$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft File: EPSBzyjc51gajMuOUN4Jj3yLyRU.mft (raw, json) Hash identifier: yVNIs2KStlLqyFPmpToTkmTKIgkpGooMiBq94gB//2Y= Subject key identifier: A4:55:88:4F:50:61:04:1F:C1:76:B9:7E:3D:EF:C3:94:96:F6:A6:8A Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 Certificate issuer: /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft Manifest number: 011B Signing time: Tue 01 Jul 2025 05:17:08 +0000 Manifest this update: Tue 01 Jul 2025 05:17:07 +0000 Manifest next update: Tue 08 Jul 2025 05:17:07 +0000 Files and hashes: 1: EPSBzyjc51gajMuOUN4Jj3yLyRU.crl (hash: YSnSQ2EYiRpl5wVpAZmtZTvUVjt2PQsby3FmBxNswVA=) 2: E070CA0CAA2E11EEA404D421C4F9AE02.roa (hash: iZU8zdfl9m+d7mdN1RiWPOsL2RUjP7KC4vEHrZwKmZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122134, serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Validity Not Before: Jul 1 05:17:07 2025 GMT Not After : Jul 8 05:17:07 2025 GMT Subject: CN=68636f54-b705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:98:dc:75:8a:b4:6f:c7:7c:61:5b:09:d8: 0d:07:bf:bc:2c:8b:ed:ff:d3:ee:bb:d4:61:33:b5: b7:34:a9:fd:d8:82:8f:fc:ff:f8:82:ff:f6:39:db: e6:95:53:d4:2a:b9:e7:19:23:13:2f:ba:25:41:9f: 38:7a:86:b6:c2:22:2f:5b:f5:de:06:fa:6a:fc:7f: d8:d2:c5:a3:bb:03:e4:be:6e:db:6f:7d:17:ca:ed: e1:c3:3d:6c:f1:0e:34:48:c1:e1:dd:ca:9a:c5:fb: e5:3a:1e:25:0b:a0:20:67:0c:36:f3:af:0a:8b:bf: 41:e4:f8:a1:dd:01:8a:0e:66:3a:e6:65:9f:7e:12: c1:d2:c3:11:6c:b7:aa:ba:ac:8d:0d:ab:79:52:90: 19:48:1a:c6:62:76:c7:1e:6c:21:cf:8e:c2:3c:86: 84:fe:b0:ea:0a:bd:de:83:f7:b9:47:2c:de:be:26: e0:67:64:db:34:05:73:66:ac:9f:34:95:37:d7:31: 0e:1a:f7:7c:a0:35:2c:7b:0e:bc:22:8e:a5:5a:a6: f0:4f:a4:3c:ef:0e:5b:8a:db:b4:2b:a5:53:ec:1c: df:1c:7e:56:62:f8:bf:80:54:6e:68:53:9b:7c:a8: d4:1e:2e:5d:e2:9c:11:81:9d:70:21:a4:f9:3c:2c: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:55:88:4F:50:61:04:1F:C1:76:B9:7E:3D:EF:C3:94:96:F6:A6:8A X509v3 Authority Key Identifier: keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:dc:98:ad:e3:e4:17:b7:cf:ff:17:5b:bb:cb:2d:e8:3f:5e: d2:9e:ca:d5:ab:5e:8d:35:74:3f:61:e4:4c:96:ac:ea:a1:fd: 73:0e:bd:d9:ac:c2:c8:0a:2c:77:2f:a6:39:b3:a1:a2:52:e7: 65:41:b9:57:d1:94:11:f4:bc:72:dd:1a:f9:9b:d6:7a:a7:63: ec:33:ac:ec:91:23:35:cd:4a:4c:4e:57:1f:af:bb:fa:a6:c2: 1d:9e:9d:56:e5:aa:35:ca:d7:c8:ed:23:89:c1:fa:d3:1b:77: e3:6f:83:ac:9c:cf:ce:db:4a:4d:59:7b:e4:f8:74:e7:ee:15: 39:c7:45:b9:b4:3b:75:cf:30:54:df:5d:d8:31:a2:f5:22:2d: 67:31:87:81:9e:2b:48:4f:c5:61:36:3a:03:1c:af:35:05:43: d3:49:4b:bf:c5:43:c5:de:53:aa:e5:5e:16:82:79:5d:69:64: 3e:b9:bd:67:16:1f:ea:3b:3d:1f:2c:f4:8b:ac:03:24:96:a4: da:3c:00:2d:95:8a:e6:92:aa:fe:d3:20:97:d7:02:e9:1b:d2: 88:32:b1:7d:96:80:8d:6e:48:3c:aa:70:6a:04:88:57:b3:5a: 98:e8:93:4f:40:38:83:67:5d:4d:39:eb:47:c8:97:01:6a:4a: e4:5c:ac:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxMzQxMTAvBgNVBAUTKDEwRjQ4MUNGMjhEQ0U3NTgxQThDQ0I4RTUwREUwOThG N0M4QkM5MTUwHhcNMjUwNzAxMDUxNzA3WhcNMjUwNzA4MDUxNzA3WjAYMRYwFAYD VQQDEw02ODYzNmY1NC1iNzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtCY3HWKtG/HfGFbCdgNB7+8LIvt/9Puu9RhM7W3NKn92IKP/P/4gv/2Odvm lVPUKrnnGSMTL7olQZ84eoa2wiIvW/XeBvpq/H/Y0sWjuwPkvm7bb30Xyu3hwz1s 8Q40SMHh3cqaxfvlOh4lC6AgZww2868Ki79B5Pih3QGKDmY65mWffhLB0sMRbLeq uqyNDat5UpAZSBrGYnbHHmwhz47CPIaE/rDqCr3eg/e5RyzevibgZ2TbNAVzZqyf NJU31zEOGvd8oDUsew68Io6lWqbwT6Q87w5bitu0K6VT7BzfHH5WYvi/gFRuaFOb fKjUHi5d4pwRgZ1wIaT5PCxMlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRViE9Q YQQfwXa5fj3vw5SW9qaKMB8GA1UdIwQYMBaAFBD0gc8o3OdYGozLjlDeCY98i8kV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjEzNC83OUEzMzU3NkFB MkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUxZ2FqTXVPVU40SmozeUx5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQU0J6eWpjNTFnYWpNdU9VTjRKajN5THlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjEzNC83OUEzMzU3NkFBMkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUx Z2FqTXVPVU40SmozeUx5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd3Jit4+QXt8//F1u7yy3oP17SnsrVq16NNXQ/YeRMlqzqof1zDr3Z rMLICix3L6Y5s6GiUudlQblX0ZQR9Lxy3Rr5m9Z6p2PsM6zskSM1zUpMTlcfr7v6 psIdnp1W5ao1ytfI7SOJwfrTG3fjb4OsnM/O20pNWXvk+HTn7hU5x0W5tDt1zzBU 313YMaL1Ii1nMYeBnitIT8VhNjoDHK81BUPTSUu/xUPF3lOq5V4WgnldaWQ+ub1n Fh/qOz0fLPSLrAMklqTaPAAtlYrmkqr+0yCX1wLpG9KIMrF9loCNbkg8qnBqBIhX s1qY6JNPQDiDZ11NOetHyJcBakrkXKxS -----END CERTIFICATE-----Generated at Thu Jul 3 02:07:33 2025 by rpki-client