$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft File: eQckJnCjuJ00jVqEHayNGC62YH4.mft (raw, json) Hash identifier: 0O4lcGNvaF9meE0JBtNhGl3/eB7AYfGesumxQ1ZxgW0= Subject key identifier: 75:B6:1E:A9:DE:E1:1A:E1:37:E1:D3:17:D8:58:15:0D:87:80:3F:29 Authority key identifier: 79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E Certificate issuer: /CN=A913DC32/serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft Manifest number: 40 Signing time: Thu 03 Jul 2025 07:46:42 +0000 Manifest this update: Thu 03 Jul 2025 07:46:41 +0000 Manifest next update: Thu 10 Jul 2025 07:46:41 +0000 Files and hashes: 1: eQckJnCjuJ00jVqEHayNGC62YH4.crl (hash: WR3lkWy6GRBvqqdSFVtytGi1D5e162f/JzT4TjgpPWs=) 2: 22E5730815AC11F0BA789D40C4F9AE02.roa (hash: iWmeds3ikQddJ0zOLOMR2/nAx9kIXx/domN/vEqWgPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC32, serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Validity Not Before: Jul 3 07:46:41 2025 GMT Not After : Jul 10 07:46:41 2025 GMT Subject: CN=68663561-e591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:1a:99:21:9a:19:99:97:14:3b:8f:df:c4: 54:ca:0f:c0:56:28:28:83:34:ca:38:13:37:00:f9: fd:93:ef:17:eb:c3:6b:c6:95:f4:f5:73:ed:ee:82: f4:0c:bf:d2:c4:cb:d9:37:d0:87:1e:43:50:39:53: 85:84:e7:dc:31:a2:55:5f:ef:db:2b:e1:87:f4:04: ae:43:90:49:5d:e3:11:43:cc:9b:00:fc:35:63:a3: 61:a1:f1:54:56:26:47:bc:26:61:a3:7e:75:d4:5d: 60:6d:d2:10:02:f4:12:73:f8:86:dc:fc:b4:be:19: 98:df:7b:79:89:ff:1b:6c:37:50:2d:e6:8e:05:52: 92:6d:b2:f6:6a:4e:d2:00:44:ac:1e:18:18:73:c8: f5:ee:83:62:aa:99:cf:48:1a:9f:65:b1:84:e5:18: dc:be:83:ff:45:94:7d:86:d2:e1:02:63:ff:c0:40: b3:41:ca:7e:fa:1b:08:91:0d:14:e4:e8:37:c8:d1: 64:35:78:35:78:5c:c7:b2:6a:ac:d9:e4:e1:0d:4c: 49:f0:5e:22:4b:21:8e:3b:27:e6:7c:36:ed:35:f3: 7f:d1:91:d1:9c:07:b1:88:87:62:fe:ec:70:ac:56: 17:00:c2:8d:e1:50:f4:a7:e5:4c:e5:11:7d:53:b6: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B6:1E:A9:DE:E1:1A:E1:37:E1:D3:17:D8:58:15:0D:87:80:3F:29 X509v3 Authority Key Identifier: keyid:79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:51:cd:6c:e4:ba:ec:d1:3a:4f:2d:26:22:ed:06:e3:0a:7a: 07:a1:1d:65:74:8e:69:93:40:17:a9:c6:d3:5c:cb:52:9c:48: b8:a1:ff:28:d8:45:00:41:56:27:0d:c9:e0:64:2b:31:08:fe: 28:11:94:06:84:64:32:2e:52:29:06:53:3b:7e:41:d7:fa:ef: d0:13:2c:34:83:20:8f:cb:97:a8:ba:c1:9a:b1:04:a2:d9:c4: c5:f7:74:ea:9a:6c:ae:58:25:b3:91:a6:ed:e3:93:cb:0d:00: 1a:a8:5d:fc:a8:d8:f3:58:85:d7:41:94:01:dc:ee:30:d2:6d: bc:2e:c0:c1:e3:95:8b:ec:db:95:dc:ea:07:77:52:44:02:af: 14:3a:54:fb:4e:7a:96:e6:bd:50:b3:14:ce:27:1c:e7:21:2d: 8c:ea:f5:85:d9:39:39:ff:c9:f1:3f:43:7a:fb:67:7d:ee:a6: bc:42:4e:63:8b:95:cf:0c:a8:70:a8:64:60:0d:e3:48:cf:c3: 8e:74:c5:c1:ff:42:05:94:e2:a3:73:d4:01:4f:7b:f1:c7:49: 74:f3:7d:6c:a2:5f:64:0c:e5:1d:c8:7d:91:f7:3c:88:fa:91: fd:94:9f:d4:58:ef:ad:9a:4c:70:a3:b2:8e:78:93:56:04:eb: 55:91:17:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REMzMjExMC8GA1UEBRMoNzkwNzI0MjY3MEEzQjg5RDM0OEQ1QTg0MURBQzhEMTgy RUI2NjA3RTAeFw0yNTA3MDMwNzQ2NDFaFw0yNTA3MTAwNzQ2NDFaMBgxFjAUBgNV BAMTDTY4NjYzNTYxLWU1OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeWRqZIZoZmZcUO4/fxFTKD8BWKCiDNMo4EzcA+f2T7xfrw2vGlfT1c+3ugvQM v9LEy9k30IceQ1A5U4WE59wxolVf79sr4Yf0BK5DkEld4xFDzJsA/DVjo2Gh8VRW Jke8JmGjfnXUXWBt0hAC9BJz+Ibc/LS+GZjfe3mJ/xtsN1At5o4FUpJtsvZqTtIA RKweGBhzyPXug2Kqmc9IGp9lsYTlGNy+g/9FlH2G0uECY//AQLNByn76GwiRDRTk 6DfI0WQ1eDV4XMeyaqzZ5OENTEnwXiJLIY47J+Z8Nu0183/RkdGcB7GIh2L+7HCs VhcAwo3hUPSn5UzlEX1TthvXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdbYeqd7h GuE34dMX2FgVDYeAPykwHwYDVR0jBBgwFoAUeQckJnCjuJ00jVqEHayNGC62YH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQzMyLzdCNzUwQkZFRkNG RDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUowMGpWcUVIYXlOR0M2MllI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVFja0puQ2p1SjAwalZxRUhheU5HQzYyWUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE QzMyLzdCNzUwQkZFRkNGRDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUow MGpWcUVIYXlOR0M2MllINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKdRzWzkuuzROk8tJiLtBuMKegehHWV0jmmTQBepxtNcy1KcSLih/yjY RQBBVicNyeBkKzEI/igRlAaEZDIuUikGUzt+Qdf679ATLDSDII/Ll6i6wZqxBKLZ xMX3dOqabK5YJbORpu3jk8sNABqoXfyo2PNYhddBlAHc7jDSbbwuwMHjlYvs25Xc 6gd3UkQCrxQ6VPtOepbmvVCzFM4nHOchLYzq9YXZOTn/yfE/Q3r7Z33uprxCTmOL lc8MqHCoZGAN40jPw450xcH/QgWU4qNz1AFPe/HHSXTzfWyiX2QM5R3IfZH3PIj6 kf2Un9RY762aTHCjso54k1YE61WRF0c= -----END CERTIFICATE-----Generated at Fri Jul 4 08:04:08 2025 by rpki-client