$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft File: a1eqjwdnrM-oLNKqaesREse3fPw.mft (raw, json) Hash identifier: 1XJADh/fhUOCXGnVr1h3OTYbe/611fisaFL15cPcLM8= Subject key identifier: 05:E9:C4:27:4C:5F:AD:3A:3D:0B:91:45:93:9C:98:4E:69:32:6B:33 Authority key identifier: 6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC Certificate issuer: /CN=A917EC30/serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft Manifest number: 06 Signing time: Sat 05 Jul 2025 08:32:29 +0000 Manifest this update: Sat 05 Jul 2025 08:32:29 +0000 Manifest next update: Sat 12 Jul 2025 08:32:29 +0000 Files and hashes: 1: a1eqjwdnrM-oLNKqaesREse3fPw.crl (hash: uVJcCGO/p5wJvo5z9ErqF0epw52sVyvQwg+HWsRJmxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 08:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC30, serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Validity Not Before: Jul 5 08:32:29 2025 GMT Not After : Jul 12 08:32:29 2025 GMT Subject: CN=6868e31d-f1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f3:84:a2:bc:6d:52:32:a2:34:c8:a0:37:f7: 29:cb:d7:39:fc:35:39:0c:39:33:cd:6b:b3:be:e2: 38:b0:55:24:13:42:41:cb:f8:30:3b:e1:cf:ad:ad: ed:f2:d5:4c:bd:98:33:e4:47:da:44:7c:a5:9e:db: fd:84:36:fe:f8:11:a0:4c:b9:b1:99:44:ea:a6:84: 52:df:d2:21:48:17:92:8d:26:5c:ca:8a:7f:9f:ee: df:73:35:37:06:9a:84:07:4c:70:7d:ba:b3:c6:73: c4:37:f3:d9:e7:ec:cd:c4:84:00:73:58:19:13:32: c3:fc:15:a4:49:7d:a8:2f:31:cb:fe:eb:46:32:ab: a1:eb:6a:e7:91:a5:2e:a6:20:1f:e5:97:33:c5:ff: c9:52:65:97:4b:6e:ff:55:51:8d:71:55:8d:b4:e0: 9a:cc:c5:3b:aa:93:de:13:bb:a4:8d:fc:93:b3:3e: 62:9a:4f:c3:f0:7e:e8:e7:f2:de:0d:b7:5f:61:95: 3f:ea:2d:74:20:2a:bc:01:8d:99:95:ba:ce:40:41: 23:51:94:82:5f:c2:97:61:f8:21:ec:62:b4:55:17: a0:68:1a:15:5b:55:34:52:1a:16:85:3b:41:f1:71: 66:13:45:5e:7c:6f:71:f7:4a:94:4c:0f:68:ec:a4: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E9:C4:27:4C:5F:AD:3A:3D:0B:91:45:93:9C:98:4E:69:32:6B:33 X509v3 Authority Key Identifier: keyid:6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:b3:c0:f7:bd:45:67:fd:09:f4:40:c7:f2:74:a4:90:b3:80: 3e:af:d4:16:f7:c5:a5:12:f4:07:27:64:95:f1:ba:b0:df:af: cc:71:9f:53:8d:5b:09:d4:aa:7d:97:e4:60:8b:16:55:b4:0b: 99:5f:1e:93:74:1c:a3:e3:93:0a:27:14:02:ff:80:e8:24:6c: db:43:74:00:ac:ae:57:4d:53:56:91:05:12:17:d1:9f:4f:b5: e9:bb:3f:e7:e4:3f:66:19:a8:9c:38:44:b2:f8:28:a6:96:96: f0:43:ca:18:f1:33:65:bd:0e:be:5d:f8:44:11:97:2b:15:05: 27:77:5d:6c:64:9c:eb:90:de:df:1e:6c:86:d7:c4:20:1f:4f: f5:db:6e:98:c0:13:b0:ef:cd:e0:88:bf:2c:d9:25:e5:be:e0: 0e:11:e8:ba:f9:14:ca:6e:87:9f:0d:1b:13:cc:ce:cf:fa:8b: d2:2b:c0:0b:bc:49:fb:68:7e:20:28:b7:96:aa:e2:79:36:d4: 23:dd:bd:68:c0:dd:ec:d4:9e:d5:fd:a8:18:a9:0c:c0:cb:56: 59:02:28:fc:5a:93:5a:66:58:af:7f:b1:54:77:1c:81:e1:a7: 65:c1:0b:9b:31:b5:f9:25:60:6c:40:d5:ff:b0:f1:74:59:d1: c6:8c:97:2a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RUMzMDExMC8GA1UEBRMoNkI1N0FBOEYwNzY3QUNDRkE4MkNEMkFBNjlFQjExMTJD N0I3N0NGQzAeFw0yNTA3MDUwODMyMjlaFw0yNTA3MTIwODMyMjlaMBgxFjAUBgNV BAMTDTY4NjhlMzFkLWYxZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDd84SivG1SMqI0yKA39ynL1zn8NTkMOTPNa7O+4jiwVSQTQkHL+DA74c+tre3y 1Uy9mDPkR9pEfKWe2/2ENv74EaBMubGZROqmhFLf0iFIF5KNJlzKin+f7t9zNTcG moQHTHB9urPGc8Q389nn7M3EhABzWBkTMsP8FaRJfagvMcv+60Yyq6HraueRpS6m IB/llzPF/8lSZZdLbv9VUY1xVY204JrMxTuqk94Tu6SN/JOzPmKaT8Pwfujn8t4N t19hlT/qLXQgKrwBjZmVus5AQSNRlIJfwpdh+CHsYrRVF6BoGhVbVTRSGhaFO0Hx cWYTRV58b3H3SpRMD2jspFCZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBenEJ0xf rTo9C5FFk5yYTmkyazMwHwYDVR0jBBgwFoAUa1eqjwdnrM+oLNKqaesREse3fPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFQzMwLzYzQ0Q2RUM0NTcz RTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0tb0xOS3FhZXNSRXNlM2ZQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTFlcWp3ZG5yTS1vTE5LcWFlc1JFc2UzZlB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF QzMwLzYzQ0Q2RUM0NTczRTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0t b0xOS3FhZXNSRXNlM2ZQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHWzwPe9RWf9CfRAx/J0pJCzgD6v1Bb3xaUS9AcnZJXxurDfr8xxn1ON WwnUqn2X5GCLFlW0C5lfHpN0HKPjkwonFAL/gOgkbNtDdACsrldNU1aRBRIX0Z9P tem7P+fkP2YZqJw4RLL4KKaWlvBDyhjxM2W9Dr5d+EQRlysVBSd3XWxknOuQ3t8e bIbXxCAfT/XbbpjAE7DvzeCIvyzZJeW+4A4R6Lr5FMpuh58NGxPMzs/6i9IrwAu8 SftofiAot5aq4nk21CPdvWjA3ezUntX9qBipDMDLVlkCKPxak1pmWK9/sVR3HIHh p2XBC5sxtfklYGxA1f+w8XRZ0caMlyo= -----END CERTIFICATE-----Generated at Mon Jul 7 09:16:08 2025 by rpki-client