$ rpki-client -vvf rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft File: EU3kpq3-T6GGFcVHcV67T_WUbvY.mft (raw, json) Hash identifier: 4YuYbJQjITE2XRBpQpU6oz6DA283wPezU02Ww4Q7SWw= Subject key identifier: EB:F2:01:38:15:E5:6B:AA:77:13:9A:E8:BD:BD:A4:C6:9C:C6:08:1A Authority key identifier: 11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6 Certificate issuer: /CN=A91530ED/serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft Manifest number: 014D Signing time: Sat 31 May 2025 03:51:00 +0000 Manifest this update: Sat 31 May 2025 03:51:00 +0000 Manifest next update: Sat 07 Jun 2025 03:51:00 +0000 Files and hashes: 1: EU3kpq3-T6GGFcVHcV67T_WUbvY.crl (hash: NDPBpAzeV4LAK6BJz0yKCJNGp+j2s7tXapiVN45W9M8=) 2: AA15C0AEE84311EE8683D32CC4F9AE02.roa (hash: yuRBt0z2GkF5H4ZbsyGbH4wIDriWm9Wns8YyYPbQ6Ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91530ED, serialNumber=114DE4A6ADFE4FA18615C547715EBB4FF5946EF6 Validity Not Before: May 31 03:51:00 2025 GMT Not After : Jun 7 03:51:00 2025 GMT Subject: CN=683a7ca4-cd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:00:93:e3:ba:e8:56:ce:f1:0c:60:10:0c:1f: fe:ce:00:4b:1a:6e:bc:ea:34:92:77:6e:a6:02:e6: 36:74:4c:fa:cc:36:ee:88:bf:16:b5:06:7b:85:9e: 3e:83:3b:30:be:ca:44:2f:77:cd:80:38:fe:24:b6: 86:f7:3b:04:84:87:a9:dd:1f:11:e3:32:75:13:b4: d4:43:4c:6c:71:9d:15:e1:9d:2a:fd:57:d1:16:b6: fa:df:b4:2a:4b:9f:81:6e:73:5e:b0:30:2c:1c:f2: 38:0c:c0:74:df:0d:c4:bd:d4:58:8c:0a:f3:06:99: fc:41:5c:4c:1e:94:d6:45:de:28:9d:96:a6:4b:4c: 1e:6b:a5:37:23:05:eb:0e:f5:c3:f4:7a:5b:32:dc: 5a:a5:df:2c:b8:f1:e1:70:d9:c7:76:7d:a2:82:78: e0:b2:81:a7:ea:d0:81:79:d5:bb:e3:57:79:c8:f4: 7a:40:01:f9:7d:18:ba:8b:08:7d:66:58:52:0a:e5: 7a:dd:26:f3:e9:3b:d6:a4:93:70:15:c2:c4:3b:9e: 48:9b:b5:53:fd:5e:0f:c5:91:2e:6f:2f:f0:c2:3c: ef:dd:bf:9d:9d:f0:d1:d5:46:8f:a0:dc:c5:b2:d6: fb:e8:b7:33:65:eb:6e:54:41:ce:94:46:cc:47:0c: 92:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F2:01:38:15:E5:6B:AA:77:13:9A:E8:BD:BD:A4:C6:9C:C6:08:1A X509v3 Authority Key Identifier: keyid:11:4D:E4:A6:AD:FE:4F:A1:86:15:C5:47:71:5E:BB:4F:F5:94:6E:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU3kpq3-T6GGFcVHcV67T_WUbvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91530ED/4D8F8842400F11EEB6B3DB4AC4F9AE02/EU3kpq3-T6GGFcVHcV67T_WUbvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:fc:23:83:8c:60:5b:e7:7e:b9:3c:d5:0f:67:e5:84:93:00: 11:49:87:e0:31:0e:5f:75:53:5a:8c:89:ab:30:62:e4:25:33: c6:1a:c9:23:2e:7c:9e:b6:ff:42:85:6f:98:7e:b2:f3:9c:03: 6c:bd:85:68:d4:8c:95:3c:aa:6b:01:f5:49:bd:42:fc:85:9f: d2:26:7f:35:d6:d2:4e:fb:68:ca:b2:c6:fc:9b:25:fc:79:64: 94:38:b0:4d:fd:30:f9:7f:25:82:75:6c:37:f5:2d:10:1d:0d: 3a:02:03:12:b5:51:96:dc:71:0a:9e:04:da:7f:05:c9:83:11: df:47:56:a5:04:c7:fa:a3:1b:95:c4:d5:c2:b8:49:d9:d1:5b: 77:ce:6b:1a:c4:15:6b:fa:d0:83:7a:c6:6a:71:cf:0d:0d:2a: 20:f9:79:96:33:ec:8b:2a:14:34:50:69:36:45:6f:88:0d:95: 33:23:2f:3c:4b:f2:79:d2:1b:8e:c2:a9:be:8f:ad:41:de:60: 2e:0e:d0:97:95:d8:b2:87:2d:ac:35:56:d7:27:f9:02:9f:04: 27:6a:db:fb:9e:6f:b4:80:03:79:ab:cf:77:47:cb:68:c5:53: 43:b3:f7:26:2e:ad:5e:bb:fa:9f:4b:a1:44:78:5f:94:25:cd: e9:94:0e:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwRUQxMTAvBgNVBAUTKDExNERFNEE2QURGRTRGQTE4NjE1QzU0NzcxNUVCQjRG RjU5NDZFRjYwHhcNMjUwNTMxMDM1MTAwWhcNMjUwNjA3MDM1MTAwWjAYMRYwFAYD VQQDEw02ODNhN2NhNC1jZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwCT47roVs7xDGAQDB/+zgBLGm686jSSd26mAuY2dEz6zDbuiL8WtQZ7hZ4+ gzswvspEL3fNgDj+JLaG9zsEhIep3R8R4zJ1E7TUQ0xscZ0V4Z0q/VfRFrb637Qq S5+BbnNesDAsHPI4DMB03w3EvdRYjArzBpn8QVxMHpTWRd4onZamS0wea6U3IwXr DvXD9HpbMtxapd8suPHhcNnHdn2ignjgsoGn6tCBedW741d5yPR6QAH5fRi6iwh9 ZlhSCuV63Sbz6TvWpJNwFcLEO55Im7VT/V4PxZEuby/wwjzv3b+dnfDR1UaPoNzF stb76LczZetuVEHOlEbMRwyStQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvyATgV 5WuqdxOa6L29pMacxggaMB8GA1UdIwQYMBaAFBFN5Kat/k+hhhXFR3Feu0/1lG72 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzBFRC80RDhGODg0MjQw MEYxMUVFQjZCM0RCNEFDNEY5QUUwMi9FVTNrcHEzLVQ2R0dGY1ZIY1Y2N1RfV1Vi dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VVM2twcTMtVDZHR0ZjVkhjVjY3VF9XVWJ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzBFRC80RDhGODg0MjQwMEYxMUVFQjZCM0RCNEFDNEY5QUUwMi9FVTNrcHEzLVQ2 R0dGY1ZIY1Y2N1RfV1VidlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg/CODjGBb5365PNUPZ+WEkwARSYfgMQ5fdVNajImrMGLkJTPGGskj Lnyetv9ChW+YfrLznANsvYVo1IyVPKprAfVJvUL8hZ/SJn811tJO+2jKssb8myX8 eWSUOLBN/TD5fyWCdWw39S0QHQ06AgMStVGW3HEKngTafwXJgxHfR1alBMf6oxuV xNXCuEnZ0Vt3zmsaxBVr+tCDesZqcc8NDSog+XmWM+yLKhQ0UGk2RW+IDZUzIy88 S/J50huOwqm+j61B3mAuDtCXldiyhy2sNVbXJ/kCnwQnatv7nm+0gAN5q893R8to xVNDs/cmLq1eu/qfS6FEeF+UJc3plA4L -----END CERTIFICATE-----Generated at Sat May 31 16:55:09 2025 by rpki-client