$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json) Hash identifier: M/4aoW2ftIdP5Y5qT9BCLNOD+KuEUya/t9p/1jHYFXU= Subject key identifier: C5:D5:CC:0D:10:93:93:D8:96:23:90:EC:1F:16:93:D5:01:03:36:03 Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 Certificate issuer: /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft Manifest number: 0667 Signing time: Fri 06 Jun 2025 22:27:17 +0000 Manifest this update: Fri 06 Jun 2025 22:27:17 +0000 Manifest next update: Fri 13 Jun 2025 22:27:17 +0000 Files and hashes: 1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: 9lZQhmvA1CTLCaNsygUVw8hXvLt2FIH2EupYfLLjqxU=) 2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: BEroe25M20UrAiw8SyEvv6Pk5mXlFp9GQ+z/Vqtvaw0=) 3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: sdo5dB4yf8kL9E/pHn7+OshW8DyNii5atqW56lYezBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 22:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Validity Not Before: Jun 6 22:27:17 2025 GMT Not After : Jun 13 22:27:17 2025 GMT Subject: CN=68436b45-c860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:99:2a:17:89:6f:59:1c:5a:41:9d:51:70: 4f:f4:b8:3d:0b:a3:22:62:a5:f8:34:c1:4f:1c:9b: 3a:fe:da:68:00:85:9c:fc:96:c3:d1:0f:41:42:e8: 16:a6:2c:5c:82:c3:c3:0a:63:65:6e:0f:88:1e:df: 0e:a5:1b:b9:2d:7c:ff:3f:34:fa:c1:9c:00:17:9c: 59:54:47:bf:52:53:6d:c1:34:6e:95:de:5c:88:7f: 79:bd:b7:6d:f3:b5:a3:b6:fc:d4:cc:3c:70:5e:b6: a2:e2:c3:52:ca:d7:fa:b3:bd:3e:8a:2f:7f:93:c4: 70:0c:b1:27:02:dc:25:d1:5a:ff:df:70:43:45:79: e2:a4:7b:40:99:4b:c8:c5:97:79:10:ea:63:a5:d4: ee:4e:62:95:5c:06:81:39:ce:e8:20:57:b2:6a:7f: 17:04:01:06:f7:66:7e:e3:50:c8:bf:a3:5b:c5:27: 59:94:55:ea:a8:01:fd:53:b7:a2:a9:74:ff:29:26: 02:22:e4:22:b7:a5:cc:9e:19:3c:cd:5f:dd:d6:a8: 0e:c1:13:df:47:12:d5:54:22:72:df:26:12:dc:87: 45:58:94:7e:d4:df:95:97:b9:7e:b0:f5:0e:23:87: 78:a4:bd:c7:2f:68:89:71:98:c7:ba:69:18:a5:a9: 76:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D5:CC:0D:10:93:93:D8:96:23:90:EC:1F:16:93:D5:01:03:36:03 X509v3 Authority Key Identifier: keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:26:ad:4c:06:ea:bd:96:0c:f2:68:65:33:8e:c8:52:20:81: a7:9c:d4:f2:ad:02:d7:f5:9b:5a:6c:4d:48:70:cd:74:de:45: 0f:69:9e:4f:a4:73:17:12:ab:99:9f:18:4c:54:a9:a0:99:ed: cc:1d:48:14:15:e2:0a:10:d6:1d:00:40:41:3e:5b:c6:6f:19: 2a:16:25:fe:63:a5:ab:e6:59:3d:11:78:f3:49:f8:5f:e7:b8: 6a:04:79:4a:5b:c8:1e:b9:73:f4:1e:ea:68:2b:81:f5:8f:36: e2:32:e7:ee:75:65:52:80:3a:5c:98:0e:46:f4:b0:56:58:51: df:03:46:36:ae:46:fb:ac:2a:42:b3:bd:b4:66:56:a3:d6:0e: 6c:6e:6c:16:40:0b:94:d2:43:29:4f:8e:44:f7:c4:77:98:04: 9c:d9:c1:ab:f7:f2:14:05:67:27:da:0c:7a:70:94:24:ca:14: ac:a8:9c:05:64:87:e1:bc:48:1d:0c:dc:07:4b:c2:33:aa:c0: a3:d9:15:59:de:bc:85:ce:8c:ce:b9:f9:4f:c2:dd:0a:67:89: b5:e3:7b:e9:34:85:1c:f3:2c:07:b4:7d:f7:d3:a4:1e:01:49: f8:df:48:b1:be:52:d4:49:b7:ab:10:b4:2b:b7:0f:37:fe:5f: 1a:e9:95:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyMjIxMTAvBgNVBAUTKDExQjQ0NTU2Qjc5NjI3ODUzRjQwMzFFRDZERDU3Mjg0 MDU2RUZGNTMwHhcNMjUwNjA2MjIyNzE3WhcNMjUwNjEzMjIyNzE3WjAYMRYwFAYD VQQDEw02ODQzNmI0NS1jODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9KZKheJb1kcWkGdUXBP9Lg9C6MiYqX4NMFPHJs6/tpoAIWc/JbD0Q9BQugW pixcgsPDCmNlbg+IHt8OpRu5LXz/PzT6wZwAF5xZVEe/UlNtwTRuld5ciH95vbdt 87WjtvzUzDxwXrai4sNSytf6s70+ii9/k8RwDLEnAtwl0Vr/33BDRXnipHtAmUvI xZd5EOpjpdTuTmKVXAaBOc7oIFeyan8XBAEG92Z+41DIv6NbxSdZlFXqqAH9U7ei qXT/KSYCIuQit6XMnhk8zV/d1qgOwRPfRxLVVCJy3yYS3IdFWJR+1N+Vl7l+sPUO I4d4pL3HL2iJcZjHumkYpal2vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXVzA0Q k5PYliOQ7B8Wk9UBAzYDMB8GA1UdIwQYMBaAFBG0RVa3lieFP0Ax7W3VcoQFbv9T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzIyMi9DQTA3NjE1ODgw NzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0VV9RREh0YmRWeWhBVnVf MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ViUkZWcmVXSjRVX1FESHRiZFZ5aEFWdV8xTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzIyMi9DQTA3NjE1ODgwNzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0 VV9RREh0YmRWeWhBVnVfMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIJq1MBuq9lgzyaGUzjshSIIGnnNTyrQLX9ZtabE1IcM103kUPaZ5P pHMXEquZnxhMVKmgme3MHUgUFeIKENYdAEBBPlvGbxkqFiX+Y6Wr5lk9EXjzSfhf 57hqBHlKW8geuXP0HupoK4H1jzbiMufudWVSgDpcmA5G9LBWWFHfA0Y2rkb7rCpC s720Zlaj1g5sbmwWQAuU0kMpT45E98R3mASc2cGr9/IUBWcn2gx6cJQkyhSsqJwF ZIfhvEgdDNwHS8IzqsCj2RVZ3ryFzozOuflPwt0KZ4m143vpNIUc8ywHtH3306Qe AUn430ixvlLUSberELQrtw83/l8a6ZVY -----END CERTIFICATE-----Generated at Sat Jun 7 22:57:32 2025 by rpki-client