$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft File: eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json) Hash identifier: cZHicy2iuFMHfGzET4Vmlp6w2oNFU6d5Y7p+lrfWb4Q= Subject key identifier: C5:13:8C:16:C0:00:B1:86:89:EE:14:B5:59:DE:E4:99:B6:F3:6C:09 Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 Certificate issuer: /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft Manifest number: 79 Signing time: Sat 05 Jul 2025 07:04:39 +0000 Manifest this update: Sat 05 Jul 2025 07:04:39 +0000 Manifest next update: Sat 12 Jul 2025 07:04:39 +0000 Files and hashes: 1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: UGE3xo4gDgtSEuVQlhZLPpXTuljF6nHyuXMQNRx6i1g=) 2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Validity Not Before: Jul 5 07:04:39 2025 GMT Not After : Jul 12 07:04:39 2025 GMT Subject: CN=6868ce87-c2e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:43:eb:de:82:84:29:3b:8c:e2:58:14:7c: 9a:77:b7:91:41:e0:6c:8e:40:eb:0d:1b:cb:8d:4e: ff:68:24:18:6e:39:9f:b0:42:c2:ca:e9:5a:ce:54: be:71:e4:49:7f:88:13:f9:03:c1:c1:73:c0:10:72: 85:44:1c:65:f5:3d:e7:a9:aa:83:35:a3:28:af:5f: a8:09:62:c0:7d:0b:d3:32:83:b0:78:34:e8:92:72: 9b:36:bb:fc:72:ef:a7:05:20:ca:76:d4:6d:03:88: 60:9b:5d:44:7d:1c:1e:b6:de:a4:9d:eb:fb:fb:7e: 72:4d:b6:00:87:56:31:52:9a:80:a1:9e:31:e3:8f: ba:c7:7c:0d:ff:7f:44:9a:78:36:12:7f:ea:dd:89: ca:c0:0e:4d:bd:0d:7b:aa:9e:c7:93:d7:c6:f8:46: 53:13:2e:9e:64:1f:03:2c:8d:94:4a:8a:54:5f:ca: 57:42:05:b4:90:b8:5b:75:e1:f7:29:3c:1a:05:49: 19:75:46:d2:1d:d6:25:00:4a:0f:a5:59:03:a6:21: 3f:ba:d6:57:51:4a:7c:17:d5:6b:ea:15:4f:8b:d8: 7e:c2:3a:b4:49:44:f2:77:40:d1:51:4d:a2:56:4b: 7b:6f:49:8e:e6:eb:1f:51:8d:c3:be:04:c8:2a:c5: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:13:8C:16:C0:00:B1:86:89:EE:14:B5:59:DE:E4:99:B6:F3:6C:09 X509v3 Authority Key Identifier: keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:35:d6:af:df:01:d8:15:91:4d:90:ac:3a:8f:ac:38:ee:b9: b8:af:96:7f:84:f2:ab:a7:b3:61:49:be:83:d6:7b:f3:a9:f9: 72:b6:22:73:b7:f1:65:1b:ab:46:fa:1c:91:94:5d:4e:d5:79: 7b:47:54:4f:fa:d9:70:2d:09:41:13:7a:bd:49:39:1f:b1:05: f5:55:55:a5:4e:91:ae:d0:09:64:a2:fb:06:61:02:45:28:d6: 50:4c:d7:cf:73:33:83:75:81:df:73:9e:6d:3a:db:29:de:0e: 51:44:d7:dc:0f:ff:84:38:25:40:93:ba:e1:ff:52:2f:8b:8f: 30:4f:4e:6c:79:67:b5:08:49:a7:3f:87:56:0f:4e:39:2e:3b: 82:0a:ac:95:71:51:b9:82:9f:21:64:1c:f5:dd:38:8c:22:5b: 31:eb:7e:40:95:24:a1:19:be:d4:b0:6b:0f:7e:e3:e0:90:d3: 7d:ea:de:a7:39:a6:b1:b0:67:a8:87:c6:b1:0f:1f:6e:88:db: 6a:e4:15:2f:4e:00:f0:64:6b:19:6b:02:97:e6:bf:ca:8c:5b: 92:d3:22:0e:2e:ed:9c:2b:9a:93:ae:72:94:ab:35:1b:6a:5c: eb:0d:8e:3c:ce:82:01:83:61:67:35:17:bf:1e:ee:3d:3e:45: 35:87:60:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzRBNTExMC8GA1UEBRMoNzlFOTIzRDUwNjk1N0ZEMzBERDI2RDYyNzkzQjlCNDBG OEZFODk1NjAeFw0yNTA3MDUwNzA0MzlaFw0yNTA3MTIwNzA0MzlaMBgxFjAUBgNV BAMTDTY4NjhjZTg3LWMyZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIbkPr3oKEKTuM4lgUfJp3t5FB4GyOQOsNG8uNTv9oJBhuOZ+wQsLK6VrOVL5x 5El/iBP5A8HBc8AQcoVEHGX1PeepqoM1oyivX6gJYsB9C9Myg7B4NOiScps2u/xy 76cFIMp21G0DiGCbXUR9HB623qSd6/v7fnJNtgCHVjFSmoChnjHjj7rHfA3/f0Sa eDYSf+rdicrADk29DXuqnseT18b4RlMTLp5kHwMsjZRKilRfyldCBbSQuFt14fcp PBoFSRl1RtId1iUASg+lWQOmIT+61ldRSnwX1WvqFU+L2H7COrRJRPJ3QNFRTaJW S3tvSY7m6x9RjcO+BMgqxe2JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxROMFsAA sYaJ7hS1Wd7kmbbzbAkwHwYDVR0jBBgwFoAUeekj1QaVf9MN0m1ieTubQPj+iVYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0M3M0EzODk0QTIz NDExRUY5NzhDOEQ2REM0RjlBRTAyL2Vla2oxUWFWZjlNTjBtMWllVHViUVBqLWlW WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWVrajFRYVZmOU1OMG0xaWVUdWJRUGotaVZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NEE1L0M3M0EzODk0QTIzNDExRUY5NzhDOEQ2REM0RjlBRTAyL2Vla2oxUWFWZjlN TjBtMWllVHViUVBqLWlWWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKQ11q/fAdgVkU2QrDqPrDjuubivln+E8quns2FJvoPWe/Op+XK2InO3 8WUbq0b6HJGUXU7VeXtHVE/62XAtCUETer1JOR+xBfVVVaVOka7QCWSi+wZhAkUo 1lBM189zM4N1gd9znm062yneDlFE19wP/4Q4JUCTuuH/Ui+LjzBPTmx5Z7UISac/ h1YPTjkuO4IKrJVxUbmCnyFkHPXdOIwiWzHrfkCVJKEZvtSwaw9+4+CQ033q3qc5 prGwZ6iHxrEPH26I22rkFS9OAPBkaxlrApfmv8qMW5LTIg4u7ZwrmpOucpSrNRtq XOsNjjzOggGDYWc1F78e7j0+RTWHYKA= -----END CERTIFICATE-----Generated at Sat Jul 5 22:01:00 2025 by rpki-client