$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json) Hash identifier: B6eKFmkMwtkJ7DoozncgRTpq4D+0H8n6nOl1ANlT6IQ= Subject key identifier: 62:F8:B0:CC:88:9A:AC:2E:8A:AC:42:EF:62:8A:D7:C7:D0:03:2B:53 Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft Manifest number: EA Signing time: Sun 11 May 2025 04:12:31 +0000 Manifest this update: Sun 11 May 2025 04:12:31 +0000 Manifest next update: Sun 18 May 2025 04:12:31 +0000 Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: bUsWIZ45gB3ULJqfs1pv8D7reagkoQOkq0fzvXEcCEQ=) 2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: UVNnVE482CTuury1gOUSOm7uwVR741BfWPntovKeG3A=) 3: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: GxG7PljqaIsL4NG1p4pqVTS9JJNKWXLA96c3vNu2FFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Validity Not Before: May 11 04:12:31 2025 GMT Not After : May 18 04:12:31 2025 GMT Subject: CN=682023af-557c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:77:13:3e:d6:d3:0f:b1:24:0b:a5:bc:b4:4d: 8e:7c:20:08:84:5c:31:92:a4:47:1a:48:ec:58:a3: 8f:d3:fa:41:a1:36:ff:61:db:c7:bb:4d:f9:fc:98: f6:89:99:68:61:6d:49:7b:6a:a2:0d:80:31:69:7b: db:f9:ed:3b:07:dc:d2:bc:c1:1e:44:1d:8b:a8:b2: 12:99:0a:42:a3:94:a0:f6:61:9e:2e:68:c7:ec:43: 76:41:b9:bf:38:8e:a6:e7:99:2a:dc:33:81:0b:8f: 03:c7:b8:78:a3:70:f2:01:0a:70:2d:86:be:e5:14: 95:98:5a:fb:f9:c7:ac:ce:88:b4:1c:d0:2c:58:59: c1:61:ef:71:d8:4d:01:30:49:db:9a:ba:c3:2e:87: 6e:15:9f:75:47:d2:db:d3:3d:76:55:02:6d:3d:2e: 05:54:be:7b:de:cc:51:0a:06:7e:ab:a5:b5:41:04: fa:97:ec:7b:28:05:f2:ab:77:3e:98:12:1c:fc:de: ac:e5:1d:61:1d:06:3e:1b:7d:be:17:e1:19:f8:68: 88:76:26:b0:bc:0e:6c:53:43:76:c5:36:2e:21:e8: 0d:32:dc:72:f2:39:13:72:fe:2e:aa:4c:54:8c:ad: f4:71:e4:e4:e5:fc:f2:74:82:c4:26:0e:4e:a8:bb: 22:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F8:B0:CC:88:9A:AC:2E:8A:AC:42:EF:62:8A:D7:C7:D0:03:2B:53 X509v3 Authority Key Identifier: keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:51:5e:eb:0d:64:e0:7f:19:2a:7a:c4:34:8b:e5:ca:6d:62: a2:03:9a:17:55:ef:6b:8a:c4:84:60:c2:f6:9f:16:f4:84:79: 09:ef:ae:ee:79:ec:11:b9:bb:50:b2:5c:7d:ee:d7:be:4b:4b: df:e6:bd:b0:cd:81:0d:eb:6d:6d:13:a5:11:c2:15:d4:06:8c: 45:7d:73:6b:96:7c:01:fc:71:78:ba:d5:d4:b5:4b:6e:51:4c: f7:18:b5:22:36:06:c1:fe:dc:0b:56:26:be:db:34:5f:c5:d6: 72:2c:2a:78:c3:30:5f:43:ef:13:3b:e8:e3:88:f7:e0:74:b6: d4:d1:9d:2d:92:e1:ad:a6:ad:ff:ba:79:6d:be:11:5e:16:dd: 4a:6e:ce:3a:da:d3:7e:33:4c:e9:8a:f0:49:45:2a:d3:03:6d: 37:c0:69:b3:3e:4c:c5:a5:c0:45:fa:cb:92:5a:b5:ee:4c:55: 25:ab:d9:23:f2:36:87:29:25:99:a7:60:b9:de:8d:12:cf:ce: 95:dd:6f:7a:6a:6a:51:a6:38:63:a2:88:25:b6:c0:e8:cd:79: ec:44:ce:cf:00:e0:80:c8:30:c9:67:cc:35:65:fb:00:62:63: c8:69:e1:08:51:b5:be:b0:e6:48:8d:f0:35:83:5e:8a:c6:e6: 68:90:17:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB NDY3OUFDNzEwHhcNMjUwNTExMDQxMjMxWhcNMjUwNTE4MDQxMjMxWjAYMRYwFAYD VQQDEw02ODIwMjNhZi01NTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ncTPtbTD7EkC6W8tE2OfCAIhFwxkqRHGkjsWKOP0/pBoTb/YdvHu035/Jj2 iZloYW1Je2qiDYAxaXvb+e07B9zSvMEeRB2LqLISmQpCo5Sg9mGeLmjH7EN2Qbm/ OI6m55kq3DOBC48Dx7h4o3DyAQpwLYa+5RSVmFr7+ceszoi0HNAsWFnBYe9x2E0B MEnbmrrDLoduFZ91R9Lb0z12VQJtPS4FVL573sxRCgZ+q6W1QQT6l+x7KAXyq3c+ mBIc/N6s5R1hHQY+G32+F+EZ+GiIdiawvA5sU0N2xTYuIegNMtxy8jkTcv4uqkxU jK30ceTk5fzydILEJg5OqLsiBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGL4sMyI mqwuiqxC72KK18fQAytTMB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS84ODJGMjMyMEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFr dkxxRTBCTFQ3RXlrWjVySEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsUV7rDWTgfxkqesQ0i+XKbWKiA5oXVe9risSEYML2nxb0hHkJ767u eewRubtQslx97te+S0vf5r2wzYEN621tE6URwhXUBoxFfXNrlnwB/HF4utXUtUtu UUz3GLUiNgbB/twLVia+2zRfxdZyLCp4wzBfQ+8TO+jjiPfgdLbU0Z0tkuGtpq3/ unltvhFeFt1Kbs462tN+M0zpivBJRSrTA203wGmzPkzFpcBF+suSWrXuTFUlq9kj 8jaHKSWZp2C53o0Sz86V3W96ampRpjhjoogltsDozXnsRM7PAOCAyDDJZ8w1ZfsA YmPIaeEIUbW+sOZIjfA1g16KxuZokBea -----END CERTIFICATE-----Generated at Mon May 12 19:03:33 2025 by rpki-client