$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft File: eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json) Hash identifier: /aaG69jN0LvbfC1L+L4lIpSnMn/QPIqU7FsgkOqruAA= Subject key identifier: D1:CF:1D:48:81:F8:90:8F:C0:0C:02:85:2B:21:EE:8F:51:8B:65:0E Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Certificate serial: 0428 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft Manifest number: 0423 Signing time: Sun 08 Jun 2025 23:58:55 +0000 Manifest this update: Sun 08 Jun 2025 23:58:54 +0000 Manifest next update: Sun 15 Jun 2025 23:58:54 +0000 Files and hashes: 1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: yDIrQCvFgGHCiIHDein3I7qpHeUuNFqMJUg9jAcl7Xs=) 2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: hAIkEeLEWcB2wcEGanDh+e9b0MM5CnTkz5SOu7dH+to=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 23:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1064 (0x428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Validity Not Before: Jun 8 23:58:54 2025 GMT Not After : Jun 15 23:58:54 2025 GMT Subject: CN=684623be-265f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c2:08:9a:6a:06:94:8f:83:79:0a:62:2e:98: 05:01:da:d2:b7:71:ec:43:25:b5:08:6c:57:8e:4e: 00:c9:35:a5:0d:df:88:02:67:42:ec:99:61:64:52: 70:e8:e0:96:7e:8c:c3:ba:e3:2d:09:c1:e4:12:ae: f6:41:0f:52:cc:9e:a4:48:ab:a9:48:37:52:08:55: 41:19:c2:7c:97:26:36:68:de:a4:fe:94:ce:b0:d6: a6:c5:ad:3c:42:20:f7:a3:0e:f9:a8:ea:f8:3c:9a: d7:8a:56:ad:83:03:ca:d6:66:08:f3:98:41:9e:4f: 2a:25:ca:79:45:5f:fe:4b:e3:4c:07:05:23:70:96: 46:57:0d:99:83:fe:d0:1c:72:35:55:ea:a5:f3:71: e2:1e:42:4a:cf:82:a2:93:3b:4e:3e:b2:d1:b7:6c: ea:70:7f:fc:ac:85:b7:d8:8c:77:53:34:e3:fb:e1: 8f:51:fa:9d:cf:fc:d4:20:2c:67:b9:da:c0:a6:e0: 4a:f7:79:05:65:eb:37:85:34:65:0c:c5:da:cc:29: f1:d3:4c:9c:d6:fd:13:c5:d1:5c:3f:0f:7f:5b:f9: 29:04:32:e1:8a:ea:37:1d:cd:0a:2f:9e:df:9b:fd: be:7d:a3:78:7c:04:47:ad:56:fe:07:26:f7:16:64: 8c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CF:1D:48:81:F8:90:8F:C0:0C:02:85:2B:21:EE:8F:51:8B:65:0E X509v3 Authority Key Identifier: keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f8:52:07:4b:24:1d:bd:2d:1e:e4:a4:b3:73:33:7a:56:9d: 9d:b8:fe:4c:7a:02:27:94:ff:f2:6d:e0:8e:5e:42:c2:15:14: 65:83:08:ac:0b:05:1d:7d:f4:fc:15:d2:be:ed:6e:30:ad:5f: 28:59:9a:92:f7:12:7d:14:b5:05:73:42:16:45:b0:cb:a8:34: a5:ca:b8:ba:e4:96:cd:91:f5:0a:3e:c6:e0:60:a0:88:ff:f6: c3:1b:e3:a2:43:fe:80:b3:12:7e:50:bc:53:75:a1:12:60:f5: 77:7a:e5:6b:ff:22:04:4f:d8:8f:af:49:05:9b:dd:e9:99:d1: f3:fb:f8:c0:65:8a:2a:28:5c:35:12:3a:b4:49:93:65:25:5b: 22:e2:55:a4:1e:60:f0:f4:21:7a:3b:e2:3e:1e:61:16:04:9f: ef:d3:35:6b:28:42:01:ee:31:1e:b6:88:66:b4:37:a2:75:42: 3b:e5:ad:ec:fc:85:a9:1a:ea:d7:bf:bd:14:22:92:00:b0:9d: 61:fd:13:35:72:a7:bb:06:b1:f5:f7:85:24:83:2f:1e:d1:8b: 46:d5:19:56:d0:81:cc:8e:3f:85:54:02:f0:c2:d3:a9:22:69: ba:e5:c7:7e:a6:79:15:f3:86:ea:29:fd:b8:67:8e:42:26:eb: f6:cb:ca:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGNTIxMTAvBgNVBAUTKDc5N0RGQTE4ODM5Rjg3RDEzMTBFOUNBOUMzNDEwQUJF QjY4MzlFNzQwHhcNMjUwNjA4MjM1ODU0WhcNMjUwNjE1MjM1ODU0WjAYMRYwFAYD VQQDEw02ODQ2MjNiZS0yNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cIImmoGlI+DeQpiLpgFAdrSt3HsQyW1CGxXjk4AyTWlDd+IAmdC7JlhZFJw 6OCWfozDuuMtCcHkEq72QQ9SzJ6kSKupSDdSCFVBGcJ8lyY2aN6k/pTOsNamxa08 QiD3ow75qOr4PJrXilatgwPK1mYI85hBnk8qJcp5RV/+S+NMBwUjcJZGVw2Zg/7Q HHI1Veql83HiHkJKz4KikztOPrLRt2zqcH/8rIW32Ix3UzTj++GPUfqdz/zUICxn udrApuBK93kFZes3hTRlDMXazCnx00yc1v0TxdFcPw9/W/kpBDLhiuo3Hc0KL57f m/2+faN4fARHrVb+Byb3FmSM9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHPHUiB +JCPwAwChSsh7o9Ri2UOMB8GA1UdIwQYMBaAFHl9+hiDn4fRMQ6cqcNBCr62g550 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y1Mi9FOTQ2NjZDQzY4 QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5RXhEcHlwdzBFS3ZyYURu blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYMzZHSU9maDlFeERweXB3MEVLdnJhRG5uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y1Mi9FOTQ2NjZDQzY4QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5 RXhEcHlwdzBFS3ZyYURublEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn+FIHSyQdvS0e5KSzczN6Vp2duP5MegInlP/ybeCOXkLCFRRlgwis CwUdffT8FdK+7W4wrV8oWZqS9xJ9FLUFc0IWRbDLqDSlyri65JbNkfUKPsbgYKCI //bDG+OiQ/6AsxJ+ULxTdaESYPV3euVr/yIET9iPr0kFm93pmdHz+/jAZYoqKFw1 Ejq0SZNlJVsi4lWkHmDw9CF6O+I+HmEWBJ/v0zVrKEIB7jEetohmtDeidUI75a3s /IWpGurXv70UIpIAsJ1h/RM1cqe7BrH194Ukgy8e0YtG1RlW0IHMjj+FVALwwtOp Imm65cd+pnkV84bqKf24Z45CJuv2y8oJ -----END CERTIFICATE-----Generated at Mon Jun 9 12:41:11 2025 by rpki-client