$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: t+MIhYSy68rMcW4fjVkwm+G7bCVGiSVDSebaSHLrYk8= Subject key identifier: 12:2A:67:3A:61:9A:4D:25:34:AB:A7:07:ED:2C:44:B8:E0:A7:6F:07 Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: 06 Signing time: Thu 05 Jun 2025 07:36:28 +0000 Manifest this update: Thu 05 Jun 2025 07:36:27 +0000 Manifest next update: Thu 12 Jun 2025 07:36:27 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: I6cgOYsV++Bn1V2UQYVle9vXz+bG8QEaGxlh4C4TEW0=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Jun 5 07:36:27 2025 GMT Not After : Jun 12 07:36:27 2025 GMT Subject: CN=684148fc-3871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0a:df:36:48:ec:62:00:8f:e2:1d:e1:9c:da: 0a:89:46:1a:5d:8b:97:b7:18:3b:25:a4:43:02:37: 1f:5f:20:ec:3c:3f:6b:8b:ee:fa:e5:23:18:5d:d3: dc:6b:1f:f3:e4:fb:43:71:42:87:4d:0e:64:33:98: bc:1d:81:30:7d:82:ac:8c:f7:77:f3:5d:d0:d3:19: d6:16:9d:cd:49:4f:9b:d7:57:8c:4a:95:3e:04:1c: 75:f7:a4:a7:c4:1a:57:f2:02:38:c1:d5:29:40:75: 5b:c2:94:e7:3f:13:63:2f:e0:92:1c:3d:21:ba:67: ed:af:17:bc:f4:df:fc:55:cf:f3:0a:50:13:ea:a5: 06:8d:e8:78:17:ca:42:b9:94:1f:7d:c8:d7:b0:97: a8:de:08:6d:4c:ba:b3:f6:f4:11:6e:f5:09:d3:2d: 90:12:8f:4d:9d:99:82:f3:08:99:d4:7f:38:39:70: bd:aa:34:e8:f4:9c:49:19:98:32:66:53:6b:84:88: 40:2f:eb:c7:a7:ad:60:67:8b:f1:d3:7f:49:9a:25: 7c:56:ba:b5:15:ad:61:05:3e:d6:b5:e3:1d:38:fd: 6e:b9:08:95:c0:eb:f5:b9:93:1e:ba:3f:17:5b:36: d6:23:03:06:4e:d5:e1:97:fb:12:ac:2e:34:76:93: 33:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2A:67:3A:61:9A:4D:25:34:AB:A7:07:ED:2C:44:B8:E0:A7:6F:07 X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:0e:f7:6b:bc:ae:1a:85:c5:1c:c3:ac:a1:f1:ee:f0:81:ad: 2e:f4:24:1b:5b:66:3e:a0:51:7a:fd:2a:15:06:f4:ef:65:51: 90:7c:d1:d7:9d:8a:12:8f:a4:9a:d5:ac:bb:0e:97:a0:53:92: 26:1e:aa:b4:82:36:39:5a:23:d3:ed:da:e4:6e:f0:b3:99:35: 9a:64:c3:81:20:0a:e0:1b:5a:86:85:d7:4a:08:e0:df:59:f2: b6:41:8d:4d:06:5d:83:7d:d9:a0:fb:0f:79:17:5d:38:50:cd: 6c:c8:63:a7:c6:fe:4b:67:e2:d0:b0:3f:62:fa:40:b4:c6:ec: 1b:3a:16:21:17:58:e2:c6:98:39:29:bb:b8:9f:c6:dc:ff:8f: b7:85:61:dc:d9:81:2e:0e:e5:5e:ed:74:06:8d:a3:bd:74:c4: 01:56:39:70:94:3a:0f:d6:db:10:07:3e:f1:60:b4:04:f0:d9: 4f:f3:26:81:14:57:89:f6:9e:f5:4c:72:88:8c:26:21:12:3c: 80:64:89:92:1c:44:0f:8b:14:93:0b:72:34:ba:57:68:a5:4e: e1:0b:e2:ef:58:05:26:ac:df:df:25:ab:16:16:6a:fe:10:f0: 17:7d:2f:99:54:c1:a3:42:df:d2:9c:0d:6d:3b:45:8d:95:7b: 6e:b3:6f:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC MTQ4MTEwRjAeFw0yNTA2MDUwNzM2MjdaFw0yNTA2MTIwNzM2MjdaMBgxFjAUBgNV BAMTDTY4NDE0OGZjLTM4NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhCt82SOxiAI/iHeGc2gqJRhpdi5e3GDslpEMCNx9fIOw8P2uL7vrlIxhd09xr H/Pk+0NxQodNDmQzmLwdgTB9gqyM93fzXdDTGdYWnc1JT5vXV4xKlT4EHHX3pKfE GlfyAjjB1SlAdVvClOc/E2Mv4JIcPSG6Z+2vF7z03/xVz/MKUBPqpQaN6HgXykK5 lB99yNewl6jeCG1MurP29BFu9QnTLZASj02dmYLzCJnUfzg5cL2qNOj0nEkZmDJm U2uEiEAv68enrWBni/HTf0maJXxWurUVrWEFPta14x04/W65CJXA6/W5kx66Pxdb NtYjAwZO1eGX+xKsLjR2kzP1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEipnOmGa TSU0q6cH7SxEuOCnbwcwHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAEO92u8rhqFxRzDrKHx7vCBrS70JBtbZj6gUXr9KhUG9O9lUZB80ded ihKPpJrVrLsOl6BTkiYeqrSCNjlaI9Pt2uRu8LOZNZpkw4EgCuAbWoaF10oI4N9Z 8rZBjU0GXYN92aD7D3kXXThQzWzIY6fG/ktn4tCwP2L6QLTG7Bs6FiEXWOLGmDkp u7ifxtz/j7eFYdzZgS4O5V7tdAaNo710xAFWOXCUOg/W2xAHPvFgtATw2U/zJoEU V4n2nvVMcoiMJiESPIBkiZIcRA+LFJMLcjS6V2ilTuEL4u9YBSas398lqxYWav4Q 8Bd9L5lUwaNC39KcDW07RY2Ve26zb7c= -----END CERTIFICATE-----Generated at Thu Jun 5 19:54:18 2025 by rpki-client