$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json) Hash identifier: i/VQNUx8/DuvM7+MFegeKZVxrPT4LowEi7fz7M5+gNw= Subject key identifier: 2A:CB:B1:CE:1A:10:80:A1:64:BC:0D:A6:E3:AE:FF:FE:76:1E:CD:31 Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft Manifest number: 018E Signing time: Thu 03 Jul 2025 03:40:16 +0000 Manifest this update: Thu 03 Jul 2025 03:40:15 +0000 Manifest next update: Thu 10 Jul 2025 03:40:15 +0000 Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: CKsE149x3R8sA3hRg4lZw4Ry4oybOQR9HbSGnwr/FHE=) 2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: cgIQr0GieCik6XIQ9DuWPAAcXd8eAWq6OJRsIDCYebA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Validity Not Before: Jul 3 03:40:15 2025 GMT Not After : Jul 10 03:40:15 2025 GMT Subject: CN=6865fb9f-7ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:56:b2:ef:aa:f2:3e:88:0d:df:b9:1d:76: 1a:ac:c4:c1:c2:0d:58:c2:6d:d8:36:df:a3:ba:95: 6e:da:54:72:b3:9c:67:4c:6f:09:8f:59:2f:ad:3d: c6:5b:60:63:a3:63:8c:5f:18:f7:df:b2:24:5a:39: 4e:47:7d:74:da:22:6e:4d:95:7a:37:5e:b2:6c:7c: f9:ed:01:20:4e:21:d3:5b:3c:7f:41:6a:f8:a3:33: 03:c0:b6:0d:0e:e7:51:7f:41:63:ad:19:54:d7:59: c5:76:6a:4f:2e:47:de:e8:c0:7d:dc:0c:dc:3f:4f: fe:85:1a:1c:ad:00:4f:20:ac:8b:5d:e4:63:3b:11: c1:63:28:f5:e8:5e:dc:fc:f5:8a:04:33:d0:0f:c9: 26:fa:07:c4:c2:cf:21:9a:05:74:bf:94:64:d1:87: b4:c5:92:ea:7d:53:f7:2c:42:10:9e:c0:44:13:52: e9:06:5a:e6:bc:08:33:8c:44:0d:69:40:3c:46:55: cd:26:6c:99:6e:c2:13:f1:29:06:78:10:98:52:1d: 28:64:36:36:28:09:09:53:cc:4e:b9:5a:d7:e6:d3: 10:f0:c3:a1:96:2e:bc:88:2c:65:4f:ec:bd:a5:58: 85:9f:8e:f4:c2:e3:8f:d1:d6:51:e1:c6:b8:5c:a2: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CB:B1:CE:1A:10:80:A1:64:BC:0D:A6:E3:AE:FF:FE:76:1E:CD:31 X509v3 Authority Key Identifier: keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:2c:8a:4d:56:af:dd:7d:9f:c4:f1:20:8f:30:77:d3:08:ba: f9:13:46:23:a7:13:16:22:30:16:30:45:75:3a:06:04:8f:2b: 15:08:98:3e:40:20:ac:ed:b5:c2:57:24:da:cf:c7:24:77:71: 0f:af:28:94:54:07:64:29:6d:e2:65:d1:8e:1c:ca:f5:38:9a: 2d:06:05:ce:fe:37:80:6a:11:7e:c8:69:d1:1b:c5:63:e2:94: 76:3c:b5:bd:99:3a:19:49:44:c0:26:6b:c2:0f:6d:fd:a4:d3: 57:95:1c:9b:94:31:37:48:60:7b:3f:e6:be:0b:6a:98:69:c7: a5:aa:39:a1:5b:09:54:bd:b9:c2:db:2b:70:e6:bf:b1:91:f4: e4:e7:2c:b5:2a:79:4f:53:6c:0c:ee:44:8d:c3:7f:75:a4:0d: f1:d3:00:5b:c6:3e:77:c1:72:12:4e:01:90:04:7c:eb:97:64: ce:b4:9a:b8:c7:f8:24:77:0c:e9:8c:22:c8:73:ab:51:47:6d: 2e:ca:0e:68:d9:3f:37:d3:bb:4e:1e:7d:37:fe:40:3a:16:e1: ee:26:e9:4c:8d:cd:fb:5c:c2:79:76:90:40:77:ab:0e:16:c0: 4e:4e:3a:28:86:e1:88:b7:88:ec:86:60:d7:11:f7:b9:17:39: cb:f8:10:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0 MzI4NzIzQTAwHhcNMjUwNzAzMDM0MDE1WhcNMjUwNzEwMDM0MDE1WjAYMRYwFAYD VQQDEw02ODY1ZmI5Zi03ZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs09Wsu+q8j6IDd+5HXYarMTBwg1Ywm3YNt+jupVu2lRys5xnTG8Jj1kvrT3G W2Bjo2OMXxj337IkWjlOR3102iJuTZV6N16ybHz57QEgTiHTWzx/QWr4ozMDwLYN DudRf0FjrRlU11nFdmpPLkfe6MB93AzcP0/+hRocrQBPIKyLXeRjOxHBYyj16F7c /PWKBDPQD8km+gfEws8hmgV0v5Rk0Ye0xZLqfVP3LEIQnsBEE1LpBlrmvAgzjEQN aUA8RlXNJmyZbsIT8SkGeBCYUh0oZDY2KAkJU8xOuVrX5tMQ8MOhli68iCxlT+y9 pViFn470wuOP0dZR4ca4XKL9RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrLsc4a EIChZLwNpuOu//52Hs0xMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0 OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN QllSV2pBWkt1QU5ES0hJNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDLIpNVq/dfZ/E8SCPMHfTCLr5E0YjpxMWIjAWMEV1OgYEjysVCJg+ QCCs7bXCVyTaz8ckd3EPryiUVAdkKW3iZdGOHMr1OJotBgXO/jeAahF+yGnRG8Vj 4pR2PLW9mToZSUTAJmvCD239pNNXlRyblDE3SGB7P+a+C2qYacelqjmhWwlUvbnC 2ytw5r+xkfTk5yy1KnlPU2wM7kSNw391pA3x0wBbxj53wXISTgGQBHzrl2TOtJq4 x/gkdwzpjCLIc6tRR20uyg5o2T8307tOHn03/kA6FuHuJulMjc37XMJ5dpBAd6sO FsBOTjoohuGIt4jshmDXEfe5FznL+BBe -----END CERTIFICATE-----Generated at Fri Jul 4 23:24:51 2025 by rpki-client