$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: U6+6N8IQ4GhGrsfLfQMX6XeZc5Kq6wLPgwa+wt8WnxI= Subject key identifier: 4F:43:F0:D7:F7:5E:4B:3C:4D:05:59:54:CB:D9:2E:D4:69:D0:16:D3 Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0C4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0C3E Signing time: Thu 24 Apr 2025 18:20:08 +0000 Manifest this update: Thu 24 Apr 2025 18:20:08 +0000 Manifest next update: Thu 01 May 2025 18:20:08 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: sM8vnOf0Adxi8/g7WgmA3lXMNbhdXi9CLRhmCcs/ABA=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: G3Qc6m6Md1/HMosoucJ9nNLXdAyquVgUZsxf+L03AvI=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: HJ8Z2bhTYV+Kfn18R3ptoMoDD462QKeVcqv3I9e4DJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3148 (0xc4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Apr 24 18:20:08 2025 GMT Not After : May 1 18:20:08 2025 GMT Subject: CN=680a80d8-8df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:3f:3e:11:bc:05:55:31:fe:a1:24:bf:9c: f4:49:02:11:1d:5c:59:c3:3b:c3:fe:2e:a7:10:7e: 44:bd:db:5a:b2:87:af:2a:2e:74:1d:88:20:99:be: fb:74:b5:cf:2c:64:7c:1b:54:ca:95:be:f0:9b:4f: c0:f9:f0:d9:07:ce:28:ee:33:ba:a4:4c:ec:27:8f: 6c:d6:6a:15:00:56:2e:d5:00:26:73:e9:25:dd:fd: 38:80:3f:aa:44:15:a0:ca:fb:21:1c:99:6c:e3:3a: 19:64:14:3d:7b:0d:16:53:a4:6c:99:c8:97:0c:46: 38:d1:bd:3b:cc:ab:c0:25:31:05:11:3b:2e:85:df: 69:0e:8a:bd:5d:b9:53:45:35:b7:84:f7:e3:10:b7: e6:83:41:4e:f4:19:92:b5:1c:6b:3b:d6:75:0d:9e: 21:18:6c:df:2a:e1:c6:86:68:32:79:cd:f3:7e:6f: 85:7f:e1:9d:9d:ef:7d:91:e1:1b:ca:5b:f1:04:87: de:34:db:e1:7b:c8:7b:43:f2:21:aa:1e:6f:b6:e7: 35:ea:b4:bb:65:5d:1c:51:ab:f6:4c:2f:fa:30:78: d2:9b:71:da:a9:f0:53:70:0e:aa:11:65:cb:33:37: 3e:65:f2:10:50:d0:b1:ac:f2:a5:23:71:c0:f3:11: 39:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:43:F0:D7:F7:5E:4B:3C:4D:05:59:54:CB:D9:2E:D4:69:D0:16:D3 X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:29:4e:be:8c:aa:93:37:4a:f9:c4:c6:8e:52:c1:a1:f2:88: f2:9b:91:25:67:23:29:ec:7f:3e:e5:5f:4b:83:c1:40:d7:e3: d6:0a:a7:07:08:7f:cd:9e:88:32:04:7a:f4:f7:e9:b4:95:48: 5e:30:74:06:f2:93:bc:ea:b7:0f:fe:99:ca:0d:13:65:9b:54: a1:94:19:0c:4a:e2:8e:1a:d5:dc:7c:63:47:7d:20:42:42:c2: 02:12:fa:0d:6d:b1:14:1c:fb:01:fe:41:24:d8:6c:4b:1c:0e: 5d:91:b3:74:33:cf:42:40:65:8d:19:39:75:a4:be:d5:8f:3d: 68:59:1c:1b:5e:6a:86:e8:67:6e:f4:c2:65:3e:42:58:94:f6: b8:b5:41:33:36:c3:e1:d6:70:40:37:09:a3:e2:ca:56:c5:c9: 2e:19:e2:6c:52:6d:1a:06:07:aa:57:a8:7f:f9:de:f5:4f:5c: 8b:85:14:76:cf:bb:30:4a:6c:ee:71:36:29:bc:e1:a9:b0:84: 52:c7:9c:8c:9d:35:d0:4c:3c:14:0e:a3:29:16:a5:92:24:27: d4:98:de:a5:bc:2a:07:77:cf:b4:60:02:37:ee:e0:e6:59:ff: 0c:03:0f:7f:d6:48:7e:63:3d:3e:05:53:13:69:15:7b:72:30: 10:80:da:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjUwNDI0MTgyMDA4WhcNMjUwNTAxMTgyMDA4WjAYMRYwFAYD VQQDEw02ODBhODBkOC04ZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjM/PhG8BVUx/qEkv5z0SQIRHVxZwzvD/i6nEH5EvdtasoevKi50HYggmb77 dLXPLGR8G1TKlb7wm0/A+fDZB84o7jO6pEzsJ49s1moVAFYu1QAmc+kl3f04gD+q RBWgyvshHJls4zoZZBQ9ew0WU6RsmciXDEY40b07zKvAJTEFETsuhd9pDoq9XblT RTW3hPfjELfmg0FO9BmStRxrO9Z1DZ4hGGzfKuHGhmgyec3zfm+Ff+Gdne99keEb ylvxBIfeNNvhe8h7Q/Ihqh5vtuc16rS7ZV0cUav2TC/6MHjSm3HaqfBTcA6qEWXL Mzc+ZfIQUNCxrPKlI3HA8xE5nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9D8Nf3 Xks8TQVZVMvZLtRp0BbTMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQKU6+jKqTN0r5xMaOUsGh8ojym5ElZyMp7H8+5V9Lg8FA1+PWCqcH CH/NnogyBHr09+m0lUheMHQG8pO86rcP/pnKDRNlm1ShlBkMSuKOGtXcfGNHfSBC QsICEvoNbbEUHPsB/kEk2GxLHA5dkbN0M89CQGWNGTl1pL7Vjz1oWRwbXmqG6Gdu 9MJlPkJYlPa4tUEzNsPh1nBANwmj4spWxckuGeJsUm0aBgeqV6h/+d71T1yLhRR2 z7swSmzucTYpvOGpsIRSx5yMnTXQTDwUDqMpFqWSJCfUmN6lvCoHd8+0YAI37uDm Wf8MAw9/1kh+Yz0+BVMTaRV7cjAQgNqU -----END CERTIFICATE-----Generated at Sat Apr 26 16:43:34 2025 by rpki-client