$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: tApnEKwSLoxCKymioXtjo4OmCnZdk7iZgH/WQq6rTnw= Subject key identifier: 12:1E:C6:B8:7C:B8:0C:15:38:BF:CC:54:DE:E6:5E:45:4F:C5:68:5E Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2D3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2D20 Signing time: Sun 20 Jul 2025 15:32:32 +0000 Manifest this update: Sun 20 Jul 2025 15:32:31 +0000 Manifest next update: Sun 27 Jul 2025 15:32:31 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: lmterGrSSuiKi+HO4HA2N21whj9AhrZOAv1aOqIGliM=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11580 (0x2d3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: Jul 20 15:32:31 2025 GMT Not After : Jul 27 15:32:31 2025 GMT Subject: CN=687d0c0f-f82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:10:01:58:96:07:dc:a5:23:3d:87:ba:b9: ce:6b:56:c3:a4:49:06:c8:4c:95:da:d4:02:33:0b: 82:11:f7:49:c0:7c:fb:79:f6:20:26:e1:3a:e0:f8: b9:2f:3b:0b:ac:f7:ee:1b:d2:0f:1c:b4:19:d6:a9: 72:94:e7:f8:e2:f7:3c:33:a5:03:ee:fb:82:52:d6: f4:12:b8:ad:e3:2b:54:3d:d5:f5:20:8e:77:0d:b0: ef:f0:65:09:ca:dc:59:0c:54:bd:4e:61:c5:97:14: 34:4e:df:b9:b5:e4:0a:b0:b7:70:0c:08:f7:b7:85: 29:4a:55:b5:cd:7a:0f:b3:72:23:aa:a1:b2:09:19: 8c:dd:f1:0c:e1:22:63:4e:11:e2:74:67:53:09:27: fc:8f:fa:0f:e6:31:b3:5a:70:7d:cd:b7:18:d3:e7: d6:f3:dd:b1:94:dd:ec:0e:94:be:6c:72:a3:da:f4: 88:a9:60:c3:2e:03:9e:eb:b9:4b:ea:6a:29:1b:9b: d8:6d:a5:39:4a:d5:9b:e6:ac:0a:7a:4b:be:7d:54: 98:ca:d8:5a:78:f6:aa:97:f9:af:7f:8e:65:c8:1c: 20:58:09:49:21:a2:39:c2:8d:20:ce:9e:59:ff:8e: 8c:34:0a:f0:cc:88:8c:4c:61:6d:9c:f6:01:58:13: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1E:C6:B8:7C:B8:0C:15:38:BF:CC:54:DE:E6:5E:45:4F:C5:68:5E X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:20:92:69:14:68:f6:f8:e3:cc:30:3e:f6:37:9f:9b:c1:ea: d4:9e:36:b4:d1:04:ce:9a:0a:8e:d7:97:6d:63:3b:27:a0:9e: df:27:29:d0:6c:6a:e2:53:e9:0a:3f:25:72:19:54:68:01:84: 7a:d9:49:bd:2c:d6:b6:ce:28:3a:32:bc:46:6d:bd:ed:e4:90: ea:4d:d9:94:eb:6f:30:50:2b:ea:8b:db:a1:07:f6:6f:fe:84: 14:3e:b9:6b:db:a6:b0:82:1d:83:9a:54:d3:28:e4:0f:4b:e2: 7c:a6:47:eb:4f:89:60:f2:7b:cd:25:e5:a5:07:fa:52:87:3d: d0:36:8b:c8:24:56:f7:0a:2e:79:ad:0d:8d:bd:a1:b6:d9:85: 71:c4:bd:a2:30:b5:f7:b9:b2:f2:8b:0e:a0:7a:df:eb:9d:cc: a0:04:77:b5:ac:98:63:a1:52:04:fb:42:43:5b:ae:1c:ef:c8: 51:97:86:84:90:e5:d8:3a:63:06:ec:14:70:78:85:58:44:a1: e4:58:77:cf:67:5a:38:e0:f1:b0:73:37:f2:56:65:00:c3:c0: 40:9c:d3:cd:a4:29:44:3b:f0:fd:7a:09:d0:78:19:69:d3:b2: 7c:46:79:71:3c:e6:8c:69:21:d6:fa:e9:51:98:d2:71:46:5c: 35:a5:6a:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjUwNzIwMTUzMjMxWhcNMjUwNzI3MTUzMjMxWjAYMRYwFAYD VQQDEw02ODdkMGMwZi1mODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhIQAViWB9ylIz2HurnOa1bDpEkGyEyV2tQCMwuCEfdJwHz7efYgJuE64Pi5 LzsLrPfuG9IPHLQZ1qlylOf44vc8M6UD7vuCUtb0Erit4ytUPdX1II53DbDv8GUJ ytxZDFS9TmHFlxQ0Tt+5teQKsLdwDAj3t4UpSlW1zXoPs3IjqqGyCRmM3fEM4SJj ThHidGdTCSf8j/oP5jGzWnB9zbcY0+fW892xlN3sDpS+bHKj2vSIqWDDLgOe67lL 6mopG5vYbaU5StWb5qwKeku+fVSYythaePaql/mvf45lyBwgWAlJIaI5wo0gzp5Z /46MNArwzIiMTGFtnPYBWBMf2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIexrh8 uAwVOL/MVN7mXkVPxWheMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxIJJpFGj2+OPMMD72N5+bwerUnja00QTOmgqO15dtYzsnoJ7fJynQ bGriU+kKPyVyGVRoAYR62Um9LNa2zig6MrxGbb3t5JDqTdmU628wUCvqi9uhB/Zv /oQUPrlr26awgh2DmlTTKOQPS+J8pkfrT4lg8nvNJeWlB/pShz3QNovIJFb3Ci55 rQ2NvaG22YVxxL2iMLX3ubLyiw6get/rncygBHe1rJhjoVIE+0JDW64c78hRl4aE kOXYOmMG7BRweIVYRKHkWHfPZ1o44PGwczfyVmUAw8BAnNPNpClEO/D9egnQeBlp 07J8RnlxPOaMaSHW+ulRmNJxRlw1pWp9 -----END CERTIFICATE-----Generated at Mon Jul 21 12:42:36 2025 by rpki-client