$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft File: EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json) Hash identifier: 5XM0gGUNBd03GJ5YF2Qs6j7ZJINrLOjWhreCRekKpEA= Subject key identifier: 81:BA:1B:C4:D2:0D:5A:F3:F2:95:B9:C4:39:B3:D4:2B:7F:D6:5F:75 Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6 Certificate issuer: /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft Manifest number: 015F Signing time: Thu 01 May 2025 03:03:28 +0000 Manifest this update: Thu 01 May 2025 03:03:27 +0000 Manifest next update: Thu 08 May 2025 03:03:27 +0000 Files and hashes: 1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: G1ttTLW9k5ZOokqktHmSg4grx2mppZ2rg7Yvq2i2uCg=) 2: 32D39C06224511EE81776175C4F9AE02.roa (hash: 1b01HrQ984mzb/02NyzWUFZzcTsdrWy3Ymvx1U4TcOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 03:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6 Validity Not Before: May 1 03:03:27 2025 GMT Not After : May 8 03:03:27 2025 GMT Subject: CN=6812e47f-a3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:80:80:e0:96:56:9c:cc:03:6a:a7:1c:49: 27:f6:c3:bf:16:e0:d9:45:45:5c:3e:ef:c0:89:b5: c1:27:97:82:cf:36:35:61:28:0d:b8:ba:ff:8b:e5: 8c:bc:44:ac:34:fc:9a:14:af:45:f1:5c:7c:39:50: 2d:f2:46:03:8a:20:2e:cc:86:b8:26:06:25:b9:8a: 9b:30:c0:dd:cb:ad:41:47:0c:67:f9:1a:54:b7:bd: 58:59:20:bf:56:22:43:f9:61:5d:41:42:37:98:d2: bb:4b:61:fe:56:48:b9:22:03:65:83:b4:b8:04:dc: 3d:4e:30:7e:a0:ea:89:52:38:28:c4:7e:4d:b0:d5: b6:46:55:f7:63:89:86:d1:ed:ed:20:98:a0:79:bb: 4c:6f:08:5f:cc:3c:82:6c:2e:fe:d4:13:47:de:cd: cb:74:c1:e0:40:bc:e0:6f:63:7c:28:fd:1c:4c:ae: 29:be:68:30:a3:f4:6b:31:19:41:56:5c:64:de:2f: 7f:81:45:20:01:46:0b:57:2d:43:a7:db:73:8e:af: 36:c4:d8:9c:34:e9:5a:e4:3c:97:ec:55:8d:48:59: 1d:10:d5:6b:64:1b:be:2c:49:bb:bf:25:34:3b:5f: e3:3d:d0:31:57:bd:9e:40:a7:5a:8f:85:de:19:e7: d4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BA:1B:C4:D2:0D:5A:F3:F2:95:B9:C4:39:B3:D4:2B:7F:D6:5F:75 X509v3 Authority Key Identifier: keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:00:75:7c:a1:35:8d:72:9d:02:12:1e:a1:65:19:28:65:4a: f8:63:06:24:2e:1a:cd:89:33:38:c7:3e:99:53:15:99:ef:b2: 19:71:79:fc:8d:f9:d4:8d:94:a2:36:31:9a:55:dd:cf:49:e5: 47:6e:c2:31:1a:ff:74:44:ad:dc:c8:a1:f3:1d:ff:b2:83:25: a3:ee:8b:d3:96:59:27:cd:3a:bd:ed:fe:17:14:c3:57:f1:14: a9:1f:7f:ce:15:e9:de:97:f0:cd:ea:07:d5:d8:2e:91:d1:64: dd:03:03:03:2c:ff:ca:06:f1:eb:02:46:c5:65:d0:72:f5:a6: 0b:cc:24:71:88:07:f4:08:2b:f9:26:a5:59:ea:d6:20:e8:07: 61:ff:17:6a:0d:88:81:d2:56:c7:5b:10:0a:24:c2:cb:bc:f4: 36:34:30:d0:74:31:57:5b:b1:41:6b:92:d4:4e:94:82:82:7b: d6:96:e6:dd:12:94:61:42:d6:ec:60:96:bd:c0:5e:9a:ea:d5: 53:9e:43:1c:1e:9b:e0:db:57:ee:7c:4f:f2:0b:f4:f9:65:80: 2b:4c:15:65:23:db:20:47:05:27:c2:9f:89:39:db:58:37:26: fc:f3:6a:49:63:e5:16:0e:8b:f1:b9:6b:1c:07:bf:79:67:84: 09:38:93:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4NDQxMTAvBgNVBAUTKDExNjREQTYwNDM0REVFNUVCMTRCQjUzRDRCNTk0RTY2 NURGMjZGRjYwHhcNMjUwNTAxMDMwMzI3WhcNMjUwNTA4MDMwMzI3WjAYMRYwFAYD VQQDEw02ODEyZTQ3Zi1hM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYqAgOCWVpzMA2qnHEkn9sO/FuDZRUVcPu/AibXBJ5eCzzY1YSgNuLr/i+WM vESsNPyaFK9F8Vx8OVAt8kYDiiAuzIa4JgYluYqbMMDdy61BRwxn+RpUt71YWSC/ ViJD+WFdQUI3mNK7S2H+Vki5IgNlg7S4BNw9TjB+oOqJUjgoxH5NsNW2RlX3Y4mG 0e3tIJigebtMbwhfzDyCbC7+1BNH3s3LdMHgQLzgb2N8KP0cTK4pvmgwo/RrMRlB Vlxk3i9/gUUgAUYLVy1Dp9tzjq82xNicNOla5DyX7FWNSFkdENVrZBu+LEm7vyU0 O1/jPdAxV72eQKdaj4XeGefUaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG6G8TS DVrz8pW5xDmz1Ct/1l91MB8GA1UdIwQYMBaAFBFk2mBDTe5esUu1PUtZTmZd8m/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDg0NC83ODc2OTQ3NDE2 NTIxMUVFOTE0QjdCNTZDNEY5QUUwMi9FV1RhWUVOTjdsNnhTN1U5UzFsT1psM3li X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VXVGFZRU5ON2w2eFM3VTlTMWxPWmwzeWJfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDg0NC83ODc2OTQ3NDE2NTIxMUVFOTE0QjdCNTZDNEY5QUUwMi9FV1RhWUVOTjds NnhTN1U5UzFsT1psM3liX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTAHV8oTWNcp0CEh6hZRkoZUr4YwYkLhrNiTM4xz6ZUxWZ77IZcXn8 jfnUjZSiNjGaVd3PSeVHbsIxGv90RK3cyKHzHf+ygyWj7ovTllknzTq97f4XFMNX 8RSpH3/OFenel/DN6gfV2C6R0WTdAwMDLP/KBvHrAkbFZdBy9aYLzCRxiAf0CCv5 JqVZ6tYg6Adh/xdqDYiB0lbHWxAKJMLLvPQ2NDDQdDFXW7FBa5LUTpSCgnvWlubd EpRhQtbsYJa9wF6a6tVTnkMcHpvg21fufE/yC/T5ZYArTBVlI9sgRwUnwp+JOdtY Nyb882pJY+UWDovxuWscB795Z4QJOJMU -----END CERTIFICATE-----Generated at Fri May 2 03:40:55 2025 by rpki-client