$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: /95CYJmsobUayQwIq1yelnKDpgSlifwxKkXa762ujug= Subject key identifier: F4:87:97:F3:4C:31:31:C3:6B:DF:A5:A4:0D:D0:33:E0:D4:34:6F:B8 Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: 75 Signing time: Sun 01 Jun 2025 06:33:08 +0000 Manifest this update: Sun 01 Jun 2025 06:33:07 +0000 Manifest next update: Sun 08 Jun 2025 06:33:07 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: XLr1XsLVu9PieJi1e11Zq8wBfamFu2zhadN3APzPd9g=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: 5nFCTmC5xU4JIe+ocqPzYmN20Z681T2Mb6LU4xxafNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Jun 1 06:33:07 2025 GMT Not After : Jun 8 06:33:07 2025 GMT Subject: CN=683bf423-875d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:2a:cf:69:02:03:6b:19:f7:ad:4d:78:af: 6a:fc:65:a6:f6:de:1e:a6:4b:2f:a1:57:5b:f3:42: 4b:5d:41:b1:9b:12:ff:69:e3:fc:f5:31:e4:14:11: fd:70:2c:42:9f:e7:1f:9a:8d:14:8b:46:ec:fb:87: cc:6c:5a:7e:95:49:24:99:ec:11:0b:80:1e:c4:39: a1:2a:9a:90:ed:f6:e8:1a:bb:18:1d:66:b0:d6:e7: 31:4a:17:1e:ba:42:d7:8a:5a:8d:71:1c:df:e7:64: b9:2f:86:f2:8b:8e:e1:73:36:9b:a4:b0:9f:4f:3d: c2:67:7f:75:71:94:97:83:7b:f9:94:2b:99:ed:78: 82:c3:cb:9b:d7:19:b4:d9:9f:59:f9:06:ff:24:fb: 55:e8:89:0d:eb:be:47:68:4a:04:a5:3a:b3:87:1a: 85:ec:77:57:dc:c0:1e:b0:9c:29:94:5c:24:24:c3: 05:ea:7a:8a:09:bf:fe:15:e2:61:99:25:b6:d9:95: c3:f5:68:30:a8:a2:29:ec:cc:79:37:c7:8f:00:6e: c6:ec:80:a4:b4:54:58:cc:ae:2f:9a:e1:08:03:d6: 5b:94:94:83:04:d3:a4:9f:ab:00:df:79:39:40:10: ec:5e:3d:d7:df:05:ac:c1:a3:b9:bb:e6:bd:42:de: 69:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:87:97:F3:4C:31:31:C3:6B:DF:A5:A4:0D:D0:33:E0:D4:34:6F:B8 X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:52:4a:65:9a:de:c9:08:6a:e0:c0:00:83:35:2c:aa:6f:99: 31:85:f6:06:5d:ba:1f:d8:d1:56:3e:17:f5:6c:b1:b5:cd:e5: 9c:ef:7f:ab:ec:3b:20:7f:89:e8:1d:25:4a:03:64:66:27:67: 3c:d2:64:c0:e2:5e:80:38:57:27:1c:35:af:2e:39:8c:33:79: ad:db:77:92:55:22:5d:05:17:2b:d6:66:16:2d:7e:94:0d:0d: 61:f6:dc:2d:4e:c6:47:37:d4:19:41:b7:9a:2b:9a:eb:b9:a8: af:cc:da:8d:fa:42:f3:ba:cd:86:1c:4a:c7:19:d3:1c:1b:f7: f0:ec:65:d1:1c:e4:75:56:ba:51:9a:f7:a4:41:55:10:c3:f4: 11:1a:86:e7:ec:a9:36:30:76:6e:f2:e1:20:b5:46:46:a0:d3: 41:1b:ed:80:3a:50:eb:dd:47:12:45:59:a4:71:6b:22:49:d1: 4e:6d:43:6c:16:32:5b:d0:4d:7c:20:11:96:7f:f8:a6:38:54: be:79:66:4f:a2:06:c4:85:b6:0d:07:7c:47:d5:54:22:c0:e7: bb:b5:5c:c7:9a:1b:06:db:ef:db:f5:54:c8:8a:e0:16:28:ff: 49:c9:c5:b1:35:34:d8:06:72:01:fe:93:78:e4:a0:ec:30:02: 93:5b:ad:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTZFNzExMC8GA1UEBRMoMTI0NzA4MUU5QkE5N0MxM0M3REQzRDY4RTQ0M0QxRjU0 NzlCMkFGRjAeFw0yNTA2MDEwNjMzMDdaFw0yNTA2MDgwNjMzMDdaMBgxFjAUBgNV BAMTDTY4M2JmNDIzLTg3NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCslCrPaQIDaxn3rU14r2r8Zab23h6mSy+hV1vzQktdQbGbEv9p4/z1MeQUEf1w LEKf5x+ajRSLRuz7h8xsWn6VSSSZ7BELgB7EOaEqmpDt9ugauxgdZrDW5zFKFx66 QteKWo1xHN/nZLkvhvKLjuFzNpuksJ9PPcJnf3VxlJeDe/mUK5nteILDy5vXGbTZ n1n5Bv8k+1XoiQ3rvkdoSgSlOrOHGoXsd1fcwB6wnCmUXCQkwwXqeooJv/4V4mGZ JbbZlcP1aDCooinszHk3x48AbsbsgKS0VFjMri+a4QgD1luUlIME06SfqwDfeTlA EOxePdffBazBo7m75r1C3mmhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9IeX80wx McNr36WkDdAz4NQ0b7gwHwYDVR0jBBgwFoAUEkcIHpupfBPH3T1o5EPR9UebKv8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5NkU3LzA2NzlBQ0Y0OTEy NTExRUY5NDJBMkIyOEM0RjlBRTAyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRWtjSUhwdXBmQlBIM1QxbzVFUFI5VWViS3Y4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 NkU3LzA2NzlBQ0Y0OTEyNTExRUY5NDJBMkIyOEM0RjlBRTAyL0VrY0lIcHVwZkJQ SDNUMW81RVBSOVVlYkt2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL5SSmWa3skIauDAAIM1LKpvmTGF9gZduh/Y0VY+F/VssbXN5Zzvf6vs OyB/iegdJUoDZGYnZzzSZMDiXoA4VyccNa8uOYwzea3bd5JVIl0FFyvWZhYtfpQN DWH23C1Oxkc31BlBt5ormuu5qK/M2o36QvO6zYYcSscZ0xwb9/DsZdEc5HVWulGa 96RBVRDD9BEahufsqTYwdm7y4SC1Rkag00Eb7YA6UOvdRxJFWaRxayJJ0U5tQ2wW MlvQTXwgEZZ/+KY4VL55Zk+iBsSFtg0HfEfVVCLA57u1XMeaGwbb79v1VMiK4BYo /0nJxbE1NNgGcgH+k3jkoOwwApNbrXE= -----END CERTIFICATE-----Generated at Mon Jun 2 19:27:23 2025 by rpki-client