$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft File: eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json) Hash identifier: BcugKwcgvJsz6Y69DlvHT4kL3ZXgFqDhk0t7qCEWSk8= Subject key identifier: 94:16:56:F5:61:F0:A3:04:8C:05:27:F9:F9:53:53:41:66:C6:F6:4F Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 Certificate issuer: /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft Manifest number: 6E Signing time: Tue 03 Jun 2025 06:41:26 +0000 Manifest this update: Tue 03 Jun 2025 06:41:25 +0000 Manifest next update: Tue 10 Jun 2025 06:41:25 +0000 Files and hashes: 1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: BQcfsMn6xx+evbSUwDL++ApmOZiLxlb4hq5e05PREbk=) 2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: OlXBby3DJZy8rl/8+NH1zeLmOWVMUXLA2k9gi34qwsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11 Validity Not Before: Jun 3 06:41:25 2025 GMT Not After : Jun 10 06:41:25 2025 GMT Subject: CN=683e9915-dd52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a8:95:04:f5:ed:8b:5e:59:5e:80:30:b9:cd: 9c:5f:02:b2:7b:02:ef:c6:69:c2:34:d7:df:1f:6d: 23:9d:95:94:67:f3:39:73:b2:ed:27:7f:c7:5f:4b: 7e:88:c7:b5:8e:02:58:6f:0f:4d:59:b9:6a:c5:8e: be:28:6c:23:c7:4a:f1:9a:b4:82:67:69:2b:60:6d: 44:56:1f:3a:e6:21:1c:80:1b:5d:7b:54:1b:ee:60: 15:1c:b0:a0:95:a8:cf:4a:9b:02:54:94:ee:f8:c0: c6:3c:30:cf:91:de:74:7b:ce:33:1e:e1:20:4e:a5: ef:18:66:7f:4e:b8:1b:ee:e1:fc:4d:2e:7e:05:df: 65:b1:c6:e6:b2:de:22:6b:2e:e7:9a:41:9c:d8:4a: 35:de:05:44:49:55:6e:86:89:f1:5c:58:9c:bb:8e: cf:91:b0:01:f3:a2:a9:36:31:c4:25:25:ad:ea:ce: 03:01:e7:98:58:22:11:e4:6d:30:f9:44:22:72:52: ee:d8:74:a7:f4:9e:84:19:67:83:de:d0:bd:5f:87: 09:7f:07:e1:49:59:87:60:8d:ed:73:90:27:df:37: 81:48:81:e0:15:ff:90:f2:d1:25:d8:05:09:5f:cf: 15:af:1d:b2:f3:24:48:13:e2:80:21:6a:77:45:18: 21:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:16:56:F5:61:F0:A3:04:8C:05:27:F9:F9:53:53:41:66:C6:F6:4F X509v3 Authority Key Identifier: keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c3:6f:c9:45:ae:2b:21:7c:5e:b5:cd:bd:8f:89:4f:0a:02: b8:57:47:6d:bb:0a:e4:21:cc:75:f0:b3:81:6f:fd:75:a6:5d: 6b:a5:8f:b7:ed:47:da:85:1c:c5:3d:1d:4d:1e:52:83:23:2b: 2c:a1:79:df:60:b7:51:0d:77:ad:a4:17:80:2b:c7:2a:6d:e5: 21:90:37:68:72:b0:98:4d:c4:62:c4:de:13:88:cd:09:c7:2f: a5:70:3d:42:c6:a4:64:e5:da:18:9b:b0:48:f3:42:eb:66:e0: 00:0b:2d:05:6b:fb:8f:ab:0b:93:8f:92:7a:c9:55:d6:ab:fd: ea:38:27:43:c6:22:02:76:96:03:ff:26:3e:0e:70:91:a7:bc: 54:c0:ce:a7:10:cb:36:67:c1:3c:82:ca:67:99:38:c2:b2:90: 70:f4:0c:db:e3:6a:fc:c1:b1:1b:6e:64:72:67:d6:a8:6d:ee: fa:8f:77:11:8a:99:e6:0d:b0:a2:8a:23:e2:dc:95:1c:7b:6a: 59:01:19:57:12:68:e2:c0:67:29:21:a4:78:31:2d:e4:03:f5: 39:24:0f:7f:44:3b:58:83:76:12:c7:fd:6b:6d:e8:4d:fa:f7: 26:b0:1e:48:ea:dc:61:98:86:00:3c:62:2c:2d:a5:08:fd:25: 7c:60:20:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjQ4OTExMC8GA1UEBRMoN0FFQTc3N0M2QjE5MTUxMzUzM0IwRTJFREYwRjBEODRD QjcwQkExMTAeFw0yNTA2MDMwNjQxMjVaFw0yNTA2MTAwNjQxMjVaMBgxFjAUBgNV BAMTDTY4M2U5OTE1LWRkNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZqJUE9e2LXllegDC5zZxfArJ7Au/GacI0198fbSOdlZRn8zlzsu0nf8dfS36I x7WOAlhvD01ZuWrFjr4obCPHSvGatIJnaStgbURWHzrmIRyAG117VBvuYBUcsKCV qM9KmwJUlO74wMY8MM+R3nR7zjMe4SBOpe8YZn9OuBvu4fxNLn4F32Wxxuay3iJr LueaQZzYSjXeBURJVW6GifFcWJy7js+RsAHzoqk2McQlJa3qzgMB55hYIhHkbTD5 RCJyUu7YdKf0noQZZ4Pe0L1fhwl/B+FJWYdgje1zkCffN4FIgeAV/5Dy0SXYBQlf zxWvHbLzJEgT4oAhandFGCFLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlBZW9WHw owSMBSf5+VNTQWbG9k8wHwYDVR0jBBgwFoAUeup3fGsZFRNTOw4u3w8NhMtwuhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNDg5LzMyODlBOTBFOUJG QTExRUZCRUI5ODQ2RUM0RjlBRTAyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3Vo RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZXVwM2ZHc1pGUk5UT3c0dTN3OE5oTXR3dWhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy NDg5LzMyODlBOTBFOUJGQTExRUZCRUI5ODQ2RUM0RjlBRTAyL2V1cDNmR3NaRlJO VE93NHUzdzhOaE10d3VoRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEjDb8lFrishfF61zb2PiU8KArhXR227CuQhzHXws4Fv/XWmXWulj7ft R9qFHMU9HU0eUoMjKyyhed9gt1ENd62kF4Arxypt5SGQN2hysJhNxGLE3hOIzQnH L6VwPULGpGTl2hibsEjzQutm4AALLQVr+4+rC5OPknrJVdar/eo4J0PGIgJ2lgP/ Jj4OcJGnvFTAzqcQyzZnwTyCymeZOMKykHD0DNvjavzBsRtuZHJn1qht7vqPdxGK meYNsKKKI+LclRx7alkBGVcSaOLAZykhpHgxLeQD9TkkD39EO1iDdhLH/Wtt6E36 9yawHkjq3GGYhgA8YiwtpQj9JXxgIGo= -----END CERTIFICATE-----Generated at Wed Jun 4 00:18:22 2025 by rpki-client