$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: in37Y6LA0Dx4xDjR5MP1B1kts7u2zhDShNeUgcKk7BE= Subject key identifier: 6B:75:54:65:60:71:48:FF:08:7B:C3:AE:C0:5B:28:52:F7:C2:9E:A8 Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 09A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 09A2 Signing time: Mon 12 May 2025 19:54:22 +0000 Manifest this update: Mon 12 May 2025 19:54:21 +0000 Manifest next update: Mon 19 May 2025 19:54:21 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: KjmHxJavoXygmxqrJ5JMUmJRum1h8Kkcw5fxrySCETQ=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: n5P347FiAUuKhxz5D51UBzZC3yGrF18WlVG2Rg0oGrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2472 (0x9a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: May 12 19:54:21 2025 GMT Not After : May 19 19:54:21 2025 GMT Subject: CN=682251ed-5269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:50:e8:27:3b:c7:b0:bf:93:dc:0d:b9:ba: 3f:5b:0d:55:c5:e0:f7:b7:b5:31:5a:c5:18:b6:19: e9:0f:5f:27:ae:08:e1:bc:fd:0d:96:b5:7a:67:6e: da:ec:f8:98:28:93:81:6a:70:f7:ed:00:07:cb:5a: e3:11:d0:38:64:a9:c7:04:b8:3e:0a:7c:f7:37:e1: e4:75:5f:27:65:81:90:c5:ff:23:a4:64:9b:c4:9b: 00:81:61:d3:15:58:6e:80:c8:4c:c4:2c:33:bb:59: e3:d0:db:72:d2:7b:81:b7:f7:9b:a8:c0:c2:89:ca: 8f:68:1a:a4:c1:54:a3:00:f5:8a:9c:f7:e8:ca:0a: 48:13:d2:88:47:cd:96:18:2b:5d:a5:ec:9a:c2:98: 37:19:ea:f7:c1:1b:f3:3e:64:62:5a:fa:4a:c0:95: 8e:57:80:46:fa:f1:23:a1:87:fd:7e:d4:43:f3:c7: f9:4e:64:29:84:76:fc:4f:5b:b1:15:85:e7:a5:60: c0:88:29:17:e3:86:5a:84:77:7f:c0:2b:11:80:fb: 2e:07:10:70:10:7c:9c:77:70:03:90:b4:db:cf:c5: 95:73:9a:d8:20:c9:c8:d9:47:56:c1:d4:bf:34:1d: 70:1d:75:24:ab:43:17:a9:2c:a6:96:1a:6e:10:ee: 28:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:75:54:65:60:71:48:FF:08:7B:C3:AE:C0:5B:28:52:F7:C2:9E:A8 X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:32:78:d8:9f:2c:12:ec:53:37:6e:79:a2:16:67:5b:87:41: da:5c:e0:ab:a2:ae:16:9c:db:81:1b:4c:d6:1b:cf:3c:22:10: 54:70:bc:1d:b4:51:c8:96:b1:85:29:43:ee:49:e2:57:92:de: 20:de:fa:e0:1a:b6:13:64:8e:7b:58:b2:39:70:b5:ec:47:65: 0c:ca:7b:15:ef:73:c4:2b:96:f8:1f:7e:d1:ab:76:e8:18:fb: 67:ea:12:90:b3:18:d1:f6:86:a1:ad:12:88:ef:65:88:cb:fd: 48:2a:68:fc:1e:9c:1b:7c:14:ee:c5:5e:47:5b:fc:75:40:36: 35:51:85:1c:e9:f8:d6:34:22:fa:ca:c3:87:98:47:f6:09:e3: bd:b2:19:00:71:a2:ed:5c:42:0c:2e:c0:46:fb:89:b0:bf:e8: 6d:57:4d:a3:5f:77:ab:a1:d5:f8:77:8b:cb:c3:fa:58:cf:0d: c5:70:0e:db:29:1a:c9:f7:fe:9b:a4:7b:45:84:6f:81:f8:fd: 47:79:a1:bd:fb:99:67:aa:9d:2f:0a:05:e5:7c:3f:b4:d2:84: 8c:8b:ec:20:18:0e:bf:f8:10:b6:ff:7d:0b:81:54:d1:8a:f6: 0b:21:13:44:b2:f8:8d:6a:ef:30:80:fe:fb:c5:33:82:a2:e2: b2:84:89:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjUwNTEyMTk1NDIxWhcNMjUwNTE5MTk1NDIxWjAYMRYwFAYD VQQDEw02ODIyNTFlZC01MjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7BQ6Cc7x7C/k9wNubo/Ww1VxeD3t7UxWsUYthnpD18nrgjhvP0NlrV6Z27a 7PiYKJOBanD37QAHy1rjEdA4ZKnHBLg+Cnz3N+HkdV8nZYGQxf8jpGSbxJsAgWHT FVhugMhMxCwzu1nj0Nty0nuBt/ebqMDCicqPaBqkwVSjAPWKnPfoygpIE9KIR82W GCtdpeyawpg3Ger3wRvzPmRiWvpKwJWOV4BG+vEjoYf9ftRD88f5TmQphHb8T1ux FYXnpWDAiCkX44ZahHd/wCsRgPsuBxBwEHycd3ADkLTbz8WVc5rYIMnI2UdWwdS/ NB1wHXUkq0MXqSymlhpuEO4o5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGt1VGVg cUj/CHvDrsBbKFL3wp6oMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKMnjYnywS7FM3bnmiFmdbh0HaXOCroq4WnNuBG0zWG888IhBUcLwd tFHIlrGFKUPuSeJXkt4g3vrgGrYTZI57WLI5cLXsR2UMynsV73PEK5b4H37Rq3bo GPtn6hKQsxjR9oahrRKI72WIy/1IKmj8HpwbfBTuxV5HW/x1QDY1UYUc6fjWNCL6 ysOHmEf2CeO9shkAcaLtXEIMLsBG+4mwv+htV02jX3erodX4d4vLw/pYzw3FcA7b KRrJ9/6bpHtFhG+B+P1HeaG9+5lnqp0vCgXlfD+00oSMi+wgGA6/+BC2/30LgVTR ivYLIRNEsviNau8wgP77xTOCouKyhIlc -----END CERTIFICATE-----Generated at Wed May 14 15:13:49 2025 by rpki-client