$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json) Hash identifier: OZc/6yS95a1r7ezLap5FJ2zFx9QFnssor8E0rDkoEpk= Subject key identifier: 2B:78:F9:47:97:DA:5D:F5:F1:8C:F1:F5:32:79:68:A9:19:A7:CE:8D Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Certificate serial: 34E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft Manifest number: 34B6 Signing time: Sat 31 May 2025 14:31:32 +0000 Manifest this update: Sat 31 May 2025 14:31:31 +0000 Manifest next update: Sat 07 Jun 2025 14:31:31 +0000 Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: OowaG1mjknTlgdtV+fK0AKdRKb/HlDlDCQqi6JBC7W4=) 2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: LI2pTAtj2FrGkxTBu/kHsrcO7e2WbrdhGE8h6n7f+mA=) 3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: EtN9WHkYOoh1Toml+yZQvfO83/c6JcmYJR90QSo2UxE=) 4: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: JS1dP/Z3wRNVnOwepT6cYwjkzee8Wo5X7MrAc7I3mlg=) 5: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: oxQvbEvt1VKVOZrQR/1bF13JTfe0jqTt+sjD6nr8S1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Validity Not Before: May 31 14:31:31 2025 GMT Not After : Jun 7 14:31:31 2025 GMT Subject: CN=683b12c3-8556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9d:2e:cb:02:76:4d:f0:ec:61:0f:c9:7f:e8: 80:f9:8c:b4:b1:a2:8d:88:74:9e:96:0b:a6:5c:bf: 2f:de:e4:90:ef:d6:22:bb:b9:fb:4a:de:c0:6c:98: 9a:8e:34:be:36:9a:78:3a:18:cb:f2:b2:06:00:d2: 2f:ba:9b:35:54:0a:58:03:8b:0e:6e:8d:58:59:b4: f2:6b:f6:f9:53:94:f2:83:af:49:7d:ce:27:45:5d: 9a:3b:79:ff:9c:d4:0c:ec:2b:45:3e:d3:3b:51:10: 08:38:46:7c:9d:ea:b1:a5:e4:95:a8:17:92:59:4c: a3:4a:50:cb:c2:e7:b0:80:96:2d:c6:25:e1:9f:ca: 24:5f:b7:48:2f:af:2f:2c:19:d7:27:b7:55:89:04: 33:8a:ff:1f:02:9b:4b:ee:59:b5:8d:22:78:44:04: 4a:48:1d:d0:08:3c:bb:70:15:5c:6b:9d:d5:f1:01: 39:43:68:ae:58:7b:aa:4a:01:eb:cb:f1:46:be:82: 8b:13:c0:9e:a8:88:8f:db:95:3a:8a:e9:a8:50:ad: 35:a8:ff:67:f0:43:90:94:9d:4c:ea:37:ca:07:47: cc:de:92:41:6a:26:b8:71:39:93:b9:a7:e2:72:1d: 71:07:39:14:42:72:9a:25:89:c2:d8:48:49:45:9f: eb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:78:F9:47:97:DA:5D:F5:F1:8C:F1:F5:32:79:68:A9:19:A7:CE:8D X509v3 Authority Key Identifier: keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:05:a6:e8:da:64:ea:ff:f4:34:8a:8e:94:94:c0:9f:9c:d4: 16:5f:d4:b3:6c:b4:66:9f:8f:4f:d9:e7:82:ef:31:47:26:78: 6d:9a:e5:4d:8d:1d:2c:df:26:15:8e:07:58:93:3c:8c:1d:4c: 06:1a:31:65:65:5e:e5:f5:bc:e7:ec:d7:2d:02:99:dc:5e:1e: f7:ca:23:34:c2:19:81:a1:c0:98:9b:3e:80:a7:55:4b:de:da: 14:60:2f:7f:2c:d2:57:45:a8:6a:fd:8d:3d:88:aa:4d:c6:9d: 9d:09:0c:66:ee:bf:a2:9d:9f:53:17:2a:98:73:a2:49:22:58: 37:c6:b6:4a:85:a1:9c:85:66:5b:5c:00:ae:9f:5e:78:a5:53: 0c:85:2f:d9:9f:ad:5f:e2:77:4e:89:f7:c5:87:f5:77:5c:d7: 0b:6b:05:d0:a5:7e:c6:47:f2:84:72:2d:b2:79:1d:c4:5e:ac: 95:71:06:6e:60:89:50:57:10:b5:39:f4:a9:8c:29:1a:9a:29: 31:47:46:32:6c:8c:3b:e3:6a:8a:82:05:ff:fc:49:44:59:a4: fe:f7:7b:9b:11:7f:82:4b:5e:c3:5e:0b:60:7e:cb:22:f9:ae: 15:ee:c7:05:7e:5d:a2:b3:45:cf:e6:00:d0:32:4b:ae:ad:70: 28:67:fe:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU5QTUxMTAvBgNVBAUTKDdBQUM2N0RCQzFFQjkyOEUyOTUxMzYyRTBCQzZBQzc2 NzdFMkRDN0IwHhcNMjUwNTMxMTQzMTMxWhcNMjUwNjA3MTQzMTMxWjAYMRYwFAYD VQQDEw02ODNiMTJjMy04NTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ0uywJ2TfDsYQ/Jf+iA+Yy0saKNiHSelgumXL8v3uSQ79Yiu7n7St7AbJia jjS+Npp4OhjL8rIGANIvups1VApYA4sObo1YWbTya/b5U5Tyg69Jfc4nRV2aO3n/ nNQM7CtFPtM7URAIOEZ8neqxpeSVqBeSWUyjSlDLwuewgJYtxiXhn8okX7dIL68v LBnXJ7dViQQziv8fAptL7lm1jSJ4RARKSB3QCDy7cBVca53V8QE5Q2iuWHuqSgHr y/FGvoKLE8CeqIiP25U6iumoUK01qP9n8EOQlJ1M6jfKB0fM3pJBaia4cTmTuafi ch1xBzkUQnKaJYnC2EhJRZ/rAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCt4+UeX 2l318Yzx9TJ5aKkZp86NMB8GA1UdIwQYMBaAFHqsZ9vB65KOKVE2LgvGrHZ34tx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTlBNS9BMzJFRkVCODFE ODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtvNHBVVFl1Qzhhc2RuZmkz SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VxeG4yOEhya280cFVUWXVDOGFzZG5maTNIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTlBNS9BMzJFRkVCODFEODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtv NHBVVFl1Qzhhc2RuZmkzSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtBabo2mTq//Q0io6UlMCfnNQWX9SzbLRmn49P2eeC7zFHJnhtmuVN jR0s3yYVjgdYkzyMHUwGGjFlZV7l9bzn7NctApncXh73yiM0whmBocCYmz6Ap1VL 3toUYC9/LNJXRahq/Y09iKpNxp2dCQxm7r+inZ9TFyqYc6JJIlg3xrZKhaGchWZb XACun154pVMMhS/Zn61f4ndOiffFh/V3XNcLawXQpX7GR/KEci2yeR3EXqyVcQZu YIlQVxC1OfSpjCkamikxR0YybIw742qKggX//ElEWaT+93ubEX+CS17DXgtgfssi +a4V7scFfl2is0XP5gDQMkuurXAoZ/5k -----END CERTIFICATE-----Generated at Sat May 31 17:01:19 2025 by rpki-client