$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json) Hash identifier: eP1w0knEhEzbiUkmcWO4X6ZLsFNhxXOjd7eTUsLglAA= Subject key identifier: B7:D1:9C:D8:05:DB:B4:5A:1B:DD:66:8E:D8:3D:B5:85:2E:8D:73:9A Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft Manifest number: CF Signing time: Fri 25 Apr 2025 04:45:49 +0000 Manifest this update: Fri 25 Apr 2025 04:45:48 +0000 Manifest next update: Fri 02 May 2025 04:45:48 +0000 Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: fHkYpfG/Y9bST8LJUj2ybFytUwAwX0bl1SiMc9+86BM=) 2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: nAAaBPNOT83reooBTbRysc5FUHQ0lj/e8r5J8CDIx/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Validity Not Before: Apr 25 04:45:48 2025 GMT Not After : May 2 04:45:48 2025 GMT Subject: CN=680b137d-59ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bc:4d:23:db:e2:53:4c:cc:6f:43:8d:28:42: 8f:e0:a1:42:cb:63:0a:0e:fe:09:00:bd:11:f3:78: b6:63:64:b2:70:41:6a:a7:9a:db:94:bb:ca:12:db: 21:fa:8c:74:15:ee:f8:82:15:84:93:7f:3f:88:ad: ee:1f:5d:1f:12:57:01:25:ce:1a:4f:b0:76:1d:4d: cf:0c:72:fb:81:68:08:a0:8c:98:3f:7a:56:85:04: f1:1d:0d:a0:11:1b:95:70:67:9d:55:29:19:29:89: e1:68:00:10:4a:69:b8:74:10:05:12:ae:1c:95:00: ee:9e:99:8c:5a:ee:46:8d:27:ea:06:53:65:9b:24: 56:33:8b:ba:50:48:90:30:9a:56:c7:13:98:f9:97: 83:da:64:8e:30:ba:70:4a:ec:5d:71:56:5d:73:b6: cc:36:31:2c:5b:a5:96:2b:75:1c:67:b5:05:5b:8d: 72:b9:43:d3:f2:05:57:73:11:ac:33:7b:43:de:18: f8:84:b9:55:7f:b8:35:c3:54:01:75:be:21:db:e2: 9a:8f:96:63:35:90:0f:4d:18:e8:15:4b:06:93:ab: 59:8c:46:a3:e3:55:0b:1c:64:16:0e:55:7c:e0:44: 0f:b6:c8:92:f6:57:b9:30:5b:32:b7:c6:09:3e:cb: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D1:9C:D8:05:DB:B4:5A:1B:DD:66:8E:D8:3D:B5:85:2E:8D:73:9A X509v3 Authority Key Identifier: keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:24:51:b8:30:27:c8:2b:2e:64:8b:71:51:7a:2b:4b:06:67: 0d:2b:63:a3:4e:f4:c2:69:0b:16:c9:21:67:21:22:dc:6f:5d: d5:22:a2:c8:35:4c:a9:7a:77:06:96:bd:0d:90:72:16:c4:0f: ea:f6:d3:37:09:8e:00:21:22:f0:04:5f:20:fe:e6:c4:5a:ba: d3:a6:50:2d:27:46:56:5a:da:57:42:04:bb:62:1d:2d:46:15: 1c:b4:a9:ac:77:42:e4:4c:10:0c:e4:fc:a4:eb:e6:0f:36:0e: 3b:d5:eb:d3:c5:d4:32:a0:83:11:ab:d2:46:5a:ca:ef:39:b5: 2a:0e:15:20:eb:ea:63:9e:95:8a:5e:7e:a0:bb:2a:ef:52:ec: 2e:84:f6:1e:95:61:2c:47:92:2e:f2:62:28:9e:ed:29:87:fc: d3:24:a7:87:fd:95:cf:02:9d:d9:e2:89:10:52:4e:a6:2e:59: f2:b5:5e:0d:bb:3f:ba:55:c3:fd:5e:6f:65:7e:db:3f:3d:65: b9:07:6c:e4:fa:29:d7:3c:b3:87:92:53:f9:1a:1b:e1:1b:3d: 7c:10:bf:12:0c:fa:1d:41:63:46:9a:be:ab:df:2b:b3:7f:3e: 21:b0:4f:98:ed:42:17:06:6e:a2:ff:b4:2b:93:c4:bd:b8:7e: 22:97:f5:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD MjBBRTUzODYwHhcNMjUwNDI1MDQ0NTQ4WhcNMjUwNTAyMDQ0NTQ4WjAYMRYwFAYD VQQDEw02ODBiMTM3ZC01OWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubxNI9viU0zMb0ONKEKP4KFCy2MKDv4JAL0R83i2Y2SycEFqp5rblLvKEtsh +ox0Fe74ghWEk38/iK3uH10fElcBJc4aT7B2HU3PDHL7gWgIoIyYP3pWhQTxHQ2g ERuVcGedVSkZKYnhaAAQSmm4dBAFEq4clQDunpmMWu5GjSfqBlNlmyRWM4u6UEiQ MJpWxxOY+ZeD2mSOMLpwSuxdcVZdc7bMNjEsW6WWK3UcZ7UFW41yuUPT8gVXcxGs M3tD3hj4hLlVf7g1w1QBdb4h2+Kaj5ZjNZAPTRjoFUsGk6tZjEaj41ULHGQWDlV8 4EQPtsiS9le5MFsyt8YJPssA2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfRnNgF 27RaG91mjtg9tYUujXOaMB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4 RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN U1R5S19INkcxbW5DQ3VVNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGJFG4MCfIKy5ki3FReitLBmcNK2OjTvTCaQsWySFnISLcb13VIqLI NUypencGlr0NkHIWxA/q9tM3CY4AISLwBF8g/ubEWrrTplAtJ0ZWWtpXQgS7Yh0t RhUctKmsd0LkTBAM5Pyk6+YPNg471evTxdQyoIMRq9JGWsrvObUqDhUg6+pjnpWK Xn6guyrvUuwuhPYelWEsR5Iu8mIonu0ph/zTJKeH/ZXPAp3Z4okQUk6mLlnytV4N uz+6VcP9Xm9lfts/PWW5B2zk+inXPLOHklP5GhvhGz18EL8SDPodQWNGmr6r3yuz fz4hsE+Y7UIXBm6i/7Qrk8S9uH4il/Vx -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:08 2025 by rpki-client