$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft File: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json) Hash identifier: +3PtqYKSsiaEgR/jN57tNePK1IKFh1ENHMH27+sLUg4= Subject key identifier: 1D:E6:0D:DD:E7:74:C4:33:41:67:BF:4D:36:BF:28:4C:56:3F:C4:83 Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Certificate serial: 05F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft Manifest number: 05F2 Signing time: Mon 02 Jun 2025 23:11:45 +0000 Manifest this update: Mon 02 Jun 2025 23:11:45 +0000 Manifest next update: Mon 09 Jun 2025 23:11:45 +0000 Files and hashes: 1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: Apr/esKMmAMrhD60+yG3BFdB4ThzwhwTxN3s+mDkhX0=) 2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: KeDjzKypgQHXzMMCw525U76eYPfXZKl/2OFa/SSqsKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 23:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1527 (0x5f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Validity Not Before: Jun 2 23:11:45 2025 GMT Not After : Jun 9 23:11:45 2025 GMT Subject: CN=683e2fb1-c4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:28:ce:82:27:a9:2e:1f:c7:0a:c0:54:e8: 48:1d:20:74:53:e1:01:72:25:11:a4:61:d2:58:21: 35:87:0d:85:00:33:4f:79:6d:d0:25:15:b0:5d:46: 57:0c:26:46:9a:c5:8e:6f:b1:60:a0:47:79:9a:e9: 01:0a:81:77:73:ee:03:9b:90:24:54:bf:d4:7e:f7: dd:94:c5:84:a1:28:3c:cd:6b:38:3c:b2:74:d6:b5: d0:a5:b1:ef:3c:dd:8c:d5:8e:e9:c7:75:b7:12:4c: 2a:2d:f4:e4:55:88:38:e9:ea:ba:bb:9a:c5:39:60: 08:8b:4d:bd:8f:bb:be:2e:0f:aa:d6:fb:f0:25:40: 17:27:51:6c:72:3e:7b:ac:28:c7:ad:17:5e:a3:b8: 8f:13:09:1e:b5:3d:89:28:f9:a2:a5:45:e2:3a:6c: c4:89:f2:61:73:10:32:3e:4e:a6:5f:6c:c4:bf:39: 37:5c:be:fd:42:d3:82:83:12:da:ac:d9:37:3b:cd: 7a:82:a8:df:e5:58:03:96:e0:14:8f:ad:d4:bd:fb: da:88:9f:bf:93:18:00:dc:de:b2:83:8b:eb:8c:4f: 89:a7:2b:e0:3a:7d:45:b5:4a:0c:5a:f3:4c:08:de: 92:41:6a:80:93:c8:88:e9:2a:6b:3c:c7:8b:5e:d5: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E6:0D:DD:E7:74:C4:33:41:67:BF:4D:36:BF:28:4C:56:3F:C4:83 X509v3 Authority Key Identifier: keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:36:a1:24:db:1e:dd:cc:38:44:4d:49:42:b7:9a:3d:a6:35: 52:e7:ef:b3:1a:e0:79:95:19:b2:07:9d:3c:7b:a1:2a:26:76: 96:1e:19:c2:d0:cf:4d:29:5d:c7:18:c5:b0:b5:cc:89:b4:85: 4d:83:6c:8b:78:f0:b3:9d:a9:7c:b3:2d:b6:b5:64:2a:06:2e: a5:51:24:50:99:12:f3:10:c7:de:d3:58:bd:09:ff:ba:2e:77: dd:7d:9b:05:24:ed:18:af:b5:2a:63:8e:9a:41:00:66:c6:d1: 82:27:dc:af:2e:65:07:21:cb:a6:74:5e:9d:5c:22:16:69:de: 98:fe:43:b4:da:90:84:a9:b2:67:c1:b9:ec:fe:6d:b5:c6:6f: 25:fa:18:38:d3:69:5a:af:75:da:42:eb:ac:12:80:15:96:7e: 97:f2:00:bd:4a:a5:a7:aa:21:27:79:9a:21:cf:4b:59:f0:ba: 62:8b:1b:c5:ef:a9:55:12:c2:5e:5f:ce:9d:fd:28:18:b0:35: 51:24:d2:cd:f0:12:7e:50:ab:5a:ba:29:05:49:be:ae:0a:6a: 40:c0:b8:3c:fd:8d:ac:d9:91:2a:1a:11:d1:14:27:ab:86:21: 21:e6:09:f9:72:6b:8d:7e:e5:6f:06:58:0f:35:34:db:4e:11: 21:09:f7:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz RUQxOTY3OTgwHhcNMjUwNjAyMjMxMTQ1WhcNMjUwNjA5MjMxMTQ1WjAYMRYwFAYD VQQDEw02ODNlMmZiMS1jNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6EozoInqS4fxwrAVOhIHSB0U+EBciURpGHSWCE1hw2FADNPeW3QJRWwXUZX DCZGmsWOb7FgoEd5mukBCoF3c+4Dm5AkVL/UfvfdlMWEoSg8zWs4PLJ01rXQpbHv PN2M1Y7px3W3EkwqLfTkVYg46eq6u5rFOWAIi029j7u+Lg+q1vvwJUAXJ1Fscj57 rCjHrRdeo7iPEwketT2JKPmipUXiOmzEifJhcxAyPk6mX2zEvzk3XL79QtOCgxLa rNk3O816gqjf5VgDluAUj63UvfvaiJ+/kxgA3N6yg4vrjE+JpyvgOn1FtUoMWvNM CN6SQWqAk8iI6SprPMeLXtVmYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3mDd3n dMQzQWe/TTa/KExWP8SDMB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83MjMxQzNEQUFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0Zt OGQya0lzNjNJZTQtMFpaNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXNqEk2x7dzDhETUlCt5o9pjVS5++zGuB5lRmyB508e6EqJnaWHhnC 0M9NKV3HGMWwtcyJtIVNg2yLePCznal8sy22tWQqBi6lUSRQmRLzEMfe01i9Cf+6 LnfdfZsFJO0Yr7UqY46aQQBmxtGCJ9yvLmUHIcumdF6dXCIWad6Y/kO02pCEqbJn wbns/m21xm8l+hg402lar3XaQuusEoAVln6X8gC9SqWnqiEneZohz0tZ8LpiixvF 76lVEsJeX86d/SgYsDVRJNLN8BJ+UKtauikFSb6uCmpAwLg8/Y2s2ZEqGhHRFCer hiEh5gn5cmuNfuVvBlgPNTTbThEhCffH -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:54 2025 by rpki-client