$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: BqqQYZoN2VtT8CQ6Ys9ILgqdNIPxctVbhUGysxlIiUY= Subject key identifier: 0F:CC:C8:23:A5:39:69:D4:A2:43:B9:CF:F8:96:D7:9A:C7:09:C9:EC Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 085A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 0855 Signing time: Thu 24 Apr 2025 20:34:40 +0000 Manifest this update: Thu 24 Apr 2025 20:34:40 +0000 Manifest next update: Thu 01 May 2025 20:34:39 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: HdtIiYqElbFFGaRz73cuvc3XwZtTC+YWKT+5SUm8lXE=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: cbktrrt4RsOUs9FstYccY602a8M1M48rOaYFq7f84Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2138 (0x85a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Apr 24 20:34:40 2025 GMT Not After : May 1 20:34:39 2025 GMT Subject: CN=680aa060-5c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:32:95:cd:10:aa:0f:4b:20:b1:ae:71:f0:27: f7:5e:02:ff:9a:e6:7d:1c:cf:e6:6c:13:56:74:7c: 30:7a:51:c3:c9:b2:9c:e9:22:fc:51:54:43:9d:27: c2:f5:0c:37:4e:78:aa:79:6d:be:d9:15:0a:05:82: 1c:c7:c9:08:39:0d:b0:79:c5:bf:a4:cd:e0:75:75: a6:7d:7a:a7:e1:14:1c:69:af:11:31:0c:d9:82:24: 05:c2:8b:3c:84:51:ab:7e:80:4b:8e:3a:95:e8:f1: ca:e6:fa:65:bd:17:24:58:87:3d:8a:71:8a:73:7c: 55:ab:4c:f1:5b:fe:98:3b:6c:d1:d8:98:3b:56:4a: 12:c6:d8:04:64:24:1a:05:81:94:73:89:c9:3e:4d: ce:63:42:8d:ff:6b:19:ec:1f:b0:1b:98:34:16:40: 01:a4:12:ec:5e:52:c0:9f:98:8e:d2:98:20:b4:b5: ae:30:cc:92:ce:31:a6:0e:af:79:81:23:14:0d:73: 08:0d:89:1a:83:85:5e:58:9e:09:5f:b2:a5:93:e1: 98:dc:a3:ca:a5:62:e0:50:8e:54:27:7e:5b:33:c9: 19:97:d6:63:8c:0f:be:d1:27:ee:6d:35:26:72:9f: da:18:89:1c:80:f2:8c:93:cb:59:f8:32:3e:73:e8: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CC:C8:23:A5:39:69:D4:A2:43:B9:CF:F8:96:D7:9A:C7:09:C9:EC X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:70:2f:2c:fb:81:d2:bb:d8:19:14:a7:1e:2a:a8:03:f7:1f: 53:92:5a:00:b2:d1:82:dd:83:74:03:c3:29:1c:d7:0c:d7:07: b8:80:85:13:f0:fb:2e:26:87:2d:fa:4f:46:9f:94:24:f8:c9: 39:34:a5:07:36:5e:14:19:4d:9f:55:21:5a:a8:b1:8c:4f:7b: d4:5f:7d:49:4e:60:f7:df:db:b6:f1:5b:15:cd:a6:a5:d8:7e: 99:f2:81:39:63:73:88:3f:12:3e:cd:af:a2:99:c8:81:43:e6: 1a:0a:83:e6:a5:3a:27:cb:33:45:2d:ad:28:72:71:a9:e6:25: 1a:5e:b8:ca:c6:e5:8a:9f:d2:e3:66:ce:76:c8:32:72:0a:54: 1b:d4:8b:30:3a:c4:28:e5:cd:98:6f:b9:23:9d:ef:28:12:a9: fc:0a:a8:6f:9e:88:0e:c0:0a:79:c7:68:96:7b:b3:02:7a:07: 3b:e1:cf:ae:dd:73:f7:f3:12:ac:23:b2:a0:e0:9f:c5:a0:83: 11:38:4b:35:9b:db:f8:72:cb:70:70:14:21:a8:a0:92:8e:71: e6:e9:93:e4:16:ff:f0:cb:13:af:fe:68:35:2f:fe:ef:50:65: 0c:af:70:79:0a:92:61:cf:3d:bd:bf:f5:e7:58:90:99:c0:2d: 35:03:41:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjUwNDI0MjAzNDQwWhcNMjUwNTAxMjAzNDM5WjAYMRYwFAYD VQQDEw02ODBhYTA2MC01YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zKVzRCqD0sgsa5x8Cf3XgL/muZ9HM/mbBNWdHwwelHDybKc6SL8UVRDnSfC 9Qw3TniqeW2+2RUKBYIcx8kIOQ2wecW/pM3gdXWmfXqn4RQcaa8RMQzZgiQFwos8 hFGrfoBLjjqV6PHK5vplvRckWIc9inGKc3xVq0zxW/6YO2zR2Jg7VkoSxtgEZCQa BYGUc4nJPk3OY0KN/2sZ7B+wG5g0FkABpBLsXlLAn5iO0pggtLWuMMySzjGmDq95 gSMUDXMIDYkag4VeWJ4JX7Klk+GY3KPKpWLgUI5UJ35bM8kZl9ZjjA++0SfubTUm cp/aGIkcgPKMk8tZ+DI+c+i3MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/MyCOl OWnUokO5z/iW15rHCcnsMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvcC8s+4HSu9gZFKceKqgD9x9TkloAstGC3YN0A8MpHNcM1we4gIUT 8PsuJoct+k9Gn5Qk+Mk5NKUHNl4UGU2fVSFaqLGMT3vUX31JTmD339u28VsVzaal 2H6Z8oE5Y3OIPxI+za+imciBQ+YaCoPmpTonyzNFLa0ocnGp5iUaXrjKxuWKn9Lj Zs52yDJyClQb1IswOsQo5c2Yb7kjne8oEqn8CqhvnogOwAp5x2iWe7MCegc74c+u 3XP38xKsI7Kg4J/FoIMROEs1m9v4cstwcBQhqKCSjnHm6ZPkFv/wyxOv/mg1L/7v UGUMr3B5CpJhzz29v/XnWJCZwC01A0FC -----END CERTIFICATE-----Generated at Sat Apr 26 12:50:23 2025 by rpki-client