$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft File: ez9g2bGigAKgeHXKtYohRXBz4X8.mft (raw, json) Hash identifier: pRMfHNLdsYoINlAko/NofYjREjdhMdHkxviTx7jaOiA= Subject key identifier: 9C:F2:37:4C:D9:5E:5F:1B:EC:B9:09:24:0F:80:D5:B3:88:BA:42:12 Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Certificate serial: 169F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft Manifest number: 165A Signing time: Wed 02 Jul 2025 16:53:31 +0000 Manifest this update: Wed 02 Jul 2025 16:53:30 +0000 Manifest next update: Wed 09 Jul 2025 16:53:30 +0000 Files and hashes: 1: ez9g2bGigAKgeHXKtYohRXBz4X8.crl (hash: zH/avDOL+mS6t/dlflFelyqB15i8Cr+SUzWtulL00MU=) 2: EE2F10889B4911EFBBAB9381C4F9AE02.roa (hash: tGyvJQ+VHA7B7G1gS3LwI/GSq7MJrx8JwpdoWLxQjws=) 3: 2CF180F0809511EFB8A82822C4F9AE02.roa (hash: HLuyZRv6VF6qFq88g7pPhaPeJ2Pt9n+iaV4TOkNRhbg=) 4: 774A232A718011EEA0E7EF5EC4F9AE02.roa (hash: QlcIbjq7jxCQ3SgyfdLUDXjmauzJiitADg/TiWQLByw=) 5: 1DCB662A3DF211EB81F4CE73C4F9AE02.roa (hash: kCg25FDQRQj+e3KU6R/BP0M2KGcBEvQ7uEDAyKmHOCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5791 (0x169f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Validity Not Before: Jul 2 16:53:30 2025 GMT Not After : Jul 9 16:53:30 2025 GMT Subject: CN=6865640a-07c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:45:03:bf:77:67:f4:8b:58:d5:7e:ac:00: f7:2e:06:c7:ff:2a:57:14:1b:e3:46:5e:62:0f:58: 18:02:60:5d:0f:a3:9d:51:3e:43:fa:53:e3:5c:2e: c8:4e:89:9f:f5:82:57:f3:00:33:18:73:6e:84:a6: 81:cc:d6:3e:4c:60:83:6d:cc:ec:b7:30:3e:34:5f: 47:f4:c2:52:e2:7d:9b:33:86:73:dd:1e:15:ec:b5: 29:4e:f1:d6:2c:0f:52:65:ed:a1:30:70:c5:58:b4: fd:e4:2f:f5:69:91:3a:40:89:bf:2d:64:62:d8:7e: a3:d4:6a:4a:fa:fe:b1:5d:8d:b9:1e:06:12:5e:e2: 75:65:1f:64:d4:5d:1e:a7:d9:2d:94:87:fd:f4:97: b9:0b:9d:6e:b4:31:1c:4b:c0:08:a5:c9:a5:bd:a4: d2:50:60:53:14:7f:ca:7f:bd:e5:92:ee:64:05:f2: b1:1f:a4:ab:7c:8f:52:c3:96:cf:31:a0:e1:b8:5e: 71:c6:21:1a:78:3d:55:31:0e:ab:33:21:30:14:8f: da:ef:87:cb:7f:bf:c6:ba:1b:fb:87:d9:d6:c0:f1: 47:b6:aa:ec:c0:7a:6a:86:9c:91:7a:9e:1a:6a:fb: 5a:c1:70:fb:43:a1:94:31:10:6d:07:72:65:71:3d: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F2:37:4C:D9:5E:5F:1B:EC:B9:09:24:0F:80:D5:B3:88:BA:42:12 X509v3 Authority Key Identifier: keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:35:62:78:ef:f2:c6:16:88:4c:95:4d:63:f0:12:ad:d1:8a: e3:59:b8:4b:3d:aa:3f:7c:8f:9b:13:b1:c7:2d:44:52:65:da: 67:37:d1:b8:ab:09:10:98:8d:94:a1:f6:4b:aa:54:69:c2:10: 52:1b:69:a2:7a:46:92:ae:51:5f:fc:43:5f:32:c6:5c:1d:be: 4f:b2:45:27:79:1b:ad:00:a8:a8:e8:53:f8:c8:60:de:90:29: d8:b0:a2:1c:a3:59:6e:bf:a9:a4:06:d2:57:fb:52:26:4a:59: 81:72:e5:bb:95:22:6f:80:42:64:18:75:a7:07:4b:e5:17:5f: 44:d1:c4:81:51:2f:19:a5:75:30:d8:21:13:66:85:52:8d:cd: ef:31:24:65:00:29:2f:71:5a:be:e7:62:4f:2d:d7:04:a7:6c: 5f:21:3e:3a:93:5e:12:88:51:4e:a1:ef:1c:32:63:b3:72:36: 43:a3:65:77:ac:a4:f2:8b:3d:56:8f:29:90:e1:d2:29:47:33: 80:e7:cf:a2:f2:d0:b1:3c:a7:aa:f6:c5:0b:64:10:2b:0d:14: 82:a7:b7:00:3f:f3:9e:2b:e0:2e:92:84:35:a5:4a:cf:01:3c: 68:c7:fa:82:bb:00:51:83:09:16:56:65:7e:fe:44:e0:87:fa: ad:0e:02:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVDQUI1OEEyMTQ1 NzA3M0UxN0YwHhcNMjUwNzAyMTY1MzMwWhcNMjUwNzA5MTY1MzMwWjAYMRYwFAYD VQQDEw02ODY1NjQwYS0wN2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/FFA793Z/SLWNV+rAD3LgbH/ypXFBvjRl5iD1gYAmBdD6OdUT5D+lPjXC7I Tomf9YJX8wAzGHNuhKaBzNY+TGCDbczstzA+NF9H9MJS4n2bM4Zz3R4V7LUpTvHW LA9SZe2hMHDFWLT95C/1aZE6QIm/LWRi2H6j1GpK+v6xXY25HgYSXuJ1ZR9k1F0e p9ktlIf99Je5C51utDEcS8AIpcmlvaTSUGBTFH/Kf73lku5kBfKxH6SrfI9Sw5bP MaDhuF5xxiEaeD1VMQ6rMyEwFI/a74fLf7/Guhv7h9nWwPFHtqrswHpqhpyRep4a avtawXD7Q6GUMRBtB3JlcT0Z0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzyN0zZ Xl8b7LkJJA+A1bOIukISMB8GA1UdIwQYMBaAFHs/YNmxooACoHh1yrWKIUVwc+F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjU0Qy81QTU2NEQ0ODE5 RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdBS2dlSFhLdFlvaFJYQno0 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6OWcyYkdpZ0FLZ2VIWEt0WW9oUlhCejRYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjU0Qy81QTU2NEQ0ODE5RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdB S2dlSFhLdFlvaFJYQno0WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDINWJ47/LGFohMlU1j8BKt0YrjWbhLPao/fI+bE7HHLURSZdpnN9G4 qwkQmI2UofZLqlRpwhBSG2miekaSrlFf/ENfMsZcHb5PskUneRutAKio6FP4yGDe kCnYsKIco1luv6mkBtJX+1ImSlmBcuW7lSJvgEJkGHWnB0vlF19E0cSBUS8ZpXUw 2CETZoVSjc3vMSRlACkvcVq+52JPLdcEp2xfIT46k14SiFFOoe8cMmOzcjZDo2V3 rKTyiz1WjymQ4dIpRzOA58+i8tCxPKeq9sULZBArDRSCp7cAP/OeK+AukoQ1pUrP ATxox/qCuwBRgwkWVmV+/kTgh/qtDgLn -----END CERTIFICATE-----Generated at Thu Jul 3 06:27:56 2025 by rpki-client