$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft File: eDYu-f45SW72Wzb4O2aYr5MI36s.mft (raw, json) Hash identifier: DewiApOqcVZBTd8QSFl6fkFuNGrol92ZV1khjdvZJfg= Subject key identifier: 49:5F:7C:65:DE:07:B6:AB:8A:B2:2D:E5:C5:19:77:E1:E6:16:1C:EB Authority key identifier: 78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB Certificate issuer: /CN=A91CE7A4/serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft Manifest number: 3B Signing time: Fri 25 Apr 2025 06:31:15 +0000 Manifest this update: Fri 25 Apr 2025 06:31:15 +0000 Manifest next update: Fri 02 May 2025 06:31:15 +0000 Files and hashes: 1: eDYu-f45SW72Wzb4O2aYr5MI36s.crl (hash: 8l0m0cRRUgrWN4jfeUXpD1g2QYA/5s3HGfVimMSxArY=) 2: 44B43AAECC1011EFA5596A50C4F9AE02.roa (hash: uRW4bqoOWcKD9JjoYymAbjdIYpBJL8ZXTg4SH6smXUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE7A4, serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB Validity Not Before: Apr 25 06:31:15 2025 GMT Not After : May 2 06:31:15 2025 GMT Subject: CN=680b2c33-e8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:27:35:9e:17:4c:72:87:1d:7e:5f:d0:e5:3d: c8:54:09:e5:60:7b:35:ee:9d:e8:70:fe:3a:1b:70: 87:fc:1a:73:b7:f5:70:ca:fc:42:98:10:de:2e:81: 39:93:2b:5f:0a:b8:21:7a:4f:fc:61:6d:3e:51:7e: ba:bb:68:2a:21:03:c4:bd:c0:bf:15:3c:81:fe:be: 54:14:1d:e4:70:ce:f7:88:06:6f:c3:6d:06:65:fd: 58:13:3c:46:af:f8:c7:93:69:e5:2b:15:35:9e:96: 04:56:09:b2:52:c2:67:47:bd:f4:4d:d9:c5:5a:82: 63:21:1d:c3:15:97:ab:92:53:4e:ee:e6:50:07:6b: 26:bf:77:8d:84:ef:8b:5b:77:91:56:b0:a2:dd:92: 83:1e:de:e8:ff:64:79:96:12:91:68:02:75:48:81: 7f:2f:1b:10:b1:8b:32:72:18:2d:4d:ef:6d:f2:64: 6e:43:66:ea:33:ae:f3:77:8c:75:f3:30:f3:86:2a: d8:cf:1d:a3:80:03:ef:96:54:07:a2:68:86:82:37: 54:1b:c1:57:f2:ab:77:6d:57:e6:00:e6:a3:72:1d: 2d:a6:d7:17:9f:48:91:27:b3:99:15:d8:bc:b1:ea: ea:cc:3b:de:b1:4d:da:cc:cc:6e:1f:bb:b1:44:61: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5F:7C:65:DE:07:B6:AB:8A:B2:2D:E5:C5:19:77:E1:E6:16:1C:EB X509v3 Authority Key Identifier: keyid:78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:38:af:ca:c6:dc:b5:eb:bb:29:85:2c:86:15:87:56:16:b4: 06:22:f2:86:63:bb:f7:f7:6b:99:a4:e9:2c:fb:b6:8e:c3:d3: 23:68:39:c1:dc:4c:ea:05:ce:5b:20:48:16:e1:0a:00:dc:e0: e0:04:38:a1:d2:fc:9f:c0:3f:bc:e3:c2:36:ba:f1:e8:3a:10: e1:2a:5e:35:57:c3:d3:0c:5c:8d:ee:78:9c:a1:47:a7:95:25: 80:25:99:29:be:32:d2:00:4d:49:2e:0b:78:2a:6e:0b:aa:c3: 39:12:f7:d9:ea:6d:a2:6a:03:7f:b7:f0:4e:ec:33:48:e3:6a: cb:1c:f9:bc:87:0b:13:24:d5:36:10:4b:1d:1a:e5:f6:0c:3c: 6d:c4:a2:15:cc:37:af:28:52:55:1e:75:01:b3:9e:3c:6b:7a: 43:af:5a:06:1a:1c:f9:91:ba:07:95:67:52:4c:7a:b0:2a:9c: a3:8d:30:99:dc:2a:96:a9:b6:4e:61:ad:8f:4d:1d:fc:bb:d3: e2:8c:f8:b0:95:1a:3e:2c:56:31:08:a5:b8:64:d1:65:53:ec: 11:d0:c4:7f:64:fa:cc:f2:a8:ab:1b:1f:5b:f3:20:f7:89:f4: ad:9d:86:48:10:c2:9b:9e:cf:9e:d9:53:22:79:08:e6:ad:41: 30:2e:9a:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTdBNDExMC8GA1UEBRMoNzgzNjJFRjlGRTM5NDk2RUY2NUIzNkY4M0I2Njk4QUY5 MzA4REZBQjAeFw0yNTA0MjUwNjMxMTVaFw0yNTA1MDIwNjMxMTVaMBgxFjAUBgNV BAMTDTY4MGIyYzMzLWU4ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2JzWeF0xyhx1+X9DlPchUCeVgezXunehw/jobcIf8GnO39XDK/EKYEN4ugTmT K18KuCF6T/xhbT5Rfrq7aCohA8S9wL8VPIH+vlQUHeRwzveIBm/DbQZl/VgTPEav +MeTaeUrFTWelgRWCbJSwmdHvfRN2cVagmMhHcMVl6uSU07u5lAHaya/d42E74tb d5FWsKLdkoMe3uj/ZHmWEpFoAnVIgX8vGxCxizJyGC1N723yZG5DZuozrvN3jHXz MPOGKtjPHaOAA++WVAeiaIaCN1QbwVfyq3dtV+YA5qNyHS2m1xefSJEns5kV2Lyx 6urMO96xTdrMzG4fu7FEYXUFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSV98Zd4H tquKsi3lxRl34eYWHOswHwYDVR0jBBgwFoAUeDYu+f45SW72Wzb4O2aYr5MI36sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFN0E0L0MwQ0FFNzQyQ0Mw RjExRUZBMjc4RkQ0Q0M0RjlBRTAyL2VEWXUtZjQ1U1c3Mld6YjRPMmFZcjVNSTM2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZURZdS1mNDVTVzcyV3piNE8yYVlyNU1JMzZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF N0E0L0MwQ0FFNzQyQ0MwRjExRUZBMjc4RkQ0Q0M0RjlBRTAyL2VEWXUtZjQ1U1c3 Mld6YjRPMmFZcjVNSTM2cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEI4r8rG3LXruymFLIYVh1YWtAYi8oZju/f3a5mk6Sz7to7D0yNoOcHc TOoFzlsgSBbhCgDc4OAEOKHS/J/AP7zjwja68eg6EOEqXjVXw9MMXI3ueJyhR6eV JYAlmSm+MtIATUkuC3gqbguqwzkS99nqbaJqA3+38E7sM0jjassc+byHCxMk1TYQ Sx0a5fYMPG3EohXMN68oUlUedQGznjxrekOvWgYaHPmRugeVZ1JMerAqnKONMJnc Kpaptk5hrY9NHfy70+KM+LCVGj4sVjEIpbhk0WVT7BHQxH9k+szyqKsbH1vzIPeJ 9K2dhkgQwpuez57ZUyJ5COatQTAumlk= -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:55 2025 by rpki-client