$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft File: eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json) Hash identifier: z4Qd147UJwRSQ4ZLmNyBUl3QF3RB4bivfqpHwIJg0Bo= Subject key identifier: E3:D3:39:2D:B9:08:33:94:52:59:4C:7E:14:8B:F8:B8:8C:12:E0:26 Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B Certificate issuer: /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft Manifest number: 55 Signing time: Fri 25 Apr 2025 06:13:53 +0000 Manifest this update: Fri 25 Apr 2025 06:13:53 +0000 Manifest next update: Fri 02 May 2025 06:13:53 +0000 Files and hashes: 1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: zyeD8hRcgcF45vExIH5UKZK9Ay2lE7TKQmOoQboneoY=) 2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: Gw+0qN7nHcP5/UJQ2iKvlQ13obyIJUpO0k6xHzRKL2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Validity Not Before: Apr 25 06:13:53 2025 GMT Not After : May 2 06:13:53 2025 GMT Subject: CN=680b2821-f8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:be:5c:de:2b:c2:7b:00:df:04:02:d7:e0: 68:0f:90:01:cc:a5:9a:fc:52:85:42:f8:2d:bd:32: ef:ed:3c:f2:8f:27:b1:96:d6:3a:85:58:27:87:86: 73:af:2a:9c:da:45:01:6c:40:cc:41:4a:55:81:60: 5c:32:b8:1e:88:0c:27:ee:88:d5:3b:f7:b9:0f:49: 86:16:17:c2:d5:d2:81:ec:c6:e0:21:ca:af:41:36: 0d:71:af:32:8d:e7:28:f3:ca:9e:7b:38:9f:5a:07: f5:0e:b6:b8:54:af:8d:b8:2d:b7:c5:d7:30:5f:4f: 41:b7:94:7b:04:a0:ab:08:a8:ee:01:c0:51:d4:7c: fd:a7:9a:e8:f7:f1:be:8f:08:98:10:60:04:24:e3: 26:53:68:3b:f2:a1:cf:46:8f:a3:30:3d:ba:11:8b: 31:5e:43:bf:f0:02:1f:2f:d8:8b:00:92:d6:4e:01: b0:67:9e:f0:dc:29:a3:9e:b8:fc:02:78:41:d2:cd: 58:f2:50:2f:03:c0:68:12:e7:51:fc:8e:6d:eb:b5: 2c:79:ae:7f:05:55:38:c7:20:0e:4b:d3:cd:c3:bc: 12:34:fd:88:c3:b1:71:ed:a4:25:1b:0b:27:4a:16: d9:78:c3:07:9d:de:5e:c1:3e:da:b0:7e:ba:d6:85: 5e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D3:39:2D:B9:08:33:94:52:59:4C:7E:14:8B:F8:B8:8C:12:E0:26 X509v3 Authority Key Identifier: keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:2a:69:50:b0:3b:ec:94:86:7e:7f:2e:a3:67:24:39:14:03: 48:0e:3a:a8:fa:52:4f:a0:24:a7:ff:6a:9d:82:83:70:32:02: 96:8f:b5:42:89:be:1e:cd:4c:c0:f4:9b:5e:d5:fc:3c:0e:0c: 84:0f:4f:8b:f4:8e:ee:0f:1d:22:f0:3e:a5:26:1a:bd:39:14: 1d:44:ba:55:35:17:18:a3:07:1f:68:73:e3:0a:5b:69:8a:2d: ce:b4:5e:de:a8:3d:3d:f6:d3:0d:91:ec:81:f9:2b:27:80:8f: c0:3e:22:c7:0b:5c:17:23:32:06:ff:04:42:2f:0d:97:d5:58: f0:77:5e:7f:1e:b7:d3:f5:f0:1e:ee:29:23:5b:84:b4:ec:df: c8:24:6a:a6:8f:d0:c5:7f:05:3d:6b:ca:1d:2b:79:f7:15:d5: 19:e4:cc:08:dc:96:2f:e0:67:ce:32:c0:52:e8:be:41:5a:f7: 38:66:f6:6a:fb:33:9d:ce:63:41:a6:1a:b8:d9:35:3c:5f:ea: 93:85:12:59:83:70:01:5d:32:38:d6:86:00:43:b2:63:99:c0: cb:a7:66:5d:c8:32:44:4d:fa:05:7c:fd:f7:ed:09:20:e9:90: 35:fd:cc:ea:d1:7d:4a:0d:5f:0a:43:27:f6:8c:e4:94:8c:ca: 98:8e:ef:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTkyQzExMC8GA1UEBRMoNzkyNjgzODA2QzhCRTNBQzEzNjE0RDM3NUU5MDE5Mjc0 MDk5QkM3QjAeFw0yNTA0MjUwNjEzNTNaFw0yNTA1MDIwNjEzNTNaMBgxFjAUBgNV BAMTDTY4MGIyODIxLWY4YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5pL5c3ivCewDfBALX4GgPkAHMpZr8UoVC+C29Mu/tPPKPJ7GW1jqFWCeHhnOv KpzaRQFsQMxBSlWBYFwyuB6IDCfuiNU797kPSYYWF8LV0oHsxuAhyq9BNg1xrzKN 5yjzyp57OJ9aB/UOtrhUr424LbfF1zBfT0G3lHsEoKsIqO4BwFHUfP2nmuj38b6P CJgQYAQk4yZTaDvyoc9Gj6MwPboRizFeQ7/wAh8v2IsAktZOAbBnnvDcKaOeuPwC eEHSzVjyUC8DwGgS51H8jm3rtSx5rn8FVTjHIA5L083DvBI0/YjDsXHtpCUbCydK Ftl4wwed3l7BPtqwfrrWhV5tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU49M5LbkI M5RSWUx+FIv4uIwS4CYwHwYDVR0jBBgwFoAUeSaDgGyL46wTYU03XpAZJ0CZvHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBOTJDL0E1MjgxNEQyQTYw RTExRUZBNjhBNkMxQkM0RjlBRTAyL2VTYURnR3lMNDZ3VFlVMDNYcEFaSjBDWnZI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVNhRGdHeUw0NndUWVUwM1hwQVpKMENadkhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB OTJDL0E1MjgxNEQyQTYwRTExRUZBNjhBNkMxQkM0RjlBRTAyL2VTYURnR3lMNDZ3 VFlVMDNYcEFaSjBDWnZIcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACEqaVCwO+yUhn5/LqNnJDkUA0gOOqj6Uk+gJKf/ap2Cg3AyApaPtUKJ vh7NTMD0m17V/DwODIQPT4v0ju4PHSLwPqUmGr05FB1EulU1FxijBx9oc+MKW2mK Lc60Xt6oPT320w2R7IH5KyeAj8A+IscLXBcjMgb/BEIvDZfVWPB3Xn8et9P18B7u KSNbhLTs38gkaqaP0MV/BT1ryh0refcV1RnkzAjcli/gZ84ywFLovkFa9zhm9mr7 M53OY0GmGrjZNTxf6pOFElmDcAFdMjjWhgBDsmOZwMunZl3IMkRN+gV8/fftCSDp kDX9zOrRfUoNXwpDJ/aM5JSMypiO70M= -----END CERTIFICATE-----Generated at Sat Apr 26 15:23:46 2025 by rpki-client