$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: 7FnFMipBMCBkUKjtHYb9iXIvwpG/b8jgBqqBkWjB1qI= Subject key identifier: 59:57:C8:14:3A:6D:B1:E0:99:B2:D2:ED:11:D8:5E:36:DF:B6:E6:2C Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: 90 Signing time: Sun 29 Jun 2025 05:38:31 +0000 Manifest this update: Sun 29 Jun 2025 05:38:31 +0000 Manifest next update: Sun 06 Jul 2025 05:38:31 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: xxjlrEZCkmvnW6TDaTGFqJ+AXAOk1E0tFHY/ZyVEIMs=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: GUv+bR0jB5xe+4YguFwkCK8B685+o0kSH52XBLyO1zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Jun 29 05:38:31 2025 GMT Not After : Jul 6 05:38:31 2025 GMT Subject: CN=6860d157-bb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:80:bd:02:10:e9:84:7a:eb:9a:97:51:4a: 70:8d:ed:e6:2f:f0:e7:d6:94:5f:f7:47:cb:99:0e: 8f:0e:d2:85:6b:ba:48:8b:1f:35:6f:31:c5:d0:ed: 61:07:42:3e:84:2a:54:88:74:f0:de:fb:09:de:8b: 43:cf:46:0f:b4:98:ad:a4:90:62:65:e8:52:f1:a7: 37:96:6b:2b:f8:04:cb:0f:e0:61:cb:86:51:a2:1b: b8:7b:8a:ca:e2:27:e2:68:2e:61:9d:78:44:88:6b: e1:7c:32:36:06:d1:36:af:e3:22:a2:44:23:70:88: 41:24:ff:28:42:89:7f:26:50:d3:bf:91:6b:e0:f6: f4:15:3a:9e:d4:a4:87:9c:bd:d1:4a:14:f9:32:60: 98:65:d1:6d:e6:b3:cb:38:8b:4c:b8:a4:1a:e3:f0: f9:c6:e0:43:3f:01:1f:ff:5c:e9:b0:91:c6:f6:5f: b1:2e:22:7a:bc:6b:0e:9d:07:5c:8f:71:c7:eb:4a: 2a:e8:7d:fa:16:d3:48:3b:6e:32:67:32:66:4d:da: b0:6a:a0:59:bb:cc:ad:5e:b8:f2:c7:7d:3c:e6:db: 45:07:a6:45:cf:22:57:28:94:82:ad:ab:89:72:6a: 00:d3:26:c3:97:8d:85:ae:d0:a0:30:b6:09:86:ec: 69:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:57:C8:14:3A:6D:B1:E0:99:B2:D2:ED:11:D8:5E:36:DF:B6:E6:2C X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:3c:10:d5:b3:8e:92:99:2b:69:46:c9:dc:63:6c:76:1c:1f: 21:5d:c2:b8:c3:74:d4:ad:67:80:7a:78:3b:e9:48:83:04:cc: a9:11:2c:7d:d8:2e:e1:88:6b:69:99:5f:40:31:a9:06:f7:10: a0:2e:55:97:29:e3:0a:44:db:22:9d:96:5f:1b:1c:09:30:a5: 3d:d7:65:4b:42:b2:16:4d:ce:0c:94:04:39:15:d1:b3:50:b0: 27:44:7e:4c:3c:a3:f9:eb:ba:7e:a6:c2:b2:98:12:44:0a:2b: 9b:99:af:08:4a:94:ee:07:03:58:70:28:35:1b:d9:f7:42:07: 33:50:e0:ec:02:01:7d:a4:b4:97:f2:05:bf:23:ed:ad:33:87: 72:7d:f2:08:8c:4f:c3:59:42:6c:f1:24:ba:4d:a7:03:83:3f: 9f:b1:7a:ca:c0:52:ad:12:96:e7:74:d4:f7:fe:1a:43:1b:9b: 66:9d:3f:e8:0e:f9:db:cc:ef:ac:9f:28:84:a8:63:80:9b:f3: 0a:e7:71:1f:9c:0c:cf:b6:91:12:9b:20:a0:13:52:0f:c3:52: 92:d4:2b:f0:fe:cd:ad:c3:5c:9e:4c:bc:d0:44:39:12:8e:17: 63:54:51:49:03:dc:57:88:88:17:cd:4e:ae:69:47:14:c1:41: db:d9:46:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKDEwMEQ5QUVFOTFEMjI3RkU0NzU5MzRGMjk3OEMzNjE3 RDhDRkE4RUUwHhcNMjUwNjI5MDUzODMxWhcNMjUwNzA2MDUzODMxWjAYMRYwFAYD VQQDEw02ODYwZDE1Ny1iYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNeAvQIQ6YR665qXUUpwje3mL/Dn1pRf90fLmQ6PDtKFa7pIix81bzHF0O1h B0I+hCpUiHTw3vsJ3otDz0YPtJitpJBiZehS8ac3lmsr+ATLD+Bhy4ZRohu4e4rK 4ifiaC5hnXhEiGvhfDI2BtE2r+MiokQjcIhBJP8oQol/JlDTv5Fr4Pb0FTqe1KSH nL3RShT5MmCYZdFt5rPLOItMuKQa4/D5xuBDPwEf/1zpsJHG9l+xLiJ6vGsOnQdc j3HH60oq6H36FtNIO24yZzJmTdqwaqBZu8ytXrjyx3085ttFB6ZFzyJXKJSCrauJ cmoA0ybDl42FrtCgMLYJhuxpJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlXyBQ6 bbHgmbLS7RHYXjbftuYsMB8GA1UdIwQYMBaAFBANmu6R0if+R1k08peMNhfYz6ju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS81N0ZGNEJDQThC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pfNUhXVFR5bDR3MkY5alBx TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS81N0ZGNEJDQThCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pf NUhXVFR5bDR3MkY5alBxTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnPBDVs46SmStpRsncY2x2HB8hXcK4w3TUrWeAeng76UiDBMypESx9 2C7hiGtpmV9AMakG9xCgLlWXKeMKRNsinZZfGxwJMKU912VLQrIWTc4MlAQ5FdGz ULAnRH5MPKP567p+psKymBJECiubma8ISpTuBwNYcCg1G9n3QgczUODsAgF9pLSX 8gW/I+2tM4dyffIIjE/DWUJs8SS6TacDgz+fsXrKwFKtEpbndNT3/hpDG5tmnT/o DvnbzO+snyiEqGOAm/MK53EfnAzPtpESmyCgE1IPw1KS1Cvw/s2tw1yeTLzQRDkS jhdjVFFJA9xXiIgXzU6uaUcUwUHb2Uaz -----END CERTIFICATE-----Generated at Mon Jun 30 19:10:53 2025 by rpki-client