$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft File: EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json) Hash identifier: Mk0CTfdCgc2H/mk5XuZN4vuZ2Tc3YdNEyXyvSrjfDYA= Subject key identifier: 16:43:80:FB:5E:02:9F:B0:CE:27:A9:D0:99:C0:35:2E:98:53:AD:38 Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 Certificate issuer: /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft Manifest number: D0 Signing time: Fri 25 Apr 2025 04:43:42 +0000 Manifest this update: Fri 25 Apr 2025 04:43:42 +0000 Manifest next update: Fri 02 May 2025 04:43:42 +0000 Files and hashes: 1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: C+Ts3K67ZJqLsZ0Ba/CiL/qvyhY76BaeXWgBVuTudAQ=) 2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: 6duqYPlVAYgFYXyMYfQRt0UOQZ9fwNVTaTSO3qscAF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Validity Not Before: Apr 25 04:43:42 2025 GMT Not After : May 2 04:43:42 2025 GMT Subject: CN=680b12fe-5de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:91:b8:5c:2d:c4:99:a8:70:06:82:56:cf: 1b:8c:34:08:be:e7:2a:98:28:64:41:69:26:29:98: a0:f9:00:c2:a3:ab:15:d9:6d:69:44:69:c8:d5:84: 56:57:54:1e:c8:24:3d:73:ac:24:cb:0c:5d:d4:e9: 06:13:c8:7f:6c:0b:89:b7:b0:74:98:47:b9:f6:79: bf:b2:02:1c:3d:24:c2:fb:02:22:33:19:c3:80:83: be:7c:c4:36:76:ad:65:d5:8e:04:bd:f7:2c:70:56: 29:96:17:49:42:38:ec:98:fa:a0:89:65:86:a6:fa: 21:c5:49:3c:91:26:5e:42:5b:d8:bd:70:20:5e:18: 8c:d3:95:a6:1f:37:d2:e2:73:07:a2:9e:b3:28:90: c9:a0:65:1b:5b:02:ff:8a:83:29:9a:47:77:f3:e7: 38:2e:a8:1e:9e:48:26:42:b2:5a:32:7d:2a:e2:72: ec:44:e1:0e:36:6b:43:97:ae:84:92:8a:82:83:e3: 1b:b2:91:90:31:ec:5f:bf:56:f1:01:f5:94:ba:64: 3d:af:41:a8:13:4f:3e:dc:1d:5f:52:fc:b0:56:92: a3:f3:0a:39:a7:1d:60:35:cb:e0:cf:9c:b7:07:79: 73:4e:5d:b2:e0:69:bb:91:41:22:01:09:73:a3:fe: 14:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:43:80:FB:5E:02:9F:B0:CE:27:A9:D0:99:C0:35:2E:98:53:AD:38 X509v3 Authority Key Identifier: keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:72:f1:85:2d:cf:12:59:37:02:51:6c:b6:10:79:ef:92:6a: 6f:76:e4:4f:f1:71:aa:72:45:6a:c3:be:0c:ae:99:43:f3:20: cd:21:43:9e:5d:d9:a9:19:2b:b1:a2:79:65:7a:ac:cb:07:28: e8:41:e2:85:23:13:92:96:c9:64:25:f9:e6:51:4b:58:82:2f: 6a:f2:63:f3:b8:83:01:03:13:c3:ee:cc:5a:bb:05:5a:5d:2b: 68:87:7c:be:7a:40:5a:f4:a5:87:8a:fa:8f:ec:8a:96:93:0c: 38:31:f3:11:d9:31:7b:48:af:38:29:20:7c:4a:8d:ba:2c:fa: 46:f8:61:36:48:35:7c:79:30:87:69:74:06:f4:b3:44:ac:bf: fe:1e:7e:56:11:b5:8f:e3:00:d9:34:0d:a3:58:23:cf:58:cf: dc:02:5f:ea:d1:46:72:bb:c3:dc:1c:c7:cb:84:ed:be:ce:74: 1e:c1:d5:42:58:21:00:c1:d2:c0:a1:ec:e3:cc:4d:39:38:a7: ef:12:43:da:f1:ac:1c:3f:40:d5:9c:31:34:a7:c6:93:fc:24: 34:43:65:2a:39:11:c0:93:c3:e4:22:5f:c0:c4:42:41:24:b7: 57:8c:57:0b:56:3b:31:a5:8f:f5:5a:fd:b8:79:fe:d9:59:48: ce:12:eb:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCREExMTAvBgNVBAUTKDEwN0EzOUMxQ0MwNEYyN0NDNzI2NjNEQkY3QkFFNkQ5 MkE5NTAzODAwHhcNMjUwNDI1MDQ0MzQyWhcNMjUwNTAyMDQ0MzQyWjAYMRYwFAYD VQQDEw02ODBiMTJmZS01ZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4eRuFwtxJmocAaCVs8bjDQIvucqmChkQWkmKZig+QDCo6sV2W1pRGnI1YRW V1QeyCQ9c6wkywxd1OkGE8h/bAuJt7B0mEe59nm/sgIcPSTC+wIiMxnDgIO+fMQ2 dq1l1Y4EvfcscFYplhdJQjjsmPqgiWWGpvohxUk8kSZeQlvYvXAgXhiM05WmHzfS 4nMHop6zKJDJoGUbWwL/ioMpmkd38+c4LqgenkgmQrJaMn0q4nLsROEONmtDl66E koqCg+MbspGQMexfv1bxAfWUumQ9r0GoE08+3B1fUvywVpKj8wo5px1gNcvgz5y3 B3lzTl2y4Gm7kUEiAQlzo/4UoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZDgPte Ap+wziep0JnANS6YU604MB8GA1UdIwQYMBaAFBB6OcHMBPJ8xyZj2/e65tkqlQOA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkJEQS82QUQzNzRBQUU2 NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThuekhKbVBiOTdybTJTcVZB NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIbzV3Y3dFOG56SEptUGI5N3JtMlNxVkE0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkJEQS82QUQzNzRBQUU2NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThu ekhKbVBiOTdybTJTcVZBNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3cvGFLc8SWTcCUWy2EHnvkmpvduRP8XGqckVqw74MrplD8yDNIUOe XdmpGSuxonlleqzLByjoQeKFIxOSlslkJfnmUUtYgi9q8mPzuIMBAxPD7sxauwVa XStoh3y+ekBa9KWHivqP7IqWkww4MfMR2TF7SK84KSB8So26LPpG+GE2SDV8eTCH aXQG9LNErL/+Hn5WEbWP4wDZNA2jWCPPWM/cAl/q0UZyu8PcHMfLhO2+znQewdVC WCEAwdLAoezjzE05OKfvEkPa8awcP0DVnDE0p8aT/CQ0Q2UqORHAk8PkIl/AxEJB JLdXjFcLVjsxpY/1Wv24ef7ZWUjOEuu2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:57:59 2025 by rpki-client