$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: Eefl8nNqfMf0auzvWE76/aH2EtJgp81xecD3sH5V/Jw= Subject key identifier: 58:C2:03:28:4F:2A:81:7B:DD:98:14:AB:62:05:DC:FD:F1:7A:22:8E Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 44 Signing time: Sun 11 May 2025 06:09:48 +0000 Manifest this update: Sun 11 May 2025 06:09:47 +0000 Manifest next update: Sun 18 May 2025 06:09:47 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: rS8JWtqaTcrocEzn7W/mtHrEPSp0UljpC4tVWpSarXY=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: KQyWlLwg95xKEA7eXDtYxt189xq6hS1CzXkzk6a37uA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: May 11 06:09:47 2025 GMT Not After : May 18 06:09:47 2025 GMT Subject: CN=68203f2b-686c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:50:14:01:36:fd:94:e1:5a:ee:23:83:32:54: ec:f4:8c:b6:7d:18:c5:8f:ec:63:16:1f:c6:77:ca: e7:23:f9:bf:47:48:7b:9a:fb:c3:91:5f:6f:db:6a: 5e:a1:44:fc:a9:11:81:32:16:b4:5f:2c:fa:a5:f0: 6b:d0:b5:7a:f0:91:94:51:4a:1b:d2:9c:af:d1:63: 9e:70:dc:d3:7a:af:6b:bd:c2:56:8f:23:0c:fc:04: db:d4:b4:69:f6:8c:44:ab:ec:49:06:3a:16:23:74: 05:bc:76:49:c8:15:8d:5e:28:59:50:10:a3:be:3b: 89:55:15:da:da:fb:c8:ea:b7:84:65:9f:e7:4c:47: 2f:ef:80:37:f9:e9:f1:58:35:47:0f:ac:95:c7:80: 07:89:8e:23:a5:8f:8b:dc:26:86:d7:05:3a:b5:d2: 33:68:be:70:ec:4f:07:ea:52:01:7d:c3:1b:dc:7d: e3:9d:14:a6:e9:49:92:e5:b4:9b:f5:24:92:98:e9: 9e:6d:29:c7:20:4a:51:ae:ef:82:21:d2:7d:84:89: 4a:af:68:f0:c9:89:0f:ec:26:b8:ed:5d:14:83:71: b5:04:97:e6:ad:3a:05:ad:39:53:ef:76:45:e9:5e: 90:69:ef:1a:ac:c6:38:b5:64:88:89:86:d3:77:d0: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C2:03:28:4F:2A:81:7B:DD:98:14:AB:62:05:DC:FD:F1:7A:22:8E X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a6:76:8a:a7:86:ea:6e:ff:c0:0a:d3:d6:a6:2a:6d:9d:38: d1:7a:01:34:28:e9:8e:43:b0:94:f6:06:5e:32:26:5e:99:fc: f4:3f:1f:c3:49:df:47:20:30:95:ba:06:a8:df:78:88:40:c9: 26:87:09:93:e8:b0:e4:27:48:c3:6c:25:c2:b2:9c:88:42:dc: cd:27:66:06:46:df:f3:b1:5b:b4:a3:d9:af:9c:48:d6:28:c7: 57:39:74:b2:7a:9e:bd:f1:c3:0d:cd:19:d8:bb:7f:e9:ed:75: 37:15:77:61:4d:19:37:e0:ac:12:bd:67:cd:89:24:25:d9:19: 8b:55:19:9d:d1:07:e3:12:cf:10:f8:d3:8a:d7:1c:82:3e:81: 58:39:e6:68:67:fc:19:00:47:78:bb:03:ed:0a:4d:2c:e5:10: 6f:dd:2b:6f:07:e7:eb:51:32:16:b3:c7:3d:e9:65:d7:09:56: fd:17:4f:f9:27:d5:85:09:13:71:04:cd:d8:6c:83:9f:57:50: 6f:a4:63:7e:71:b3:62:fd:4e:52:9e:f9:7d:8c:03:79:a6:45: 42:7d:d6:1f:2d:82:75:e1:89:43:d8:7a:2c:87:fb:b4:00:aa: 38:52:cd:b2:6d:25:38:dd:22:a6:9d:60:61:93:e1:a9:94:21: 2a:91:62:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzIzODExMC8GA1UEBRMoMTJBMTAyRjA4RUQxNEY2MjNGQTZFMzFEQkFCNDlBMjRE MUI5QTE1MTAeFw0yNTA1MTEwNjA5NDdaFw0yNTA1MTgwNjA5NDdaMBgxFjAUBgNV BAMTDTY4MjAzZjJiLTY4NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0UBQBNv2U4VruI4MyVOz0jLZ9GMWP7GMWH8Z3yucj+b9HSHua+8ORX2/bal6h RPypEYEyFrRfLPql8GvQtXrwkZRRShvSnK/RY55w3NN6r2u9wlaPIwz8BNvUtGn2 jESr7EkGOhYjdAW8dknIFY1eKFlQEKO+O4lVFdra+8jqt4Rln+dMRy/vgDf56fFY NUcPrJXHgAeJjiOlj4vcJobXBTq10jNovnDsTwfqUgF9wxvcfeOdFKbpSZLltJv1 JJKY6Z5tKccgSlGu74Ih0n2EiUqvaPDJiQ/sJrjtXRSDcbUEl+atOgWtOVPvdkXp XpBp7xqsxji1ZIiJhtN30CktAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWMIDKE8q gXvdmBSrYgXc/fF6Io4wHwYDVR0jBBgwFoAUEqEC8I7RT2I/puMdurSaJNG5oVEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDMjM4L0NENzE3RDlDQ0JG MzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9W RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXFFQzhJN1JUMklfcHVNZHVyU2FKTkc1b1ZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD MjM4L0NENzE3RDlDQ0JGMzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJ X3B1TWR1clNhSk5HNW9WRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJumdoqnhupu/8AK09amKm2dONF6ATQo6Y5DsJT2Bl4yJl6Z/PQ/H8NJ 30cgMJW6BqjfeIhAySaHCZPosOQnSMNsJcKynIhC3M0nZgZG3/OxW7Sj2a+cSNYo x1c5dLJ6nr3xww3NGdi7f+ntdTcVd2FNGTfgrBK9Z82JJCXZGYtVGZ3RB+MSzxD4 04rXHII+gVg55mhn/BkAR3i7A+0KTSzlEG/dK28H5+tRMhazxz3pZdcJVv0XT/kn 1YUJE3EEzdhsg59XUG+kY35xs2L9TlKe+X2MA3mmRUJ91h8tgnXhiUPYeiyH+7QA qjhSzbJtJTjdIqadYGGT4amUISqRYlM= -----END CERTIFICATE-----Generated at Mon May 12 04:05:38 2025 by rpki-client