$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft File: eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json) Hash identifier: WmJVqRrzA4lM4O5S8pDBrVkP5TUR/e8ZQvoxItnvLMM= Subject key identifier: 9B:36:29:1E:4E:04:46:66:09:21:90:2F:C9:93:E8:FE:58:7B:E0:C8 Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 Certificate issuer: /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft Manifest number: 67 Signing time: Sat 31 May 2025 06:33:31 +0000 Manifest this update: Sat 31 May 2025 06:33:30 +0000 Manifest next update: Sat 07 Jun 2025 06:33:30 +0000 Files and hashes: 1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: bBOCTVtkx979IG1VBMqBw2kbMGZ+w+vlVxayUWYa1Wc=) 2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Validity Not Before: May 31 06:33:30 2025 GMT Not After : Jun 7 06:33:30 2025 GMT Subject: CN=683aa2ba-767b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b3:a3:22:83:62:e1:10:94:08:c8:46:ad:8b: e0:26:c3:b3:32:09:0f:1e:30:72:6b:7b:2f:3c:1a: bd:51:e1:4d:23:2a:c1:10:27:9f:06:2f:16:7d:b3: e7:a1:fa:75:12:88:65:18:e0:0a:8a:79:f3:d3:6a: 75:88:70:df:5c:21:00:04:58:ad:0e:10:65:1d:91: 3c:2b:87:de:ef:03:27:15:1a:85:1b:d8:df:6f:51: 31:3f:20:20:45:86:86:fd:ea:45:f6:5d:18:da:ab: ab:2a:d1:2a:09:8c:ab:44:5a:d1:76:63:5f:62:1f: 9a:bd:dd:04:ac:5c:2f:58:22:5f:12:b2:64:4b:e0: 8f:32:b5:c6:5b:01:b7:b1:7d:16:f1:fa:bf:7d:a5: 15:0c:9a:5d:e1:10:49:84:ec:90:c4:84:92:a0:16: 4b:ac:03:b5:7e:97:c3:99:8b:c8:5d:51:2b:4a:dc: ce:09:d8:82:80:c5:d6:56:c5:2c:75:49:0a:0c:8e: e8:a2:93:45:69:23:b8:bc:40:34:f8:fc:e4:41:d9: 26:63:58:8d:0d:01:a6:9b:77:6e:a7:76:55:ff:5f: 72:5d:4e:7a:d5:57:4f:c5:7a:3d:90:1f:af:85:5e: 25:47:c4:1a:a7:19:fe:5e:d5:f9:5d:90:92:2c:77: 9b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:36:29:1E:4E:04:46:66:09:21:90:2F:C9:93:E8:FE:58:7B:E0:C8 X509v3 Authority Key Identifier: keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:69:8c:b4:d4:eb:9a:29:5e:85:f0:d4:e8:bc:1a:a6:59:ad: e5:82:48:e5:42:32:4f:dd:f2:90:84:01:ee:0d:5d:0f:c6:8a: 58:eb:31:8f:f4:3b:6b:fb:e3:15:75:b5:97:b6:44:8a:0d:92: d8:d6:14:fb:57:5a:e7:a0:3c:a4:0a:d6:9f:19:60:28:e8:c3: fe:8c:b6:a1:92:94:ef:9b:a5:9f:b9:97:28:7f:ac:77:45:97: f3:d2:85:e8:c5:52:7e:d3:b2:51:59:60:30:31:fa:40:9c:4a: c3:00:7b:1b:86:71:58:87:77:6a:5b:8e:e1:de:ab:a6:28:0a: b5:bc:de:fb:bf:2a:71:f1:b9:9a:b6:fa:65:da:53:04:21:f2: 59:2f:86:ed:af:a5:74:8d:9c:62:dd:1d:1f:95:6c:eb:b8:24: c7:92:48:32:5e:98:a0:5f:97:0a:b7:e5:3c:05:de:6b:40:d7: f1:f8:32:d7:54:54:50:48:ce:1e:b0:a1:35:a8:67:e4:d4:80: ff:45:e7:d5:2d:dd:f9:86:2c:73:97:d8:51:be:aa:67:28:91: f2:94:5a:df:62:08:a0:9c:ed:82:bf:d4:2a:ed:92:dc:9a:2b: 83:bc:77:c1:f5:99:09:b7:93:43:c5:10:69:25:b0:bc:8a:96: 2f:d2:89:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzRBNTExMC8GA1UEBRMoNzlFOTIzRDUwNjk1N0ZEMzBERDI2RDYyNzkzQjlCNDBG OEZFODk1NjAeFw0yNTA1MzEwNjMzMzBaFw0yNTA2MDcwNjMzMzBaMBgxFjAUBgNV BAMTDTY4M2FhMmJhLTc2N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbs6Mig2LhEJQIyEati+Amw7MyCQ8eMHJrey88Gr1R4U0jKsEQJ58GLxZ9s+eh +nUSiGUY4AqKefPTanWIcN9cIQAEWK0OEGUdkTwrh97vAycVGoUb2N9vUTE/ICBF hob96kX2XRjaq6sq0SoJjKtEWtF2Y19iH5q93QSsXC9YIl8SsmRL4I8ytcZbAbex fRbx+r99pRUMml3hEEmE7JDEhJKgFkusA7V+l8OZi8hdUStK3M4J2IKAxdZWxSx1 SQoMjuiik0VpI7i8QDT4/ORB2SZjWI0NAaabd26ndlX/X3JdTnrVV0/Fej2QH6+F XiVHxBqnGf5e1fldkJIsd5ujAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmzYpHk4E RmYJIZAvyZPo/lh74MgwHwYDVR0jBBgwFoAUeekj1QaVf9MN0m1ieTubQPj+iVYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0M3M0EzODk0QTIz NDExRUY5NzhDOEQ2REM0RjlBRTAyL2Vla2oxUWFWZjlNTjBtMWllVHViUVBqLWlW WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWVrajFRYVZmOU1OMG0xaWVUdWJRUGotaVZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NEE1L0M3M0EzODk0QTIzNDExRUY5NzhDOEQ2REM0RjlBRTAyL2Vla2oxUWFWZjlN TjBtMWllVHViUVBqLWlWWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAARpjLTU65opXoXw1Oi8GqZZreWCSOVCMk/d8pCEAe4NXQ/GiljrMY/0 O2v74xV1tZe2RIoNktjWFPtXWuegPKQK1p8ZYCjow/6MtqGSlO+bpZ+5lyh/rHdF l/PShejFUn7TslFZYDAx+kCcSsMAexuGcViHd2pbjuHeq6YoCrW83vu/KnHxuZq2 +mXaUwQh8lkvhu2vpXSNnGLdHR+VbOu4JMeSSDJemKBflwq35TwF3mtA1/H4MtdU VFBIzh6woTWoZ+TUgP9F59Ut3fmGLHOX2FG+qmcokfKUWt9iCKCc7YK/1Crtktya K4O8d8H1mQm3k0PFEGklsLyKli/SiZs= -----END CERTIFICATE-----Generated at Sat May 31 17:08:51 2025 by rpki-client