$ rpki-client -vvf rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft File: EYuDYeRNUFJcthNQslJrWfbeLc0.mft (raw, json) Hash identifier: yaVvjs0/ZkdiR8rYgE3Z3dXf770GuH1CvvlVGwMLiIo= Subject key identifier: 31:FF:18:48:DD:5E:4C:CB:4B:2C:2E:68:1F:1E:71:A9:E7:7A:E7:53 Authority key identifier: 11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD Certificate issuer: /CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft Manifest number: 017A Signing time: Sat 05 Jul 2025 04:00:14 +0000 Manifest this update: Sat 05 Jul 2025 04:00:14 +0000 Manifest next update: Sat 12 Jul 2025 04:00:14 +0000 Files and hashes: 1: EYuDYeRNUFJcthNQslJrWfbeLc0.crl (hash: KyqGtdeQsQvFLg2pzlPziAvz5IIlYbjZqU6CCwAJwG8=) 2: 6A13CBAC04D711F0BC472C19C4F9AE02.roa (hash: NpaEZC+frVowfr+OkTk62XtMeb2kHhDxkhfc9nCsgm0=) 3: 62752E9404D811F0BE92A51DC4F9AE02.roa (hash: ZKVR1lrcdLxvriA1prCteQU1sWugc5ZdRQWr2+79yO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F76A, serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD Validity Not Before: Jul 5 04:00:14 2025 GMT Not After : Jul 12 04:00:14 2025 GMT Subject: CN=6868a34e-fb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7c:15:f2:66:50:fd:9e:37:0d:d7:15:22:e8: ea:18:53:f8:00:0d:09:de:a3:35:0e:5a:fc:64:9f: fa:96:80:ed:39:71:a7:e9:de:8b:92:32:7c:90:d3: 46:14:0c:e8:24:0f:13:49:bd:15:25:b4:fa:b2:5c: 91:e6:8c:d3:28:4f:da:7a:23:cd:03:31:e9:94:8d: b0:86:73:f8:3e:cf:8f:b3:ee:75:8e:a7:d7:0e:d3: 98:87:93:e3:97:6c:e8:05:c7:2c:b9:57:95:38:d5: 30:99:c2:5b:78:14:bc:d7:6c:18:9d:56:9d:aa:bf: 0f:23:22:d2:1f:9c:80:47:5f:72:92:6f:e8:85:e0: ff:83:65:e2:2c:e8:8c:3c:1f:dc:af:a4:c2:15:37: 3c:43:33:9a:cb:35:cd:a1:0e:09:72:15:c7:60:a3: c4:fb:53:5e:1c:be:20:4f:dd:fa:5f:4b:67:9c:c8: 01:9b:3a:5d:3f:a1:43:e2:c7:db:38:6a:12:b1:32: e5:e3:23:d5:d4:45:a3:ae:31:58:53:b7:32:ea:38: e0:7e:82:81:13:13:92:76:d0:d2:4d:d3:02:d1:16: a9:eb:6e:97:e8:ee:44:db:51:41:d2:96:a6:2e:3e: 70:ed:09:b5:be:d7:70:c0:ec:cc:4f:5a:6d:8b:59: 55:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FF:18:48:DD:5E:4C:CB:4B:2C:2E:68:1F:1E:71:A9:E7:7A:E7:53 X509v3 Authority Key Identifier: keyid:11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d9:49:b2:54:d9:9f:76:2f:d9:12:36:54:8d:e6:8c:b8:17: 47:fa:46:59:e4:ba:e3:b2:7a:de:be:12:81:63:03:ef:ff:5c: 5f:54:85:4f:ac:41:c3:8f:51:58:55:c1:97:9e:7e:cb:b6:56: 52:b7:cf:38:1b:21:98:dc:87:4d:46:b5:dd:07:14:23:65:5a: 0e:9a:81:d2:97:90:35:45:d2:7e:1a:b8:62:59:a8:5e:d6:6c: a6:1c:25:f4:07:51:e6:2e:5f:5e:c6:67:4b:16:5a:ca:54:f4: c9:6b:1a:9f:05:ee:80:0d:8f:3d:16:4c:ca:57:e9:b3:1b:5f: fa:9d:df:ec:56:40:b9:20:cf:39:47:a8:73:83:14:3a:38:59: af:b5:b9:2e:a4:23:a0:8e:ca:9f:79:61:d0:e0:c9:22:50:1a: 37:f3:ee:bf:9f:ba:6d:03:d4:7f:55:15:26:34:b7:99:e2:12: 53:7b:7b:3e:b5:df:e2:e2:45:3d:b7:77:ed:18:6a:92:94:a1: 56:6d:6c:69:a2:ec:b3:67:2f:90:e4:2f:3b:d6:ef:0c:d6:32: 9c:6d:36:4a:40:59:81:e3:eb:f6:fd:15:ef:68:42:09:a7:c8: 6b:88:00:20:eb:e1:42:46:f9:0c:ad:ad:07:21:2c:8c:2f:85: 97:ff:2d:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY3NkExMTAvBgNVBAUTKDExOEI4MzYxRTQ0RDUwNTI1Q0I2MTM1MEIyNTI2QjU5 RjZERTJEQ0QwHhcNMjUwNzA1MDQwMDE0WhcNMjUwNzEyMDQwMDE0WjAYMRYwFAYD VQQDEw02ODY4YTM0ZS1mYjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3wV8mZQ/Z43DdcVIujqGFP4AA0J3qM1Dlr8ZJ/6loDtOXGn6d6LkjJ8kNNG FAzoJA8TSb0VJbT6slyR5ozTKE/aeiPNAzHplI2whnP4Ps+Ps+51jqfXDtOYh5Pj l2zoBccsuVeVONUwmcJbeBS812wYnVadqr8PIyLSH5yAR19ykm/oheD/g2XiLOiM PB/cr6TCFTc8QzOayzXNoQ4JchXHYKPE+1NeHL4gT936X0tnnMgBmzpdP6FD4sfb OGoSsTLl4yPV1EWjrjFYU7cy6jjgfoKBExOSdtDSTdMC0Rap626X6O5E21FB0pam Lj5w7Qm1vtdwwOzMT1pti1lV5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH/GEjd XkzLSywuaB8ecanneudTMB8GA1UdIwQYMBaAFBGLg2HkTVBSXLYTULJSa1n23i3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjc2QS8yRkJBOEJGRTE5 NkUxMUVFQUI0NURCNTRDNEY5QUUwMi9FWXVEWWVSTlVGSmN0aE5Rc2xKcldmYmVM YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZdURZZVJOVUZKY3RoTlFzbEpyV2ZiZUxjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Rjc2QS8yRkJBOEJGRTE5NkUxMUVFQUI0NURCNTRDNEY5QUUwMi9FWXVEWWVSTlVG SmN0aE5Rc2xKcldmYmVMYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy2UmyVNmfdi/ZEjZUjeaMuBdH+kZZ5LrjsnrevhKBYwPv/1xfVIVP rEHDj1FYVcGXnn7LtlZSt884GyGY3IdNRrXdBxQjZVoOmoHSl5A1RdJ+GrhiWahe 1mymHCX0B1HmLl9exmdLFlrKVPTJaxqfBe6ADY89FkzKV+mzG1/6nd/sVkC5IM85 R6hzgxQ6OFmvtbkupCOgjsqfeWHQ4MkiUBo38+6/n7ptA9R/VRUmNLeZ4hJTe3s+ td/i4kU9t3ftGGqSlKFWbWxpouyzZy+Q5C871u8M1jKcbTZKQFmB4+v2/RXvaEIJ p8hriAAg6+FCRvkMra0HISyML4WX/y0S -----END CERTIFICATE-----Generated at Sat Jul 5 21:34:45 2025 by rpki-client