$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: 6uMHssSVuMxzj+n3l89BCst2S5F8/Nz4V4xOTGVbIDc= Subject key identifier: 4D:DD:0D:46:41:64:99:C9:A6:94:36:32:DC:08:AD:B7:93:1B:28:17 Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0D30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0D0B Signing time: Thu 24 Apr 2025 18:04:38 +0000 Manifest this update: Thu 24 Apr 2025 18:04:38 +0000 Manifest next update: Thu 01 May 2025 18:04:38 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: /dB95/s8RmwPEcVm/NMFt8QEQDzl0WqBxbeMOcD9DJg=) 2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: bGVPdIvZlYGFNzxT3y5YSA5PehaGI7Seiy7YCZdX9Sg=) 3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: +In7lqAfHKKuHVBt4b296chjrd7RaFgigBnxlxSxJ4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3376 (0xd30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: Apr 24 18:04:38 2025 GMT Not After : May 1 18:04:38 2025 GMT Subject: CN=680a7d36-9ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:b7:92:c0:8c:65:af:8f:bb:15:95:fc:64: 44:97:37:18:af:e3:ac:fa:d5:b7:37:30:3a:aa:2e: a4:ef:a9:dc:59:2c:bf:7a:76:0e:c7:cb:50:72:f5: a2:0b:09:1d:38:85:52:f3:94:62:ef:ea:c1:3a:74: f8:72:54:d7:ff:f7:88:69:d5:f1:3e:33:60:3a:de: 2e:3a:89:86:c0:a3:89:8b:81:8d:60:15:f5:25:c9: 23:9d:33:df:0e:9d:5c:f3:4c:e5:3d:b2:7e:5f:8b: f4:92:28:84:f8:49:0e:76:d2:d1:a3:c1:b8:12:3a: 3f:5f:d8:82:ee:22:df:5e:8f:45:0f:52:da:a8:50: 0b:2f:a2:4a:f3:12:b8:4c:5a:60:3a:5c:85:77:06: 8c:4c:29:c2:0c:ac:bf:a1:27:bf:55:8c:1b:db:dc: 9b:84:2a:3d:8c:82:44:53:63:a2:4e:ba:34:47:bd: 46:4a:6c:f1:b1:1b:c0:bd:04:e9:73:bf:a1:b2:90: 79:7e:a8:f5:84:25:29:9c:8d:52:9b:22:44:92:ca: 0f:1a:c4:ac:3c:fa:b0:c5:9f:f1:dd:58:0c:53:13: c7:ec:4e:cf:30:74:e2:4d:6d:d8:5f:91:1d:0f:01: bf:ea:e3:ef:7e:27:d7:61:e5:d3:d2:af:94:73:fe: c6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DD:0D:46:41:64:99:C9:A6:94:36:32:DC:08:AD:B7:93:1B:28:17 X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:38:31:01:99:18:e9:ef:41:f7:b5:47:96:bb:d9:c5:ed:bf: 26:24:51:02:bd:e3:a9:57:95:fc:6a:3b:27:c8:ba:48:11:cb: 8a:42:55:75:b4:88:a0:24:95:28:98:18:b5:1d:5f:96:39:72: c9:17:d6:87:58:f8:e1:d8:99:40:f2:2b:51:c3:ab:a9:75:7c: ab:db:0c:3d:d4:3b:c3:d0:35:0d:f8:9c:25:07:5d:01:4a:2c: 2b:31:3e:d1:c7:db:6c:6a:42:54:73:cf:52:da:c9:b2:7d:46: da:2a:27:90:bb:a6:cc:af:e5:fb:62:6a:73:e1:9a:99:a3:66: 1d:77:e5:d8:fc:17:44:26:0c:d1:b8:9d:cf:2e:0b:be:df:6d: b7:a8:f6:07:10:ca:b5:af:fe:9b:4c:7f:9f:05:2f:cc:1f:67: 88:a9:51:a3:03:bf:f4:7d:aa:38:8f:7a:5a:01:e3:6a:f9:08: d8:49:57:39:a7:6f:2e:7e:04:1d:26:ee:4a:38:bb:fe:69:08: 5d:1e:78:0b:92:88:77:dd:47:24:f2:cc:69:62:49:33:ce:43: 42:0b:ee:b4:c6:7f:ad:f6:0b:65:c2:c2:5d:b6:e2:e9:2d:70: 06:5b:df:e9:09:4a:8f:91:a9:ab:0b:69:3a:98:a9:b8:99:43: 8e:f1:dd:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjUwNDI0MTgwNDM4WhcNMjUwNTAxMTgwNDM4WjAYMRYwFAYD VQQDEw02ODBhN2QzNi05ZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwG3ksCMZa+PuxWV/GRElzcYr+Os+tW3NzA6qi6k76ncWSy/enYOx8tQcvWi CwkdOIVS85Ri7+rBOnT4clTX//eIadXxPjNgOt4uOomGwKOJi4GNYBX1JckjnTPf Dp1c80zlPbJ+X4v0kiiE+EkOdtLRo8G4Ejo/X9iC7iLfXo9FD1LaqFALL6JK8xK4 TFpgOlyFdwaMTCnCDKy/oSe/VYwb29ybhCo9jIJEU2OiTro0R71GSmzxsRvAvQTp c7+hspB5fqj1hCUpnI1SmyJEksoPGsSsPPqwxZ/x3VgMUxPH7E7PMHTiTW3YX5Ed DwG/6uPvfifXYeXT0q+Uc/7GgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3dDUZB ZJnJppQ2MtwIrbeTGygXMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVODEBmRjp70H3tUeWu9nF7b8mJFECveOpV5X8ajsnyLpIEcuKQlV1 tIigJJUomBi1HV+WOXLJF9aHWPjh2JlA8itRw6updXyr2ww91DvD0DUN+JwlB10B SiwrMT7Rx9tsakJUc89S2smyfUbaKieQu6bMr+X7Ympz4ZqZo2Ydd+XY/BdEJgzR uJ3PLgu+3223qPYHEMq1r/6bTH+fBS/MH2eIqVGjA7/0fao4j3paAeNq+QjYSVc5 p28ufgQdJu5KOLv+aQhdHngLkoh33Uck8sxpYkkzzkNCC+60xn+t9gtlwsJdtuLp LXAGW9/pCUqPkamrC2k6mKm4mUOO8d2P -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:04 2025 by rpki-client