$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft File: ej5CbJYle98kPDxjt4A4NAUlwqk.mft (raw, json) Hash identifier: faK9DPUh9cidBzZZlMwd6sKFrVv8dpmdJQGdS9OeF48= Subject key identifier: 46:86:EB:80:FD:23:52:E2:24:A7:58:4B:B4:5C:1C:AE:97:E2:29:EF Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 Certificate issuer: /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft Manifest number: 035D Signing time: Thu 03 Jul 2025 02:17:42 +0000 Manifest this update: Thu 03 Jul 2025 02:17:42 +0000 Manifest next update: Thu 10 Jul 2025 02:17:42 +0000 Files and hashes: 1: ej5CbJYle98kPDxjt4A4NAUlwqk.crl (hash: GFXw/nT0nJK+Expya9BMHW7SSed9IWnxgUjsg9aWfs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Validity Not Before: Jul 3 02:17:42 2025 GMT Not After : Jul 10 02:17:42 2025 GMT Subject: CN=6865e846-deed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:5f:06:c8:00:40:91:a3:4d:45:8d:59:43: 5a:78:82:33:94:0c:a8:37:5a:d4:2c:70:43:ee:51: 33:fd:98:f6:ff:76:a6:38:a9:c2:a0:c0:0f:6a:a5: b0:53:69:9d:d3:bc:6e:68:bd:6b:9d:08:bf:e0:af: 1e:51:20:bd:ce:1a:46:6e:b6:48:61:25:7e:4c:f5: 5e:7a:2a:da:b8:78:ae:89:ef:e3:59:21:83:5c:7a: c6:3c:8a:6f:3c:33:f6:2a:a7:9d:17:7f:c0:22:26: f9:e1:03:ac:5d:b9:c7:cb:98:88:1f:88:b0:e4:2e: bf:20:37:28:c4:89:42:3d:76:ff:45:32:df:79:f0: fb:89:56:d2:1d:b5:99:c8:2a:e9:92:82:da:22:88: eb:4f:28:28:f9:ba:e3:5a:21:36:72:fd:26:10:b8: 48:cf:d9:c1:fb:5a:54:4c:aa:22:0d:12:4b:c7:31: 80:1b:07:db:8e:d5:55:4a:f7:a9:84:bb:d9:f5:46: b0:ee:14:4d:ec:cb:e9:e5:f5:5c:eb:cb:3e:87:36: f4:5a:b4:4f:c0:e0:27:d9:5b:3b:84:1c:40:3d:b8: aa:37:d7:98:14:e7:de:fc:05:1f:64:cf:6c:f2:4a: d6:14:b7:15:5e:f5:f2:49:6f:82:2f:bf:c8:f3:91: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:86:EB:80:FD:23:52:E2:24:A7:58:4B:B4:5C:1C:AE:97:E2:29:EF X509v3 Authority Key Identifier: keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:58:df:c6:c6:d7:ca:02:f0:f2:f1:9f:93:25:84:b4:cc:27: d3:0d:df:1e:82:7e:00:8c:d9:dd:1a:33:6d:90:b7:a0:df:c1: 37:ab:17:d2:65:f3:9a:75:cb:c0:7c:07:fe:d6:f8:85:c9:fe: 93:ac:ba:04:38:3b:8f:64:4a:33:55:f1:64:6e:3a:14:cd:9b: 4b:88:c5:f0:e4:ea:81:26:46:3f:64:2f:bd:b0:11:d7:e9:58: bc:9f:23:55:25:ce:d4:1f:b2:91:01:eb:b5:8a:db:3b:67:94: d4:1a:fe:1b:e9:2c:44:e5:7c:91:9a:b9:1e:6f:ae:ea:42:b2: c2:fc:79:72:87:a0:37:13:4f:c7:61:10:7b:01:de:ef:b5:81: 96:f6:35:92:47:af:37:45:66:a3:56:4b:ec:4a:36:66:39:7d: a8:94:17:fd:4c:50:b9:1e:21:30:db:ee:98:06:84:96:98:06: f6:b7:26:66:a8:36:38:d4:d7:64:53:ed:78:9d:df:44:84:a0: d6:cf:46:4d:c1:8a:e5:0d:46:68:78:4e:d9:cf:cd:64:53:f8: c5:28:b7:13:ae:d0:17:40:f8:e8:ea:0f:57:1d:45:52:d7:13: 2a:ab:f5:6f:7c:1e:43:b7:e9:af:91:5a:03:aa:d6:a6:bc:7e: fb:a7:07:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKDdBM0U0MjZDOTYyNTdCREYyNDNDM0M2M0I3ODAzODM0 MDUyNUMyQTkwHhcNMjUwNzAzMDIxNzQyWhcNMjUwNzEwMDIxNzQyWjAYMRYwFAYD VQQDEw02ODY1ZTg0Ni1kZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNlfBsgAQJGjTUWNWUNaeIIzlAyoN1rULHBD7lEz/Zj2/3amOKnCoMAPaqWw U2md07xuaL1rnQi/4K8eUSC9zhpGbrZIYSV+TPVeeirauHiuie/jWSGDXHrGPIpv PDP2KqedF3/AIib54QOsXbnHy5iIH4iw5C6/IDcoxIlCPXb/RTLfefD7iVbSHbWZ yCrpkoLaIojrTygo+brjWiE2cv0mELhIz9nB+1pUTKoiDRJLxzGAGwfbjtVVSvep hLvZ9Uaw7hRN7Mvp5fVc68s+hzb0WrRPwOAn2Vs7hBxAPbiqN9eYFOfe/AUfZM9s 8krWFLcVXvXySW+CL7/I85GWeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaG64D9 I1LiJKdYS7RcHK6X4invMB8GA1UdIwQYMBaAFHo+QmyWJXvfJDw8Y7eAODQFJcKp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5OGtQRHhqdDRBNE5BVWx3 cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqNUNiSllsZTk4a1BEeGp0NEE0TkFVbHdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5 OGtQRHhqdDRBNE5BVWx3cWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4WN/GxtfKAvDy8Z+TJYS0zCfTDd8egn4AjNndGjNtkLeg38E3qxfS ZfOadcvAfAf+1viFyf6TrLoEODuPZEozVfFkbjoUzZtLiMXw5OqBJkY/ZC+9sBHX 6Vi8nyNVJc7UH7KRAeu1its7Z5TUGv4b6SxE5XyRmrkeb67qQrLC/Hlyh6A3E0/H YRB7Ad7vtYGW9jWSR683RWajVkvsSjZmOX2olBf9TFC5HiEw2+6YBoSWmAb2tyZm qDY41NdkU+14nd9EhKDWz0ZNwYrlDUZoeE7Zz81kU/jFKLcTrtAXQPjo6g9XHUVS 1xMqq/VvfB5Dt+mvkVoDqtamvH77pwdp -----END CERTIFICATE-----Generated at Thu Jul 3 17:26:03 2025 by rpki-client