$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft File: eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json) Hash identifier: 8WphgqXtYHjpBSfp5wVN8d6CqaX5JW1uyP06hcIDzoY= Subject key identifier: D8:71:57:CF:F8:2D:C1:B8:C5:4A:6F:7C:B8:DD:D8:4A:54:CD:FA:0F Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A Certificate issuer: /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft Manifest number: 0765 Signing time: Thu 24 Apr 2025 21:25:41 +0000 Manifest this update: Thu 24 Apr 2025 21:25:41 +0000 Manifest next update: Thu 01 May 2025 21:25:41 +0000 Files and hashes: 1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: WaVMv/3JEZKWlw1UuK8DZwvaVbwvCVvZoDGsIAqvFKg=) 2: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: 5GuYDpWjP0H4MJ3DxdkwBn6X7wj5+kTU7yH+e2yV0zQ=) 3: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: 2iVUtqGygZmmPFfaI6hSltedKhRAuZW7CDGbz6IyeRI=) 4: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: wlyD169BX96xOiFFRFEDGAmZtHB8cN4i1GCqPo9RNQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A Validity Not Before: Apr 24 21:25:41 2025 GMT Not After : May 1 21:25:41 2025 GMT Subject: CN=680aac55-a7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5e:ba:2b:84:f7:a3:61:b4:d5:a1:96:54:da: 5a:16:58:56:06:85:02:d9:01:67:07:12:36:db:aa: 27:e8:c6:74:ff:dc:56:71:96:e7:ee:bd:7c:04:ed: af:39:1c:77:2a:f9:15:1a:f0:51:c3:f7:11:6e:1f: 79:68:cd:61:19:d9:4a:b6:41:6c:44:19:35:48:49: 89:15:28:f7:ee:c6:51:0b:f2:5b:ed:72:00:bc:36: ea:f5:e5:cb:4c:17:f4:3e:72:6d:65:52:dc:2b:9c: fa:61:07:36:7a:66:c3:71:32:c2:ed:91:d8:da:45: b1:64:51:8f:da:c2:ff:ca:40:85:39:5d:90:0f:52: ca:aa:da:5f:52:f3:08:a8:4e:12:0f:af:d4:bf:e1: 3c:c2:e5:4b:bd:7b:05:bf:7a:ad:ef:a5:61:32:2b: c1:85:8d:ed:c2:04:8d:8d:76:5a:b6:ab:80:98:54: 9a:71:5d:0d:74:3b:d9:5a:2c:91:8b:9a:2c:ea:f5: 2d:6b:dc:26:17:de:5d:1e:92:88:16:cd:eb:b1:f3: df:f8:2b:ef:be:18:72:51:65:b0:60:2d:55:44:08: e1:fb:92:f1:fb:05:45:d1:09:77:d5:3e:0e:a6:4c: 0c:41:39:0a:2c:b3:aa:be:1e:ab:9f:74:bd:e2:b4: b0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:71:57:CF:F8:2D:C1:B8:C5:4A:6F:7C:B8:DD:D8:4A:54:CD:FA:0F X509v3 Authority Key Identifier: keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:d6:da:f2:31:d0:97:0e:2b:9d:89:27:18:d2:a8:c3:16:ca: 9c:84:92:26:4b:74:cb:15:72:ff:13:8c:d1:7a:58:4e:31:e9: 04:bb:2a:f2:c4:e6:4c:03:9d:59:01:01:48:9e:bb:fc:13:30: 1e:a9:c4:26:3d:4a:38:d0:4f:fe:59:b2:2a:c5:8d:e8:79:e9: 41:27:1a:3b:78:13:82:91:16:88:fc:06:96:9e:3b:08:96:82: af:b8:16:fa:3d:12:bf:50:bf:67:8b:ff:2d:f5:f9:19:7f:30: 4e:48:41:6d:fe:20:db:b4:a4:60:e7:b4:93:9c:0d:51:a3:00: cf:7e:df:fa:95:39:d1:b7:c7:46:10:27:40:0e:42:20:06:2d: d9:71:fa:12:5a:e4:fb:a9:b5:e1:5f:8a:45:9f:40:13:8d:5a: 3d:fe:d7:16:4a:57:d1:2c:97:13:dd:72:ab:a9:27:80:62:a2: b4:69:0b:7b:5a:32:b7:65:80:b2:6f:e7:49:02:8a:08:2b:d8: 1d:cb:10:e3:30:f3:8d:c6:65:9a:8d:54:60:a5:90:b9:95:a0: 6c:19:0b:35:1e:7b:8e:2d:dc:19:3d:b1:1f:99:5a:81:bc:54: e1:37:a0:f8:37:fb:9b:a7:9d:ec:ac:4d:36:e4:3a:9d:2b:7a: 0d:4a:ef:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NUExMTAvBgNVBAUTKDc4NUUwQkZGMDdCOTAzN0M2MDMzNEIyREYzMzY5Mjgx QTREQzNGNUEwHhcNMjUwNDI0MjEyNTQxWhcNMjUwNTAxMjEyNTQxWjAYMRYwFAYD VQQDEw02ODBhYWM1NS1hN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmV66K4T3o2G01aGWVNpaFlhWBoUC2QFnBxI226on6MZ0/9xWcZbn7r18BO2v ORx3KvkVGvBRw/cRbh95aM1hGdlKtkFsRBk1SEmJFSj37sZRC/Jb7XIAvDbq9eXL TBf0PnJtZVLcK5z6YQc2embDcTLC7ZHY2kWxZFGP2sL/ykCFOV2QD1LKqtpfUvMI qE4SD6/Uv+E8wuVLvXsFv3qt76VhMivBhY3twgSNjXZatquAmFSacV0NdDvZWiyR i5os6vUta9wmF95dHpKIFs3rsfPf+CvvvhhyUWWwYC1VRAjh+5Lx+wVF0Ql31T4O pkwMQTkKLLOqvh6rn3S94rSwMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhxV8/4 LcG4xUpvfLjd2EpUzfoPMB8GA1UdIwQYMBaAFHheC/8HuQN8YDNLLfM2koGk3D9a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1QS84ODk0QTcwQTFD NTUxMUVCQUI4OEMxODJDNEY5QUUwMi9lRjRMX3dlNUEzeGdNMHN0OHphU2dhVGNQ MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGNExfd2U1QTN4Z00wc3Q4emFTZ2FUY1Axby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1QS84ODk0QTcwQTFDNTUxMUVCQUI4OEMxODJDNEY5QUUwMi9lRjRMX3dlNUEz eGdNMHN0OHphU2dhVGNQMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX1tryMdCXDiudiScY0qjDFsqchJImS3TLFXL/E4zRelhOMekEuyry xOZMA51ZAQFInrv8EzAeqcQmPUo40E/+WbIqxY3oeelBJxo7eBOCkRaI/AaWnjsI loKvuBb6PRK/UL9ni/8t9fkZfzBOSEFt/iDbtKRg57STnA1RowDPft/6lTnRt8dG ECdADkIgBi3ZcfoSWuT7qbXhX4pFn0ATjVo9/tcWSlfRLJcT3XKrqSeAYqK0aQt7 WjK3ZYCyb+dJAooIK9gdyxDjMPONxmWajVRgpZC5laBsGQs1HnuOLdwZPbEfmVqB vFThN6D4N/ubp53srE025DqdK3oNSu9a -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:35 2025 by rpki-client