$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft File: eTdmCE78BiUGUPD9ydvFU8DOyjI.mft (raw, json) Hash identifier: 7GueoRBsqJjo3x3JranU6bzq4hRKy9mzKdoiL4fVfjU= Subject key identifier: F4:B6:15:3F:6E:1A:6A:33:B1:63:60:1B:F5:52:51:04:7B:55:1A:78 Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 Certificate issuer: /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Certificate serial: 1135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft Manifest number: 10B4 Signing time: Thu 24 Apr 2025 17:23:22 +0000 Manifest this update: Thu 24 Apr 2025 17:23:22 +0000 Manifest next update: Thu 01 May 2025 17:23:22 +0000 Files and hashes: 1: eTdmCE78BiUGUPD9ydvFU8DOyjI.crl (hash: YTJsOEKMZnR75DOeXhhjya8ykEM6YU7lOFIRmN+5pxg=) 2: 7D670EA8F67A11EC92B5670FC4F9AE02.roa (hash: 9Odh9o3TlIW60dRdjsxDVQV+3vyhn2H48fPAT6vn3+M=) 3: 6E6485328C6211E9A888A528C4F9AE02.roa (hash: UR2Z7oMUzbnedaI2LVS9uGRBFC7eB54GSgDAmYPW63Q=) 4: B8F67148DC6611ED89F0804EC4F9AE02.roa (hash: W0JFS6tmn8XTuKql8AHkVwyZGDrJTsFtDN1V3+Sy2tA=) 5: C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (hash: +tn7Z6fq6avHjQp2bglrCkd8E2Sa27UKrn3GOMUj6b8=) 6: B662717ADC6611ED89F0804EC4F9AE02.roa (hash: MLOX+4zM45smBurkZaVj3Oi8atSTyoZEzmqXwXoi1VA=) 7: CB1303A4A28F11EBA97D6163C4F9AE02.roa (hash: KQfpgqTCm38R9/gLkZZKqv0IIflUZ1N/AO5E6KaW3hc=) 8: 7C39022AF67A11EC92B5670FC4F9AE02.roa (hash: hyfl49PKKB2ONDtyk43wvbgkIsmowZKGDNVFA1XCOPA=) 9: CE0122802D4211EA907A566EC4F9AE02.roa (hash: Av4l0HsggCXslSxN1XLmPQb/NQp3V/CmXQCgKkE+IxE=) 10: 93F95BE673C711E98CD6D335C4F9AE02.roa (hash: 2+EzbP/f4S7Jeaq3EYQS0mWwY430dyRIPuynNaHcMvc=) 11: 315EA0CCA9B111EC9C177A56C4F9AE02.roa (hash: Za7LOD1x/AWq47LZxakqACtbC+NnfwEUEJeBoexu1ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4405 (0x1135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32 Validity Not Before: Apr 24 17:23:22 2025 GMT Not After : May 1 17:23:22 2025 GMT Subject: CN=680a738a-c040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:f6:40:13:d9:d2:b3:90:4f:f8:52:38:b4: 7f:fa:c0:4c:2e:4a:20:f4:c7:d7:a2:50:46:4a:fb: 86:5f:36:71:ec:2c:9a:77:d3:99:6a:a7:19:12:e2: 1e:09:5e:08:ec:92:ff:31:7d:9e:58:9d:f3:2b:80: 0a:4d:77:84:e0:a6:27:d7:f7:d6:8f:26:37:d9:78: 36:c2:e6:79:4e:51:f5:71:24:d7:b5:e7:c4:b1:72: 59:f0:a8:47:6b:43:d6:b2:0e:df:29:42:68:40:44: fb:3f:99:9d:bc:96:35:05:e7:2a:10:03:c3:0a:2f: 2f:35:90:39:a2:b4:49:a3:5c:93:9b:e2:91:c0:6e: ba:d1:c2:38:9b:4d:40:b3:7c:01:4a:b0:bf:a2:b5: 92:c9:80:10:46:6c:cc:d6:0b:2f:84:42:35:64:f6: 43:66:47:9b:52:9a:f1:75:ee:5a:b6:65:38:c0:e0: 6b:72:76:54:c9:de:19:82:4c:8c:b2:db:b5:75:93: 09:00:e4:d7:67:8f:06:47:75:6e:c8:1a:f3:11:07: e9:67:b8:54:16:c4:cd:1b:67:b9:ff:49:a7:d8:8f: 0d:0b:93:fb:d9:43:75:51:bd:2c:96:db:7e:60:a4: 87:c7:9b:6e:7b:88:4d:99:59:38:f1:c5:c2:9f:25: 53:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B6:15:3F:6E:1A:6A:33:B1:63:60:1B:F5:52:51:04:7B:55:1A:78 X509v3 Authority Key Identifier: keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:61:df:6f:6b:b3:40:fc:48:f1:db:5b:2d:52:f9:1c:aa:f0: 02:6c:a9:0a:71:1a:80:e9:c1:50:e6:ed:d9:1b:0b:bf:73:38: 7a:18:75:54:73:62:68:9f:c6:f8:91:bf:83:0a:21:f1:77:d4: 43:40:b0:c6:ee:50:4b:8c:9e:46:57:8a:78:1f:7b:27:0c:fb: 60:5c:a2:32:18:15:af:72:90:b6:9f:6c:b1:04:d4:22:59:12: d5:a3:04:f4:68:71:ad:4e:48:8e:22:e2:cd:1e:80:56:63:65: b7:d7:03:e5:be:2b:bf:46:eb:f0:02:ec:aa:35:09:cb:a8:0a: 01:a9:62:62:52:22:05:5c:08:75:01:63:19:23:96:4f:f8:7f: cd:32:72:c7:18:8e:52:d9:90:23:b2:49:b8:94:ec:1d:a9:5e: e9:c1:65:bc:88:53:9a:65:bb:36:fa:9e:b6:9a:ff:49:ab:4d: 29:31:18:46:05:86:19:37:7d:a6:d1:f9:71:51:b4:ab:2c:11: 15:87:ec:a5:e9:c3:f5:01:79:c0:d5:18:17:3e:79:24:25:0b: 51:2a:9d:74:66:0b:53:09:fc:47:90:d0:4e:01:59:02:a8:d1: 7c:cb:93:b6:49:6b:c2:e0:b8:d5:7e:78:93:84:b4:b4:67:84: 37:1d:25:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2QTMxMTAvBgNVBAUTKDc5Mzc2NjA4NEVGQzA2MjUwNjUwRjBGREM5REJDNTUz QzBDRUNBMzIwHhcNMjUwNDI0MTcyMzIyWhcNMjUwNTAxMTcyMzIyWjAYMRYwFAYD VQQDEw02ODBhNzM4YS1jMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbf2QBPZ0rOQT/hSOLR/+sBMLkog9MfXolBGSvuGXzZx7Cyad9OZaqcZEuIe CV4I7JL/MX2eWJ3zK4AKTXeE4KYn1/fWjyY32Xg2wuZ5TlH1cSTXtefEsXJZ8KhH a0PWsg7fKUJoQET7P5mdvJY1BecqEAPDCi8vNZA5orRJo1yTm+KRwG660cI4m01A s3wBSrC/orWSyYAQRmzM1gsvhEI1ZPZDZkebUprxde5atmU4wOBrcnZUyd4ZgkyM stu1dZMJAOTXZ48GR3VuyBrzEQfpZ7hUFsTNG2e5/0mn2I8NC5P72UN1Ub0sltt+ YKSHx5tue4hNmVk48cXCnyVTCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS2FT9u GmozsWNgG/VSUQR7VRp4MB8GA1UdIwQYMBaAFHk3ZghO/AYlBlDw/cnbxVPAzsoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTZBMy83NzI3Q0U1QzM4 QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJpVUdVUEQ5eWR2RlU4RE95 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VUZG1DRTc4QmlVR1VQRDl5ZHZGVThET3lqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTZBMy83NzI3Q0U1QzM4QzcxMUU5QTdCNUMyMzNDNEY5QUUwMi9lVGRtQ0U3OEJp VUdVUEQ5eWR2RlU4RE95akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFYd9va7NA/Ejx21stUvkcqvACbKkKcRqA6cFQ5u3ZGwu/czh6GHVU c2Jon8b4kb+DCiHxd9RDQLDG7lBLjJ5GV4p4H3snDPtgXKIyGBWvcpC2n2yxBNQi WRLVowT0aHGtTkiOIuLNHoBWY2W31wPlviu/RuvwAuyqNQnLqAoBqWJiUiIFXAh1 AWMZI5ZP+H/NMnLHGI5S2ZAjskm4lOwdqV7pwWW8iFOaZbs2+p62mv9Jq00pMRhG BYYZN32m0flxUbSrLBEVh+yl6cP1AXnA1RgXPnkkJQtRKp10ZgtTCfxHkNBOAVkC qNF8y5O2SWvC4LjVfniThLS0Z4Q3HSVD -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:25 2025 by rpki-client