$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: HJUkiD5aUWeD/QlpuQhNITBdmd6+GGlTd1UNJEOFEYY= Subject key identifier: 10:34:7C:31:09:F2:D7:8D:63:07:85:C1:5C:D2:FD:EE:54:E7:37:84 Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 060D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 0608 Signing time: Fri 04 Jul 2025 23:16:16 +0000 Manifest this update: Fri 04 Jul 2025 23:16:15 +0000 Manifest next update: Fri 11 Jul 2025 23:16:15 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: Is/XimggYSv3vPgd2MA/l197TVBvrJ7saoP6lOGIQ+s=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: 6T0bGam9Fz3MuC3/hi4HGnadBCMddUZ6zt+H3AVBHfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1549 (0x60d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: Jul 4 23:16:15 2025 GMT Not After : Jul 11 23:16:15 2025 GMT Subject: CN=686860bf-09d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:f0:d3:6b:67:3a:f0:e5:cb:56:d0:49:77: 38:d6:da:1d:bb:29:9b:89:40:7d:31:79:b2:0a:14: f6:11:58:f3:8b:61:76:75:5a:41:9e:78:76:e6:d2: 1c:38:05:e4:41:46:25:9b:31:6e:ac:c6:73:90:48: 9f:d8:6c:58:c6:ee:d7:d6:a1:51:87:51:a8:21:9d: 8e:90:0a:3d:73:b6:ab:f8:20:1f:cc:b2:50:4e:39: d9:2f:87:d1:f3:67:36:32:19:4a:23:06:b0:58:57: fb:93:71:1b:55:c3:5f:46:1a:4f:6c:f0:e2:0f:13: b6:2e:f2:76:22:ff:a0:62:f7:83:ea:80:6e:ab:a9: f0:17:85:90:44:0d:df:74:e9:bf:0e:0b:f3:fe:19: 5e:98:e5:9c:80:4b:96:c3:c4:3a:f0:60:ff:91:c0: 8d:3f:13:fd:c0:ca:bd:ce:58:23:40:0a:f9:f8:f0: 8e:bb:b5:cb:69:39:b8:dd:66:a2:a3:11:39:b5:98: 26:f4:fd:99:d0:08:70:ef:4a:eb:ef:93:ac:d0:bc: 45:45:ee:0a:ec:c0:44:51:6d:3c:02:5f:9c:81:88: dc:2e:44:f2:bf:86:c9:c2:b9:bb:d7:ce:c4:4d:f3: 99:c0:19:d8:9c:07:6b:15:f6:85:a4:5e:31:f3:7a: 0c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:7C:31:09:F2:D7:8D:63:07:85:C1:5C:D2:FD:EE:54:E7:37:84 X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:68:1f:a3:48:e9:39:9b:a7:8d:9c:b7:6c:9c:4d:f3:ac:8b: 29:bd:64:29:f6:42:33:e0:3e:8f:42:f1:16:a6:60:9e:b4:23: 2a:f9:18:cd:f8:2b:69:a2:d2:35:25:aa:95:d6:f9:82:4f:fb: b7:61:86:57:da:95:12:46:79:bb:7e:5c:9e:a5:3c:6b:b8:63: 86:5e:26:5c:e1:82:26:05:ac:86:86:a7:3d:c5:fa:2c:cc:cc: e2:42:d8:92:ba:b6:fc:de:a9:09:1b:14:c2:a3:3e:a6:59:39: 88:21:2a:af:da:44:e5:28:5d:34:06:96:fb:98:f7:ca:60:22: bd:53:2b:6f:8b:cc:42:24:1c:70:eb:e4:69:fa:60:ad:54:94: c5:cd:4c:27:e3:f5:ad:5d:6f:d0:89:74:17:88:8c:7c:83:26: a3:5b:9f:f8:f1:88:9c:20:e7:46:03:1f:b3:96:b1:48:ab:c8: 1f:b9:58:69:57:c5:eb:d5:f3:5a:4c:1c:9b:d0:72:81:91:3d: cb:b9:5a:4b:42:7e:45:3c:96:aa:a1:38:fb:25:2c:a8:7b:d4: 05:dc:75:1f:ae:ed:a9:b4:fb:4e:73:db:55:27:f9:34:29:af: 52:f2:13:d7:4e:e1:22:6d:57:a6:0c:2d:9b:0d:5a:1f:c1:9b: a0:d6:95:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjUwNzA0MjMxNjE1WhcNMjUwNzExMjMxNjE1WjAYMRYwFAYD VQQDEw02ODY4NjBiZi0wOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxr7w02tnOvDly1bQSXc41toduymbiUB9MXmyChT2EVjzi2F2dVpBnnh25tIc OAXkQUYlmzFurMZzkEif2GxYxu7X1qFRh1GoIZ2OkAo9c7ar+CAfzLJQTjnZL4fR 82c2MhlKIwawWFf7k3EbVcNfRhpPbPDiDxO2LvJ2Iv+gYveD6oBuq6nwF4WQRA3f dOm/Dgvz/hlemOWcgEuWw8Q68GD/kcCNPxP9wMq9zlgjQAr5+PCOu7XLaTm43Wai oxE5tZgm9P2Z0Ahw70rr75Os0LxFRe4K7MBEUW08Al+cgYjcLkTyv4bJwrm7187E TfOZwBnYnAdrFfaFpF4x83oMYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBA0fDEJ 8teNYweFwVzS/e5U5zeEMB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZaB+jSOk5m6eNnLdsnE3zrIspvWQp9kIz4D6PQvEWpmCetCMq+RjN +CtpotI1JaqV1vmCT/u3YYZX2pUSRnm7flyepTxruGOGXiZc4YImBayGhqc9xfos zMziQtiSurb83qkJGxTCoz6mWTmIISqv2kTlKF00Bpb7mPfKYCK9Uytvi8xCJBxw 6+Rp+mCtVJTFzUwn4/WtXW/QiXQXiIx8gyajW5/48YicIOdGAx+zlrFIq8gfuVhp V8Xr1fNaTByb0HKBkT3LuVpLQn5FPJaqoTj7JSyoe9QF3HUfru2ptPtOc9tVJ/k0 Ka9S8hPXTuEibVemDC2bDVofwZug1pXv -----END CERTIFICATE-----Generated at Sat Jul 5 02:04:45 2025 by rpki-client