$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft File: eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json) Hash identifier: UKfnrCqr3BOlHS4fJePayGwsMS7BmGAwWk63w2ZgNRk= Subject key identifier: 63:9C:7A:43:CA:8A:B8:D7:EF:68:58:B6:55:5F:34:62:BE:59:B9:F8 Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft Manifest number: 0159 Signing time: Thu 03 Jul 2025 04:12:13 +0000 Manifest this update: Thu 03 Jul 2025 04:12:12 +0000 Manifest next update: Thu 10 Jul 2025 04:12:12 +0000 Files and hashes: 1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: iLtNCvFGJfVWcriU8Aju6lUL7K5oGsyind8fyJJrwYg=) 2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: ta+wizYmG5Li1UNdnV+RjnG6RQDSQFnDtjBK6l15sJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Validity Not Before: Jul 3 04:12:12 2025 GMT Not After : Jul 10 04:12:12 2025 GMT Subject: CN=6866031c-780a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:61:d2:96:56:85:51:86:ab:1c:c6:06:9c: 00:38:0b:53:fe:e6:27:f9:d7:5a:f4:d2:2b:9a:4e: 20:ad:b0:2e:9b:21:a9:df:eb:c6:e1:b9:29:7b:69: 82:82:9e:a0:91:b5:09:3b:43:d3:bf:f5:bc:c3:3c: f5:82:8c:4e:bc:b3:17:22:15:74:fa:fc:c0:d9:50: f1:16:1b:a1:c8:9b:1d:ac:ba:91:0d:fc:2d:5a:06: 90:95:b8:32:d4:0a:dc:37:44:0b:ee:24:38:c5:f1: 12:fb:c1:b0:5a:e6:e9:7b:03:d9:e7:6d:9e:3e:3f: 43:21:30:39:f0:21:85:19:ac:2e:08:cf:5c:e2:59: 72:bb:e2:67:27:fe:21:e3:d1:c0:ff:30:91:55:ac: ba:49:d9:ca:33:e6:49:75:69:2f:7b:cf:97:af:7d: 03:83:38:5b:5a:a7:ad:58:42:64:b5:85:31:95:5d: fb:1c:ec:a9:53:99:4f:82:e6:0f:05:de:ac:45:0a: 39:a6:5f:03:f7:f6:65:9b:cb:b9:46:19:10:c4:f8: 12:35:b3:f6:49:b6:f9:5a:c6:2c:4f:c0:83:e4:39: 48:03:89:b3:dd:6c:26:66:63:9f:5d:18:d7:38:f8: db:e9:2a:4f:66:ea:4d:7b:cb:cf:ba:5f:4c:c7:6e: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9C:7A:43:CA:8A:B8:D7:EF:68:58:B6:55:5F:34:62:BE:59:B9:F8 X509v3 Authority Key Identifier: keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:54:b1:92:1d:9b:9f:19:d5:60:38:77:ce:3e:81:c7:56:cb: 3c:31:d5:c5:20:8f:40:02:ab:ef:99:b1:57:8e:9d:19:af:2f: f8:a3:e1:13:81:40:c9:7b:55:52:1b:5d:04:10:5a:0e:db:02: 4b:c8:c6:11:61:34:e3:d4:db:44:15:37:a1:25:e6:e0:64:ac: 21:d3:89:b2:f1:c1:7c:49:4c:ec:c5:e4:d5:d0:3c:f8:16:4b: 2d:a3:4a:37:e7:88:4a:9b:a4:03:8c:91:a7:b0:e2:a5:b6:c1: 2d:9f:9c:95:73:75:b1:3c:da:c7:0a:63:6f:1e:6b:f0:56:d0: 09:b6:46:0d:af:b8:01:3a:ee:33:e9:23:55:49:ac:ec:9f:05: 5a:82:10:c1:6b:75:ef:dc:45:df:c3:72:fe:49:42:14:85:c7: 2c:1b:fb:9f:8a:b4:04:16:9c:ef:ad:21:10:74:db:5f:eb:01: 75:e5:f2:2d:a8:a4:3f:4d:b6:a9:0d:d6:9b:3d:4b:88:87:73: e5:b3:70:f1:cb:50:2c:b0:93:2b:60:5c:6c:13:89:b6:c2:29: 35:52:97:5b:ad:b3:d9:f8:8b:82:0e:3b:b5:95:6d:4e:21:2f: c8:ad:40:9a:e1:9d:90:5d:a5:23:34:7d:43:32:04:4b:08:02: dc:32:dd:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG QjA4NjIwRDgwHhcNMjUwNzAzMDQxMjEyWhcNMjUwNzEwMDQxMjEyWjAYMRYwFAYD VQQDEw02ODY2MDMxYy03ODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdhh0pZWhVGGqxzGBpwAOAtT/uYn+dda9NIrmk4grbAumyGp3+vG4bkpe2mC gp6gkbUJO0PTv/W8wzz1goxOvLMXIhV0+vzA2VDxFhuhyJsdrLqRDfwtWgaQlbgy 1ArcN0QL7iQ4xfES+8GwWubpewPZ522ePj9DITA58CGFGawuCM9c4llyu+JnJ/4h 49HA/zCRVay6SdnKM+ZJdWkve8+Xr30DgzhbWqetWEJktYUxlV37HOypU5lPguYP Bd6sRQo5pl8D9/Zlm8u5RhkQxPgSNbP2Sbb5WsYsT8CD5DlIA4mz3WwmZmOfXRjX OPjb6SpPZupNe8vPul9Mx24RqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOcekPK irjX72hYtlVfNGK+Wbn4MB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qjc5Ri9EQTY4MzdGMDRFMjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1S V0FzbmJjREN5WHY3Q0dJTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOVLGSHZufGdVgOHfOPoHHVss8MdXFII9AAqvvmbFXjp0Zry/4o+ET gUDJe1VSG10EEFoO2wJLyMYRYTTj1NtEFTehJebgZKwh04my8cF8SUzsxeTV0Dz4 Fksto0o354hKm6QDjJGnsOKltsEtn5yVc3WxPNrHCmNvHmvwVtAJtkYNr7gBOu4z 6SNVSazsnwVaghDBa3Xv3EXfw3L+SUIUhccsG/ufirQEFpzvrSEQdNtf6wF15fIt qKQ/TbapDdabPUuIh3Pls3Dxy1AssJMrYFxsE4m2wik1UpdbrbPZ+IuCDju1lW1O IS/IrUCa4Z2QXaUjNH1DMgRLCALcMt1L -----END CERTIFICATE-----Generated at Fri Jul 4 21:53:18 2025 by rpki-client