$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json) Hash identifier: wQJg6f0CIgP80z3Z5RXOJLM43P9WuvCvjC1aQZ4UrfE= Subject key identifier: 0C:F8:51:AF:CC:8C:0D:2D:78:A3:BA:D7:F3:69:05:06:64:96:92:7E Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft Manifest number: 015B Signing time: Sat 05 Jul 2025 04:22:17 +0000 Manifest this update: Sat 05 Jul 2025 04:22:17 +0000 Manifest next update: Sat 12 Jul 2025 04:22:17 +0000 Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: 25d2UvqYWn3sMXNwhKoUKicnOKuvEqAdy+tzjRTmXak=) 2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: UvdgbLYF5+vRHqxdggCtIs+aJSz12jANKpYmMkrt0HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Validity Not Before: Jul 5 04:22:17 2025 GMT Not After : Jul 12 04:22:17 2025 GMT Subject: CN=6868a879-f436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:4b:bc:10:74:c1:a4:fd:27:34:cd:3c:e5: b6:2c:3b:c2:cf:96:7c:8a:37:92:7c:a3:1c:3f:b7: b0:07:5d:50:23:e0:44:f5:4e:6c:3d:f8:35:80:e4: 6b:73:85:a5:c3:c9:6f:cf:40:22:d6:ea:eb:4e:04: db:54:93:19:bb:8f:5f:13:10:c0:b6:5e:6a:50:da: 10:2f:76:7d:e1:21:4f:19:0c:d4:59:46:3d:87:5f: ba:6d:57:73:bf:15:24:b5:ca:4e:a7:a3:a3:aa:d6: 69:ba:47:b8:18:21:04:31:a6:d3:71:81:b9:22:2d: 3a:b3:54:d4:dd:0d:e8:42:06:68:12:9b:8f:10:87: c7:d1:e8:86:76:fa:d2:0f:4b:66:68:83:a6:c3:21: ed:26:35:05:b6:40:ef:4b:2d:a7:31:80:b8:cc:33: 5e:40:13:05:36:43:7c:26:86:79:e6:49:63:d8:7b: 2f:52:cd:70:ae:5d:2f:b5:1f:3f:6d:fe:e2:7c:1d: 00:40:e2:8b:8d:fb:d9:28:97:4c:ec:6c:9b:ae:45: 3d:d2:96:f4:23:93:49:1b:e5:df:1c:3d:ac:28:8e: 9e:81:a1:79:a9:c3:93:db:31:91:5c:0a:bb:39:14: 5a:e4:13:77:e7:1f:ae:5f:5e:ca:f5:59:fc:9f:b2: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F8:51:AF:CC:8C:0D:2D:78:A3:BA:D7:F3:69:05:06:64:96:92:7E X509v3 Authority Key Identifier: keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:37:03:77:cb:98:49:4c:a1:d5:63:5c:b5:13:7b:30:0c:6e: b7:1f:7f:fd:36:06:33:5a:6d:68:40:29:43:22:69:16:37:57: 58:95:30:87:6a:6d:41:4e:d0:8a:a4:05:aa:c9:2c:45:79:84: 2a:54:46:de:df:64:ad:65:3a:79:25:bd:17:66:c1:b9:9f:f6: 59:0a:e0:b3:6b:d4:5e:0a:62:16:d2:c0:60:06:c5:65:bf:fe: 43:d1:25:a5:98:23:1e:06:8f:fa:44:95:3f:78:7f:b4:d3:37: 9d:e6:1f:bc:1c:00:24:79:2e:8b:5d:98:88:d3:5f:56:08:05: 7f:ec:9b:84:a1:9f:d8:e6:bc:93:b8:b0:b2:76:4f:ff:00:98: 4d:c6:8d:4c:63:9c:0a:6a:1b:0a:5b:5f:f7:b8:0c:4d:c0:5f: cc:da:a1:ce:3b:ec:22:74:84:d9:0d:10:26:4b:04:e0:0f:c9: 8e:35:cc:a6:27:1e:fb:5f:61:e7:02:b0:06:fa:2f:31:5e:d9: 0d:9a:f5:1c:d5:a9:60:5c:1d:2a:9d:52:14:f7:27:ab:36:dc: ab:71:43:d6:1a:ec:a4:9f:4e:76:90:68:1d:7b:9a:ad:34:52: 3d:4a:43:29:32:56:b7:28:65:6f:0f:57:98:95:74:8b:63:32: f3:a7:a8:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE MTAxOUY4QTMwHhcNMjUwNzA1MDQyMjE3WhcNMjUwNzEyMDQyMjE3WjAYMRYwFAYD VQQDEw02ODY4YTg3OS1mNDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD1LvBB0waT9JzTNPOW2LDvCz5Z8ijeSfKMcP7ewB11QI+BE9U5sPfg1gORr c4Wlw8lvz0Ai1urrTgTbVJMZu49fExDAtl5qUNoQL3Z94SFPGQzUWUY9h1+6bVdz vxUktcpOp6OjqtZpuke4GCEEMabTcYG5Ii06s1TU3Q3oQgZoEpuPEIfH0eiGdvrS D0tmaIOmwyHtJjUFtkDvSy2nMYC4zDNeQBMFNkN8JoZ55klj2HsvUs1wrl0vtR8/ bf7ifB0AQOKLjfvZKJdM7GybrkU90pb0I5NJG+XfHD2sKI6egaF5qcOT2zGRXAq7 ORRa5BN35x+uX17K9Vn8n7Kz5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAz4Ua/M jA0teKO61/NpBQZklpJ+MB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D bG5GTVU2V2hLQV9SQVotS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmNwN3y5hJTKHVY1y1E3swDG63H3/9NgYzWm1oQClDImkWN1dYlTCH am1BTtCKpAWqySxFeYQqVEbe32StZTp5Jb0XZsG5n/ZZCuCza9ReCmIW0sBgBsVl v/5D0SWlmCMeBo/6RJU/eH+00zed5h+8HAAkeS6LXZiI019WCAV/7JuEoZ/Y5ryT uLCydk//AJhNxo1MY5wKahsKW1/3uAxNwF/M2qHOO+widITZDRAmSwTgD8mONcym Jx77X2HnArAG+i8xXtkNmvUc1algXB0qnVIU9yerNtyrcUPWGuykn052kGgde5qt NFI9SkMpMla3KGVvD1eYlXSLYzLzp6gT -----END CERTIFICATE-----Generated at Sat Jul 5 08:10:08 2025 by rpki-client