0j4iJK7TJfmPuA6AM oN143Q1Ac2bcuO7XlsnCYrqfQ+2Mgm5vMy4U884wDOl90wqthaPgR4xP4GbIWogI DTXIfm93ggJxJKATtvHoJ31E9HQ1F4AH4fEnVSRpjAF2OJoGA6cML2xJuJCjjr0I sT9k9PpsOmqafWxHnm0HeXKBE20aH1mwVXW4u+tVqlbclfBs+TgOeGJA5Wd+EgjC NaDc6bLe3QnVmwnUGhLz/aO3GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0S61wd lwgTSRpPs3xc8dSL3iO5MB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR3l0vJxClI9/v5RQo7m+Opqvoo40Gb3V2HtSsN9LzNH3x86p6R/1D tINGcEPkwd+Ostti/7fysA2/qjL0bTshBWTQ2siClWEO35Ecik+AnXwJF4bzhVwR ULdD0nzsfKVdCjVIvyao77nEg389kfwfMPsmimvmRheKMU7pcl/geFQZkAu82rB9 hEGQyU+/cWCVBQGaMPmN8CI93J0eRyB4pWvEF2729coslFxQFmcJZ/xiXrh8Bhm0 khdHRLzMe71gM76TsEqJMt1Qp1PQ6hFYbJMMUHeMkVhDJ+C0e8X/t1SiaWixkMJg sKdWfaKKVqUPSCimLbaTOPMnXFJjKTI7 -----END CERTIFICATE-----Generated at Mon May 12 23:05:55 2025 by rpki-client