$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json) Hash identifier: OXtIQ0yQDDuhMrH61tB4DkOCb6xUGdZxHB6dPhVau0A= Subject key identifier: B8:36:1A:69:9E:7E:B8:8E:E4:CE:17:25:AF:44:01:11:8A:1C:91:A1 Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 0801 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft Manifest number: 07F8 Signing time: Sat 10 May 2025 20:36:37 +0000 Manifest this update: Sat 10 May 2025 20:36:37 +0000 Manifest next update: Sat 17 May 2025 20:36:37 +0000 Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: y1G57ywxiYVi5MNrReqCM0NYexVOXGciUaqSYWIgPAQ=) 2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: GfKJIrjmB/IQqGBbWvEsxSHUiEi5qreV/8BX3Exlv6E=) 3: F8C3E4EA94E011EDB701A974C4F9AE02.roa (hash: ppcWvH2kJjQ1xzMFc9qaEdUMAFHB7kgGpZFW1BmvQFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2049 (0x801) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: May 10 20:36:37 2025 GMT Not After : May 17 20:36:37 2025 GMT Subject: CN=681fb8d5-ae6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:be:b0:0a:b0:75:15:4a:36:dc:8f:15:e4:b8: c4:85:37:6d:33:2b:de:17:ad:34:6b:9f:22:e5:87: 97:e6:f5:46:c6:2b:18:e3:ff:81:1f:26:c4:7a:64: 3d:e3:5c:6b:c2:d7:58:92:42:ad:55:cb:5b:b8:96: 72:f3:41:59:9b:b5:ab:36:41:1d:ae:64:4b:c9:51: 72:fd:0d:87:44:7f:98:39:e3:51:0e:36:d1:12:30: 92:25:58:50:b3:d3:d3:d7:55:53:07:e5:52:9e:30: 79:d8:54:27:41:23:0d:d7:86:8b:56:c7:e7:58:1e: 6a:44:24:85:e7:3c:8a:d8:d7:e5:7f:b3:d4:d9:70: 44:83:fb:31:2c:4c:82:68:68:86:43:56:79:61:e8: cf:ae:38:11:27:16:66:a8:83:e1:ee:c3:a3:7e:38: 7f:54:ed:30:20:0c:25:14:14:00:20:08:62:e0:31: 07:f5:7a:61:e8:0c:c9:02:9f:5f:27:6a:2a:ee:81: f6:29:21:1b:0f:2b:4e:04:ff:cb:61:4e:e4:67:38: 97:0e:d2:f8:8e:f6:9d:b6:08:2f:1f:3a:41:6d:4a: be:e3:fd:ad:25:ed:22:87:73:ea:49:a1:29:aa:f2: 6c:c0:93:01:2e:99:8d:08:a1:44:a3:62:2d:23:73: fe:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:36:1A:69:9E:7E:B8:8E:E4:CE:17:25:AF:44:01:11:8A:1C:91:A1 X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:40:c9:9b:eb:b9:2f:23:4f:e8:a9:fc:c9:f7:b8:52:ab:3f: 78:9c:3d:4c:a9:e1:f7:d9:e1:27:4c:de:58:7e:18:cb:e6:7f: 64:5a:b0:ab:3f:be:07:9f:c0:b2:45:a1:86:ad:00:e4:ad:7d: 18:97:03:cb:8f:f0:4e:76:18:18:44:23:21:42:48:c2:c0:fb: e6:5c:3b:bd:13:95:fa:69:42:09:2a:c6:00:16:62:30:3e:33: 4a:ac:48:a7:34:96:66:63:1a:ed:fb:7f:a5:11:4d:be:04:47: 39:8f:11:e3:8c:0d:1b:7c:6f:e5:f7:67:30:e3:f9:b3:c3:2a: 59:30:96:21:5c:ec:14:9f:07:ba:89:43:d3:f3:11:ef:8b:eb: 88:f0:49:14:42:f4:98:2c:55:8f:1b:76:77:20:25:72:9f:c3: f2:91:c1:11:b4:21:3e:ce:e0:5a:07:4e:19:e1:66:4f:db:e3: d9:09:02:12:ad:95:f6:eb:2c:1b:69:d5:79:3c:dd:08:a5:ac: ff:40:8d:d4:ff:15:cf:03:37:11:9c:0b:be:0d:31:d8:0a:7b: d9:86:6a:0f:ce:97:97:e4:d8:0a:76:a2:d6:af:1c:00:8e:a1: 87:1d:65:b6:a9:9f:b4:34:bc:83:3d:5a:46:e2:ce:e4:83:6d: 0f:0d:6f:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjUwNTEwMjAzNjM3WhcNMjUwNTE3MjAzNjM3WjAYMRYwFAYD VQQDEw02ODFmYjhkNS1hZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzr6wCrB1FUo23I8V5LjEhTdtMyveF600a58i5YeX5vVGxisY4/+BHybEemQ9 41xrwtdYkkKtVctbuJZy80FZm7WrNkEdrmRLyVFy/Q2HRH+YOeNRDjbREjCSJVhQ s9PT11VTB+VSnjB52FQnQSMN14aLVsfnWB5qRCSF5zyK2Nflf7PU2XBEg/sxLEyC aGiGQ1Z5YejPrjgRJxZmqIPh7sOjfjh/VO0wIAwlFBQAIAhi4DEH9Xph6AzJAp9f J2oq7oH2KSEbDytOBP/LYU7kZziXDtL4jvadtggvHzpBbUq+4/2tJe0ih3PqSaEp qvJswJMBLpmNCKFEo2ItI3P+QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg2Gmme friO5M4XJa9EARGKHJGhMB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM4Qy8yM0U1RDVERURGOTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldp d3pPVWMyTlU2ZWptdks0bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdQMmb67kvI0/oqfzJ97hSqz94nD1MqeH32eEnTN5YfhjL5n9kWrCr P74Hn8CyRaGGrQDkrX0YlwPLj/BOdhgYRCMhQkjCwPvmXDu9E5X6aUIJKsYAFmIw PjNKrEinNJZmYxrt+3+lEU2+BEc5jxHjjA0bfG/l92cw4/mzwypZMJYhXOwUnwe6 iUPT8xHvi+uI8EkUQvSYLFWPG3Z3ICVyn8PykcERtCE+zuBaB04Z4WZP2+PZCQIS rZX26ywbadV5PN0Ipaz/QI3U/xXPAzcRnAu+DTHYCnvZhmoPzpeX5NgKdqLWrxwA jqGHHWW2qZ+0NLyDPVpG4s7kg20PDW9B -----END CERTIFICATE-----Generated at Sun May 11 02:16:31 2025 by rpki-client