$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft File: 7euW8EyNPtzL7rpAxCQpIqgTa1M.mft (raw, json) Hash identifier: ZhHCE3AQabRmi1tMy64vBXtPzBqbAL4w096b36vHAhg= Subject key identifier: 0B:56:40:DF:7F:64:DC:0C:B4:71:D0:E5:FC:4F:58:E3:FA:AB:48:8A Authority key identifier: ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 Certificate issuer: /CN=A917E1FE/serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft Manifest number: 06B9 Signing time: Thu 24 Apr 2025 22:05:00 +0000 Manifest this update: Thu 24 Apr 2025 22:04:59 +0000 Manifest next update: Thu 01 May 2025 22:04:59 +0000 Files and hashes: 1: 7euW8EyNPtzL7rpAxCQpIqgTa1M.crl (hash: O+atDyxBjLWMUlIVCl7IPRDCDzVWwN95cBojiWBjfyE=) 2: 065B926242FA11EDA305BE3EC4F9AE02.roa (hash: 2ATW6BMDSVhZS9dAhj+ZOS0wEMyX3D645t1IHArpIR4=) 3: D10BFC0C1E6E11F08BA4E242C4F9AE02.roa (hash: LimuvB7UEOrVxm5RgQo0+d6HjZXs31DAQZuDxzoJx9E=) 4: 4D9E29A8305311EF9CFFF238C4F9AE02.roa (hash: qb3BJ6VPum0N37Y3mFlLsJHFaKFgEm26RoLZ15Rsubo=) 5: 5B096332BFDF11EC89ECF37BC4F9AE02.roa (hash: KwSrdUrsoFTrnFecXKL/1/hTJOcsdGlQTW0JfcT6/k4=) 6: D1E091BA1E6E11F08BA4E242C4F9AE02.roa (hash: JlLvhEuwwbZYUUmlAi9yWwqsUQ7SwGYGQPDV8sSj7IQ=) 7: EEBCC3028A7711EFBB6F4557C4F9AE02.roa (hash: wnhXyLSk1dHMmO9DzYtPASbLdH1BIyvsIkNZQJaPGG0=) 8: 4EDC52B27B3B11EFAF3B4433C4F9AE02.roa (hash: OfxHrVeBEOJWK/8VYNhuau5CqqrlskUO+d6ZSMFXMxU=) 9: 501915BA8A7811EF90D24F15C4F9AE02.roa (hash: OA2ko99bBHxJOXM8VQ03Oiibc5MqjzJixcg4DbTwTWk=) 10: 78287A4A8F9311EE9CC9E648C4F9AE02.roa (hash: rST+VyBGVPTMT2nSSTzmEE2Q3+Fy5/2QhXmo+jgtE/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FE, serialNumber=EDEB96F04C8D3EDCCBEEBA40C4242922A8136B53 Validity Not Before: Apr 24 22:04:59 2025 GMT Not After : May 1 22:04:59 2025 GMT Subject: CN=680ab58b-eba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:9d:e7:72:87:bb:90:a9:0e:66:54:19:15: 40:eb:72:b3:25:41:1c:53:4e:d5:b4:71:33:94:45: b7:3f:f0:82:61:1f:8b:80:5d:40:9f:ce:1c:b4:9b: 56:6d:d5:ef:61:57:18:54:6c:b9:43:60:bd:de:0e: 05:c6:af:59:c5:1b:ef:70:de:bf:60:29:f3:25:2d: 43:51:eb:cd:02:55:8a:27:93:9e:4d:c9:07:19:28: a6:5b:a7:73:7e:ca:fa:b5:34:73:da:35:80:65:34: 68:32:f5:8e:ab:f2:33:09:0c:1f:05:f2:98:b6:6f: 94:bc:ef:55:58:27:8f:74:6c:0c:12:8d:3f:14:d1: af:26:96:5a:f2:99:cb:b6:43:fd:0e:cb:5e:80:3b: 10:41:39:f2:c9:62:f3:d6:3c:89:27:b3:f4:55:83: 99:f5:5f:3a:34:1b:44:da:ae:42:5b:c8:24:48:89: cb:65:a7:46:2f:13:bd:10:ea:65:76:30:39:09:91: 98:13:02:1d:52:bd:90:56:7e:e3:e1:a9:84:c0:6a: 5c:86:f1:32:3b:4f:0a:e1:65:12:ae:77:4a:6c:b0: 95:ae:9f:eb:65:2c:a2:ac:3c:95:61:3f:87:3a:70: 39:3e:b8:7f:ef:ac:8c:ed:a8:29:63:6f:42:6b:54: 8c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:56:40:DF:7F:64:DC:0C:B4:71:D0:E5:FC:4F:58:E3:FA:AB:48:8A X509v3 Authority Key Identifier: keyid:ED:EB:96:F0:4C:8D:3E:DC:CB:EE:BA:40:C4:24:29:22:A8:13:6B:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7euW8EyNPtzL7rpAxCQpIqgTa1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FE/386235F06F8811EBA86BF64AC4F9AE02/7euW8EyNPtzL7rpAxCQpIqgTa1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:e8:13:65:a7:7f:24:4b:70:bb:35:e5:60:38:80:b3:3e:62: 04:06:df:c0:ac:93:33:e0:09:39:a6:fe:f4:d9:ff:b0:51:06: 40:f0:36:92:d2:39:f6:76:5e:b3:38:10:c3:eb:26:0b:f5:39: 5d:17:c2:09:04:9e:02:e5:01:b0:da:d4:44:4e:86:b2:ac:90: da:f4:74:8a:18:38:c7:64:5f:8e:db:5f:b8:2c:c5:a2:d7:55: c7:4e:00:06:e5:6b:4f:c6:e3:b8:1b:a5:ad:58:27:86:fd:25: 97:9e:c3:2f:f0:26:52:29:c2:07:26:30:16:74:7d:d5:cf:90: e2:fd:06:9c:ec:03:18:06:d1:1d:6f:82:fa:4b:38:43:31:c7: 42:6a:b5:bd:f9:f0:ce:c3:8a:52:fd:c8:7c:eb:d9:f9:dd:43: 26:42:ef:41:3b:3a:92:3b:be:7c:e3:d0:ba:a2:cb:1d:91:c6: 6b:71:4d:7e:97:d2:a6:87:9a:fa:07:10:7f:77:34:e3:99:e3: d3:07:f7:7f:08:39:3d:fd:f8:93:d4:c3:fa:c3:0b:c9:02:9a: 0d:30:7a:d4:65:43:93:07:0a:6b:1a:df:d9:52:9e:06:5d:4b: a9:98:e8:98:44:04:85:3e:d3:e2:89:45:e9:95:14:d4:38:26: b9:d2:74:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UxRkUxMTAvBgNVBAUTKEVERUI5NkYwNEM4RDNFRENDQkVFQkE0MEM0MjQyOTIy QTgxMzZCNTMwHhcNMjUwNDI0MjIwNDU5WhcNMjUwNTAxMjIwNDU5WjAYMRYwFAYD VQQDEw02ODBhYjU4Yi1lYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFad53KHu5CpDmZUGRVA63KzJUEcU07VtHEzlEW3P/CCYR+LgF1An84ctJtW bdXvYVcYVGy5Q2C93g4Fxq9ZxRvvcN6/YCnzJS1DUevNAlWKJ5OeTckHGSimW6dz fsr6tTRz2jWAZTRoMvWOq/IzCQwfBfKYtm+UvO9VWCePdGwMEo0/FNGvJpZa8pnL tkP9DstegDsQQTnyyWLz1jyJJ7P0VYOZ9V86NBtE2q5CW8gkSInLZadGLxO9EOpl djA5CZGYEwIdUr2QVn7j4amEwGpchvEyO08K4WUSrndKbLCVrp/rZSyirDyVYT+H OnA5Prh/76yM7agpY29Ca1SMCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtWQN9/ ZNwMtHHQ5fxPWOP6q0iKMB8GA1UdIwQYMBaAFO3rlvBMjT7cy+66QMQkKSKoE2tT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGRS8zODYyMzVGMDZG ODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0ekw3cnBBeENRcElxZ1Rh MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdldVc4RXlOUHR6TDdycEF4Q1FwSXFnVGExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTFGRS8zODYyMzVGMDZGODgxMUVCQTg2QkY2NEFDNEY5QUUwMi83ZXVXOEV5TlB0 ekw3cnBBeENRcElxZ1RhMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ6BNlp38kS3C7NeVgOICzPmIEBt/ArJMz4Ak5pv702f+wUQZA8DaS 0jn2dl6zOBDD6yYL9TldF8IJBJ4C5QGw2tREToayrJDa9HSKGDjHZF+O21+4LMWi 11XHTgAG5WtPxuO4G6WtWCeG/SWXnsMv8CZSKcIHJjAWdH3Vz5Di/Qac7AMYBtEd b4L6SzhDMcdCarW9+fDOw4pS/ch869n53UMmQu9BOzqSO75849C6ossdkcZrcU1+ l9Kmh5r6BxB/dzTjmePTB/d/CDk9/fiT1MP6wwvJApoNMHrUZUOTBwprGt/ZUp4G XUupmOiYRASFPtPiiUXplRTUOCa50nRu -----END CERTIFICATE-----Generated at Sat Apr 26 05:30:09 2025 by rpki-client