$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft File: EobObnRy-d6N8qVtj9oUScpz7dw.mft (raw, json) Hash identifier: c2bmb0U+mPn3epBFrUjPsQHCh7VOGimW+/OOtInYliI= Subject key identifier: 7F:7B:A2:9E:FE:F2:1E:64:88:DD:B9:54:8A:85:3E:D3:C2:00:6E:5D Authority key identifier: 12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC Certificate issuer: /CN=A91D9196/serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC Certificate serial: 1F10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft Manifest number: 1EFA Signing time: Mon 12 May 2025 15:59:46 +0000 Manifest this update: Mon 12 May 2025 15:59:46 +0000 Manifest next update: Mon 19 May 2025 15:59:46 +0000 Files and hashes: 1: EobObnRy-d6N8qVtj9oUScpz7dw.crl (hash: o7k4dDxNnxbZbmGMVJKVXA/MIb0JTsmUajZetL8yfRM=) 2: 166B6FD854EE11E78DFD1629C4F9AE02.roa (hash: 4pH+e0DAGB7uiyu6q3/py65vuNCItVcuG3R7I6BU3bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7952 (0x1f10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9196, serialNumber=1286CE6E7472F9DE8DF2A56D8FDA1449CA73EDDC Validity Not Before: May 12 15:59:46 2025 GMT Not After : May 19 15:59:46 2025 GMT Subject: CN=68221af2-35db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:8a:49:24:74:f8:13:56:85:2e:ba:db:f2: aa:46:42:70:cb:bf:07:81:5e:71:bc:5a:66:67:87: f6:31:7d:21:a3:3e:b6:bb:e9:2c:ed:74:c3:bc:d6: e2:ca:28:b2:f2:85:0f:5d:77:cb:92:0f:e7:6f:1e: 00:1e:95:27:03:b6:80:0a:cd:f7:ef:f8:f1:cb:e5: c6:c0:35:4a:08:5b:87:ac:b2:eb:6c:19:ab:1f:61: c9:27:af:f1:04:02:75:46:11:4b:0d:eb:65:1d:96: 13:22:10:b1:0c:d7:be:e1:b9:29:06:e4:b5:52:f8: 09:fc:09:94:44:fd:07:ee:51:63:c1:c9:d1:c7:6f: 38:90:a8:88:3d:5a:4c:1a:f0:ad:65:af:17:ae:0a: 1d:83:60:61:b8:29:06:2a:66:d0:72:cc:5b:d9:58: 50:e1:b7:50:c9:5c:6b:f6:a2:cf:f0:59:75:80:e7: 58:af:0f:f3:7f:b8:78:ef:8e:b2:28:ab:24:ad:f2: 9e:4e:cc:82:6e:80:8e:42:72:db:cb:93:8c:b7:7a: 42:a3:ac:2a:63:cb:f7:80:1d:6a:e1:86:76:07:43: a4:7c:dd:d5:0c:33:82:ac:6e:fe:4c:11:58:c4:03: fc:9d:98:80:7b:20:1d:c3:e5:fc:03:7b:04:40:40: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7B:A2:9E:FE:F2:1E:64:88:DD:B9:54:8A:85:3E:D3:C2:00:6E:5D X509v3 Authority Key Identifier: keyid:12:86:CE:6E:74:72:F9:DE:8D:F2:A5:6D:8F:DA:14:49:CA:73:ED:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EobObnRy-d6N8qVtj9oUScpz7dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9196/438F5D965A1A11E6A3864910C4F9AE02/EobObnRy-d6N8qVtj9oUScpz7dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:17:8e:48:ae:b9:c4:68:31:d4:75:80:b9:0f:a9:f7:c6:a2: 7b:cc:12:15:54:7a:cb:76:bc:d2:f7:87:38:19:cd:f2:1a:b8: f5:c6:4e:88:db:c9:6b:56:24:ff:46:ba:52:d3:ec:e5:b8:3a: b1:3b:33:12:c0:40:49:3e:ed:36:eb:78:95:54:72:b1:16:1e: 8a:83:12:8a:bf:b1:6b:e1:00:3a:32:30:f7:94:cf:88:7b:7e: 05:d7:f8:a9:55:5f:ac:3b:05:d0:f3:90:a5:6a:ec:b0:5e:d1: 7d:3e:83:25:13:39:2d:e9:4e:aa:2c:2c:55:f7:f0:90:cd:99: fa:39:7e:3f:75:a5:de:14:3e:85:f5:dd:a5:62:80:e0:4a:9a: 56:b4:ae:f7:f6:75:87:a8:85:87:70:8c:48:3f:a8:01:91:3f: eb:fa:9d:ef:2d:f5:57:a2:66:4e:98:73:93:a3:f7:be:d3:f9: 1b:2e:1f:ca:a1:81:31:74:74:87:25:87:8b:4f:6a:63:2c:36: 64:44:77:d3:ff:5b:37:a2:84:e0:05:c3:12:4b:5c:b1:86:2b: 04:5f:54:7c:75:7a:9d:70:44:09:aa:fe:c2:cd:ef:13:43:e8: 0f:8f:35:0a:6d:4e:ed:5c:87:58:15:ce:c4:c5:c4:f3:a0:06: ed:48:39:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkxOTYxMTAvBgNVBAUTKDEyODZDRTZFNzQ3MkY5REU4REYyQTU2RDhGREExNDQ5 Q0E3M0VEREMwHhcNMjUwNTEyMTU1OTQ2WhcNMjUwNTE5MTU1OTQ2WjAYMRYwFAYD VQQDEw02ODIyMWFmMi0zNWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbGKSSR0+BNWhS662/KqRkJwy78HgV5xvFpmZ4f2MX0hoz62u+ks7XTDvNbi yiiy8oUPXXfLkg/nbx4AHpUnA7aACs337/jxy+XGwDVKCFuHrLLrbBmrH2HJJ6/x BAJ1RhFLDetlHZYTIhCxDNe+4bkpBuS1UvgJ/AmURP0H7lFjwcnRx284kKiIPVpM GvCtZa8Xrgodg2BhuCkGKmbQcsxb2VhQ4bdQyVxr9qLP8Fl1gOdYrw/zf7h4746y KKskrfKeTsyCboCOQnLby5OMt3pCo6wqY8v3gB1q4YZ2B0OkfN3VDDOCrG7+TBFY xAP8nZiAeyAdw+X8A3sEQEAV2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH97op7+ 8h5kiN25VIqFPtPCAG5dMB8GA1UdIwQYMBaAFBKGzm50cvnejfKlbY/aFEnKc+3c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE5Ni80MzhGNUQ5NjVB MUExMUU2QTM4NjQ5MTBDNEY5QUUwMi9Fb2JPYm5SeS1kNk44cVZ0ajlvVVNjcHo3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvYk9iblJ5LWQ2TjhxVnRqOW9VU2Nwejdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTE5Ni80MzhGNUQ5NjVBMUExMUU2QTM4NjQ5MTBDNEY5QUUwMi9Fb2JPYm5SeS1k Nk44cVZ0ajlvVVNjcHo3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqF45IrrnEaDHUdYC5D6n3xqJ7zBIVVHrLdrzS94c4Gc3yGrj1xk6I 28lrViT/RrpS0+zluDqxOzMSwEBJPu0263iVVHKxFh6KgxKKv7Fr4QA6MjD3lM+I e34F1/ipVV+sOwXQ85ClauywXtF9PoMlEzkt6U6qLCxV9/CQzZn6OX4/daXeFD6F 9d2lYoDgSppWtK739nWHqIWHcIxIP6gBkT/r+p3vLfVXomZOmHOTo/e+0/kbLh/K oYExdHSHJYeLT2pjLDZkRHfT/1s3ooTgBcMSS1yxhisEX1R8dXqdcEQJqv7Cze8T Q+gPjzUKbU7tXIdYFc7ExcTzoAbtSDnt -----END CERTIFICATE-----Generated at Tue May 13 22:02:48 2025 by rpki-client