$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft File: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json) Hash identifier: 8mOYzfuBGDiKh9O40g/MJWLg/oXVm42uGp4dF11ulPY= Subject key identifier: D6:F5:49:06:A5:DE:43:E7:D3:E8:E2:6C:59:AA:CD:31:8F:F9:1B:64 Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft Manifest number: 0600 Signing time: Mon 30 Jun 2025 23:14:15 +0000 Manifest this update: Mon 30 Jun 2025 23:14:14 +0000 Manifest next update: Mon 07 Jul 2025 23:14:14 +0000 Files and hashes: 1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: OOFdJXuH2sUe6fdRfymc4glKH/PvdMgMUkTLxv03wR4=) 2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: KeDjzKypgQHXzMMCw525U76eYPfXZKl/2OFa/SSqsKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Validity Not Before: Jun 30 23:14:14 2025 GMT Not After : Jul 7 23:14:14 2025 GMT Subject: CN=68631a46-8316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b4:92:55:5b:6e:f0:38:53:a3:d6:5b:e2:11: b0:bc:7b:38:aa:8e:62:02:ba:45:42:20:7d:be:9f: b5:fa:49:28:b3:0f:aa:4f:36:99:fa:f9:b4:b9:05: b7:fb:15:12:8b:c9:d7:85:03:7e:8d:36:d2:e3:ae: 1e:29:3c:6c:46:48:22:7a:f5:30:36:01:91:eb:19: 7a:6d:4f:1f:42:34:2d:b0:84:ff:c7:dd:65:29:e0: 27:07:0b:45:1e:bb:35:92:2d:e5:b9:56:61:5c:02: 00:7b:b8:07:3d:06:82:93:ad:54:c8:a5:2c:f7:18: 91:e0:7e:ec:48:2b:87:fd:30:ae:97:2e:aa:e0:7d: 3b:8c:e6:12:2d:ea:ad:ab:76:f1:95:bc:5a:f5:37: b5:b9:dd:52:89:e6:74:1f:f2:a7:bb:70:7f:e2:fd: 5e:06:fe:59:76:36:d8:a2:b2:ff:89:22:16:63:91: 39:4f:b1:dd:8b:19:45:d5:37:be:31:5c:0f:84:7f: ba:48:f5:54:b3:9f:54:27:8e:cf:14:8b:2d:c0:93: 3b:d9:36:34:48:c3:3b:b7:48:4a:fb:b5:66:77:bc: 19:0a:48:67:17:72:2d:5d:ff:bc:1c:4f:48:24:ca: b0:c7:84:0d:ac:ab:72:7c:f2:40:0c:eb:79:c3:30: e6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F5:49:06:A5:DE:43:E7:D3:E8:E2:6C:59:AA:CD:31:8F:F9:1B:64 X509v3 Authority Key Identifier: keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:6a:97:46:6c:7c:4d:9b:87:76:63:a1:d8:a6:4f:a8:8e:95: 69:9a:2a:78:30:c6:56:9f:5e:01:6b:ec:db:67:4f:0a:e5:a6: 41:15:49:c3:d3:60:02:5a:49:4f:42:2c:e5:c5:73:19:cc:75: c4:71:44:fa:cf:c0:26:41:83:cc:be:0c:fb:d0:c8:7d:dc:65: 2e:19:bf:56:1d:c3:c0:7e:98:15:a1:0e:94:d9:9e:8d:7d:dc: 54:e2:1b:76:0a:84:74:f1:2b:98:f8:4b:7e:d4:1c:68:75:3d: bc:d9:ec:d7:96:07:7c:77:10:1b:ad:3c:34:b6:e8:47:3e:5d: 1e:f7:41:fd:f2:64:31:6b:a3:df:e5:fa:4b:46:ab:0d:5c:6d: 32:9e:65:71:5c:73:ab:ac:e3:da:29:b9:2c:91:ff:a7:8e:7d: 29:f1:94:dd:f2:7c:32:b1:bf:49:5c:bd:6a:d3:62:e9:a0:f1: 0d:a6:94:f9:cd:23:99:ca:44:de:d6:07:71:a4:90:9d:e7:a5: 49:62:3d:c4:c9:df:1f:50:3a:e1:3c:bb:1c:bb:ae:c1:77:78: 8b:e7:6f:82:40:06:af:e3:85:0a:0e:2a:60:bf:c0:3d:2c:7a: 8e:40:34:b0:57:e5:86:92:6f:93:70:4f:7e:d7:7f:5d:af:e6: fc:ba:78:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz RUQxOTY3OTgwHhcNMjUwNjMwMjMxNDE0WhcNMjUwNzA3MjMxNDE0WjAYMRYwFAYD VQQDEw02ODYzMWE0Ni04MzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn7SSVVtu8DhTo9Zb4hGwvHs4qo5iArpFQiB9vp+1+kkosw+qTzaZ+vm0uQW3 +xUSi8nXhQN+jTbS464eKTxsRkgievUwNgGR6xl6bU8fQjQtsIT/x91lKeAnBwtF Hrs1ki3luVZhXAIAe7gHPQaCk61UyKUs9xiR4H7sSCuH/TCuly6q4H07jOYSLeqt q3bxlbxa9Te1ud1SieZ0H/Knu3B/4v1eBv5ZdjbYorL/iSIWY5E5T7HdixlF1Te+ MVwPhH+6SPVUs59UJ47PFIstwJM72TY0SMM7t0hK+7Vmd7wZCkhnF3ItXf+8HE9I JMqwx4QNrKtyfPJADOt5wzDmMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNb1SQal 3kPn0+jibFmqzTGP+RtkMB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83MjMxQzNEQUFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0Zt OGQya0lzNjNJZTQtMFpaNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXapdGbHxNm4d2Y6HYpk+ojpVpmip4MMZWn14Ba+zbZ08K5aZBFUnD 02ACWklPQizlxXMZzHXEcUT6z8AmQYPMvgz70Mh93GUuGb9WHcPAfpgVoQ6U2Z6N fdxU4ht2CoR08SuY+Et+1BxodT282ezXlgd8dxAbrTw0tuhHPl0e90H98mQxa6Pf 5fpLRqsNXG0ynmVxXHOrrOPaKbkskf+njn0p8ZTd8nwysb9JXL1q02LpoPENppT5 zSOZykTe1gdxpJCd56VJYj3Eyd8fUDrhPLscu67Bd3iL52+CQAav44UKDipgv8A9 LHqOQDSwV+WGkm+TcE9+139dr+b8uniz -----END CERTIFICATE-----Generated at Wed Jul 2 14:37:08 2025 by rpki-client