$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: u4RhbXZ3ab1HAEsnCO53uVZVcBXVhq2PJ2/lzczxrEw= Subject key identifier: E6:F4:82:1C:E5:F9:6B:56:46:6D:47:40:7F:AB:F4:48:04:B6:59:22 Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0D39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0D14 Signing time: Mon 12 May 2025 17:58:30 +0000 Manifest this update: Mon 12 May 2025 17:58:29 +0000 Manifest next update: Mon 19 May 2025 17:58:29 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: 00L8hhPyIWibZSpNfPG/3HmrnKhGgB2z49OHICdK1Hw=) 2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: bGVPdIvZlYGFNzxT3y5YSA5PehaGI7Seiy7YCZdX9Sg=) 3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: +In7lqAfHKKuHVBt4b296chjrd7RaFgigBnxlxSxJ4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3385 (0xd39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: May 12 17:58:29 2025 GMT Not After : May 19 17:58:29 2025 GMT Subject: CN=682236c6-cae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:db:4e:29:97:bf:67:7d:83:58:54:fb:65: ef:0b:9e:3d:4f:c6:69:e2:66:b8:18:09:b1:04:e8: db:4f:63:4b:8a:b0:70:ea:04:8b:64:2f:fc:ee:bb: 12:7c:04:d5:99:43:fc:a4:5b:f2:97:8f:94:d4:36: da:e8:2e:92:c7:e2:7d:04:11:d2:57:7e:2b:dc:90: 80:66:22:6a:30:b5:2c:a1:fa:12:cd:d1:bd:5d:ee: fc:86:bb:f6:3c:5d:28:7e:44:03:e1:37:13:8e:24: 52:44:c7:fe:57:32:af:33:42:ac:18:5e:68:67:ce: 6d:c2:fb:ec:df:01:a3:2f:6c:a1:a5:c1:08:3b:93: 68:3a:93:58:50:ed:fc:26:36:81:c9:fe:fa:94:73: 87:26:56:9d:33:4f:51:79:9e:d2:88:72:92:65:41: 16:2e:44:5d:ef:76:48:47:04:d1:49:f9:50:9d:8e: ef:d7:de:76:5f:a8:9d:61:62:c4:c1:6c:5e:49:08: d0:82:af:3c:7f:04:63:21:8b:c9:5e:ba:78:b5:fa: ea:6a:55:a8:6f:70:c0:89:28:3f:e9:15:15:7c:98: 86:9d:ff:61:0b:3e:6b:1d:5a:e2:49:b9:81:70:87: 31:72:e5:4e:58:bc:9a:b1:41:7d:97:0b:75:14:33: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F4:82:1C:E5:F9:6B:56:46:6D:47:40:7F:AB:F4:48:04:B6:59:22 X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:27:4c:ae:76:17:8b:ac:ce:8d:65:6c:39:b6:57:b7:1e:88: 59:35:60:f5:ca:e7:3a:4b:29:53:94:d6:6d:c9:a6:af:42:06: 5e:5e:48:79:e9:f2:c0:2f:c2:dd:8e:15:4b:d8:89:a0:43:aa: 17:f0:0d:17:b0:31:7b:db:6c:e8:4d:1b:13:ad:e5:8b:3b:6b: 2a:54:af:5d:39:a5:ff:8b:41:5b:34:f6:f8:87:9f:94:53:b1: 66:34:62:c2:5b:f3:23:95:91:25:4c:82:25:58:d0:4e:cd:9f: 87:25:aa:2c:85:01:88:3a:13:ab:f1:54:dd:66:5d:35:26:29: 5d:d9:a4:cc:66:2a:cc:32:73:dc:b8:fd:c6:e4:f9:6a:a7:2a: a7:3f:8a:b5:d2:04:6f:ad:63:8a:12:7e:08:80:90:f9:6b:64: 0a:11:0c:02:fe:13:93:0a:d7:3b:01:83:16:0e:79:44:6e:4c: b7:64:d4:9b:b3:4e:5b:41:0c:1a:10:74:73:99:9f:5d:58:54: d9:8a:ea:5e:4d:55:73:4f:c6:8a:1e:37:f7:1e:7d:ea:29:d3: 66:39:56:d9:1f:75:9c:f3:be:09:b4:da:6f:af:74:80:ef:f2: fe:06:d3:bc:3a:09:8c:71:0e:77:16:43:60:38:d0:98:98:6d: 8a:5a:78:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjUwNTEyMTc1ODI5WhcNMjUwNTE5MTc1ODI5WjAYMRYwFAYD VQQDEw02ODIyMzZjNi1jYWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYrbTimXv2d9g1hU+2XvC549T8Zp4ma4GAmxBOjbT2NLirBw6gSLZC/87rsS fATVmUP8pFvyl4+U1Dba6C6Sx+J9BBHSV34r3JCAZiJqMLUsofoSzdG9Xe78hrv2 PF0ofkQD4TcTjiRSRMf+VzKvM0KsGF5oZ85twvvs3wGjL2yhpcEIO5NoOpNYUO38 JjaByf76lHOHJladM09ReZ7SiHKSZUEWLkRd73ZIRwTRSflQnY7v1952X6idYWLE wWxeSQjQgq88fwRjIYvJXrp4tfrqalWob3DAiSg/6RUVfJiGnf9hCz5rHVriSbmB cIcxcuVOWLyasUF9lwt1FDO2WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOb0ghzl +WtWRm1HQH+r9EgEtlkiMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyJ0yudheLrM6NZWw5tle3HohZNWD1yuc6SylTlNZtyaavQgZeXkh5 6fLAL8LdjhVL2ImgQ6oX8A0XsDF722zoTRsTreWLO2sqVK9dOaX/i0FbNPb4h5+U U7FmNGLCW/MjlZElTIIlWNBOzZ+HJaoshQGIOhOr8VTdZl01Jild2aTMZirMMnPc uP3G5PlqpyqnP4q10gRvrWOKEn4IgJD5a2QKEQwC/hOTCtc7AYMWDnlEbky3ZNSb s05bQQwaEHRzmZ9dWFTZiupeTVVzT8aKHjf3Hn3qKdNmOVbZH3Wc874JtNpvr3SA 7/L+BtO8OgmMcQ53FkNgONCYmG2KWni0 -----END CERTIFICATE-----Generated at Tue May 13 10:58:07 2025 by rpki-client