$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json) Hash identifier: m0tFbp2n1Rdgk3kym4aMRHLi0C6tD3OT4w4s0yoXQOE= Subject key identifier: 12:18:F4:17:D4:E6:DA:B8:DE:C7:AA:20:40:9D:82:67:C9:9F:4B:7E Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft Manifest number: 013E Signing time: Thu 03 Jul 2025 04:27:58 +0000 Manifest this update: Thu 03 Jul 2025 04:27:58 +0000 Manifest next update: Thu 10 Jul 2025 04:27:58 +0000 Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: /D2GNKzQxyJhDLXR0g0wCs/xhm/Kyh88TOFKKqSEN4o=) 2: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: zenPmnV708uWYVdBIohUknKedfQOR1ObJANCzq5j/eI=) 3: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: cNAOWRyYAIXWiMdboiFgiFug53GcE6u1QmL+e/IQa/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Validity Not Before: Jul 3 04:27:58 2025 GMT Not After : Jul 10 04:27:58 2025 GMT Subject: CN=686606ce-64e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:56:aa:4e:43:c2:7e:f5:61:ff:c6:5f:f4: 6e:4b:12:3a:33:6a:21:ae:fa:bc:b4:d1:5b:b5:c7: b4:c0:7c:be:f7:a6:92:45:85:60:ad:68:6f:88:16: 18:ed:6a:22:20:05:c4:57:6d:76:be:a7:7c:4d:b4: 45:84:c3:20:fa:e5:b8:f1:a1:83:57:68:7b:95:61: 18:51:51:c5:1b:92:94:1a:49:1d:e9:76:84:5a:d0: 31:bb:bf:0a:0a:c1:0c:a8:a8:81:69:43:ec:25:14: bf:c3:20:59:11:8a:61:22:09:dc:2b:57:1a:ef:5b: dc:ac:41:b1:0c:f9:d3:69:12:19:e4:57:62:62:f5: 14:7f:76:8f:0d:e0:a6:c4:b9:96:11:a8:82:6c:2d: 50:be:2b:7c:52:f2:a7:2f:72:2e:78:0a:08:ee:85: db:c3:d7:3c:d3:c9:77:7b:05:fa:0c:02:a1:48:c6: 35:7c:01:cd:f6:69:26:a2:28:01:f5:84:ac:4c:83: 80:46:70:d6:7b:f0:e4:32:0c:50:bb:3b:2e:03:e5: 34:2d:c6:37:fe:dc:78:40:4e:1f:c9:e0:7a:a6:1f: 62:f4:fe:bb:62:9e:c3:0c:90:74:ef:0e:0d:01:0b: 6c:3c:2d:2d:b1:ba:dd:d2:b5:00:38:d3:ab:ac:27: c9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:18:F4:17:D4:E6:DA:B8:DE:C7:AA:20:40:9D:82:67:C9:9F:4B:7E X509v3 Authority Key Identifier: keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:8f:e8:2a:6b:a9:21:50:80:e5:c0:c1:02:3f:15:a7:4b:c5: 41:ba:31:4d:63:f3:e7:31:c6:10:8a:04:d4:d2:13:95:73:47: f9:2d:55:be:49:ae:2a:45:e0:5f:be:c6:a9:0f:62:7d:ce:ac: be:20:ac:a9:f5:e2:d0:4d:bb:7d:c0:5a:34:0e:f2:23:ce:49: 77:f1:f6:8f:d9:f0:9d:d5:65:f8:7c:82:11:e6:56:a1:bd:a7: bb:ec:51:03:1a:5e:e7:98:50:60:11:cf:d3:7f:48:a0:b6:a7: 91:09:1d:0b:e4:db:0b:03:54:ea:05:ad:7f:e8:35:39:22:6f: 41:16:16:0e:8e:d0:e0:86:ba:06:95:f7:c5:e5:f2:5f:6d:19: 9e:a2:08:a9:6c:53:0d:e4:d2:b7:de:22:bc:ca:c0:fc:b5:5f: 90:af:c4:72:bf:54:c1:1b:9d:cf:31:a4:ef:5c:41:84:ab:5c: 6b:59:e1:2b:6d:aa:d3:c8:86:f5:f7:cf:95:ba:f9:fb:91:75: 49:e8:40:be:47:cb:27:c6:5b:44:6b:de:47:12:79:5c:e7:9f: f7:9f:b7:b4:3f:a7:ab:ff:af:a4:b4:03:f0:fa:37:2b:b1:cd: a3:78:89:b0:af:a7:b1:e8:90:38:02:b5:ec:0d:4e:50:51:70: e0:fe:14:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0 Mjc4N0FGODMwHhcNMjUwNzAzMDQyNzU4WhcNMjUwNzEwMDQyNzU4WjAYMRYwFAYD VQQDEw02ODY2MDZjZS02NGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJVWqk5Dwn71Yf/GX/RuSxI6M2ohrvq8tNFbtce0wHy+96aSRYVgrWhviBYY 7WoiIAXEV212vqd8TbRFhMMg+uW48aGDV2h7lWEYUVHFG5KUGkkd6XaEWtAxu78K CsEMqKiBaUPsJRS/wyBZEYphIgncK1ca71vcrEGxDPnTaRIZ5FdiYvUUf3aPDeCm xLmWEaiCbC1Qvit8UvKnL3IueAoI7oXbw9c808l3ewX6DAKhSMY1fAHN9mkmoigB 9YSsTIOARnDWe/DkMgxQuzsuA+U0LcY3/tx4QE4fyeB6ph9i9P67Yp7DDJB07w4N AQtsPC0tsbrd0rUAONOrrCfJTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIY9BfU 5tq43seqIECdgmfJn0t+MB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjgxMy9BODUyNDM2QTZFMkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjIt ME1oMFVwWFFGSmhDZUhyNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgj+gqa6khUIDlwMECPxWnS8VBujFNY/PnMcYQigTU0hOVc0f5LVW+ Sa4qReBfvsapD2J9zqy+IKyp9eLQTbt9wFo0DvIjzkl38faP2fCd1WX4fIIR5lah vae77FEDGl7nmFBgEc/Tf0igtqeRCR0L5NsLA1TqBa1/6DU5Im9BFhYOjtDghroG lffF5fJfbRmeogipbFMN5NK33iK8ysD8tV+Qr8Ryv1TBG53PMaTvXEGEq1xrWeEr barTyIb198+Vuvn7kXVJ6EC+R8snxltEa95HEnlc55/3n7e0P6er/6+ktAPw+jcr sc2jeImwr6ex6JA4ArXsDU5QUXDg/hRA -----END CERTIFICATE-----Generated at Thu Jul 3 10:03:26 2025 by rpki-client