$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft File: eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft (raw, json) Hash identifier: SoNy38UyP9qiD8z3xYQCtMWGAV+1OgSCbPjVDxPpAgA= Subject key identifier: D0:96:42:F7:6F:12:7E:F0:E7:54:53:6C:F1:AF:5A:A3:AF:E6:17:16 Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80 Certificate issuer: /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580 Certificate serial: 0332 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft Manifest number: 032B Signing time: Thu 05 Jun 2025 00:58:50 +0000 Manifest this update: Thu 05 Jun 2025 00:58:49 +0000 Manifest next update: Thu 12 Jun 2025 00:58:49 +0000 Files and hashes: 1: eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl (hash: qo0P398VNdCc1lfTYC6YTwOQ2raAUAstOcHHTZXKnkI=) 2: 681E9EECCAC111ECA0AC3E32C4F9AE02.roa (hash: yx0tgJAxnt6G+jTtg9/EBjHjIHPyHzwd9ZlOS5AoF1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 00:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182B6F, serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580 Validity Not Before: Jun 5 00:58:49 2025 GMT Not After : Jun 12 00:58:49 2025 GMT Subject: CN=6840ebca-4cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:fd:37:cd:c3:a2:80:08:cf:de:2e:83:8d: 4a:03:2a:51:3c:9e:d7:70:34:df:d7:32:30:fe:aa: 3e:d3:f6:bb:55:20:be:73:c1:fb:15:e4:15:56:77: 59:d8:66:91:39:bc:2f:df:3d:60:93:f9:ae:65:fa: b0:4c:79:d7:d2:ca:52:23:c2:bb:b4:b8:80:cf:de: 7c:81:9b:cd:f2:bd:f9:93:23:9f:b9:47:2a:50:1e: 11:1b:87:38:30:26:7d:ac:a8:fe:52:af:06:34:47: 97:b5:82:4a:f7:fe:26:4b:f6:32:dd:32:3c:1d:e4: 91:51:61:f0:03:22:37:82:f9:06:f1:6b:9d:5d:e1: 77:fb:95:11:d8:23:f5:de:3e:98:bb:05:c0:bd:dc: 2f:e0:5e:e6:b0:b2:d4:bf:6e:2c:b3:4b:5d:1b:64: bf:3a:60:df:f0:d1:04:9f:a9:8d:86:df:18:54:4b: 56:c4:31:24:3e:0a:c8:6e:19:95:ca:6b:d9:b7:aa: 3e:14:e0:77:c5:79:c6:55:05:f0:49:69:6f:39:ee: 73:2d:89:76:67:5d:66:9b:87:27:5a:e8:52:66:e8: 7d:cf:e2:01:29:3e:26:8d:ac:28:fd:e0:59:9a:e8: 11:c1:d9:02:35:f5:19:55:71:58:b1:28:5d:09:a0: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:96:42:F7:6F:12:7E:F0:E7:54:53:6C:F1:AF:5A:A3:AF:E6:17:16 X509v3 Authority Key Identifier: keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:9e:c0:66:5f:cd:20:0b:bb:db:81:34:06:9c:9c:3e:bf:b1: bd:eb:53:45:0e:75:7e:3e:56:2c:c2:47:a6:29:c0:23:0e:0d: ac:0e:3b:9c:11:94:b3:41:ef:b8:3e:73:a0:23:00:5c:8c:a7: ea:70:5e:ea:2b:6c:bf:77:3e:d2:e1:51:ea:fe:91:d8:86:ea: 76:38:4f:d9:e8:f8:39:a2:a6:a6:88:5b:ca:27:3d:73:68:4d: d6:97:01:0f:cb:8c:11:6e:1d:06:be:35:f4:a3:b2:ba:b5:e2: 93:bd:e7:64:a4:15:65:47:dd:32:10:54:87:c8:51:46:50:b3: 5f:96:51:8a:e3:cd:60:63:3d:44:cd:81:ff:7d:f6:af:6a:ee: 5c:1f:fe:f9:2a:60:55:bc:07:a8:46:fb:e4:2f:7b:67:c7:33: cf:d8:25:8f:7c:e2:4f:bf:dd:d2:48:ff:1b:c9:a5:4e:03:e5: 49:ce:75:41:df:60:f3:b3:4a:46:78:b5:c1:e0:d3:25:5c:d3: f5:44:af:28:44:38:ed:5f:7a:4f:f7:e4:b4:90:f9:93:aa:f3: 10:cd:b7:da:dc:94:63:d2:53:1e:b4:08:91:37:42:d6:e3:8d: d3:9f:d9:ca:41:26:9d:59:36:89:1a:14:1d:01:cb:93:f9:ab: 8d:c9:f8:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJCNkYxMTAvBgNVBAUTKDc5NkE0NENGMUI3MEY0QTlGOUU2QTVGRkIwMDlCQjc4 NjBGMzU1ODAwHhcNMjUwNjA1MDA1ODQ5WhcNMjUwNjEyMDA1ODQ5WjAYMRYwFAYD VQQDEw02ODQwZWJjYS00Y2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB79N83DooAIz94ug41KAypRPJ7XcDTf1zIw/qo+0/a7VSC+c8H7FeQVVndZ 2GaRObwv3z1gk/muZfqwTHnX0spSI8K7tLiAz958gZvN8r35kyOfuUcqUB4RG4c4 MCZ9rKj+Uq8GNEeXtYJK9/4mS/Yy3TI8HeSRUWHwAyI3gvkG8WudXeF3+5UR2CP1 3j6YuwXAvdwv4F7msLLUv24ss0tdG2S/OmDf8NEEn6mNht8YVEtWxDEkPgrIbhmV ymvZt6o+FOB3xXnGVQXwSWlvOe5zLYl2Z11mm4cnWuhSZuh9z+IBKT4mjawo/eBZ mugRwdkCNfUZVXFYsShdCaAssQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCWQvdv En7w51RTbPGvWqOv5hcWMB8GA1UdIwQYMBaAFHlqRM8bcPSp+eal/7AJu3hg81WA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkI2Ri9GN0Y5NDc2RUM4 QjAxMUVDQTg4NDc5NDlDNEY5QUUwMi9lV3BFenh0dzlLbjU1cVhfc0FtN2VHRHpW WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VXcEV6eHR3OUtuNTVxWF9zQW03ZUdEelZZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkI2Ri9GN0Y5NDc2RUM4QjAxMUVDQTg4NDc5NDlDNEY5QUUwMi9lV3BFenh0dzlL bjU1cVhfc0FtN2VHRHpWWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjnsBmX80gC7vbgTQGnJw+v7G961NFDnV+PlYswkemKcAjDg2sDjuc EZSzQe+4PnOgIwBcjKfqcF7qK2y/dz7S4VHq/pHYhup2OE/Z6Pg5oqamiFvKJz1z aE3WlwEPy4wRbh0GvjX0o7K6teKTvedkpBVlR90yEFSHyFFGULNfllGK481gYz1E zYH/ffavau5cH/75KmBVvAeoRvvkL3tnxzPP2CWPfOJPv93SSP8byaVOA+VJznVB 32Dzs0pGeLXB4NMlXNP1RK8oRDjtX3pP9+S0kPmTqvMQzbfa3JRj0lMetAiRN0LW 443Tn9nKQSadWTaJGhQdAcuT+auNyfh+ -----END CERTIFICATE-----Generated at Thu Jun 5 19:53:35 2025 by rpki-client