$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json) Hash identifier: kyivpufHEu9dDb6+X9cr+6QYI+KSdN/7/LZDkmFQw2s= Subject key identifier: 94:B1:2C:28:D5:74:CD:D2:36:10:C0:9B:EE:3E:76:4E:15:50:81:09 Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Certificate serial: 09F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft Manifest number: 09E5 Signing time: Thu 08 May 2025 19:50:32 +0000 Manifest this update: Thu 08 May 2025 19:50:32 +0000 Manifest next update: Thu 15 May 2025 19:50:32 +0000 Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: ejZKCMntYizHHGcG4hn1EWjVDIu/LhqPmxKFwqnc+CE=) 2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: gpPg/16kKxPZtosxwk3uS2OGAiNWAdV4RvEaBetwtjY=) 3: E4EFE6905ECB11ECA9B55A3BC4F9AE02.roa (hash: 2/vrRanjIvJ85A1uVxImmh8dfMsQj3ydRiChMXIyicw=) 4: A1C764027A5B11EA98745A0EC4F9AE02.roa (hash: Nzvt2pSeGZD3qdrCxDPbO/iQuuVNl0d8y3dg1zJR1Nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 19:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2552 (0x9f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Validity Not Before: May 8 19:50:32 2025 GMT Not After : May 15 19:50:32 2025 GMT Subject: CN=681d0b08-9fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e9:ab:b6:49:ae:6c:a4:a9:e8:bc:0d:22:2d: 4d:7e:0e:65:0f:25:dd:24:14:98:cc:f4:56:6e:e3: ba:11:43:58:84:fc:d6:1a:ce:05:1f:8b:c4:00:9d: 54:7c:64:14:50:eb:7c:1c:5c:65:1a:fa:b7:99:2a: cb:1d:54:cc:64:b4:f8:ed:c4:14:79:81:56:5f:5e: 4b:e6:b1:61:a3:f5:95:1f:e9:fb:e2:4f:f3:d1:44: 61:5c:f0:a4:a3:2c:da:78:c2:a4:77:6c:76:ce:ae: e2:e3:1d:84:64:17:a5:45:50:4e:99:78:e1:0a:a1: 00:93:67:d7:10:90:16:c8:ac:57:8a:6b:a6:a2:7c: aa:25:65:b6:a5:bc:d9:bf:3b:fa:8a:91:7c:ba:c8: 7c:63:c2:30:5c:82:0a:5e:21:d1:a7:9d:03:25:56: 95:a2:fe:46:6e:7a:d7:54:c7:2b:e3:41:aa:f2:3a: 70:5d:70:75:69:d1:d9:52:20:87:73:45:09:37:4e: c3:fb:68:ad:c9:b0:83:29:d1:2d:21:1f:23:b5:80: 22:8e:2b:4d:66:0a:aa:49:b4:e7:da:6a:99:58:88: 90:3f:a5:bb:a8:27:3b:1f:38:e4:26:12:83:d8:2b: 93:92:4d:f5:95:94:f6:90:2a:8e:35:4f:f3:7f:9a: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B1:2C:28:D5:74:CD:D2:36:10:C0:9B:EE:3E:76:4E:15:50:81:09 X509v3 Authority Key Identifier: keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:68:11:7a:7e:a7:a0:26:44:a7:c7:dc:a6:8b:52:de:47:ff: 8e:0b:70:20:59:48:31:9e:80:26:21:5d:a8:f6:cc:8d:b0:c3: 7d:43:fa:fb:92:dd:22:3b:dc:77:98:ef:ea:4a:d2:b6:92:d3: 77:a0:80:bf:64:00:a3:18:78:97:2b:17:0c:49:e0:d8:5a:10: fe:6b:0a:be:7b:08:d2:47:f3:8c:51:7d:7a:92:6e:01:ae:80: 3d:8a:c0:d0:35:16:3c:6a:d3:0c:06:ea:42:bd:f9:3d:ea:a6: 25:83:33:2b:f1:8b:84:19:a2:44:ff:d1:87:ca:d7:7e:4e:70: f5:eb:2a:8b:1a:84:a4:0e:7b:48:f7:03:e8:95:54:63:3a:83: 49:2b:3f:ee:b9:41:f5:8e:7e:2f:2b:07:af:6f:de:f4:ac:4d: 88:21:ea:dc:10:32:d1:9b:ad:ff:ba:2f:65:a5:32:40:d7:39: 92:36:50:10:e9:84:45:d4:27:08:1c:05:a4:8e:ca:88:21:86: 1e:2b:ad:9e:ca:09:65:e7:b4:ec:52:2b:03:19:3d:ab:18:da: 47:64:31:94:86:16:9d:76:60:5b:29:45:2d:14:21:de:a9:6c: fb:72:c9:7d:bc:34:f8:73:f3:e5:2f:d7:6b:f0:b0:7f:16:0a: 32:ad:cd:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx Q0M5NkJBNzQwHhcNMjUwNTA4MTk1MDMyWhcNMjUwNTE1MTk1MDMyWjAYMRYwFAYD VQQDEw02ODFkMGIwOC05ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+mrtkmubKSp6LwNIi1Nfg5lDyXdJBSYzPRWbuO6EUNYhPzWGs4FH4vEAJ1U fGQUUOt8HFxlGvq3mSrLHVTMZLT47cQUeYFWX15L5rFho/WVH+n74k/z0URhXPCk oyzaeMKkd2x2zq7i4x2EZBelRVBOmXjhCqEAk2fXEJAWyKxXimumonyqJWW2pbzZ vzv6ipF8ush8Y8IwXIIKXiHRp50DJVaVov5GbnrXVMcr40Gq8jpwXXB1adHZUiCH c0UJN07D+2itybCDKdEtIR8jtYAijitNZgqqSbTn2mqZWIiQP6W7qCc7HzjkJhKD 2CuTkk31lZT2kCqONU/zf5pNwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSxLCjV dM3SNhDAm+4+dk4VUIEJMB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3 YnM1Y3MxVzR4MWNjeVd1blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRaBF6fqegJkSnx9ymi1LeR/+OC3AgWUgxnoAmIV2o9syNsMN9Q/r7 kt0iO9x3mO/qStK2ktN3oIC/ZACjGHiXKxcMSeDYWhD+awq+ewjSR/OMUX16km4B roA9isDQNRY8atMMBupCvfk96qYlgzMr8YuEGaJE/9GHytd+TnD16yqLGoSkDntI 9wPolVRjOoNJKz/uuUH1jn4vKwevb970rE2IIercEDLRm63/ui9lpTJA1zmSNlAQ 6YRF1CcIHAWkjsqIIYYeK62eygll57TsUisDGT2rGNpHZDGUhhaddmBbKUUtFCHe qWz7csl9vDT4c/PlL9dr8LB/Fgoyrc3N -----END CERTIFICATE-----Generated at Fri May 9 02:43:33 2025 by rpki-client