$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: Q6XjuMr6QdPH4MA0/CQuojm5LJYzDhN6vz54A75esCw= Subject key identifier: BB:62:68:A7:C5:53:8C:54:B1:7C:BA:CB:5A:95:45:61:7A:3C:01:21 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 113D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 10BC Signing time: Sat 10 May 2025 17:16:23 +0000 Manifest this update: Sat 10 May 2025 17:16:22 +0000 Manifest next update: Sat 17 May 2025 17:16:22 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: 3VfG/GGF9VpQdrV04+WbC47OZCOE+JVzuVfxjseiS1g=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=) 8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=) 9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4413 (0x113d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: May 10 17:16:22 2025 GMT Not After : May 17 17:16:22 2025 GMT Subject: CN=681f89e6-0253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:38:8e:1e:01:d9:d2:bc:b3:bc:a8:2e:d8:50: 4f:1a:df:9c:40:ed:db:e9:8c:2f:33:6b:c5:47:71: a6:48:32:63:a1:86:60:43:db:45:fb:50:4f:58:9a: 97:e8:17:91:58:81:b6:1b:78:d2:04:27:72:ee:17: 2f:22:34:62:cb:cb:e9:6b:d8:3b:df:7c:44:8f:67: 0e:d0:e2:14:e9:8b:e1:bd:e6:7f:35:b9:a2:07:b9: c5:22:1f:8f:8f:0c:32:33:03:d7:a5:67:42:9b:64: 06:a0:3c:12:2e:2d:79:2a:76:e2:e6:6b:0a:6d:c2: 18:97:f0:d2:65:a5:7b:3d:5a:c4:7b:a6:0b:bf:39: 1b:7c:fe:41:5a:98:a6:93:94:23:74:22:c6:25:da: c9:b0:95:4d:2f:61:56:41:8b:7f:7a:18:cb:46:98: e4:4a:5c:3a:2c:ea:8d:f2:ab:20:01:ad:b5:f6:20: e5:33:fa:5e:9c:51:0a:aa:86:06:d9:bb:82:2f:39: 79:89:6a:95:03:86:ad:1e:22:63:20:ea:d5:64:26: b9:9f:01:88:5c:b3:60:ae:d6:da:12:0f:37:1c:19: 01:a7:41:8b:ed:52:c3:4d:ba:18:35:54:78:a4:db: f9:6d:d1:24:17:ca:f6:a5:2a:27:c0:05:8a:3b:e4: 4e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:62:68:A7:C5:53:8C:54:B1:7C:BA:CB:5A:95:45:61:7A:3C:01:21 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:99:80:1d:76:39:75:72:45:0f:24:3a:36:d8:81:02:5e:d4: f3:a1:35:47:86:90:20:3f:78:25:4b:7e:6f:96:54:3a:6f:36: c3:81:4e:80:87:0e:55:17:2e:2b:a6:c2:d1:8d:54:bf:d2:90: ad:7d:bc:54:c4:25:b2:b4:77:b3:80:00:15:05:b9:b7:89:c2: c7:3b:17:9f:28:9f:07:41:d3:0d:4a:3d:1e:93:55:c2:2f:d3: fa:fb:87:01:3d:04:73:1a:18:91:b1:dd:20:f5:50:3f:c8:df: a4:29:36:94:61:08:1c:d1:58:91:9e:b2:d8:89:5d:b4:a3:5b: 8e:53:df:d6:03:88:5a:2e:7f:ff:20:2a:5e:eb:c1:45:51:3d: 69:73:5a:71:a3:d3:67:75:9b:2e:da:6c:e9:97:b4:6b:25:f8: 23:5c:96:7d:0c:d0:02:88:a4:bf:2a:ed:70:24:ec:10:4e:60: 4b:fe:b8:7e:49:4d:f7:51:2d:83:de:fc:09:15:88:70:08:fa: 48:60:f9:7a:5c:15:98:04:80:0a:e3:99:48:b0:ee:8d:bd:24: 1a:5c:66:fb:d5:7f:ca:10:36:23:9f:a9:e4:3a:87:49:53:67: 93:3a:a6:a7:33:db:d9:b0:ca:5f:ea:d1:67:f0:f3:e2:35:03: 73:f8:5c:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICET0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwNTEwMTcxNjIyWhcNMjUwNTE3MTcxNjIyWjAYMRYwFAYD VQQDEw02ODFmODllNi0wMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jiOHgHZ0ryzvKgu2FBPGt+cQO3b6YwvM2vFR3GmSDJjoYZgQ9tF+1BPWJqX 6BeRWIG2G3jSBCdy7hcvIjRiy8vpa9g733xEj2cO0OIU6YvhveZ/NbmiB7nFIh+P jwwyMwPXpWdCm2QGoDwSLi15Knbi5msKbcIYl/DSZaV7PVrEe6YLvzkbfP5BWpim k5QjdCLGJdrJsJVNL2FWQYt/ehjLRpjkSlw6LOqN8qsgAa219iDlM/penFEKqoYG 2buCLzl5iWqVA4atHiJjIOrVZCa5nwGIXLNgrtbaEg83HBkBp0GL7VLDTboYNVR4 pNv5bdEkF8r2pSonwAWKO+ROawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtiaKfF U4xUsXy6y1qVRWF6PAEhMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwmYAddjl1ckUPJDo22IECXtTzoTVHhpAgP3glS35vllQ6bzbDgU6A hw5VFy4rpsLRjVS/0pCtfbxUxCWytHezgAAVBbm3icLHOxefKJ8HQdMNSj0ek1XC L9P6+4cBPQRzGhiRsd0g9VA/yN+kKTaUYQgc0ViRnrLYiV20o1uOU9/WA4haLn// ICpe68FFUT1pc1pxo9NndZsu2mzpl7RrJfgjXJZ9DNACiKS/Ku1wJOwQTmBL/rh+ SU33US2D3vwJFYhwCPpIYPl6XBWYBIAK45lIsO6NvSQaXGb71X/KEDYjn6nkOodJ U2eTOqanM9vZsMpf6tFn8PPiNQNz+Fyy -----END CERTIFICATE-----Generated at Sun May 11 19:16:56 2025 by rpki-client