$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft File: eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json) Hash identifier: PTWsrEdx+KQ8YBAhvSi4WHX5M441UL35O4T8bhsno44= Subject key identifier: 53:68:EC:26:E9:15:5C:7A:84:3A:80:FC:68:EC:C8:4D:6E:43:07:8B Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B Certificate issuer: /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft Manifest number: 71 Signing time: Sat 21 Jun 2025 05:56:02 +0000 Manifest this update: Sat 21 Jun 2025 05:56:01 +0000 Manifest next update: Sat 28 Jun 2025 05:56:01 +0000 Files and hashes: 1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: QANsEvso/tVaf4XlHd24CKUjPTmBe3sA3smsAqQJKIM=) 2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: Gw+0qN7nHcP5/UJQ2iKvlQ13obyIJUpO0k6xHzRKL2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B Validity Not Before: Jun 21 05:56:01 2025 GMT Not After : Jun 28 05:56:01 2025 GMT Subject: CN=68564971-83df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d6:aa:86:97:9a:12:a4:f1:48:74:5b:2a:7d: 5e:be:94:cc:f4:86:6f:e4:87:59:5c:0d:69:69:f2: e6:d9:09:ec:16:fa:33:13:28:ed:67:15:f7:33:ce: 40:4a:c1:79:4e:54:5f:3b:0a:07:c4:f0:da:0e:ba: b6:56:9b:8c:de:a8:6e:23:17:f8:99:72:06:ad:f4: 13:fa:da:6f:6e:c9:7a:a0:23:48:ed:d2:48:e5:17: 63:ee:ed:d9:91:9b:0a:ec:76:21:6c:fc:d8:15:88: 56:3a:6f:a5:68:2b:96:20:bc:8b:87:e3:c4:22:77: 30:ef:b3:aa:d2:54:08:7e:ed:12:0d:0b:fc:d0:1e: 67:80:6a:b3:a9:4b:af:d5:09:4c:0d:f9:34:90:b0: 4a:a5:ed:ef:27:2c:67:1e:77:05:90:3b:3a:fd:61: b9:8d:76:50:c1:5d:78:a6:c4:70:eb:a7:dc:1f:2b: cb:ab:47:dd:af:ef:03:3d:df:68:a9:81:66:bf:94: 4e:21:27:4e:95:6e:e0:9d:ff:bb:86:37:f2:f9:27: b4:e6:51:e9:c9:f7:a6:cd:f0:40:d5:29:04:4c:f2: 48:d0:6f:18:d0:1d:f5:b4:a6:9e:9f:0d:7e:1a:e4: 9d:64:de:7a:7f:d0:9d:4c:2b:81:46:a7:b2:f8:04: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:68:EC:26:E9:15:5C:7A:84:3A:80:FC:68:EC:C8:4D:6E:43:07:8B X509v3 Authority Key Identifier: keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:cc:57:ff:f7:90:cf:e4:0c:87:d7:3f:db:e9:38:4a:0b:f6: b1:4b:db:e6:74:71:bd:69:a7:de:b5:ec:55:61:b0:9c:90:71: 24:8a:6e:49:30:49:77:d8:51:92:22:a6:35:49:b2:42:67:01: b3:2a:ca:90:8b:0a:9e:c7:95:42:7a:84:78:19:e1:3f:e1:a2: 61:7e:16:d2:be:ac:eb:00:40:ea:04:bd:24:3f:79:36:eb:df: cd:ef:50:9a:3a:81:d6:d6:10:d0:27:9f:5c:e7:de:d1:1d:6e: 30:1e:7e:eb:bc:71:b9:6a:df:f2:d4:e0:fc:4f:4f:c5:0f:0b: 15:69:6f:30:58:f3:3d:22:6d:b0:79:cd:bf:f6:63:5f:ee:d0: 6d:e0:b1:e7:88:c6:ba:51:4c:f4:cc:c8:f7:97:7b:fd:df:06: 15:eb:2b:96:4f:26:8b:58:9f:89:4d:5a:87:12:da:ee:6e:1e: 4d:86:d0:ed:55:4b:74:4d:9e:82:5d:7a:e0:dd:8d:bb:ab:fb: 44:6a:91:63:5b:b9:30:40:59:69:80:22:68:4f:19:0c:09:3d: f3:cd:e4:e6:68:dd:e7:30:64:13:89:08:a6:79:9f:81:06:12: eb:86:2d:99:c6:ec:1b:0d:e7:30:41:2b:59:44:40:64:f1:60: 28:91:ae:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTkyQzExMC8GA1UEBRMoNzkyNjgzODA2QzhCRTNBQzEzNjE0RDM3NUU5MDE5Mjc0 MDk5QkM3QjAeFw0yNTA2MjEwNTU2MDFaFw0yNTA2MjgwNTU2MDFaMBgxFjAUBgNV BAMTDTY4NTY0OTcxLTgzZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC51qqGl5oSpPFIdFsqfV6+lMz0hm/kh1lcDWlp8ubZCewW+jMTKO1nFfczzkBK wXlOVF87CgfE8NoOurZWm4zeqG4jF/iZcgat9BP62m9uyXqgI0jt0kjlF2Pu7dmR mwrsdiFs/NgViFY6b6VoK5YgvIuH48QidzDvs6rSVAh+7RINC/zQHmeAarOpS6/V CUwN+TSQsEql7e8nLGcedwWQOzr9YbmNdlDBXXimxHDrp9wfK8urR92v7wM932ip gWa/lE4hJ06VbuCd/7uGN/L5J7TmUenJ96bN8EDVKQRM8kjQbxjQHfW0pp6fDX4a 5J1k3np/0J1MK4FGp7L4BL0VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU2jsJukV XHqEOoD8aOzITW5DB4swHwYDVR0jBBgwFoAUeSaDgGyL46wTYU03XpAZJ0CZvHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBOTJDL0E1MjgxNEQyQTYw RTExRUZBNjhBNkMxQkM0RjlBRTAyL2VTYURnR3lMNDZ3VFlVMDNYcEFaSjBDWnZI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVNhRGdHeUw0NndUWVUwM1hwQVpKMENadkhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB OTJDL0E1MjgxNEQyQTYwRTExRUZBNjhBNkMxQkM0RjlBRTAyL2VTYURnR3lMNDZ3 VFlVMDNYcEFaSjBDWnZIcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE7MV//3kM/kDIfXP9vpOEoL9rFL2+Z0cb1pp9617FVhsJyQcSSKbkkw SXfYUZIipjVJskJnAbMqypCLCp7HlUJ6hHgZ4T/homF+FtK+rOsAQOoEvSQ/eTbr 383vUJo6gdbWENAnn1zn3tEdbjAefuu8cblq3/LU4PxPT8UPCxVpbzBY8z0ibbB5 zb/2Y1/u0G3gseeIxrpRTPTMyPeXe/3fBhXrK5ZPJotYn4lNWocS2u5uHk2G0O1V S3RNnoJdeuDdjbur+0RqkWNbuTBAWWmAImhPGQwJPfPN5OZo3ecwZBOJCKZ5n4EG EuuGLZnG7BsN5zBBK1lEQGTxYCiRruc= -----END CERTIFICATE-----Generated at Sat Jun 21 10:16:29 2025 by rpki-client