$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft File: eoryTXjXdw3DOcL_KP18FNE8X7E.mft (raw, json) Hash identifier: qRylnWYRYVyoDkasuOLr4juoxUPZoq590lgM2sr84c0= Subject key identifier: 66:79:E4:97:76:7C:B3:8A:4C:00:F3:E1:5C:1B:A9:26:BB:8E:94:38 Authority key identifier: 7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 Certificate issuer: /CN=A911EB2D/serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft Manifest number: 093E Signing time: Sat 28 Jun 2025 20:14:26 +0000 Manifest this update: Sat 28 Jun 2025 20:14:25 +0000 Manifest next update: Sat 05 Jul 2025 20:14:25 +0000 Files and hashes: 1: eoryTXjXdw3DOcL_KP18FNE8X7E.crl (hash: 4/AsT2FGCizAhJGEWDNsUjGIMpKkNFvsEttlAXkRQuY=) 2: 47C98CE6860911EFBACC1172C4F9AE02.roa (hash: YlK6PNNV4o8XYoD4OsO5FY1L+q++AQFySduwH+CQhk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EB2D, serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Validity Not Before: Jun 28 20:14:25 2025 GMT Not After : Jul 5 20:14:25 2025 GMT Subject: CN=68604d22-1bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d5:f5:fd:63:d5:12:23:33:d4:e0:c8:21:ca: 3d:ef:71:67:59:f2:48:9f:cf:a4:c1:40:97:86:c0: 00:e0:c6:f6:df:49:d6:42:ac:ca:c6:95:f8:04:f8: b9:19:ad:2b:80:af:c0:ff:eb:61:03:b7:3d:0d:8d: 7b:6a:aa:88:a7:0c:3d:8b:f8:3b:7d:39:da:34:c8: 62:88:a7:d9:53:86:86:6f:14:27:cd:c8:f7:d3:92: ad:92:9e:06:21:84:96:be:9c:7d:d3:f2:02:35:58: ce:0c:0b:d7:4a:37:03:3d:e1:7b:b5:26:d1:d2:d5: a7:5a:a9:28:8d:c1:be:18:23:d8:0f:5f:8a:03:f0: f0:85:91:f4:52:6a:53:f4:99:ed:67:ba:d6:90:2a: ef:40:c6:2e:57:19:ce:d5:09:4c:7b:4e:83:9d:ce: 28:35:3d:b7:64:f7:ce:3a:4a:ff:5f:1f:d4:a7:ac: 15:ce:41:23:54:e4:0b:ca:bf:4b:38:ce:c3:6b:f1: 41:fc:b9:0a:8d:be:61:6d:0d:4d:95:7e:93:20:88: 4b:97:a2:38:b6:21:63:50:35:e4:a7:45:a8:56:7f: d5:82:10:b1:b1:1f:06:68:f2:f6:ca:6b:a4:2c:04: cc:71:76:52:7e:3f:db:05:fa:b3:98:49:13:95:ab: 8e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:79:E4:97:76:7C:B3:8A:4C:00:F3:E1:5C:1B:A9:26:BB:8E:94:38 X509v3 Authority Key Identifier: keyid:7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:cf:9e:b6:5c:c2:aa:ea:3c:d3:3d:9a:f8:0c:62:ee:99:91: 2e:89:3e:fd:86:ff:41:ea:04:f4:79:75:40:da:6a:93:17:68: e4:fd:b2:65:2b:64:bd:4e:65:37:66:d9:4e:fe:ab:b5:7c:27: d9:38:4c:88:17:a9:53:c0:a4:8e:50:f9:fd:39:9c:b5:30:c2: ac:da:b9:59:4e:33:0c:7d:9c:72:fd:28:38:d3:99:ab:7b:f4: 84:82:69:39:76:d9:97:5a:b3:a3:63:47:dd:57:8a:cc:fa:d0: 3e:cf:e2:c7:24:e8:72:ce:71:73:b1:ad:c2:cf:97:c4:30:9b: 42:99:f8:a9:0e:9d:c1:14:57:f6:4c:ca:ae:65:04:bd:fc:66: 97:2f:44:8e:b2:ea:b4:90:76:8f:88:34:46:81:de:bf:32:f5: 65:6c:ff:d9:61:21:f9:58:2a:12:a0:4f:0a:a6:7a:a4:2f:f3: 32:54:d0:fa:67:f9:56:83:34:cc:2c:2f:0e:e7:5e:df:4c:23: 6c:31:3d:86:28:69:a4:e0:da:ba:9d:b1:48:3c:5d:a3:89:38: e5:e0:53:75:d4:28:ff:de:47:d3:6b:6e:8f:9d:51:1a:be:cc: ff:06:f9:f3:97:75:af:a4:f1:99:0b:25:4a:e2:8f:d2:94:01: b2:7c:33:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVCMkQxMTAvBgNVBAUTKDdBOEFGMjRENzhENzc3MERDMzM5QzJGRjI4RkQ3QzE0 RDEzQzVGQjEwHhcNMjUwNjI4MjAxNDI1WhcNMjUwNzA1MjAxNDI1WjAYMRYwFAYD VQQDEw02ODYwNGQyMi0xYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dX1/WPVEiMz1ODIIco973FnWfJIn8+kwUCXhsAA4Mb230nWQqzKxpX4BPi5 Ga0rgK/A/+thA7c9DY17aqqIpww9i/g7fTnaNMhiiKfZU4aGbxQnzcj305Ktkp4G IYSWvpx90/ICNVjODAvXSjcDPeF7tSbR0tWnWqkojcG+GCPYD1+KA/DwhZH0UmpT 9JntZ7rWkCrvQMYuVxnO1QlMe06Dnc4oNT23ZPfOOkr/Xx/Up6wVzkEjVOQLyr9L OM7Da/FB/LkKjb5hbQ1NlX6TIIhLl6I4tiFjUDXkp0WoVn/VghCxsR8GaPL2ymuk LATMcXZSfj/bBfqzmEkTlauOgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZ55Jd2 fLOKTADz4VwbqSa7jpQ4MB8GA1UdIwQYMBaAFHqK8k1413cNwznC/yj9fBTRPF+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF QjMxMUVBODI2ODc2NDNDNEY5QUUwMi9lb3J5VFhqWGR3M0RPY0xfS1AxOEZORThY N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VvcnlUWGpYZHczRE9jTF9LUDE4Rk5FOFg3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUIyRC80QTZDRURBQ0JFQjMxMUVBODI2ODc2NDNDNEY5QUUwMi9lb3J5VFhqWGR3 M0RPY0xfS1AxOEZORThYN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFz562XMKq6jzTPZr4DGLumZEuiT79hv9B6gT0eXVA2mqTF2jk/bJl K2S9TmU3ZtlO/qu1fCfZOEyIF6lTwKSOUPn9OZy1MMKs2rlZTjMMfZxy/Sg405mr e/SEgmk5dtmXWrOjY0fdV4rM+tA+z+LHJOhyznFzsa3Cz5fEMJtCmfipDp3BFFf2 TMquZQS9/GaXL0SOsuq0kHaPiDRGgd6/MvVlbP/ZYSH5WCoSoE8KpnqkL/MyVND6 Z/lWgzTMLC8O517fTCNsMT2GKGmk4Nq6nbFIPF2jiTjl4FN11Cj/3kfTa26PnVEa vsz/Bvnzl3WvpPGZCyVK4o/SlAGyfDOM -----END CERTIFICATE-----Generated at Mon Jun 30 11:25:37 2025 by rpki-client