$ rpki-client -vvf rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft File: EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft (raw, json) Hash identifier: UEwVHAALmwJ9EzdSMGDW8evybhMM5NqvOYVo0TeRMno= Subject key identifier: 23:5C:36:D6:15:08:99:01:9D:7A:D2:4C:D2:18:2D:63:4E:2A:C2:88 Authority key identifier: 12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F Certificate issuer: /CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft Manifest number: 7C Signing time: Sat 31 May 2025 06:18:15 +0000 Manifest this update: Sat 31 May 2025 06:18:14 +0000 Manifest next update: Sat 07 Jun 2025 06:18:14 +0000 Files and hashes: 1: EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl (hash: w0x0FO2UcNBMjLencqBPXLYXmw0Lv6SGl5YltM8q7KU=) 2: 7B026F0686C711EF9B284139C4F9AE02.roa (hash: EZr43Zd/nvWqNQBFSUi7UV8hDLrvC+/bbJUY/Mjkjnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B845, serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F Validity Not Before: May 31 06:18:14 2025 GMT Not After : Jun 7 06:18:14 2025 GMT Subject: CN=683a9f27-1c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:73:aa:58:3e:7b:ea:90:11:04:24:50:ed: 0c:75:67:dd:35:41:88:3e:ed:92:c2:d9:f7:11:2c: 30:80:d2:5e:f3:fd:47:95:ed:5e:0c:b9:6c:f9:6f: 97:6f:4f:b2:41:bd:de:56:c5:ce:b2:5c:f2:09:3c: 5b:ad:24:27:79:c8:a1:9c:34:8f:6f:e3:35:5e:e3: c5:2d:18:61:fd:0f:61:99:b0:42:cd:da:0e:6a:97: 06:d4:db:38:59:35:e2:33:d0:a9:56:ea:13:d4:4b: 89:fa:c4:c3:0a:25:38:42:a7:0f:c2:43:3b:87:d4: f7:4e:4a:c8:e3:c6:a4:ea:8e:c3:d7:b8:dd:a4:bc: 1f:ac:11:22:17:3d:68:df:12:c1:ff:77:c4:6e:ba: d1:11:e6:a2:c0:5e:ba:25:a4:a7:10:b3:24:8f:eb: f4:1f:72:d7:d1:d9:e3:9b:df:28:2e:87:60:ec:dd: 5f:6c:33:02:a0:69:95:49:7f:d2:2e:47:69:d1:ae: f0:5d:de:b4:8b:58:de:f4:5f:62:1c:87:12:bc:c3: 69:0b:74:67:3f:ab:85:c4:29:80:37:06:c3:3d:b1: b5:c4:5e:33:fd:7a:33:07:44:f3:2d:f9:9d:26:f8: f4:d1:c7:59:68:c8:b3:89:e6:ce:a9:c6:79:ac:51: e3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5C:36:D6:15:08:99:01:9D:7A:D2:4C:D2:18:2D:63:4E:2A:C2:88 X509v3 Authority Key Identifier: keyid:12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:dc:9a:e3:e5:f5:5f:0d:c0:50:5e:18:7c:26:04:58:09:fd: 7c:05:fe:ed:ba:3f:2e:69:20:29:6b:06:2b:d2:d4:56:dc:20: b5:02:86:15:ea:64:61:72:d4:be:51:a4:b4:b2:99:76:a3:31: 06:33:d4:28:81:c1:12:aa:c3:3e:ec:1b:a0:ae:a0:a8:c3:7f: 84:f2:a4:9e:01:d1:71:44:07:02:2a:8e:fd:42:c5:69:f5:d0: ea:38:23:81:e8:02:b2:8c:99:db:33:fe:5b:8f:3c:10:d7:1d: a5:13:f5:b9:ad:b5:ff:13:1a:92:29:02:04:06:94:f6:47:c4: 2a:f2:f9:be:9b:3f:36:2f:83:80:8f:4c:e0:d1:48:57:3f:0a: b7:b1:a1:43:f9:69:10:41:75:5f:d0:ca:7f:59:28:80:f5:42: 59:f7:a5:ca:aa:52:d3:45:c0:b2:a9:00:4a:52:3c:b6:4d:07: 1a:5f:f5:df:b5:8a:72:65:fd:eb:ae:a9:66:c7:bb:7b:db:0b: ef:13:55:de:34:c7:6b:22:b9:4e:d3:07:90:f3:71:f2:25:95: b1:8f:73:46:d1:2f:55:78:b8:9d:ea:7f:1d:89:e3:52:3d:5c: bf:54:f3:b0:df:e7:55:b0:1b:54:3c:2e:06:3c:91:28:f6:dc: 43:e0:20:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjg0NTExMC8GA1UEBRMoMTJFNjJCNUI0RDMzMDFBMDhENjdBN0I4QjNDNjVENDQx NEYyRDkzRjAeFw0yNTA1MzEwNjE4MTRaFw0yNTA2MDcwNjE4MTRaMBgxFjAUBgNV BAMTDTY4M2E5ZjI3LTFjNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWkXOqWD576pARBCRQ7Qx1Z901QYg+7ZLC2fcRLDCA0l7z/UeV7V4MuWz5b5dv T7JBvd5Wxc6yXPIJPFutJCd5yKGcNI9v4zVe48UtGGH9D2GZsELN2g5qlwbU2zhZ NeIz0KlW6hPUS4n6xMMKJThCpw/CQzuH1PdOSsjjxqTqjsPXuN2kvB+sESIXPWjf EsH/d8RuutER5qLAXrolpKcQsySP6/QfctfR2eOb3yguh2Ds3V9sMwKgaZVJf9Iu R2nRrvBd3rSLWN70X2IchxK8w2kLdGc/q4XEKYA3BsM9sbXEXjP9ejMHRPMt+Z0m +PTRx1loyLOJ5s6pxnmsUeM5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI1w21hUI mQGdetJM0hgtY04qwogwHwYDVR0jBBgwFoAUEuYrW00zAaCNZ6e4s8ZdRBTy2T8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCODQ1L0Q2M0VEQzUyODZD NjExRUY4MzYxMjQzOEM0RjlBRTAyL0V1WXJXMDB6QWFDTlo2ZTRzOFpkUkJUeTJU OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXVZclcwMHpBYUNOWjZlNHM4WmRSQlR5MlQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZC ODQ1L0Q2M0VEQzUyODZDNjExRUY4MzYxMjQzOEM0RjlBRTAyL0V1WXJXMDB6QWFD Tlo2ZTRzOFpkUkJUeTJUOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE/cmuPl9V8NwFBeGHwmBFgJ/XwF/u26Py5pIClrBivS1FbcILUChhXq ZGFy1L5RpLSymXajMQYz1CiBwRKqwz7sG6CuoKjDf4TypJ4B0XFEBwIqjv1CxWn1 0Oo4I4HoArKMmdsz/luPPBDXHaUT9bmttf8TGpIpAgQGlPZHxCry+b6bPzYvg4CP TODRSFc/CrexoUP5aRBBdV/Qyn9ZKID1Qln3pcqqUtNFwLKpAEpSPLZNBxpf9d+1 inJl/euuqWbHu3vbC+8TVd40x2siuU7TB5DzcfIllbGPc0bRL1V4uJ3qfx2J41I9 XL9U87Df51WwG1Q8LgY8kSj23EPgICs= -----END CERTIFICATE-----Generated at Sat May 31 17:12:55 2025 by rpki-client