$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft File: EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json) Hash identifier: hP6TP26YuHH1huKzY2oLNnjW5LgPv9KSg1P74oOoFUw= Subject key identifier: C6:35:4E:E4:D4:23:A0:D5:68:51:2D:B1:0A:49:AC:01:EB:FE:EE:38 Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Certificate serial: 1220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft Manifest number: 1214 Signing time: Fri 30 May 2025 17:19:36 +0000 Manifest this update: Fri 30 May 2025 17:19:36 +0000 Manifest next update: Fri 06 Jun 2025 17:19:36 +0000 Files and hashes: 1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: NZpy3KlqF1oBHc0V1oBOxZMKGslIbC9f6Fi+uxvrVeg=) 2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: NX0Uu06g9kaFwSmmKkUW0sgMJpCNI4RFhei0HlK1wt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4640 (0x1220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833FF, serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Validity Not Before: May 30 17:19:36 2025 GMT Not After : Jun 6 17:19:36 2025 GMT Subject: CN=6839e8a8-ccdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:d4:a4:d1:56:54:44:55:90:7e:b6:c0:80: a3:f9:d6:57:41:75:ae:f9:48:11:3e:19:df:5e:82: 55:75:d9:17:5e:51:43:35:ad:b9:10:b5:c3:9d:53: 1b:ae:b0:87:15:d7:d6:1a:23:12:0e:0b:b2:8c:ca: e5:07:28:1a:6b:8f:91:c7:9e:42:a8:1f:1b:06:54: 6c:2e:b0:90:12:dc:dd:39:8c:67:3f:aa:40:90:c3: 3a:e0:a7:15:38:71:31:a3:01:f8:ca:0d:85:1d:b1: 10:7b:0e:ef:57:34:9b:7a:ae:d3:33:07:4d:b2:c0: ef:02:2a:f9:7a:71:f1:fd:59:df:45:3b:22:df:cc: d8:48:95:89:fc:70:c3:e1:01:71:99:50:90:f4:bf: 8a:91:10:33:0a:4b:72:a9:75:ad:d0:a1:0d:7e:4f: a3:ae:6e:9a:ad:64:f2:86:2c:19:b9:98:58:50:7e: 3f:1d:74:d0:be:9c:a6:ec:1b:af:12:e9:f3:dc:a3: ce:f3:f7:3e:30:ce:c8:2c:cf:91:53:93:25:37:11: 4d:34:fb:cf:8f:39:1e:41:eb:38:92:46:ad:13:ff: 43:bf:4a:ff:ec:f1:8f:27:92:7e:cb:ce:75:17:cc: 1b:a1:29:1b:f0:43:08:49:40:f4:71:07:58:50:3d: 61:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:35:4E:E4:D4:23:A0:D5:68:51:2D:B1:0A:49:AC:01:EB:FE:EE:38 X509v3 Authority Key Identifier: keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:d0:6e:2e:0e:9f:89:7d:c2:e1:cd:d7:99:39:e4:bc:13:42: c1:08:78:8a:b0:77:cb:59:ff:b6:a0:88:78:c8:66:14:e2:51: 2d:e6:f4:01:a7:d5:22:2b:b9:45:00:7b:59:a5:57:8a:9f:37: 8c:9e:c3:0f:64:d0:46:e8:db:99:8a:54:ef:b1:9d:20:16:68: 74:38:52:63:04:df:13:c3:3b:7e:06:e7:c9:14:5f:a9:de:53: e3:cd:56:05:29:29:bb:fa:26:18:f3:9b:f9:42:0e:cc:bc:1b: 26:29:77:a2:bb:dc:27:68:de:9c:45:bd:60:65:79:8a:a6:60: c0:33:7a:ff:68:32:d3:11:ff:6d:8d:35:76:b3:0d:ac:14:c2: 82:53:36:f0:b8:e0:a7:fd:86:e7:de:45:94:75:91:4d:bd:4c: 25:1e:64:8c:38:b0:21:12:11:81:c4:73:9c:ae:15:3c:46:87: c9:67:10:33:ea:4c:57:14:34:00:9f:51:6c:c1:4d:be:3c:f1: 22:88:a4:f7:ee:01:9e:c1:37:59:c9:05:16:55:f9:2e:81:51: 27:b8:0d:50:8e:44:66:d4:fc:c7:a1:7a:f0:1b:1d:8a:cd:72: 10:ee:99:03:43:c3:ed:30:c6:6a:98:48:d4:8a:90:f9:d3:65: 44:85:11:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzRkYxMTAvBgNVBAUTKDEyMzI3REZDOUU4ODgzQ0RCQjZDNkVFRUIzOTI1RjJD OEMwRjdFNUUwHhcNMjUwNTMwMTcxOTM2WhcNMjUwNjA2MTcxOTM2WjAYMRYwFAYD VQQDEw02ODM5ZThhOC1jY2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnnUpNFWVERVkH62wICj+dZXQXWu+UgRPhnfXoJVddkXXlFDNa25ELXDnVMb rrCHFdfWGiMSDguyjMrlBygaa4+Rx55CqB8bBlRsLrCQEtzdOYxnP6pAkMM64KcV OHExowH4yg2FHbEQew7vVzSbeq7TMwdNssDvAir5enHx/VnfRTsi38zYSJWJ/HDD 4QFxmVCQ9L+KkRAzCktyqXWt0KENfk+jrm6arWTyhiwZuZhYUH4/HXTQvpym7Buv Eunz3KPO8/c+MM7ILM+RU5MlNxFNNPvPjzkeQes4kkatE/9Dv0r/7PGPJ5J+y851 F8wboSkb8EMISUD0cQdYUD1hnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMY1TuTU I6DVaFEtsQpJrAHr/u44MB8GA1UdIwQYMBaAFBIyffyeiIPNu2xu7rOSXyyMD35e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNGRi8xNEVGRTdFNEUw N0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4MjdiRzd1czVKZkxJd1Bm bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VqSjlfSjZJZzgyN2JHN3VzNUpmTEl3UGZsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzNGRi8xNEVGRTdFNEUwN0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4 MjdiRzd1czVKZkxJd1BmbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF0G4uDp+JfcLhzdeZOeS8E0LBCHiKsHfLWf+2oIh4yGYU4lEt5vQB p9UiK7lFAHtZpVeKnzeMnsMPZNBG6NuZilTvsZ0gFmh0OFJjBN8Twzt+BufJFF+p 3lPjzVYFKSm7+iYY85v5Qg7MvBsmKXeiu9wnaN6cRb1gZXmKpmDAM3r/aDLTEf9t jTV2sw2sFMKCUzbwuOCn/Ybn3kWUdZFNvUwlHmSMOLAhEhGBxHOcrhU8RofJZxAz 6kxXFDQAn1FswU2+PPEiiKT37gGewTdZyQUWVfkugVEnuA1QjkRm1PzHoXrwGx2K zXIQ7pkDQ8PtMMZqmEjUipD502VEhRGZ -----END CERTIFICATE-----Generated at Sat May 31 17:44:04 2025 by rpki-client