$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft File: xE8qyrKneZlDFaqTsyPam0dce5o.mft (raw, json) Hash identifier: 9Hc0D71DI16ebLcXJ6UpslpvLTGgjnm7BD22llMbA1A= Subject key identifier: F3:BE:0F:F2:34:0A:29:B6:C5:85:C8:38:82:B0:5C:A0:2C:52:67:57 Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A Certificate issuer: /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft Manifest number: 037E Signing time: Fri 25 Apr 2025 00:43:00 +0000 Manifest this update: Fri 25 Apr 2025 00:43:00 +0000 Manifest next update: Fri 02 May 2025 00:43:00 +0000 Files and hashes: 1: xE8qyrKneZlDFaqTsyPam0dce5o.crl (hash: DZdYRUSCZGDxuFU6ANGKGIrDmRlwL2DY2BdN7ifNky4=) 2: 9ED423000B1211F08F4E1E7EC4F9AE02.roa (hash: 28RTGOVxaiYLARwHZ0Std1aK28GFPOrIsqNmVkJG6o8=) 3: 25985D28EE1411EFB4908431C4F9AE02.roa (hash: GsEWcWV51pwlPsxUODRoLwLibcUDu1FJ1giEHi8eZSw=) 4: 566BECC8EE1711EFB60E2F5CC4F9AE02.roa (hash: U6f6OEgNO9G7tnJE8PE9Soyl3bJOGu5+tt1ALRGB7dY=) 5: 4643A5E4703011EFA1A7CB20C4F9AE02.roa (hash: yVBPXlVIAQw/ZmFOINJVHLvyhTZymOOpSW7Tn3kbZWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A Validity Not Before: Apr 25 00:43:00 2025 GMT Not After : May 2 00:43:00 2025 GMT Subject: CN=680ada94-76d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:23:64:e3:70:27:f4:6c:ca:6c:64:70:a9: b9:14:ec:7d:65:90:8f:7d:4e:5d:c9:68:f4:2e:ed: a4:2d:83:b5:4b:8e:08:a3:d5:fc:c7:06:c2:8e:1b: ee:6d:12:1e:ed:1d:8e:d6:50:66:8e:a9:a0:a3:d7: 2a:37:8f:28:76:bf:b7:58:d8:ae:5d:a8:9d:13:9e: 25:6c:d3:7e:f3:be:65:26:cc:e9:6e:88:bf:c1:34: 37:d8:45:68:3c:ef:08:53:df:cb:71:7a:08:25:04: 18:0d:9e:6c:6c:fc:e8:46:87:60:e9:ee:b8:f0:fc: 5c:29:e9:2e:eb:78:e8:7c:1f:73:c3:d2:f4:9f:15: 3e:c4:7b:9c:6f:80:a3:6c:81:46:39:e6:96:0e:12: 7f:13:0a:d9:45:bc:c2:c8:a2:81:10:59:c2:d4:5d: b8:57:1a:30:d9:66:f8:4a:b7:e6:be:52:6a:c1:50: d8:36:10:88:ce:b0:cd:c1:b2:63:be:ec:94:8f:55: 95:72:b0:52:4e:2c:c9:3a:d8:ad:0f:66:e7:23:12: df:5d:5f:c9:ce:76:f6:7e:b9:6a:70:6c:11:df:2f: 4a:72:b3:4d:64:da:66:7e:91:a1:26:83:94:29:38: 43:6d:9d:06:2f:0c:b3:3c:a2:4c:f8:b2:48:0b:a0: 89:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BE:0F:F2:34:0A:29:B6:C5:85:C8:38:82:B0:5C:A0:2C:52:67:57 X509v3 Authority Key Identifier: keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:85:a5:d6:92:47:9d:a7:f4:69:ff:10:e5:db:7a:85:28:c5: cd:95:c2:b6:4c:de:8a:1e:15:f0:df:c4:fa:d1:b0:47:8e:10: be:b2:c4:64:a4:bf:02:ac:24:f3:4a:43:67:03:41:10:63:1c: 49:3e:b2:8c:eb:4e:ac:c9:4a:f3:c6:82:b6:59:1b:15:de:ee: 4b:b1:85:8f:f4:b8:44:f9:65:43:16:1e:09:97:02:b2:12:5a: d2:8e:05:f8:7c:f6:9c:b2:81:ff:7a:6b:e1:0d:d5:f3:e3:62: fd:14:1a:41:b7:15:2d:2c:e7:9a:73:fb:ea:1e:20:08:72:e4: 6a:60:cd:c1:1d:34:5a:71:cd:11:f7:a7:45:08:03:89:f3:29: 24:61:b4:c0:b4:35:ce:50:d4:bb:19:77:6d:ac:8c:35:49:41: 51:4d:55:e4:eb:23:3e:22:1f:4c:7c:68:f1:3a:22:45:04:c1: 79:7c:78:8e:3b:38:83:84:a1:66:74:57:6d:5b:74:f7:f9:8f: b7:c2:f7:1d:8f:20:ea:e6:f0:3f:89:72:df:25:34:49:a9:c8: ba:c2:05:bc:58:4f:1f:94:5c:73:0b:f0:32:74:54:56:66:ed: 22:9a:ff:49:a6:a0:60:44:ef:e0:b6:52:e0:91:9b:41:d4:86: 66:7e:74:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDRjExMTAvBgNVBAUTKEM0NEYyQUNBQjJBNzc5OTk0MzE1QUE5M0IzMjNEQTlC NDc1QzdCOUEwHhcNMjUwNDI1MDA0MzAwWhcNMjUwNTAyMDA0MzAwWjAYMRYwFAYD VQQDEw02ODBhZGE5NC03NmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv20jZONwJ/RsymxkcKm5FOx9ZZCPfU5dyWj0Lu2kLYO1S44Io9X8xwbCjhvu bRIe7R2O1lBmjqmgo9cqN48odr+3WNiuXaidE54lbNN+875lJszpboi/wTQ32EVo PO8IU9/LcXoIJQQYDZ5sbPzoRodg6e648PxcKeku63jofB9zw9L0nxU+xHucb4Cj bIFGOeaWDhJ/EwrZRbzCyKKBEFnC1F24Vxow2Wb4SrfmvlJqwVDYNhCIzrDNwbJj vuyUj1WVcrBSTizJOtitD2bnIxLfXV/Jznb2frlqcGwR3y9KcrNNZNpmfpGhJoOU KThDbZ0GLwyzPKJM+LJIC6CJewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPO+D/I0 Cim2xYXIOIKwXKAsUmdXMB8GA1UdIwQYMBaAFMRPKsqyp3mZQxWqk7Mj2ptHXHua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRENGMS9FQjU5MTEyMkE4 M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVabERGYXFUc3lQYW0wZGNl NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hFOHF5cktuZVpsREZhcVRzeVBhbTBkY2U1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RENGMS9FQjU5MTEyMkE4M0MxMUVDQTNBNEYzMjVDNEY5QUUwMi94RThxeXJLbmVa bERGYXFUc3lQYW0wZGNlNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrhaXWkkedp/Rp/xDl23qFKMXNlcK2TN6KHhXw38T60bBHjhC+ssRk pL8CrCTzSkNnA0EQYxxJPrKM606syUrzxoK2WRsV3u5LsYWP9LhE+WVDFh4JlwKy ElrSjgX4fPacsoH/emvhDdXz42L9FBpBtxUtLOeac/vqHiAIcuRqYM3BHTRacc0R 96dFCAOJ8ykkYbTAtDXOUNS7GXdtrIw1SUFRTVXk6yM+Ih9MfGjxOiJFBMF5fHiO OziDhKFmdFdtW3T3+Y+3wvcdjyDq5vA/iXLfJTRJqci6wgW8WE8flFxzC/AydFRW Zu0imv9JpqBgRO/gtlLgkZtB1IZmfnQ9 -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:05 2025 by rpki-client