$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft File: eQckJnCjuJ00jVqEHayNGC62YH4.mft (raw, json) Hash identifier: r6ZaTvhG9OlsFObgVdUY8/o08CGH7LrIx5O3DrKNTU8= Subject key identifier: 96:3A:BA:EB:67:01:1F:DB:A0:13:C2:B1:D6:24:88:B1:C8:2F:5F:48 Authority key identifier: 79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E Certificate issuer: /CN=A913DC32/serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft Manifest number: 30 Signing time: Sun 01 Jun 2025 07:27:05 +0000 Manifest this update: Sun 01 Jun 2025 07:27:05 +0000 Manifest next update: Sun 08 Jun 2025 07:27:04 +0000 Files and hashes: 1: eQckJnCjuJ00jVqEHayNGC62YH4.crl (hash: 1jUwDLGRUDtIpcHrQd3b7x+EZLQrql/1b3UxUiIQ+FE=) 2: 22E5730815AC11F0BA789D40C4F9AE02.roa (hash: iWmeds3ikQddJ0zOLOMR2/nAx9kIXx/domN/vEqWgPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC32, serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Validity Not Before: Jun 1 07:27:05 2025 GMT Not After : Jun 8 07:27:04 2025 GMT Subject: CN=683c00c9-f7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:f7:f4:3f:51:71:26:69:65:c6:1d:d5:07: 49:91:a4:99:14:bd:b5:9d:23:88:57:60:6e:b3:ab: e7:c2:bd:09:b7:a7:ae:89:de:68:a8:3b:26:71:83: 05:a5:97:c0:e2:2a:40:90:12:d8:e3:7b:f7:a4:d0: a7:7e:49:74:a2:4a:ab:05:0e:54:c9:5a:b6:26:fb: a9:10:a6:f7:03:90:4e:ee:64:c3:d1:21:ec:f7:f3: f6:c2:ee:7e:89:3d:70:0f:24:56:5a:9d:db:16:ab: a8:c9:dc:72:2b:7c:40:20:8d:48:d0:c6:9f:ee:43: f4:b1:16:42:46:a3:d4:f6:0e:9a:5a:ab:1a:20:2d: 32:20:08:da:ce:43:a5:54:e1:01:6f:1b:15:13:3f: 6e:02:d9:f8:41:01:37:74:06:90:7c:69:39:79:0f: 9c:04:f5:5d:1e:6e:17:8f:3f:37:43:05:ff:33:07: b3:f5:5d:dd:03:84:f3:ce:e1:3f:1c:a5:7e:c7:1e: 9d:f4:5d:b2:c5:ef:83:53:0b:38:c9:e8:8b:bd:9c: 72:50:b0:da:f4:f3:b8:27:16:41:35:85:ca:b8:66: 96:e6:9a:36:3f:ac:de:38:15:1d:2b:f1:e1:ff:4a: a8:8d:f7:46:3a:d4:1a:05:fa:2c:fa:d4:f5:58:ca: f8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3A:BA:EB:67:01:1F:DB:A0:13:C2:B1:D6:24:88:B1:C8:2F:5F:48 X509v3 Authority Key Identifier: keyid:79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:43:b5:f2:1e:8d:35:f4:85:4f:b8:87:60:e8:cc:e7:58:07: aa:32:e3:72:b0:43:e9:5f:ba:74:86:73:42:3a:d3:81:95:3b: e7:5a:5a:3d:e5:e4:2c:d4:56:3e:04:5f:c3:11:b3:e8:f9:a6: cf:e8:20:ee:6c:2a:a2:a7:07:76:e6:25:8b:22:7c:ff:5d:39: f9:bb:95:22:1d:cb:d7:3a:4d:33:2b:13:da:70:49:c0:65:64: 83:1e:9a:d1:41:08:f2:23:1b:d2:6b:68:60:a1:31:dd:79:4b: 96:3d:5a:40:38:28:61:43:51:0e:f5:73:15:fe:37:28:ad:22: 2c:a1:96:41:b6:33:3f:46:40:de:03:e2:b7:2e:1f:d1:15:1f: ea:2a:59:af:77:e2:c3:8b:9c:e0:03:9c:ce:8c:6d:f8:8f:81: 16:52:cf:a9:05:5d:fb:dc:78:66:d6:ff:28:63:82:4f:c9:f1: bf:00:f9:f2:cc:f9:6e:96:d1:d2:8d:59:df:b1:48:c8:eb:ea: 60:f9:3c:0a:16:8e:64:f0:5b:98:03:75:91:13:1b:b2:0a:2a: 6c:11:cb:4c:59:c3:60:64:ff:d5:1b:ed:6e:bb:73:ad:b9:86: 8e:bd:8d:63:09:de:3f:a6:88:79:aa:05:70:19:ef:ed:69:1a: 7e:fa:09:e9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REMzMjExMC8GA1UEBRMoNzkwNzI0MjY3MEEzQjg5RDM0OEQ1QTg0MURBQzhEMTgy RUI2NjA3RTAeFw0yNTA2MDEwNzI3MDVaFw0yNTA2MDgwNzI3MDRaMBgxFjAUBgNV BAMTDTY4M2MwMGM5LWY3ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfpff0P1FxJmllxh3VB0mRpJkUvbWdI4hXYG6zq+fCvQm3p66J3mioOyZxgwWl l8DiKkCQEtjje/ek0Kd+SXSiSqsFDlTJWrYm+6kQpvcDkE7uZMPRIez38/bC7n6J PXAPJFZandsWq6jJ3HIrfEAgjUjQxp/uQ/SxFkJGo9T2DppaqxogLTIgCNrOQ6VU 4QFvGxUTP24C2fhBATd0BpB8aTl5D5wE9V0ebhePPzdDBf8zB7P1Xd0DhPPO4T8c pX7HHp30XbLF74NTCzjJ6Iu9nHJQsNr087gnFkE1hcq4ZpbmmjY/rN44FR0r8eH/ SqiN90Y61BoF+iz61PVYyvhpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUljq662cB H9ugE8Kx1iSIscgvX0gwHwYDVR0jBBgwFoAUeQckJnCjuJ00jVqEHayNGC62YH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQzMyLzdCNzUwQkZFRkNG RDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUowMGpWcUVIYXlOR0M2MllI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVFja0puQ2p1SjAwalZxRUhheU5HQzYyWUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE QzMyLzdCNzUwQkZFRkNGRDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUow MGpWcUVIYXlOR0M2MllINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKNDtfIejTX0hU+4h2DozOdYB6oy43KwQ+lfunSGc0I604GVO+daWj3l 5CzUVj4EX8MRs+j5ps/oIO5sKqKnB3bmJYsifP9dOfm7lSIdy9c6TTMrE9pwScBl ZIMemtFBCPIjG9JraGChMd15S5Y9WkA4KGFDUQ71cxX+NyitIiyhlkG2Mz9GQN4D 4rcuH9EVH+oqWa934sOLnOADnM6MbfiPgRZSz6kFXfvceGbW/yhjgk/J8b8A+fLM +W6W0dKNWd+xSMjr6mD5PAoWjmTwW5gDdZETG7IKKmwRy0xZw2Bk/9Ub7W67c625 ho69jWMJ3j+miHmqBXAZ7+1pGn76Cek= -----END CERTIFICATE-----Generated at Mon Jun 2 20:43:54 2025 by rpki-client