$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft File: EAiP7ctRWnPwDu3X7GDodfnfCvY.mft (raw, json) Hash identifier: idfpXDJ9mxOY+tnaeNq3gPsEsR4PA8/JBPJibeWew6Y= Subject key identifier: 69:F3:57:26:55:6C:78:88:28:94:93:3B:D9:9E:28:C6:12:E4:05:F8 Authority key identifier: 10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6 Certificate issuer: /CN=A9163BFD/serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6 Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft Manifest number: 013B Signing time: Thu 03 Jul 2025 04:30:57 +0000 Manifest this update: Thu 03 Jul 2025 04:30:57 +0000 Manifest next update: Thu 10 Jul 2025 04:30:57 +0000 Files and hashes: 1: EAiP7ctRWnPwDu3X7GDodfnfCvY.crl (hash: Iy2iEfqE6LTiTlK+HGxO3AeGkM9o3KucH2aIys81OO0=) 2: 29D7838672F611EEB309873EC4F9AE02.roa (hash: zu5oTBlWmiRJc0JKeXclVvx/PdtKlnfyN23W6szZl1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BFD, serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6 Validity Not Before: Jul 3 04:30:57 2025 GMT Not After : Jul 10 04:30:57 2025 GMT Subject: CN=68660781-e1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:f7:b0:f1:16:eb:df:bc:c2:c2:6f:dd:00: 7c:5b:a2:d5:1a:a4:e4:5a:94:85:3a:a5:cd:35:ce: c3:00:64:15:3b:8e:d3:77:0b:26:c2:2d:c2:40:c9: 87:df:22:bf:a0:01:d7:93:55:dc:e7:b9:13:6c:e3: 9b:1c:72:0a:8e:e0:22:81:42:1d:f4:6e:6a:8a:10: 7f:8e:84:21:51:2d:87:61:35:d4:1c:0b:64:21:c0: 7b:b0:1b:99:83:37:f2:83:1f:c0:9e:b2:62:5e:c5: 83:7b:a8:54:6a:b5:ea:9c:f4:d9:f3:5f:49:6d:e1: 82:77:64:13:eb:f2:44:da:08:77:6b:4f:8a:cc:d0: 6a:36:3f:53:f0:15:90:b0:34:c6:ed:57:a8:dd:9d: 8f:f2:6b:30:a5:eb:9e:44:1e:6a:be:c6:07:dd:29: ce:8b:e3:f4:8c:5a:a4:96:ff:9c:be:10:05:bd:17: 59:66:0a:59:02:89:54:d8:ba:86:49:56:b8:43:68: ae:48:b4:b4:4d:90:93:ba:11:79:a0:95:6c:ae:00: 40:36:58:9d:dd:99:15:80:35:ec:07:71:03:90:44: 29:c9:49:44:65:30:a6:3d:17:47:42:66:5e:f3:38: 2b:ca:c2:ed:0f:1c:0a:da:ac:c4:91:9f:0d:08:d2: 40:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F3:57:26:55:6C:78:88:28:94:93:3B:D9:9E:28:C6:12:E4:05:F8 X509v3 Authority Key Identifier: keyid:10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e0:cd:2a:74:f8:86:c8:a3:33:b4:a6:cc:80:d9:56:c9:79: af:ff:d1:f5:b2:66:97:32:28:bb:a9:1c:e7:32:1b:39:3c:2a: b9:e7:d2:dc:47:9c:d4:61:5b:a8:70:28:6e:5b:ed:ba:7f:f7: 56:83:fd:9b:1c:d0:f4:e3:27:cc:c8:93:c1:1d:17:59:6e:92: e3:2e:0a:06:fc:47:99:ec:65:36:21:cc:9a:81:25:93:f9:5f: a5:c7:bd:da:4d:41:d0:fe:6f:10:4f:17:4c:92:26:dd:5c:7e: b8:6c:b7:7b:cd:d6:97:21:e8:2e:7c:15:b6:08:08:7e:7f:72: 15:9a:66:26:c4:2a:55:85:e6:64:2b:b1:18:ed:34:49:92:55: 0e:15:7a:bf:54:a3:db:55:3c:0a:8e:7f:60:11:cb:c5:4c:ff: f4:41:1b:37:57:ea:ee:26:14:21:ea:82:3d:0b:1b:5f:12:a7: 1f:a9:08:7e:73:0b:7b:91:81:08:b7:41:5a:d3:68:01:29:ef: 0b:e2:33:0b:b9:5f:85:c7:55:63:d4:2d:73:79:5c:8a:29:db: 09:70:95:4c:c3:9a:eb:01:b4:9a:2e:1d:59:0e:f5:f2:2a:f1: 36:26:b9:94:ce:89:a4:af:77:6e:26:cd:d1:a1:06:f9:db:f9: 71:58:75:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRkQxMTAvBgNVBAUTKDEwMDg4RkVEQ0I1MTVBNzNGMDBFRUREN0VDNjBFODc1 RjlERjBBRjYwHhcNMjUwNzAzMDQzMDU3WhcNMjUwNzEwMDQzMDU3WjAYMRYwFAYD VQQDEw02ODY2MDc4MS1lMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjz3sPEW69+8wsJv3QB8W6LVGqTkWpSFOqXNNc7DAGQVO47Tdwsmwi3CQMmH 3yK/oAHXk1Xc57kTbOObHHIKjuAigUId9G5qihB/joQhUS2HYTXUHAtkIcB7sBuZ gzfygx/AnrJiXsWDe6hUarXqnPTZ819JbeGCd2QT6/JE2gh3a0+KzNBqNj9T8BWQ sDTG7Veo3Z2P8mswpeueRB5qvsYH3SnOi+P0jFqklv+cvhAFvRdZZgpZAolU2LqG SVa4Q2iuSLS0TZCTuhF5oJVsrgBANlid3ZkVgDXsB3EDkEQpyUlEZTCmPRdHQmZe 8zgrysLtDxwK2qzEkZ8NCNJAcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnzVyZV bHiIKJSTO9meKMYS5AX4MB8GA1UdIwQYMBaAFBAIj+3LUVpz8A7t1+xg6HX53wr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JGRC84NThGOUFBQzcy RjUxMUVFODAxQ0M4M0NDNEY5QUUwMi9FQWlQN2N0UlduUHdEdTNYN0dEb2RmbmZD dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBaVA3Y3RSV25Qd0R1M1g3R0RvZGZuZkN2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JGRC84NThGOUFBQzcyRjUxMUVFODAxQ0M4M0NDNEY5QUUwMi9FQWlQN2N0Uldu UHdEdTNYN0dEb2RmbmZDdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX4M0qdPiGyKMztKbMgNlWyXmv/9H1smaXMii7qRznMhs5PCq559Lc R5zUYVuocChuW+26f/dWg/2bHND04yfMyJPBHRdZbpLjLgoG/EeZ7GU2IcyagSWT +V+lx73aTUHQ/m8QTxdMkibdXH64bLd7zdaXIegufBW2CAh+f3IVmmYmxCpVheZk K7EY7TRJklUOFXq/VKPbVTwKjn9gEcvFTP/0QRs3V+ruJhQh6oI9CxtfEqcfqQh+ cwt7kYEIt0Fa02gBKe8L4jMLuV+Fx1Vj1C1zeVyKKdsJcJVMw5rrAbSaLh1ZDvXy KvE2JrmUzomkr3duJs3RoQb52/lxWHX2 -----END CERTIFICATE-----Generated at Thu Jul 3 07:05:33 2025 by rpki-client