$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft File: 8EaQuwPg05YrSAjk0GyyajSQ5RY.mft (raw, json) Hash identifier: mxClOSpnSLZZXLktyelI5f9daPWy+INsHdLiNp5Ggcc= Subject key identifier: 9B:AA:F8:F6:A8:65:11:0A:AF:8F:AD:2C:08:6A:A7:A1:87:2A:25:51 Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 Certificate issuer: /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Certificate serial: 068E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft Manifest number: 0688 Signing time: Thu 24 Apr 2025 22:03:42 +0000 Manifest this update: Thu 24 Apr 2025 22:03:42 +0000 Manifest next update: Thu 01 May 2025 22:03:42 +0000 Files and hashes: 1: 8EaQuwPg05YrSAjk0GyyajSQ5RY.crl (hash: FV3kRBuyIepPa9leviYnBk9ytaFRuVrZzkhlwt6XGZ0=) 2: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (hash: 52JrCnBm7L06RLcpZu8B4A+YSslnAZRmYTLK9Jex7Yg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Validity Not Before: Apr 24 22:03:42 2025 GMT Not After : May 1 22:03:42 2025 GMT Subject: CN=680ab53e-b8e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:b4:41:b9:26:b2:9a:c1:dc:db:e4:a2:57: ab:65:ab:94:39:8a:5c:94:1b:9f:ae:ce:cf:5a:3f: 55:0b:08:82:14:c3:e7:9f:87:92:25:50:e6:c2:7b: 8f:15:c8:74:93:02:e6:c7:7f:b7:03:64:b8:76:47: 51:dc:01:72:2f:36:11:e2:3b:25:6e:e8:d3:5a:ef: 26:d4:18:a3:b3:07:88:42:89:ee:20:f6:e7:88:ed: 31:ef:15:38:f5:d8:cd:2f:5f:f1:f5:b1:5a:49:d9: 69:4f:56:98:46:a5:52:82:aa:70:58:ee:b0:45:03: 91:17:2c:bb:81:1e:cb:66:4a:4c:a8:b1:75:ee:33: 31:ce:6b:a1:13:e2:a4:16:6a:82:ad:d9:2a:6d:cd: 0b:44:a9:a2:d8:b4:e1:91:c0:73:63:79:0d:80:fb: 33:a0:ed:67:26:97:ce:6a:4e:12:1a:f9:e1:8d:68: e8:5d:ea:97:6d:7c:b4:89:69:51:d1:f3:b9:06:da: 02:a0:f8:df:4e:75:36:9f:79:63:6d:c1:7e:3d:f3: 12:ca:1a:c1:55:b4:1e:8b:15:c7:a6:ef:26:ea:5c: 83:e3:06:ce:07:94:68:64:ce:5e:9f:d1:f0:4a:5c: 9a:77:ee:b0:08:bf:97:5d:07:74:38:73:21:b6:be: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AA:F8:F6:A8:65:11:0A:AF:8F:AD:2C:08:6A:A7:A1:87:2A:25:51 X509v3 Authority Key Identifier: keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:37:d9:c2:d3:1c:3d:c1:ab:1d:04:bd:f2:81:9c:88:f8:47: 91:1e:4d:26:93:74:5b:3e:6a:28:fa:b1:f5:e2:37:84:8b:5e: 56:b0:95:be:61:36:ab:3d:84:ce:28:4e:02:4a:c7:05:4c:7d: 44:91:cd:d9:dd:12:16:95:cf:46:59:b1:fb:f0:0b:99:f7:dc: 84:b6:87:f0:30:0d:30:42:d1:9a:bb:02:7b:c3:55:e6:ab:4d: 9e:54:88:49:cf:91:53:34:b6:1f:47:e3:27:a3:41:5f:10:3f: 4b:e5:b5:08:02:92:b5:aa:b3:f2:7f:82:01:a0:dc:3c:e7:0d: 20:fa:bb:97:9d:fd:39:84:39:66:59:40:e4:fb:87:65:9e:f5: 38:23:6f:3f:c3:43:89:c3:16:c4:15:a6:08:15:34:b5:af:cd: c9:3b:23:7f:fb:25:00:e2:52:9d:6a:3b:5b:f7:fc:c9:5b:c9: 35:f9:9c:64:cb:9b:62:bf:9f:c8:4d:ed:6c:e4:f1:c2:01:25: 44:0b:4e:24:2a:6e:1c:03:f8:b7:c0:80:f1:3e:0d:c6:5f:9e: d3:7b:c2:19:8e:2f:8e:3f:5d:2a:9d:f6:26:d8:84:32:8b:8f: 08:e1:f5:9b:24:52:be:15:36:0d:25:e9:43:8a:37:25:02:e3: 28:06:bd:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MDUxMTAvBgNVBAUTKEYwNDY5MEJCMDNFMEQzOTYyQjQ4MDhFNEQwNkNCMjZB MzQ5MEU1MTYwHhcNMjUwNDI0MjIwMzQyWhcNMjUwNTAxMjIwMzQyWjAYMRYwFAYD VQQDEw02ODBhYjUzZS1iOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnH60QbkmsprB3NvkolerZauUOYpclBufrs7PWj9VCwiCFMPnn4eSJVDmwnuP Fch0kwLmx3+3A2S4dkdR3AFyLzYR4jslbujTWu8m1BijsweIQonuIPbniO0x7xU4 9djNL1/x9bFaSdlpT1aYRqVSgqpwWO6wRQORFyy7gR7LZkpMqLF17jMxzmuhE+Kk FmqCrdkqbc0LRKmi2LThkcBzY3kNgPszoO1nJpfOak4SGvnhjWjoXeqXbXy0iWlR 0fO5BtoCoPjfTnU2n3ljbcF+PfMSyhrBVbQeixXHpu8m6lyD4wbOB5RoZM5en9Hw Slyad+6wCL+XXQd0OHMhtr5SywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJuq+Pao ZREKr4+tLAhqp6GHKiVRMB8GA1UdIwQYMBaAFPBGkLsD4NOWK0gI5NBssmo0kOUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYwNS83MjUwQ0E0NDZD MzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1WXJTQWprMEd5eWFqU1E1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFYVF1d1BnMDVZclNBamswR3l5YWpTUTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTYwNS83MjUwQ0E0NDZDMzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1 WXJTQWprMEd5eWFqU1E1UlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGN9nC0xw9wasdBL3ygZyI+EeRHk0mk3RbPmoo+rH14jeEi15WsJW+ YTarPYTOKE4CSscFTH1Ekc3Z3RIWlc9GWbH78AuZ99yEtofwMA0wQtGauwJ7w1Xm q02eVIhJz5FTNLYfR+Mno0FfED9L5bUIApK1qrPyf4IBoNw85w0g+ruXnf05hDlm WUDk+4dlnvU4I28/w0OJwxbEFaYIFTS1r83JOyN/+yUA4lKdajtb9/zJW8k1+Zxk y5tiv5/ITe1s5PHCASVEC04kKm4cA/i3wIDxPg3GX57Te8IZji+OP10qnfYm2IQy i48I4fWbJFK+FTYNJelDijclAuMoBr0z -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:21 2025 by rpki-client