$ rpki-client -vvf rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft File: EclyfKUpLOXaXXC6iCvC1kP0EIU.mft (raw, json) Hash identifier: aZiNhxt8tDMEjLee8A6JOt5R7ucmLHNSmyvwbUv4EjE= Subject key identifier: 43:A0:2A:22:60:95:89:5B:A2:BF:EE:16:A9:C5:F4:E6:47:5E:68:65 Authority key identifier: 11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85 Certificate issuer: /CN=A911849D/serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft Manifest number: 08CA Signing time: Wed 02 Jul 2025 20:43:15 +0000 Manifest this update: Wed 02 Jul 2025 20:43:14 +0000 Manifest next update: Wed 09 Jul 2025 20:43:14 +0000 Files and hashes: 1: EclyfKUpLOXaXXC6iCvC1kP0EIU.crl (hash: fxYq90U0JKli12gFEyeJ0+k683Mbvq+ojsS2qCnmYP0=) 2: C2D236E6B70E11EAAE6CE049C4F9AE02.roa (hash: /Mx3d0Z7c2OKLIky6yATaeUHAoc7j+jEdKfqglnvKk8=) 3: 3AD34AA4B66F11EAAA29FB47C4F9AE02.roa (hash: WjzW89/4SljG9UbpjM3OAjMCVBiPQFjT99+O9KpZA9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911849D, serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085 Validity Not Before: Jul 2 20:43:14 2025 GMT Not After : Jul 9 20:43:14 2025 GMT Subject: CN=686599e2-a8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:9f:6c:21:0d:ab:e0:f0:0c:62:66:95:1f: 55:67:f7:51:32:f8:40:03:d1:4a:d2:e2:fe:7a:dc: 07:3e:ef:b6:e5:d7:73:d0:18:17:2a:17:19:c4:77: fa:88:33:03:d4:11:09:cf:e0:18:68:c5:61:ca:5a: 9e:a4:96:57:ca:00:87:05:4c:d8:a1:0b:dd:8c:93: 9b:99:30:ca:38:d6:80:59:bb:23:56:f2:01:8b:e1: 60:58:8e:43:70:e1:7d:aa:fd:f5:d0:46:0e:55:47: 7e:5f:40:4e:9a:61:a9:dd:82:5d:65:c6:28:77:08: 3a:cb:56:ea:ad:5e:89:ac:e9:51:09:82:95:1b:8c: 2c:3f:ba:e6:6b:36:f1:2c:64:08:0d:56:ab:d1:1d: 8c:9e:3f:99:e8:c0:6b:29:ff:de:ca:ae:4f:27:d7: ab:f2:c2:5b:1a:b6:45:e8:fb:45:44:1f:03:14:91: e2:fa:eb:70:0d:1e:8d:40:0b:c8:bb:81:fd:47:ec: f1:6c:03:4b:a1:fb:a0:a6:8d:80:93:fa:73:ab:08: d3:de:7f:23:15:54:4b:3c:1f:67:fc:e5:d2:8f:08: 01:28:fd:0f:1a:60:1b:e2:57:be:3c:30:c8:8d:f7: d3:2f:af:ba:a2:18:b3:ca:b5:29:0d:d4:1b:ea:ba: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A0:2A:22:60:95:89:5B:A2:BF:EE:16:A9:C5:F4:E6:47:5E:68:65 X509v3 Authority Key Identifier: keyid:11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:aa:ba:de:06:1b:2d:8d:c6:f1:5b:0e:6e:60:d2:e9:aa:54: 4c:36:70:c1:52:5f:3b:48:2b:7a:d3:b0:04:51:ad:57:62:bc: 0c:ae:1c:39:2c:4f:5e:d5:7f:f3:f2:2e:80:71:45:f4:f3:09: d8:72:78:be:56:e2:59:0b:34:d4:88:62:3c:3e:a2:55:dd:20: 95:e8:64:cb:ae:79:3b:e5:d8:fb:f3:a4:b1:a8:9b:1b:b3:5a: a1:e6:68:ab:a3:b6:32:22:ec:78:22:b8:09:27:4c:c2:c7:19: 19:09:27:1a:c8:ca:87:4f:1e:45:ae:59:a2:7d:43:47:8a:e8: bd:d1:3a:81:d8:12:8a:99:82:8f:e8:23:94:5d:ed:0d:70:11: 0e:04:dc:05:7b:39:8a:3b:74:e6:2d:63:1d:86:da:ce:ef:ce: 5c:3d:6f:65:f1:32:61:01:32:60:62:99:0a:b2:75:19:5f:7e: c4:d7:66:43:8a:97:52:52:d3:05:1d:55:3a:7a:59:b1:c0:e5: 0f:04:cd:f6:e1:6a:b0:a3:3f:ad:c5:96:02:28:20:ac:0f:04: 9d:29:a0:14:b0:7f:e1:2d:d1:0a:f0:49:2b:fa:85:e0:c3:81: fc:01:0e:e9:bb:27:b4:e7:5e:6a:dd:9b:27:22:4b:60:4f:7e: 23:8f:5d:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg0OUQxMTAvBgNVBAUTKDExQzk3MjdDQTUyOTJDRTVEQTVENzBCQTg4MkJDMkQ2 NDNGNDEwODUwHhcNMjUwNzAyMjA0MzE0WhcNMjUwNzA5MjA0MzE0WjAYMRYwFAYD VQQDEw02ODY1OTllMi1hOGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApn6fbCENq+DwDGJmlR9VZ/dRMvhAA9FK0uL+etwHPu+25ddz0BgXKhcZxHf6 iDMD1BEJz+AYaMVhylqepJZXygCHBUzYoQvdjJObmTDKONaAWbsjVvIBi+FgWI5D cOF9qv310EYOVUd+X0BOmmGp3YJdZcYodwg6y1bqrV6JrOlRCYKVG4wsP7rmazbx LGQIDVar0R2Mnj+Z6MBrKf/eyq5PJ9er8sJbGrZF6PtFRB8DFJHi+utwDR6NQAvI u4H9R+zxbANLofugpo2Ak/pzqwjT3n8jFVRLPB9n/OXSjwgBKP0PGmAb4le+PDDI jffTL6+6ohizyrUpDdQb6roQpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOgKiJg lYlbor/uFqnF9OZHXmhlMB8GA1UdIwQYMBaAFBHJcnylKSzl2l1wuogrwtZD9BCF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODQ5RC80NDFBNzI2NEI2 NkUxMUVBOUIwODcyNDdDNEY5QUUwMi9FY2x5ZktVcExPWGFYWEM2aUN2QzFrUDBF SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjbHlmS1VwTE9YYVhYQzZpQ3ZDMWtQMEVJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODQ5RC80NDFBNzI2NEI2NkUxMUVBOUIwODcyNDdDNEY5QUUwMi9FY2x5ZktVcExP WGFYWEM2aUN2QzFrUDBFSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0qrreBhstjcbxWw5uYNLpqlRMNnDBUl87SCt607AEUa1XYrwMrhw5 LE9e1X/z8i6AcUX08wnYcni+VuJZCzTUiGI8PqJV3SCV6GTLrnk75dj786SxqJsb s1qh5miro7YyIux4IrgJJ0zCxxkZCScayMqHTx5FrlmifUNHiui90TqB2BKKmYKP 6COUXe0NcBEOBNwFezmKO3TmLWMdhtrO785cPW9l8TJhATJgYpkKsnUZX37E12ZD ipdSUtMFHVU6elmxwOUPBM324Wqwoz+txZYCKCCsDwSdKaAUsH/hLdEK8Ekr+oXg w4H8AQ7puye0515q3ZsnIktgT34jj10h -----END CERTIFICATE-----Generated at Thu Jul 3 12:14:24 2025 by rpki-client