$ rpki-client -vvf rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft File: EU2YjjFR6VKba6150-lUNuU34SM.mft (raw, json) Hash identifier: cNJuA351/KsvUXznrO0hHrtpasgBViK0fUg+I0hJq7s= Subject key identifier: 95:9F:AC:C7:0E:D7:4E:A3:7B:2A:79:56:3F:56:5D:7E:D3:B6:D9:87 Authority key identifier: 11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23 Certificate issuer: /CN=A9144633/serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123 Certificate serial: 080D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft Manifest number: 07F7 Signing time: Wed 02 Jul 2025 21:19:01 +0000 Manifest this update: Wed 02 Jul 2025 21:19:01 +0000 Manifest next update: Wed 09 Jul 2025 21:19:01 +0000 Files and hashes: 1: EU2YjjFR6VKba6150-lUNuU34SM.crl (hash: evlK1SM41Y2iU1ShTpEa9Y+t4KnkdL/5Mk7eEQbJB8w=) 2: 3AA3E4AE018111ECB7DFB21CC4F9AE02.roa (hash: 5PHhaEhaUjJQhgTVvpAg3pptzWHIUBYv1sMMeeaX3Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2061 (0x80d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144633, serialNumber=114D988E3151E9529B6BAD79D3E95436E537E123 Validity Not Before: Jul 2 21:19:01 2025 GMT Not After : Jul 9 21:19:01 2025 GMT Subject: CN=6865a245-96fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a1:dd:d1:e1:01:27:4e:cf:8d:50:84:6c:50: 65:9f:da:0c:d7:e3:6c:eb:61:8a:31:32:41:ff:e0: f2:8e:bc:d6:06:f3:58:a2:ec:b0:f3:50:35:36:75: 33:01:b5:30:2b:7e:fb:56:db:ea:7f:a4:7a:3f:67: d7:fb:17:b2:ce:cf:79:36:34:91:11:83:7b:1d:4c: 8a:cc:ad:ba:cc:22:4e:8f:73:63:3c:e7:21:36:71: b4:83:df:3e:c2:90:42:20:a0:03:4e:38:fd:1e:2d: 98:08:2d:9c:ef:ce:5f:1b:e0:cf:1f:ab:b8:33:f1: d3:e3:41:28:f1:96:ea:a5:c1:e8:04:bb:e0:4e:8c: 3e:8a:3e:3e:1d:5c:cc:c0:31:9a:a9:a3:f7:75:15: 27:59:79:37:9b:af:b4:69:69:e0:26:b8:bd:f5:e1: af:62:e5:6e:e4:7d:72:3c:1c:3f:16:94:c2:34:12: 12:58:f5:c7:e8:8b:1e:23:60:c3:a4:c6:dd:9e:23: 45:02:74:11:26:0d:aa:bd:61:0d:7e:6d:5d:f5:9b: 53:78:f9:ab:e7:a6:35:fd:09:88:1e:b6:14:f4:bf: 7f:3a:84:0b:e5:4a:c2:c4:3c:5a:89:44:fa:8d:b6: a0:bf:b2:22:8c:ca:46:1a:1e:2a:60:fc:21:ee:5b: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9F:AC:C7:0E:D7:4E:A3:7B:2A:79:56:3F:56:5D:7E:D3:B6:D9:87 X509v3 Authority Key Identifier: keyid:11:4D:98:8E:31:51:E9:52:9B:6B:AD:79:D3:E9:54:36:E5:37:E1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EU2YjjFR6VKba6150-lUNuU34SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144633/A019E9CAF40111EAB061963FC4F9AE02/EU2YjjFR6VKba6150-lUNuU34SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c2:81:07:00:0d:e6:ed:16:f9:b8:ca:25:7f:47:6c:e2:c1: f3:96:24:a4:40:1f:c3:8e:28:57:66:39:86:fb:c5:86:8d:1c: 33:ca:09:b9:7f:d0:87:68:2e:89:c5:46:71:c7:ba:48:58:8f: 16:1b:12:0b:3a:a9:9c:a4:3b:1f:83:71:2d:14:6d:5d:8b:39: 00:52:42:ac:a2:4f:03:42:3f:d4:c4:2f:34:43:d9:3b:ac:50: d4:13:98:4f:e7:bc:08:16:55:24:a8:0d:58:78:a0:90:0f:44: 28:b3:98:f1:3d:fb:f5:3b:8d:a1:f7:e3:22:35:55:a6:8a:99: 4f:a5:cb:01:e4:97:1c:f6:d9:73:ce:af:56:33:64:71:a6:74: 2a:0c:ad:6f:e9:22:7d:74:6f:5e:54:97:5b:75:a8:f6:b9:8e: 80:c6:c6:48:84:7d:66:da:70:a5:08:b7:0c:c9:66:dc:9a:15: e6:79:bc:41:bc:16:89:71:1b:44:b1:b1:e6:9e:4a:49:80:2f: bf:62:65:5f:fd:4e:c0:5b:85:02:4f:20:4b:2f:78:38:81:23: 2e:04:44:10:ad:6a:3b:c0:51:cd:0c:32:4e:69:65:d0:59:56: 62:54:97:17:97:35:b8:93:73:34:28:9b:c2:99:5c:9f:9a:4b: de:ed:f7:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ2MzMxMTAvBgNVBAUTKDExNEQ5ODhFMzE1MUU5NTI5QjZCQUQ3OUQzRTk1NDM2 RTUzN0UxMjMwHhcNMjUwNzAyMjExOTAxWhcNMjUwNzA5MjExOTAxWjAYMRYwFAYD VQQDEw02ODY1YTI0NS05NmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKHd0eEBJ07PjVCEbFBln9oM1+Ns62GKMTJB/+DyjrzWBvNYouyw81A1NnUz AbUwK377Vtvqf6R6P2fX+xeyzs95NjSREYN7HUyKzK26zCJOj3NjPOchNnG0g98+ wpBCIKADTjj9Hi2YCC2c785fG+DPH6u4M/HT40Eo8ZbqpcHoBLvgTow+ij4+HVzM wDGaqaP3dRUnWXk3m6+0aWngJri99eGvYuVu5H1yPBw/FpTCNBISWPXH6IseI2DD pMbdniNFAnQRJg2qvWENfm1d9ZtTePmr56Y1/QmIHrYU9L9/OoQL5UrCxDxaiUT6 jbagv7IijMpGGh4qYPwh7lsARQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWfrMcO 106jeyp5Vj9WXX7TttmHMB8GA1UdIwQYMBaAFBFNmI4xUelSm2utedPpVDblN+Ej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDYzMy9BMDE5RTlDQUY0 MDExMUVBQjA2MTk2M0ZDNEY5QUUwMi9FVTJZampGUjZWS2JhNjE1MC1sVU51VTM0 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VVMllqakZSNlZLYmE2MTUwLWxVTnVVMzRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDYzMy9BMDE5RTlDQUY0MDExMUVBQjA2MTk2M0ZDNEY5QUUwMi9FVTJZampGUjZW S2JhNjE1MC1sVU51VTM0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmwoEHAA3m7Rb5uMolf0ds4sHzliSkQB/DjihXZjmG+8WGjRwzygm5 f9CHaC6JxUZxx7pIWI8WGxILOqmcpDsfg3EtFG1dizkAUkKsok8DQj/UxC80Q9k7 rFDUE5hP57wIFlUkqA1YeKCQD0Qos5jxPfv1O42h9+MiNVWmiplPpcsB5Jcc9tlz zq9WM2RxpnQqDK1v6SJ9dG9eVJdbdaj2uY6AxsZIhH1m2nClCLcMyWbcmhXmebxB vBaJcRtEsbHmnkpJgC+/YmVf/U7AW4UCTyBLL3g4gSMuBEQQrWo7wFHNDDJOaWXQ WVZiVJcXlzW4k3M0KJvCmVyfmkve7feF -----END CERTIFICATE-----Generated at Thu Jul 3 01:49:39 2025 by rpki-client