$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json) Hash identifier: w6LTZw2E/zz2aKDNQqCCTjLPXr79O+07BxirDaPGYz4= Subject key identifier: 1F:FF:0A:05:3F:3A:27:23:0D:04:06:D9:36:38:07:86:84:F8:4E:C1 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 03C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft Manifest number: 0362 Signing time: Sat 19 Jul 2025 01:39:12 +0000 Manifest this update: Sat 19 Jul 2025 01:39:12 +0000 Manifest next update: Sat 26 Jul 2025 01:39:12 +0000 Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: FtKBWPKQ87TYA9mMHaCJY2tNLasxdwb+zr4fbILNcIQ=) 2: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: O+w5tLUYY2vDAPyyihGdNaVeLcPrzrretQfcUAVViMY=) 3: 010342748FE911EDA6F5922AC4F9AE02.roa (hash: 5w2gwK/+zmYTYrBGcuIv1emp3tFDL4QjnfqeQ2tORBo=) 4: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: w55707A6oGZPVJb5dLEvH7DmAsCJ21ZtMMUXzrwNCRM=) 5: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: KY39ZDloooDTLSWdSYEfYOluFdXRey3d+9IwjJV7kvw=) 6: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: PO28TqT7JFAgsJS4OG8H4ivCR2vG+AQUGdE3hSyf+fM=) 7: 7CCE329266F711EF86880681C4F9AE02.roa (hash: 6anx6+tUYpCyea4W0BqwQSGkyUCAr4k+8K9NAhmwsJE=) 8: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: BC1XUzBkjyQzlz4GvtxH81hMdlkimJB+lU8F+PmiFVI=) 9: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: ABW3By8YU2W6olwHz1/qOoSOHNFidR8eMB8CQ1rCUFk=) 10: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: q0o0blyQ81NictXAsmCb5KMZ0BzFrp/mj7hc480MWyw=) 11: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: R17w/Fkdvp/1oePeXfLYVtvseH7RLcT+pcv0SXzugK4=) 12: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: QdBFtLVQnvTC0U8ce4xfWA4Knfofq/bGhnYdWQPREvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 969 (0x3c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Jul 19 01:39:12 2025 GMT Not After : Jul 26 01:39:12 2025 GMT Subject: CN=687af740-da47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:b3:3f:24:13:15:4c:48:06:2c:0e:c0:9d: 19:da:79:66:79:9f:ef:a4:0a:df:94:9d:4a:75:f0: 3c:49:5a:bd:6c:7b:0d:04:3b:1a:85:7a:0d:5c:64: 39:f1:c3:f3:a6:59:2b:be:a1:3a:51:9d:95:df:79: 6b:39:e3:31:2c:b0:53:0f:b5:8f:69:cb:2a:0c:0f: 74:16:41:bd:78:c3:b5:da:d4:f6:53:33:8e:42:98: 19:c9:d9:53:86:8f:e4:0b:c2:c1:58:b1:5c:4a:a6: c4:c4:be:ed:63:e9:72:f3:db:3f:0f:cf:d2:4d:04: e3:57:70:af:e8:0f:10:90:b5:d5:60:93:2c:4e:14: 9b:b3:c6:60:82:e4:96:53:ac:ab:6d:d5:f7:df:9d: bf:ba:dd:fe:14:99:19:57:f9:8d:9c:bb:1c:4a:db: 10:ea:aa:c2:1b:81:fc:00:26:ff:25:1b:86:7e:71: 0b:91:d0:ef:7e:fd:ec:b3:00:71:cb:43:13:39:8b: 34:25:bf:2e:27:6a:22:8d:c1:64:e5:c0:0b:c1:7e: 42:91:e8:23:d7:d4:4c:95:3d:3c:0e:e5:e0:b8:1c: 9d:19:f4:9d:1c:36:54:1a:2d:81:cc:26:8c:fe:a4: f6:4b:d3:cc:ef:67:83:2b:49:02:8f:cd:ea:f8:31: 76:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FF:0A:05:3F:3A:27:23:0D:04:06:D9:36:38:07:86:84:F8:4E:C1 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:67:8b:73:2d:bd:f0:f7:6c:fd:f6:05:d5:bd:0a:97:46:fe: aa:c7:bd:ec:55:50:b7:86:50:e3:fa:b7:c2:3c:c2:c9:64:66: 87:9c:0c:cd:ea:c6:6f:82:68:0e:37:5e:e5:fd:2e:ae:d7:12: 73:f9:6b:98:32:d5:b4:60:08:bd:a6:4b:10:4d:8d:10:19:ee: 4c:3b:63:b1:f0:35:b5:72:9c:71:e1:73:47:6c:8b:f6:08:bc: 16:57:89:d0:83:99:ea:90:5a:91:ff:f3:51:e6:7b:15:82:7d: 4d:ca:07:63:7e:ca:7e:35:b2:1d:ee:c2:2e:9e:fb:8f:b0:1e: b5:42:25:8a:3b:ef:89:a5:bd:74:c9:3f:c7:c9:b9:c6:e3:6f: 93:87:59:32:e1:cd:ac:9d:1d:a3:33:4b:a2:0b:e7:8b:28:86: 96:ea:48:87:98:73:33:6b:e9:d1:0c:c4:03:54:15:3f:d8:33: 8c:09:6a:55:05:50:b6:37:af:ec:cb:5b:61:f0:d3:b6:1f:81: a8:af:72:ab:37:dd:9a:d8:df:17:32:15:3d:5c:0e:7d:12:88: a7:3f:ad:b7:3a:ff:f6:9a:a8:96:ea:8d:fd:26:62:17:87:a1: 7b:41:92:48:e5:31:e3:11:0f:c6:b3:cf:29:a1:f2:78:cb:89: 6a:30:96:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwNzE5MDEzOTEyWhcNMjUwNzI2MDEzOTEyWjAYMRYwFAYD VQQDEw02ODdhZjc0MC1kYTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw22zPyQTFUxIBiwOwJ0Z2nlmeZ/vpArflJ1KdfA8SVq9bHsNBDsahXoNXGQ5 8cPzplkrvqE6UZ2V33lrOeMxLLBTD7WPacsqDA90FkG9eMO12tT2UzOOQpgZydlT ho/kC8LBWLFcSqbExL7tY+ly89s/D8/STQTjV3Cv6A8QkLXVYJMsThSbs8ZgguSW U6yrbdX3352/ut3+FJkZV/mNnLscStsQ6qrCG4H8ACb/JRuGfnELkdDvfv3sswBx y0MTOYs0Jb8uJ2oijcFk5cALwX5Ckegj19RMlT08DuXguBydGfSdHDZUGi2BzCaM /qT2S9PM72eDK0kCj83q+DF2mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB//CgU/ OicjDQQG2TY4B4aE+E7BMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q dXByZFBTZjRYYU9QRS1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEZ4tzLb3w92z99gXVvQqXRv6qx73sVVC3hlDj+rfCPMLJZGaHnAzN 6sZvgmgON17l/S6u1xJz+WuYMtW0YAi9pksQTY0QGe5MO2Ox8DW1cpxx4XNHbIv2 CLwWV4nQg5nqkFqR//NR5nsVgn1Nygdjfsp+NbId7sIunvuPsB61QiWKO++Jpb10 yT/HybnG42+Th1ky4c2snR2jM0uiC+eLKIaW6kiHmHMza+nRDMQDVBU/2DOMCWpV BVC2N6/sy1th8NO2H4Gor3KrN92a2N8XMhU9XA59EoinP623Ov/2mqiW6o39JmIX h6F7QZJI5THjEQ/Gs88pofJ4y4lqMJZJ -----END CERTIFICATE-----Generated at Sun Jul 20 10:20:43 2025 by rpki-client