$ rpki-client -vvf rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft File: E8ct8cUeLKIRyldmUWjPfHx0cpI.mft (raw, json) Hash identifier: zSH/wjcUSJPWStS1VR6W+pyUcnCnXkVhIUb2sL+DHbU= Subject key identifier: E0:F2:6D:DD:39:1A:A4:BC:4B:F1:AC:09:0A:21:D1:7B:88:CF:3F:C5 Authority key identifier: 13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 Certificate issuer: /CN=A916B73C/serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft Manifest number: E7 Signing time: Tue 01 Jul 2025 05:57:16 +0000 Manifest this update: Tue 01 Jul 2025 05:57:16 +0000 Manifest next update: Tue 08 Jul 2025 05:57:16 +0000 Files and hashes: 1: E8ct8cUeLKIRyldmUWjPfHx0cpI.crl (hash: qyBawLpnJw5g2kCYVHJCsIJ7Y8qPhr+2+k0f92fhjf0=) 2: 7D211148F64911EEBE36B826C4F9AE02.roa (hash: 6fS8of5qHdeb+UJ2vn+0LaqC6SoyuJivSRtsNyhZhrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B73C, serialNumber=13C72DF1C51E2CA211CA57665168CF7C7C747292 Validity Not Before: Jul 1 05:57:16 2025 GMT Not After : Jul 8 05:57:16 2025 GMT Subject: CN=686378bc-75cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:80:8b:78:51:eb:9c:f8:c7:dc:ce:09:c1:82: 7a:98:8c:8e:4f:25:83:59:2b:09:58:fe:59:a3:23: d9:c3:84:45:a3:06:3e:4f:68:2a:d9:c7:2f:8a:a9: 76:40:ec:06:a6:37:fd:0c:33:4f:f8:8d:26:b6:ea: 93:89:bb:a2:83:47:c3:08:95:53:5b:42:51:9e:b1: dc:2d:1e:fe:a2:85:bc:1e:65:ea:cf:75:de:c9:f9: 1f:22:57:14:ff:b5:d4:4e:ae:01:40:15:4d:7e:cc: 7d:4d:ea:7c:a9:a0:aa:fc:b5:ae:ec:8e:e3:82:1a: 54:13:26:cb:50:3c:0f:06:a3:7b:e6:41:3e:c8:c3: 87:a0:d0:3e:6f:c8:a9:c8:37:39:35:5b:6e:74:40: 6a:7d:e7:db:d1:54:48:b4:e1:cb:c9:0d:b4:6a:35: 10:83:24:a2:84:1c:4c:7c:0f:47:23:0e:ac:1e:d5: 84:80:40:da:24:b1:cf:52:26:2e:03:01:c4:07:62: 48:b1:da:2a:a7:a3:ae:1f:4c:e1:4d:13:aa:d1:05: 2d:32:5d:7b:22:26:a1:ff:37:8a:39:46:8a:3a:70: 40:7e:9e:6f:53:83:31:e5:c4:36:f6:18:59:c1:a5: d3:b8:2b:a2:14:46:04:59:08:69:2b:0e:9e:23:33: 20:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F2:6D:DD:39:1A:A4:BC:4B:F1:AC:09:0A:21:D1:7B:88:CF:3F:C5 X509v3 Authority Key Identifier: keyid:13:C7:2D:F1:C5:1E:2C:A2:11:CA:57:66:51:68:CF:7C:7C:74:72:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8ct8cUeLKIRyldmUWjPfHx0cpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B73C/CBD6211CF64811EEA4A6FE0EC4F9AE02/E8ct8cUeLKIRyldmUWjPfHx0cpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:03:43:a1:18:e2:cf:6a:d3:f3:1f:64:8f:4b:e7:f3:e3:74: 79:a7:ad:73:8e:c8:3b:d2:05:0f:fc:57:41:03:ae:9e:e4:ee: ad:f9:b1:43:3d:cd:04:34:87:e5:6e:02:e5:b5:26:14:a6:86: c6:a6:6d:fe:38:e5:23:c9:fe:5c:f9:b8:c6:52:65:25:c3:8e: 5a:ae:4b:ed:44:b1:83:47:1d:76:83:6a:79:fb:3b:52:fa:ed: 4c:34:92:fb:fb:c9:a4:cd:e9:a9:18:0f:e1:2d:f8:af:86:8e: a3:6c:b0:d0:69:37:4c:78:65:a1:cb:dc:30:02:9c:e6:22:55: ce:5f:c9:9d:15:1d:89:4a:af:50:da:b6:32:17:18:52:33:e5: 8e:f6:c1:df:9d:2c:a5:14:b9:0e:fa:0e:86:2e:f7:d2:24:c9: e7:3a:70:5b:55:58:8e:81:ef:b2:70:dd:ed:ad:fd:da:8e:04: 1b:24:8f:18:fb:4d:e3:89:63:55:d2:6f:ab:63:8d:b3:c7:63: c5:e0:c6:fc:df:58:b6:8b:fb:1f:fe:11:94:a3:87:4c:74:2e: c2:ac:82:e3:20:d0:12:c6:87:33:19:ec:52:67:fd:09:fc:ae: 7c:28:34:e6:a0:67:5f:fc:b6:b1:e1:cd:63:8d:f7:44:f9:60: f5:44:8a:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3M0MxMTAvBgNVBAUTKDEzQzcyREYxQzUxRTJDQTIxMUNBNTc2NjUxNjhDRjdD N0M3NDcyOTIwHhcNMjUwNzAxMDU1NzE2WhcNMjUwNzA4MDU1NzE2WjAYMRYwFAYD VQQDEw02ODYzNzhiYy03NWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoCLeFHrnPjH3M4JwYJ6mIyOTyWDWSsJWP5ZoyPZw4RFowY+T2gq2ccviql2 QOwGpjf9DDNP+I0mtuqTibuig0fDCJVTW0JRnrHcLR7+ooW8HmXqz3XeyfkfIlcU /7XUTq4BQBVNfsx9Tep8qaCq/LWu7I7jghpUEybLUDwPBqN75kE+yMOHoNA+b8ip yDc5NVtudEBqfefb0VRItOHLyQ20ajUQgySihBxMfA9HIw6sHtWEgEDaJLHPUiYu AwHEB2JIsdoqp6OuH0zhTROq0QUtMl17Iiah/zeKOUaKOnBAfp5vU4Mx5cQ29hhZ waXTuCuiFEYEWQhpKw6eIzMgVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODybd05 GqS8S/GsCQoh0XuIzz/FMB8GA1UdIwQYMBaAFBPHLfHFHiyiEcpXZlFoz3x8dHKS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjczQy9DQkQ2MjExQ0Y2 NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxLSVJ5bGRtVVdqUGZIeDBj cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4Y3Q4Y1VlTEtJUnlsZG1VV2pQZkh4MGNwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjczQy9DQkQ2MjExQ0Y2NDgxMUVFQTRBNkZFMEVDNEY5QUUwMi9FOGN0OGNVZUxL SVJ5bGRtVVdqUGZIeDBjcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEA0OhGOLPatPzH2SPS+fz43R5p61zjsg70gUP/FdBA66e5O6t+bFD Pc0ENIflbgLltSYUpobGpm3+OOUjyf5c+bjGUmUlw45arkvtRLGDRx12g2p5+ztS +u1MNJL7+8mkzempGA/hLfivho6jbLDQaTdMeGWhy9wwApzmIlXOX8mdFR2JSq9Q 2rYyFxhSM+WO9sHfnSylFLkO+g6GLvfSJMnnOnBbVViOge+ycN3trf3ajgQbJI8Y +03jiWNV0m+rY42zx2PF4Mb831i2i/sf/hGUo4dMdC7CrILjINASxoczGexSZ/0J /K58KDTmoGdf/Lax4c1jjfdE+WD1RIp1 -----END CERTIFICATE-----Generated at Wed Jul 2 05:17:03 2025 by rpki-client