$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft File: CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft (raw, json) Hash identifier: 4G88jKCEEJQZBAunZAWe4uyFL6i55u3zupJU6CeeTxo= Subject key identifier: 37:4B:89:7D:DF:CB:AF:26:82:59:C2:99:B0:82:4E:7A:9D:38:AD:D5 Authority key identifier: 08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 Certificate issuer: /CN=A91E46E8/serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Certificate serial: 0362 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft Manifest number: 035D Signing time: Thu 15 May 2025 00:59:56 +0000 Manifest this update: Thu 15 May 2025 00:59:56 +0000 Manifest next update: Thu 22 May 2025 00:59:56 +0000 Files and hashes: 1: CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl (hash: lZI48uenRfIFkrwuvOh/aYVpUOQQlVr9nYufb81Tih0=) 2: 97E05E58B15E11ECB6B31625C4F9AE02.roa (hash: 814gK30vRsw3f3GeLBYUI3A+K0FBKsWqCyMte+6ZS3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 866 (0x362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E46E8, serialNumber=084CFA9EBC06C0D6810548B0ED1CC47CF8EE0F31 Validity Not Before: May 15 00:59:56 2025 GMT Not After : May 22 00:59:56 2025 GMT Subject: CN=68253c8c-ccd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:09:89:dc:e9:8d:ab:59:f1:8f:68:8c:6b:95: e9:1c:7f:ad:e6:e0:e6:8d:19:58:82:af:e1:a4:cc: fa:7a:f2:f5:1c:a1:f0:63:e6:88:9a:ed:0b:79:99: 19:b3:fe:d8:79:1c:c9:1f:7d:27:f2:7b:f3:2b:e7: 49:33:14:51:73:86:55:37:aa:d7:86:d8:ce:db:7c: 6b:7f:5f:07:74:72:28:1c:d6:7d:32:9f:b6:29:a2: f3:65:ad:53:0e:9a:46:6b:ba:07:28:d2:2d:53:62: 01:a1:a8:ae:c3:ef:18:17:45:11:3f:60:61:37:d1: 3e:ee:89:29:c8:f2:6c:32:24:bf:f5:76:52:02:e2: 96:7f:96:cf:ea:b4:ec:cf:19:df:61:82:16:ac:71: 14:27:39:a2:0a:ae:31:61:9f:8a:77:78:fe:0f:ba: 97:4e:8d:e8:6c:41:07:62:3b:0b:c4:c8:aa:f1:9d: 0d:3c:af:56:7a:a1:d7:25:c3:2d:22:3d:cb:b6:c1: 9c:ba:c6:36:33:e1:90:1b:ca:7a:f8:8c:c2:ee:3d: 35:97:48:40:ec:78:11:2e:7a:33:a6:d9:4f:58:8d: 39:47:2f:85:f1:8a:cc:fc:66:2e:0f:ad:45:9f:e9: 75:e9:17:e5:8e:fa:e5:b4:56:ca:b3:9d:51:b4:79: 71:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4B:89:7D:DF:CB:AF:26:82:59:C2:99:B0:82:4E:7A:9D:38:AD:D5 X509v3 Authority Key Identifier: keyid:08:4C:FA:9E:BC:06:C0:D6:81:05:48:B0:ED:1C:C4:7C:F8:EE:0F:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CEz6nrwGwNaBBUiw7RzEfPjuDzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46E8/D4B8DA16B15A11EC8240B820C4F9AE02/CEz6nrwGwNaBBUiw7RzEfPjuDzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:8e:a2:88:c8:c0:06:8b:f2:e0:64:3e:9b:fa:60:b9:4d:86: 8d:b6:2a:df:11:56:35:5d:a1:72:a6:bc:3d:8a:8b:ce:88:93: a1:05:7a:1a:c7:a3:b5:7a:cf:6d:d8:87:ff:38:07:53:45:73: af:ae:81:e4:13:6b:06:e4:e6:fd:64:67:9e:94:9c:35:d7:44: 56:d4:3f:24:92:2e:37:1b:0e:76:15:52:7b:19:21:24:78:03: ab:bf:ed:65:7e:90:8d:6a:4e:b8:07:87:7c:56:e2:43:44:26: 75:f6:99:5f:91:53:45:b9:ed:61:81:e5:52:65:3c:ff:e1:3e: 0e:07:35:75:bd:99:30:2b:ef:cf:15:78:c9:56:0e:9f:75:10: c9:58:b7:1f:fb:23:26:96:1b:63:52:08:dd:69:bf:c1:bc:fe: 5e:30:7e:b9:dc:0a:99:29:46:86:a7:99:59:2a:bc:3c:29:21: 3d:b8:ba:3c:3f:38:85:6f:d9:71:d5:0e:15:52:7d:6b:27:18: e3:fa:06:ec:d1:48:ee:56:88:ae:8b:5c:4c:08:79:66:23:a4: cd:2a:1a:5b:b9:5d:b5:3a:74:87:24:d7:c3:af:b1:29:5b:94: 55:cd:15:7b:98:47:9d:e6:fe:2e:ff:1b:3e:d8:b1:83:76:0c: 30:05:24:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2RTgxMTAvBgNVBAUTKDA4NENGQTlFQkMwNkMwRDY4MTA1NDhCMEVEMUNDNDdD RjhFRTBGMzEwHhcNMjUwNTE1MDA1OTU2WhcNMjUwNTIyMDA1OTU2WjAYMRYwFAYD VQQDEw02ODI1M2M4Yy1jY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgmJ3OmNq1nxj2iMa5XpHH+t5uDmjRlYgq/hpMz6evL1HKHwY+aImu0LeZkZ s/7YeRzJH30n8nvzK+dJMxRRc4ZVN6rXhtjO23xrf18HdHIoHNZ9Mp+2KaLzZa1T DppGa7oHKNItU2IBoaiuw+8YF0URP2BhN9E+7okpyPJsMiS/9XZSAuKWf5bP6rTs zxnfYYIWrHEUJzmiCq4xYZ+Kd3j+D7qXTo3obEEHYjsLxMiq8Z0NPK9WeqHXJcMt Ij3LtsGcusY2M+GQG8p6+IzC7j01l0hA7HgRLnozptlPWI05Ry+F8YrM/GYuD61F n+l16RfljvrltFbKs51RtHlxbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdLiX3f y68mglnCmbCCTnqdOK3VMB8GA1UdIwQYMBaAFAhM+p68BsDWgQVIsO0cxHz47g8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDZFOC9ENEI4REExNkIx NUExMUVDODI0MEI4MjBDNEY5QUUwMi9DRXo2bnJ3R3dOYUJCVWl3N1J6RWZQanVE ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NFejZucndHd05hQkJVaXc3UnpFZlBqdUR6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDZFOC9ENEI4REExNkIxNUExMUVDODI0MEI4MjBDNEY5QUUwMi9DRXo2bnJ3R3dO YUJCVWl3N1J6RWZQanVEekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUjqKIyMAGi/LgZD6b+mC5TYaNtirfEVY1XaFyprw9iovOiJOhBXoa x6O1es9t2If/OAdTRXOvroHkE2sG5Ob9ZGeelJw110RW1D8kki43Gw52FVJ7GSEk eAOrv+1lfpCNak64B4d8VuJDRCZ19plfkVNFue1hgeVSZTz/4T4OBzV1vZkwK+/P FXjJVg6fdRDJWLcf+yMmlhtjUgjdab/BvP5eMH653AqZKUaGp5lZKrw8KSE9uLo8 PziFb9lx1Q4VUn1rJxjj+gbs0UjuVoiui1xMCHlmI6TNKhpbuV21OnSHJNfDr7Ep W5RVzRV7mEed5v4u/xs+2LGDdgwwBSTn -----END CERTIFICATE-----Generated at Fri May 16 19:39:59 2025 by rpki-client