$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft File: EEz4cGO16r803k4l_s6ata9zbBQ.mft (raw, json) Hash identifier: SOWbHP28L4X8ThhkZ2q4D+oy2rvSysQLgnzrGDcZ5fY= Subject key identifier: 4B:51:E4:CD:6D:58:FB:C8:45:3E:2A:F4:17:FB:1E:E8:36:71:FF:23 Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14 Certificate issuer: /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14 Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft Manifest number: 56 Signing time: Thu 03 Jul 2025 07:29:51 +0000 Manifest this update: Thu 03 Jul 2025 07:29:50 +0000 Manifest next update: Thu 10 Jul 2025 07:29:50 +0000 Files and hashes: 1: EEz4cGO16r803k4l_s6ata9zbBQ.crl (hash: Wo63UZkxFJxAI7m0G/VC3OfsQJo5HnRzSfTnL0NWc5I=) 2: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (hash: HNlYiglg+bBDY8hf2XbMc61T9NCbbnRV5gfydPimiu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14 Validity Not Before: Jul 3 07:29:50 2025 GMT Not After : Jul 10 07:29:50 2025 GMT Subject: CN=6866316f-1186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:18:29:70:01:cc:79:88:3b:68:56:c7:5b: 54:eb:97:23:24:e3:fd:fb:75:b2:70:c7:19:57:7c: 07:d6:d2:90:f4:3e:9e:8c:82:31:5f:99:f6:ae:e7: f5:31:17:05:9b:69:57:ea:b5:44:50:6a:0a:ba:4d: e6:f1:fa:9f:48:4c:82:74:bf:8e:a2:93:e4:82:06: 70:db:77:d3:23:29:b4:e9:0d:cd:73:fa:38:1f:59: e0:4d:3a:78:7b:f8:b7:b6:f4:6d:92:db:ff:45:47: 16:2f:d4:f0:e5:cd:02:ea:42:a1:52:24:4b:80:ef: 0f:f1:d1:c7:db:7b:db:dd:a1:06:c8:09:b5:86:87: 71:6b:db:6c:08:d2:f2:b0:a1:0e:6d:e4:a1:91:2b: 2b:42:ff:83:4b:59:4c:2e:73:a8:15:0c:b9:ba:1b: c5:3a:30:97:aa:c2:56:02:b7:f9:f2:46:5c:94:12: 2a:d1:c0:fb:17:e8:ac:44:37:09:44:f5:ab:48:6f: e7:3b:c3:70:70:06:1a:22:30:65:65:b1:60:3c:96: c5:87:d3:f9:73:15:67:6f:27:69:4e:a5:eb:0c:06: 1a:f5:2f:16:7c:34:5a:2e:52:90:2d:dc:66:92:1c: b6:2a:a3:ab:30:c2:58:40:c6:76:c1:2c:5f:12:cf: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:51:E4:CD:6D:58:FB:C8:45:3E:2A:F4:17:FB:1E:E8:36:71:FF:23 X509v3 Authority Key Identifier: keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:47:84:0d:94:23:61:00:54:08:94:e4:6a:24:75:af:34:fc: 29:55:c9:88:ad:d1:fb:f7:a2:00:05:1c:81:ef:5d:74:73:c4: cb:3a:90:1f:17:98:c3:a5:c7:46:31:b0:46:26:0e:d5:b0:92: 48:f3:5e:eb:f1:98:90:91:ec:1f:68:e2:87:80:4d:82:87:41: ba:61:69:24:34:c3:61:4c:c3:6c:1a:bf:4f:52:b2:83:9d:2d: f3:b6:82:01:90:f4:8b:6b:89:d3:d4:0a:7e:3e:44:df:11:63: 1d:c2:04:0a:93:4c:c7:71:8b:88:30:4c:1e:60:af:26:08:e6: a0:bb:ef:e2:c9:39:8d:55:e4:2d:25:7e:e7:57:65:78:be:db: 5f:53:7f:ef:dd:3e:bf:a1:86:d7:9c:af:7a:aa:9c:a2:74:8b: 31:68:b4:7b:d3:07:72:77:95:97:3c:01:08:f8:d2:f1:0b:e1: 37:ae:f4:68:94:a2:07:a5:38:51:45:60:70:ef:41:d9:c1:e7: 20:c9:0f:8c:8f:ff:43:91:13:07:61:bc:4d:ab:d3:01:f0:71: f7:01:2c:ad:0b:12:18:1a:89:a8:3c:54:22:6e:d3:4a:d9:e5: ed:4b:9f:15:ec:81:34:90:19:45:22:c7:75:7c:6f:69:14:86: 8a:13:43:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUZGRDExMC8GA1UEBRMoMTA0Q0Y4NzA2M0I1RUFCRjM0REU0RTI1RkVDRTlBQjVB RjczNkMxNDAeFw0yNTA3MDMwNzI5NTBaFw0yNTA3MTAwNzI5NTBaMBgxFjAUBgNV BAMTDTY4NjYzMTZmLTExODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2zhgpcAHMeYg7aFbHW1TrlyMk4/37dbJwxxlXfAfW0pD0Pp6MgjFfmfau5/Ux FwWbaVfqtURQagq6Tebx+p9ITIJ0v46ik+SCBnDbd9MjKbTpDc1z+jgfWeBNOnh7 +Le29G2S2/9FRxYv1PDlzQLqQqFSJEuA7w/x0cfbe9vdoQbICbWGh3Fr22wI0vKw oQ5t5KGRKytC/4NLWUwuc6gVDLm6G8U6MJeqwlYCt/nyRlyUEirRwPsX6KxENwlE 9atIb+c7w3BwBhoiMGVlsWA8lsWH0/lzFWdvJ2lOpesMBhr1LxZ8NFouUpAt3GaS HLYqo6swwlhAxnbBLF8SzxiVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS1HkzW1Y +8hFPir0F/se6DZx/yMwHwYDVR0jBBgwFoAUEEz4cGO16r803k4l/s6ata9zbBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRkZELzQyRUIwNTM0REQz ODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4MDNrNGxfczZhdGE5emJC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUV6NGNHTzE2cjgwM2s0bF9zNmF0YTl6YkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RkZELzQyRUIwNTM0REQzODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4 MDNrNGxfczZhdGE5emJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHhHhA2UI2EAVAiU5Gokda80/ClVyYit0fv3ogAFHIHvXXRzxMs6kB8X mMOlx0YxsEYmDtWwkkjzXuvxmJCR7B9o4oeATYKHQbphaSQ0w2FMw2wav09SsoOd LfO2ggGQ9ItridPUCn4+RN8RYx3CBAqTTMdxi4gwTB5gryYI5qC77+LJOY1V5C0l fudXZXi+219Tf+/dPr+hhtecr3qqnKJ0izFotHvTB3J3lZc8AQj40vEL4Teu9GiU ogelOFFFYHDvQdnB5yDJD4yP/0OREwdhvE2r0wHwcfcBLK0LEhgaiag8VCJu00rZ 5e1LnxXsgTSQGUUix3V8b2kUhooTQ1A= -----END CERTIFICATE-----Generated at Thu Jul 3 10:21:23 2025 by rpki-client