$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json) Hash identifier: yBKAdiIXX1QdcFjbHT2HXXWB9Gv1lJyI/UqCAeZZhmY= Subject key identifier: 13:88:41:E8:68:89:54:4C:92:D3:A7:22:9A:0E:11:2B:EF:65:AC:C1 Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft Manifest number: 010D Signing time: Thu 03 Jul 2025 05:09:50 +0000 Manifest this update: Thu 03 Jul 2025 05:09:49 +0000 Manifest next update: Thu 10 Jul 2025 05:09:49 +0000 Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: yIkt3/ZsoA27spqpeVEJg3l3dmMk+B+A9hvU9Dj69vM=) 2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: 97zPU/AWi/C0nV9VIKmemXWGwZXv9hj/Vz3ExXILCII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Validity Not Before: Jul 3 05:09:49 2025 GMT Not After : Jul 10 05:09:49 2025 GMT Subject: CN=6866109e-7bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:cb:32:72:44:a3:9f:20:e0:68:21:1a:2c: 93:ba:a3:9f:ef:a0:da:89:a3:f9:22:61:a8:9d:cc: 30:d6:dd:b6:a3:05:7c:15:38:e7:63:fe:14:cf:0f: e5:92:9c:b6:f6:96:a6:59:5d:a8:9d:f3:42:9d:6b: d6:70:6b:8b:24:9c:63:aa:fc:53:ad:79:bd:c1:d6: 4f:20:8c:47:cf:11:31:e9:91:9c:12:2a:c4:40:8e: 33:ae:ec:97:3e:ec:c5:3f:ba:e4:3c:1c:63:4a:aa: 98:51:a0:aa:ab:a1:81:f1:b0:dd:6d:41:4b:a5:a8: e4:3d:18:47:8a:3c:11:8c:36:41:ed:fb:ca:aa:1c: 37:76:c3:e5:46:76:f5:e4:0c:7e:34:4c:80:07:a8: aa:f5:f5:b3:61:ff:68:f5:9d:f5:14:3d:e6:4a:c0: 8d:f3:11:8f:08:ef:f6:fb:31:99:0b:07:a2:f6:56: c2:9f:29:8d:2f:bd:2c:2e:53:03:aa:27:6f:3e:b6: 2d:13:96:37:5a:e6:c4:c4:95:5f:46:41:0c:94:e7: cb:dc:24:c3:89:33:a8:b9:af:e3:2d:ba:38:c0:92: 34:21:b9:1a:93:85:f4:92:5b:dc:a5:98:47:8f:c5: d0:c5:22:5e:d0:47:cc:97:7d:91:a2:b2:76:57:13: f3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:88:41:E8:68:89:54:4C:92:D3:A7:22:9A:0E:11:2B:EF:65:AC:C1 X509v3 Authority Key Identifier: keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:35:fb:64:9f:22:13:fa:b0:46:11:12:d1:e9:86:5d:94:9e: 83:68:0e:75:a6:e2:3e:ae:94:1a:09:67:a0:67:e3:cf:f6:3b: 00:b9:5e:a2:df:5a:96:73:11:f4:3d:52:da:c4:f1:eb:69:ad: d8:9c:1a:6e:50:b3:c0:98:ab:30:3f:fe:4c:6b:e8:4d:6d:f4: 0b:d8:8f:15:18:78:99:26:7b:cf:bb:eb:1a:cf:18:30:85:02: 89:c4:fd:c8:69:09:a0:4a:be:c9:89:1f:0a:92:44:d7:28:2f: 84:0e:b5:10:b0:36:d9:c4:45:f7:f2:5d:07:10:95:97:5e:8a: 22:e9:17:65:14:a2:d3:e9:b2:59:ec:f7:3e:c6:99:79:7b:fb: d7:76:c5:a4:86:3b:15:76:51:45:63:af:ce:dd:b1:e6:5f:59: d3:11:4e:09:73:4c:45:69:f1:bb:84:4e:56:7c:35:68:10:3a: 29:d4:f9:fb:59:22:fb:96:bc:a5:f6:57:b0:54:56:8a:92:f1: fa:ea:b3:0d:e0:9f:e3:fe:e5:75:39:7b:5d:7d:f1:43:49:40: c4:72:63:ef:04:84:b8:96:bf:f3:ba:99:7a:a9:56:2a:c1:29: 86:81:2a:85:1f:cb:8b:22:0d:47:da:5b:4b:d6:44:46:35:de: 65:85:12:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDEyMThERTc1QjI1ODhCNjYzM0E2QkY4OENEMzg4RjMx QzQzQUM5QzAwHhcNMjUwNzAzMDUwOTQ5WhcNMjUwNzEwMDUwOTQ5WjAYMRYwFAYD VQQDEw02ODY2MTA5ZS03YmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8vLMnJEo58g4GghGiyTuqOf76DaiaP5ImGoncww1t22owV8FTjnY/4Uzw/l kpy29pamWV2onfNCnWvWcGuLJJxjqvxTrXm9wdZPIIxHzxEx6ZGcEirEQI4zruyX PuzFP7rkPBxjSqqYUaCqq6GB8bDdbUFLpajkPRhHijwRjDZB7fvKqhw3dsPlRnb1 5Ax+NEyAB6iq9fWzYf9o9Z31FD3mSsCN8xGPCO/2+zGZCwei9lbCnymNL70sLlMD qidvPrYtE5Y3WubExJVfRkEMlOfL3CTDiTOoua/jLbo4wJI0Ibkak4X0klvcpZhH j8XQxSJe0EfMl32RorJ2VxPzVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOIQeho iVRMktOnIpoOESvvZazBMB8GA1UdIwQYMBaAFBIY3nWyWItmM6a/iM04jzHEOsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GMTQyNjE0QUJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWkyWXpwci1JelRpUE1jUTZ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VoamVkYkpZaTJZenByLUl6VGlQTWNRNnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GMTQyNjE0QUJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWky WXpwci1JelRpUE1jUTZ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlNftknyIT+rBGERLR6YZdlJ6DaA51puI+rpQaCWegZ+PP9jsAuV6i 31qWcxH0PVLaxPHraa3YnBpuULPAmKswP/5Ma+hNbfQL2I8VGHiZJnvPu+sazxgw hQKJxP3IaQmgSr7JiR8KkkTXKC+EDrUQsDbZxEX38l0HEJWXXooi6RdlFKLT6bJZ 7Pc+xpl5e/vXdsWkhjsVdlFFY6/O3bHmX1nTEU4Jc0xFafG7hE5WfDVoEDop1Pn7 WSL7lryl9lewVFaKkvH66rMN4J/j/uV1OXtdffFDSUDEcmPvBIS4lr/zupl6qVYq wSmGgSqFH8uLIg1H2ltL1kRGNd5lhRJr -----END CERTIFICATE-----Generated at Thu Jul 3 23:05:14 2025 by rpki-client