$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json) Hash identifier: S72MS5zZVCcITTj0l/EWy/qRK07TOA8YP84U6NpDyyI= Subject key identifier: 18:60:58:DB:A9:E9:A0:C2:E0:8B:EA:2B:CF:DF:CE:CC:6A:A0:87:D1 Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft Manifest number: 79 Signing time: Sun 01 Jun 2025 06:26:42 +0000 Manifest this update: Sun 01 Jun 2025 06:26:41 +0000 Manifest next update: Sun 08 Jun 2025 06:26:41 +0000 Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: zw2nz12VGZpVFlXPNUeR4/YBQ0TeXBvPKEdx7KA6k1M=) 2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: kBrZwIHTbaSnaE7XdLULllQIjEnMuSEphHZrV4DhNKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Validity Not Before: Jun 1 06:26:41 2025 GMT Not After : Jun 8 06:26:41 2025 GMT Subject: CN=683bf2a2-4e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:4d:18:dd:61:13:ee:44:29:37:1e:16:38: 74:e9:63:e9:ea:f1:e2:6e:d9:14:66:44:f4:26:7a: 32:31:ad:d7:4f:93:7b:8b:89:37:22:a8:29:10:61: c7:18:be:2c:93:1a:61:7f:6f:f5:80:cc:fd:a0:34: ba:9d:be:e8:1d:4e:3f:4a:a7:a6:61:10:65:33:a5: 52:58:a8:53:26:39:53:c3:86:42:5e:f7:e2:7b:d6: 81:63:3f:77:33:1e:59:a6:a8:15:5b:77:93:43:cd: d3:ec:ac:55:fe:43:23:5f:a7:d9:74:05:c8:2f:be: 27:48:18:d9:39:b9:22:b3:8b:de:cc:d7:02:cb:62: fd:ef:15:88:e6:a2:f6:20:bf:af:a0:c8:31:16:83: 84:83:28:0d:0b:3a:90:5b:b3:f5:71:db:a6:68:b0: db:18:3b:83:d9:b8:2f:2f:a4:8b:7d:2b:f0:94:d8: 97:b6:8b:9e:1d:b9:2e:2b:4e:c7:15:2b:91:3a:b4: 67:64:d9:32:c0:f9:a0:26:56:61:fa:57:8f:d1:dc: 10:90:05:20:a3:b0:c8:5a:88:0f:3c:7e:e8:fd:29: 76:11:06:6d:2e:5d:2d:9f:b8:c3:a0:61:1a:3d:ab: 20:58:5b:05:d4:31:4a:0e:49:d3:21:3a:ad:48:68: 52:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:60:58:DB:A9:E9:A0:C2:E0:8B:EA:2B:CF:DF:CE:CC:6A:A0:87:D1 X509v3 Authority Key Identifier: keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:c5:4a:eb:cb:d9:21:af:93:8e:f4:68:8b:90:0e:70:1e:de: 38:ae:3e:0b:bd:f3:0a:88:1d:79:9e:6f:56:60:78:22:d1:a4: 0a:a8:1d:ce:81:68:14:f0:90:1d:6f:a4:d3:7d:a4:b2:e7:b5: 21:b8:1d:65:1f:e9:ce:c6:af:5a:b5:72:42:c1:92:b6:56:a9: 4d:25:c8:1a:64:e5:60:04:aa:59:4e:be:1d:1d:38:09:70:71: 90:98:31:69:aa:80:75:3e:3f:5d:b7:ca:21:62:04:b1:e1:86: 55:8d:37:3c:8a:c1:be:3f:cb:1f:bb:54:34:11:4a:aa:c1:fc: 7f:f0:fb:4b:e6:21:fa:61:5e:18:15:33:ed:af:cd:70:3d:1f: 7c:e5:b4:51:de:58:b1:31:7b:80:96:ac:8b:af:a1:96:1b:45: 47:ca:c0:60:2e:42:5f:d7:8d:2f:b3:75:47:cf:1f:de:1b:18: 68:cb:c6:24:e1:ff:b8:02:15:c9:0a:14:93:4d:49:fc:d3:ff: 78:ed:43:dd:a4:12:2a:e2:1d:2b:0d:db:11:24:92:d2:a9:8f: 37:c1:dd:e9:62:e3:40:bf:ef:79:fe:00:72:a1:06:e7:ef:57: a5:be:95:cf:d6:a7:ea:8f:89:1e:5c:17:1a:3a:d2:b8:ac:71: 05:18:75:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QjYzMzExMC8GA1UEBRMoMTNEN0ExM0I0MjNCQjZFODdBMUE3NUI3NDkzRjBCQzE5 RDBDRUFBMzAeFw0yNTA2MDEwNjI2NDFaFw0yNTA2MDgwNjI2NDFaMBgxFjAUBgNV BAMTDTY4M2JmMmEyLTRlMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9xE0Y3WET7kQpNx4WOHTpY+nq8eJu2RRmRPQmejIxrddPk3uLiTciqCkQYccY viyTGmF/b/WAzP2gNLqdvugdTj9Kp6ZhEGUzpVJYqFMmOVPDhkJe9+J71oFjP3cz HlmmqBVbd5NDzdPsrFX+QyNfp9l0BcgvvidIGNk5uSKzi97M1wLLYv3vFYjmovYg v6+gyDEWg4SDKA0LOpBbs/Vx26ZosNsYO4PZuC8vpIt9K/CU2Je2i54duS4rTscV K5E6tGdk2TLA+aAmVmH6V4/R3BCQBSCjsMhaiA88fuj9KXYRBm0uXS2fuMOgYRo9 qyBYWwXUMUoOSdMhOq1IaFLNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGGBY26np oMLgi+orz9/OzGqgh9EwHwYDVR0jBBgwFoAUE9ehO0I7tuh6GnW3ST8LwZ0M6qMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNjMzL0QwQUI5M0U0ODZE OTExRUY4QjhCRUIxRkM0RjlBRTAyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZx TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRTllaE8wSTd0dWg2R25XM1NUOEx3WjBNNnFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC NjMzL0QwQUI5M0U0ODZEOTExRUY4QjhCRUIxRkM0RjlBRTAyL0U5ZWhPMEk3dHVo NkduVzNTVDhMd1owTTZxTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADbFSuvL2SGvk470aIuQDnAe3jiuPgu98wqIHXmeb1ZgeCLRpAqoHc6B aBTwkB1vpNN9pLLntSG4HWUf6c7Gr1q1ckLBkrZWqU0lyBpk5WAEqllOvh0dOAlw cZCYMWmqgHU+P123yiFiBLHhhlWNNzyKwb4/yx+7VDQRSqrB/H/w+0vmIfphXhgV M+2vzXA9H3zltFHeWLExe4CWrIuvoZYbRUfKwGAuQl/XjS+zdUfPH94bGGjLxiTh /7gCFckKFJNNSfzT/3jtQ92kEiriHSsN2xEkktKpjzfB3eli40C/73n+AHKhBufv V6W+lc/Wp+qPiR5cFxo60riscQUYdUM= -----END CERTIFICATE-----Generated at Mon Jun 2 20:43:55 2025 by rpki-client