$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: ksm1qvCn0Kn8EOudUaxPZ2AKKV29rS6q3u4wBCUuZ3U= Subject key identifier: 79:C2:A6:0B:70:AC:BC:7D:AD:FB:89:7B:40:BB:79:CA:83:C6:43:46 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 10D5 Signing time: Mon 30 Jun 2025 17:34:33 +0000 Manifest this update: Mon 30 Jun 2025 17:34:32 +0000 Manifest next update: Mon 07 Jul 2025 17:34:32 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: uJE8jPyzd6rLLuIE7hRPu7m7rL28eIQHYf2GJYPFTsI=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=) 8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=) 9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4438 (0x1156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Jun 30 17:34:32 2025 GMT Not After : Jul 7 17:34:32 2025 GMT Subject: CN=6862caa8-7637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:3b:e4:9a:20:bc:90:ed:de:40:43:2a:13: 07:0b:25:57:78:21:71:2f:48:39:d0:37:e1:d9:ab: a8:49:1e:4d:70:72:38:91:c9:95:29:49:7e:16:1e: 06:ac:f5:67:da:fc:61:c2:ef:bc:df:5d:f7:30:42: 53:95:28:b2:20:c2:89:a0:e0:30:45:07:f1:53:d5: 0c:b9:c1:e9:1c:b2:bc:67:d8:ea:5c:3d:e4:c1:2c: 50:34:be:1e:54:55:01:a2:96:38:04:38:2f:b5:63: 00:d0:22:bd:17:a5:01:18:ca:99:c4:03:0a:d0:45: f6:1a:8c:97:2e:77:de:2e:6b:95:c5:ae:37:b2:94: 48:a8:27:7b:c8:2b:31:da:f5:80:63:03:d6:a3:3f: 94:07:92:77:8b:3e:44:3a:28:7b:2c:07:f3:b5:38: 2a:6e:3c:95:74:66:96:03:4f:da:62:2b:00:f7:ad: f7:3a:3e:cd:a4:8d:97:a9:20:fb:b5:4b:40:35:d0: df:f0:99:4c:d7:7d:f0:5e:37:e3:a2:35:1d:9c:cd: 01:2f:1a:bb:44:08:ae:27:75:a4:87:a0:68:84:6f: 67:48:d6:7b:a5:bf:1c:ff:07:79:d8:49:1f:e8:5d: 18:d0:d9:cf:5c:e1:f6:cd:f8:f9:df:92:4a:d6:70: 1d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C2:A6:0B:70:AC:BC:7D:AD:FB:89:7B:40:BB:79:CA:83:C6:43:46 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:53:4d:30:ad:d9:e6:80:6a:b3:92:9d:72:96:a4:b8:8f:b9: dd:b0:8d:01:12:0b:e1:1b:94:be:24:54:c4:7d:75:1b:0d:16: b1:66:0a:a6:b7:bf:36:a8:a0:fe:80:65:a1:bf:6d:16:5e:81: 76:83:8e:ba:9c:6d:d4:2c:02:66:bf:3a:6f:9d:c3:d8:f7:48: 63:5c:87:fb:b9:48:e0:f3:cc:88:ce:86:77:f0:76:b2:fa:50: 0c:8c:d1:b7:d6:70:f5:61:a8:df:80:cc:5c:4b:53:94:f7:e6: 30:3b:bc:c6:a0:9a:ff:7e:41:a9:0d:1c:f4:2a:17:a0:47:36: 79:c0:2c:f6:2c:5f:81:cb:97:ab:96:5c:b6:1b:a7:08:d0:5c: b8:45:79:ec:a8:54:8c:71:5d:a4:7b:60:2d:0a:63:1b:35:10: d7:b0:8e:aa:06:d4:de:6a:10:bc:45:58:95:cc:4e:9b:a7:5d: e6:ee:2d:1f:30:9c:79:3f:8e:f3:f2:e2:bf:c4:a2:85:f6:08: c0:b3:e8:60:be:5d:66:c2:cc:91:d0:33:a8:52:ca:34:7d:22: fc:e2:19:2c:a3:ce:0e:47:a0:ad:de:b3:dc:36:52:93:ff:f2: 29:1f:db:e6:d8:d0:30:81:60:de:39:20:5e:f4:ad:a4:d6:79: 2d:bc:b4:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwNjMwMTczNDMyWhcNMjUwNzA3MTczNDMyWjAYMRYwFAYD VQQDEw02ODYyY2FhOC03NjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrg75JogvJDt3kBDKhMHCyVXeCFxL0g50Dfh2auoSR5NcHI4kcmVKUl+Fh4G rPVn2vxhwu+83133MEJTlSiyIMKJoOAwRQfxU9UMucHpHLK8Z9jqXD3kwSxQNL4e VFUBopY4BDgvtWMA0CK9F6UBGMqZxAMK0EX2GoyXLnfeLmuVxa43spRIqCd7yCsx 2vWAYwPWoz+UB5J3iz5EOih7LAfztTgqbjyVdGaWA0/aYisA9633Oj7NpI2XqSD7 tUtANdDf8JlM133wXjfjojUdnM0BLxq7RAiuJ3Wkh6BohG9nSNZ7pb8c/wd52Ekf 6F0Y0NnPXOH2zfj535JK1nAdmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnCpgtw rLx9rfuJe0C7ecqDxkNGMB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7U00wrdnmgGqzkp1ylqS4j7ndsI0BEgvhG5S+JFTEfXUbDRaxZgqm t782qKD+gGWhv20WXoF2g466nG3ULAJmvzpvncPY90hjXIf7uUjg88yIzoZ38Hay +lAMjNG31nD1YajfgMxcS1OU9+YwO7zGoJr/fkGpDRz0KhegRzZ5wCz2LF+By5er lly2G6cI0Fy4RXnsqFSMcV2ke2AtCmMbNRDXsI6qBtTeahC8RViVzE6bp13m7i0f MJx5P47z8uK/xKKF9gjAs+hgvl1mwsyR0DOoUso0fSL84hkso84OR6Ct3rPcNlKT //IpH9vm2NAwgWDeOSBe9K2k1nktvLRG -----END CERTIFICATE-----Generated at Wed Jul 2 01:54:38 2025 by rpki-client