$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json) Hash identifier: BLOFbJHQYZtNo5jMKmhMq0JqlNv7obaikPkFopzXYtw= Subject key identifier: 8A:71:BE:59:8C:AD:1A:C0:2F:51:98:BC:D1:4B:E3:89:99:BB:C7:CF Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft Manifest number: E2 Signing time: Fri 25 Apr 2025 04:31:48 +0000 Manifest this update: Fri 25 Apr 2025 04:31:48 +0000 Manifest next update: Fri 02 May 2025 04:31:48 +0000 Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: J6qjaOQbg3ETLuWNYqxBmFuyWq+IPrgtYW+xx5W9OkQ=) 2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: UVNnVE482CTuury1gOUSOm7uwVR741BfWPntovKeG3A=) 3: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: GxG7PljqaIsL4NG1p4pqVTS9JJNKWXLA96c3vNu2FFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71 Validity Not Before: Apr 25 04:31:48 2025 GMT Not After : May 2 04:31:48 2025 GMT Subject: CN=680b1034-4ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:e2:ec:5b:51:77:de:10:f7:04:1e:13:c6: be:89:0a:62:c8:ef:f3:ad:b3:67:79:12:89:2b:bd: ef:84:5c:01:5e:e0:cd:43:36:7f:fd:d7:9b:99:34: 81:2f:5d:8b:71:fb:e5:9b:92:1d:9b:f4:5d:c9:57: 41:f4:4c:97:99:15:8a:60:ee:3e:81:87:72:13:49: 9d:19:65:d3:a9:c0:48:ea:76:ea:a1:95:f6:93:81: d9:9e:37:b3:96:83:d5:7d:24:99:05:2a:2c:66:f2: 76:49:af:b7:82:ae:a1:70:99:88:27:8f:d4:28:44: 63:95:be:fd:d2:a9:a4:ce:54:68:8f:c2:e7:dd:71: 59:80:69:97:b5:5b:4e:c2:4a:26:69:fb:30:f6:b3: 41:ad:7d:25:20:92:87:ec:92:1d:c8:6b:08:ef:ec: bc:a9:08:c0:3d:c7:a1:9f:43:1e:43:d9:ed:9f:aa: 40:00:4c:55:1c:ab:5f:32:7c:c4:2a:87:6b:96:5e: 6a:d8:f5:a4:9a:1a:c9:06:29:fd:66:c5:b7:18:3c: ec:42:c6:77:f7:9f:b3:91:36:e8:4b:7c:38:78:9f: b2:f0:93:39:52:7d:6e:5d:41:63:1c:85:b6:06:9b: fd:84:0d:d7:29:da:68:13:9a:68:3d:ca:1a:58:e0: 04:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:71:BE:59:8C:AD:1A:C0:2F:51:98:BC:D1:4B:E3:89:99:BB:C7:CF X509v3 Authority Key Identifier: keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:01:da:fa:38:7e:c3:64:39:a1:00:47:f3:bc:40:0c:d7:9b: 72:f6:7d:74:03:7d:f9:23:a6:6b:76:dd:9c:57:ad:2c:57:10: c5:dc:84:e6:af:84:60:b8:5a:29:04:24:25:0b:eb:e1:1c:fd: ce:db:f8:21:52:64:63:11:00:3e:50:08:df:fc:25:b5:4b:b4: 37:95:9e:c3:91:fb:d0:98:e2:ca:a0:a1:2a:18:9d:d8:c5:ff: f7:c8:2e:85:53:a3:c4:80:14:50:63:a3:07:ea:0f:2e:98:25: 13:b4:60:f8:1d:72:25:bf:f6:63:85:9e:2a:04:db:9c:1b:ca: 2c:1b:cf:96:f0:b0:ae:18:f6:eb:ac:73:76:a6:66:ba:07:f7: 15:cb:e4:d0:ed:3c:06:6a:15:cf:f6:5b:b6:86:22:44:4d:3a: 40:59:60:42:53:87:7b:55:ab:5a:63:50:0b:e5:d0:87:e4:6f: 00:b6:14:ae:64:7d:e7:ee:92:29:cb:31:dd:6e:f7:92:9a:12: 8b:04:ad:ef:4a:08:13:8c:fd:96:36:56:b5:83:a7:b9:5a:6d: 01:0d:e5:03:6b:b7:13:10:bf:ac:46:d0:ee:87:81:4c:54:07: 51:91:3c:0d:1a:06:6a:88:79:c0:64:7d:d6:2c:11:b1:a7:82: 87:2f:3d:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKDc4MzlBMUZDMDE3NDAyNEJDQkE4NEQwMTJEM0VDNENB NDY3OUFDNzEwHhcNMjUwNDI1MDQzMTQ4WhcNMjUwNTAyMDQzMTQ4WjAYMRYwFAYD VQQDEw02ODBiMTAzNC00ZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFLi7FtRd94Q9wQeE8a+iQpiyO/zrbNneRKJK73vhFwBXuDNQzZ//debmTSB L12Lcfvlm5Idm/RdyVdB9EyXmRWKYO4+gYdyE0mdGWXTqcBI6nbqoZX2k4HZnjez loPVfSSZBSosZvJ2Sa+3gq6hcJmIJ4/UKERjlb790qmkzlRoj8Ln3XFZgGmXtVtO wkomafsw9rNBrX0lIJKH7JIdyGsI7+y8qQjAPcehn0MeQ9ntn6pAAExVHKtfMnzE Kodrll5q2PWkmhrJBin9ZsW3GDzsQsZ395+zkTboS3w4eJ+y8JM5Un1uXUFjHIW2 Bpv9hA3XKdpoE5poPcoaWOAEuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpxvlmM rRrAL1GYvNFL44mZu8fPMB8GA1UdIwQYMBaAFHg5ofwBdAJLy6hNAS0+xMpGeaxx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS84ODJGMjMyMEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFrdkxxRTBCTFQ3RXlrWjVy SEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VEbWhfQUYwQWt2THFFMEJMVDdFeWtaNXJIRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS84ODJGMjMyMEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi9lRG1oX0FGMEFr dkxxRTBCTFQ3RXlrWjVySEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBAdr6OH7DZDmhAEfzvEAM15ty9n10A335I6Zrdt2cV60sVxDF3ITm r4RguFopBCQlC+vhHP3O2/ghUmRjEQA+UAjf/CW1S7Q3lZ7DkfvQmOLKoKEqGJ3Y xf/3yC6FU6PEgBRQY6MH6g8umCUTtGD4HXIlv/ZjhZ4qBNucG8osG8+W8LCuGPbr rHN2pma6B/cVy+TQ7TwGahXP9lu2hiJETTpAWWBCU4d7VataY1AL5dCH5G8AthSu ZH3n7pIpyzHdbveSmhKLBK3vSggTjP2WNla1g6e5Wm0BDeUDa7cTEL+sRtDuh4FM VAdRkTwNGgZqiHnAZH3WLBGxp4KHLz0d -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:27 2025 by rpki-client