$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft File: eKfTXvnEd150y6PRZrYbdZAkFSM.mft (raw, json) Hash identifier: M/LrsMWZ5LLGHlU/Sca9G7DTnuM1zV58V25Uvn+dF3I= Subject key identifier: 41:23:21:DF:5E:C7:19:9D:68:33:13:19:1E:9B:3C:0D:81:E1:9C:56 Authority key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 Certificate issuer: /CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft Manifest number: 69 Signing time: Sun 15 Jun 2025 06:03:46 +0000 Manifest this update: Sun 15 Jun 2025 06:03:46 +0000 Manifest next update: Sun 22 Jun 2025 06:03:46 +0000 Files and hashes: 1: eKfTXvnEd150y6PRZrYbdZAkFSM.crl (hash: aelibsilG2YE0B8oKworv+7GaG0rok6DGC77xRWF2EU=) 2: 8DDD0D56A98C11EFAAC0F364C4F9AE02.roa (hash: yg1U4JyDYBAoLLqLQFnhNTd+uuZ0oKhea1PeFahobmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Validity Not Before: Jun 15 06:03:46 2025 GMT Not After : Jun 22 06:03:46 2025 GMT Subject: CN=684e6242-f754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:33:b7:76:06:74:dd:28:22:fb:09:0d:8a: 9d:c6:3d:ff:fa:ac:bb:73:c1:96:06:32:2f:7f:65: 27:b9:87:fc:56:77:95:bc:3b:9d:af:b6:8e:c4:9e: cd:61:4a:d7:5e:f4:d7:98:77:3e:98:80:62:97:19: 1f:ba:6a:c4:30:5f:35:ab:b6:52:46:ce:bd:f2:66: 40:fa:27:a5:49:ff:5d:b5:07:65:7a:08:54:cd:27: b2:71:1d:55:87:cc:53:12:54:c7:b8:54:74:ba:1f: 86:71:a9:b8:a5:36:ff:12:30:58:5a:dd:b0:e2:f0: 04:63:88:e5:1a:b5:b0:18:db:ca:c6:36:80:b9:85: ad:c8:ff:ec:d4:83:cf:11:4f:6c:f5:e8:20:cc:d6: ad:d9:74:17:df:d9:ba:1c:4e:48:d7:58:58:bb:d5: cd:54:4a:d4:ae:81:99:cb:80:6a:6b:a3:48:18:25: a0:0e:f9:4d:98:ae:6c:ac:bc:8c:28:fb:3c:a7:2f: 38:95:5d:e2:08:67:60:88:aa:0e:bd:99:30:fa:eb: 2a:b1:ba:fb:00:c0:0e:9c:64:b7:87:3a:02:74:86: 6e:d4:eb:6f:c0:3d:c2:1f:e2:a4:76:22:8b:d0:99: 6c:9f:b6:4a:52:d1:22:54:46:67:04:0e:bb:95:ec: 7f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:23:21:DF:5E:C7:19:9D:68:33:13:19:1E:9B:3C:0D:81:E1:9C:56 X509v3 Authority Key Identifier: keyid:78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a0:10:8b:c6:4d:d7:6e:ad:cd:a2:fe:b0:5c:5a:10:47:97: 78:6c:0e:17:a7:23:57:51:d2:05:36:73:81:b1:98:38:0c:ce: 01:26:f6:52:18:b4:c7:29:29:26:8f:ad:d3:ba:0e:50:c6:1d: 52:69:eb:10:48:1d:ba:df:61:ee:a1:33:83:7f:f8:2f:d1:42: 57:d9:41:40:80:be:c3:13:4a:7b:05:83:83:bd:65:8c:ef:d8: 3b:f5:4e:f0:e8:ab:24:c7:94:ee:57:d5:d4:cf:2f:87:f6:d8: 92:ed:c6:e6:56:74:0d:06:8b:5d:86:51:b7:83:f8:cf:e5:c1: e0:34:34:72:09:b9:71:72:92:33:ee:b7:cd:bb:93:09:95:d0: 1c:f5:0b:c9:81:df:cc:c7:2f:75:8c:f8:97:c3:1e:04:08:1f: c2:f8:a1:d2:48:43:45:56:8a:21:8a:f2:41:34:57:1d:7f:14: 50:3b:7a:04:a6:64:a1:6e:b1:ca:66:dd:ff:64:59:61:59:82: 21:e4:06:e0:4d:fe:b7:3c:68:cc:0a:d1:b2:d1:a9:88:65:12: 5f:b5:92:65:98:9d:40:49:b1:d0:90:d5:00:9d:27:31:3b:0e: d1:15:78:46:fb:5d:d2:4d:58:85:64:83:b4:69:45:a9:a1:18: 4c:c0:6e:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkMzODExMC8GA1UEBRMoNzhBN0QzNUVGOUM0Nzc1RTc0Q0JBM0QxNjZCNjFCNzU5 MDI0MTUyMzAeFw0yNTA2MTUwNjAzNDZaFw0yNTA2MjIwNjAzNDZaMBgxFjAUBgNV BAMTDTY4NGU2MjQyLWY3NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC75TO3dgZ03Sgi+wkNip3GPf/6rLtzwZYGMi9/ZSe5h/xWd5W8O52vto7Ens1h Stde9NeYdz6YgGKXGR+6asQwXzWrtlJGzr3yZkD6J6VJ/121B2V6CFTNJ7JxHVWH zFMSVMe4VHS6H4ZxqbilNv8SMFha3bDi8ARjiOUatbAY28rGNoC5ha3I/+zUg88R T2z16CDM1q3ZdBff2bocTkjXWFi71c1UStSugZnLgGpro0gYJaAO+U2YrmysvIwo +zynLziVXeIIZ2CIqg69mTD66yqxuvsAwA6cZLeHOgJ0hm7U62/APcIf4qR2IovQ mWyftkpS0SJURmcEDruV7H/5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQSMh317H GZ1oMxMZHps8DYHhnFYwHwYDVR0jBBgwFoAUeKfTXvnEd150y6PRZrYbdZAkFSMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzBERTg5MzQwQTk4 QzExRUY5MzUwRkI2M0M0RjlBRTAyL2VLZlRYdm5FZDE1MHk2UFJaclliZFpBa0ZT TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUtmVFh2bkVkMTUweTZQUlpyWWJkWkFrRlNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy QzM4LzBERTg5MzQwQTk4QzExRUY5MzUwRkI2M0M0RjlBRTAyL2VLZlRYdm5FZDE1 MHk2UFJaclliZFpBa0ZTTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACOgEIvGTddurc2i/rBcWhBHl3hsDhenI1dR0gU2c4GxmDgMzgEm9lIY tMcpKSaPrdO6DlDGHVJp6xBIHbrfYe6hM4N/+C/RQlfZQUCAvsMTSnsFg4O9ZYzv 2Dv1TvDoqyTHlO5X1dTPL4f22JLtxuZWdA0Gi12GUbeD+M/lweA0NHIJuXFykjPu t827kwmV0Bz1C8mB38zHL3WM+JfDHgQIH8L4odJIQ0VWiiGK8kE0Vx1/FFA7egSm ZKFuscpm3f9kWWFZgiHkBuBN/rc8aMwK0bLRqYhlEl+1kmWYnUBJsdCQ1QCdJzE7 DtEVeEb7XdJNWIVkg7RpRamhGEzAbtY= -----END CERTIFICATE-----Generated at Sun Jun 15 10:15:14 2025 by rpki-client