$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft File: EPSBzyjc51gajMuOUN4Jj3yLyRU.mft (raw, json) Hash identifier: XN41lpZWfZQis9uvdosWpr6267v4LdznvnPfAuOrXPk= Subject key identifier: 14:65:6D:83:2A:EC:AB:B5:F3:17:D4:9B:10:57:AC:51:0E:2E:13:BF Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 Certificate issuer: /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft Manifest number: 010E Signing time: Thu 05 Jun 2025 04:21:29 +0000 Manifest this update: Thu 05 Jun 2025 04:21:29 +0000 Manifest next update: Thu 12 Jun 2025 04:21:29 +0000 Files and hashes: 1: EPSBzyjc51gajMuOUN4Jj3yLyRU.crl (hash: R8ur1wjhd6OZpzXPP+NqWkP5pdnUdLP8PIOP5L2zMyA=) 2: E070CA0CAA2E11EEA404D421C4F9AE02.roa (hash: iZU8zdfl9m+d7mdN1RiWPOsL2RUjP7KC4vEHrZwKmZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 04:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122134, serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Validity Not Before: Jun 5 04:21:29 2025 GMT Not After : Jun 12 04:21:29 2025 GMT Subject: CN=68411b49-81a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:f8:e3:d6:88:dc:a9:c4:4c:21:b0:3a:04: 0a:41:95:62:7a:b1:9c:f1:db:da:98:b7:0d:4c:56: c2:8a:15:10:45:af:75:b3:b1:a4:dc:91:2e:58:c9: 27:e0:25:c5:1f:c1:4a:2f:dd:29:06:aa:a4:ad:ae: 91:28:a5:ba:0b:19:3c:bc:0f:12:93:5d:30:57:ad: 91:0e:16:0a:85:09:e2:e2:28:fb:ce:da:22:2a:12: a6:e3:7f:b2:4f:c3:51:7c:05:6b:24:05:a7:4d:21: 03:48:a4:42:26:8d:98:d0:74:2c:aa:43:3a:a1:51: e1:cb:71:bf:7e:75:1f:30:c7:b7:3b:b1:75:fb:cd: 45:9e:96:88:2b:37:1c:c3:3b:fd:4a:6c:00:66:82: 64:93:07:3f:a7:c7:34:8b:84:43:4b:12:6a:4e:5a: f3:20:d7:98:32:57:69:fa:c8:12:5d:f4:a2:52:c3: ef:28:19:96:4c:ac:42:75:93:89:56:6e:d4:2c:f2: df:e7:1a:06:0d:89:6f:d0:78:75:a5:ac:86:14:3a: ce:50:94:75:da:a1:65:03:07:68:6e:ce:d6:fd:53: 71:4d:10:5c:57:da:81:1b:61:f6:dd:2e:c5:c3:7c: b5:b1:7c:a5:2c:fb:bb:66:8d:33:a4:b4:b9:46:48: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:65:6D:83:2A:EC:AB:B5:F3:17:D4:9B:10:57:AC:51:0E:2E:13:BF X509v3 Authority Key Identifier: keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:f5:5e:3a:14:d9:06:fd:56:ec:1a:80:45:71:9a:e8:9f:81: b9:5a:60:38:3c:70:4d:77:75:1a:82:d5:2d:a3:bd:a3:1f:d2: 53:69:57:55:d3:94:36:ee:67:66:01:db:04:98:c0:bc:07:80: 7e:d3:3f:2e:6e:83:dd:ad:89:e3:76:2a:d1:9b:76:21:50:82: bb:43:07:2b:46:92:c2:bf:c8:29:69:07:59:e2:f2:20:50:05: 8d:82:fa:78:47:3f:5c:b7:49:94:38:2d:e7:2b:9c:30:b4:3a: 80:e1:c0:82:9a:87:00:c7:34:ca:c2:bc:07:94:ac:44:1c:f0: 99:64:4a:2b:23:6b:73:5f:d2:ae:ae:9c:6c:51:bc:81:46:1a: 0b:2c:3d:8e:b2:4d:a0:1e:e3:b3:c9:db:29:f5:99:4f:1e:13: cb:72:b2:61:f4:3a:52:54:ea:ef:06:e7:a4:02:2a:fa:31:8d: 65:52:94:44:5c:0e:6e:ec:02:53:ca:72:92:a4:c4:16:48:37: 02:61:90:1f:39:48:e2:ea:ee:74:d1:99:54:53:d7:35:f9:7e: 8b:5e:ee:e1:5b:19:70:e8:f0:6d:c9:e2:40:b7:49:4f:c2:3d: 03:c4:02:32:2c:79:3f:eb:94:8f:c0:2d:f5:43:fe:f3:5b:b6: ae:d9:86:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxMzQxMTAvBgNVBAUTKDEwRjQ4MUNGMjhEQ0U3NTgxQThDQ0I4RTUwREUwOThG N0M4QkM5MTUwHhcNMjUwNjA1MDQyMTI5WhcNMjUwNjEyMDQyMTI5WjAYMRYwFAYD VQQDEw02ODQxMWI0OS04MWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgL449aI3KnETCGwOgQKQZVierGc8dvamLcNTFbCihUQRa91s7Gk3JEuWMkn 4CXFH8FKL90pBqqkra6RKKW6Cxk8vA8Sk10wV62RDhYKhQni4ij7ztoiKhKm43+y T8NRfAVrJAWnTSEDSKRCJo2Y0HQsqkM6oVHhy3G/fnUfMMe3O7F1+81FnpaIKzcc wzv9SmwAZoJkkwc/p8c0i4RDSxJqTlrzINeYMldp+sgSXfSiUsPvKBmWTKxCdZOJ Vm7ULPLf5xoGDYlv0Hh1payGFDrOUJR12qFlAwdobs7W/VNxTRBcV9qBG2H23S7F w3y1sXylLPu7Zo0zpLS5RkjDPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRlbYMq 7Ku18xfUmxBXrFEOLhO/MB8GA1UdIwQYMBaAFBD0gc8o3OdYGozLjlDeCY98i8kV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjEzNC83OUEzMzU3NkFB MkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUxZ2FqTXVPVU40SmozeUx5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQU0J6eWpjNTFnYWpNdU9VTjRKajN5THlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjEzNC83OUEzMzU3NkFBMkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUx Z2FqTXVPVU40SmozeUx5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ9V46FNkG/VbsGoBFcZron4G5WmA4PHBNd3UagtUto72jH9JTaVdV 05Q27mdmAdsEmMC8B4B+0z8uboPdrYnjdirRm3YhUIK7QwcrRpLCv8gpaQdZ4vIg UAWNgvp4Rz9ct0mUOC3nK5wwtDqA4cCCmocAxzTKwrwHlKxEHPCZZEorI2tzX9Ku rpxsUbyBRhoLLD2Osk2gHuOzydsp9ZlPHhPLcrJh9DpSVOrvBuekAir6MY1lUpRE XA5u7AJTynKSpMQWSDcCYZAfOUji6u500ZlUU9c1+X6LXu7hWxlw6PBtyeJAt0lP wj0DxAIyLHk/65SPwC31Q/7zW7au2YZM -----END CERTIFICATE-----Generated at Thu Jun 5 19:56:22 2025 by rpki-client