$ rpki-client -vvf rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft File: Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft (raw, json) Hash identifier: yImyAAkcWVzyjDOJQ+mWdpUG6qy/Z9Ew3TU0H4bmIh0= Subject key identifier: AF:ED:65:C6:14:D4:E9:F6:36:5F:0A:B5:E8:C1:A4:C4:43:76:DF:F3 Authority key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 Certificate issuer: /CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft Manifest number: DB Signing time: Tue 01 Jul 2025 06:07:15 +0000 Manifest this update: Tue 01 Jul 2025 06:07:14 +0000 Manifest next update: Tue 08 Jul 2025 06:07:14 +0000 Files and hashes: 1: Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl (hash: Fl1zPK66ha4G//HMZTfreWpp9VDk1j58BTXiCe43lMM=) 2: 66387A6C087211EF9EDFC673C4F9AE02.roa (hash: HS/fldQZ4RrI6nmzaLMIdIrXDhqFavfV6tsG7wDJ0JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E39F, serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Validity Not Before: Jul 1 06:07:14 2025 GMT Not After : Jul 8 06:07:14 2025 GMT Subject: CN=68637b12-fe5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:ef:7e:96:e4:60:c3:fa:7d:d5:43:df:7d: dd:e2:8c:43:a3:06:e0:4d:68:9d:e0:28:69:13:01: 32:e4:21:6f:4c:76:61:fb:8d:05:3f:34:15:46:31: f8:47:d0:03:a8:d2:1a:c4:0c:6d:d1:7c:30:7c:1a: 0b:6c:c2:d6:80:3d:44:24:d2:23:4d:9b:8d:0f:15: 92:a1:13:b6:50:c6:02:ce:f1:ea:f1:e9:f2:c0:eb: fd:b4:ec:7e:86:1f:de:79:fb:6a:0b:39:b4:d8:f9: ca:5f:86:ee:f3:a2:3f:76:2d:0f:f4:99:74:b1:dc: a0:9d:e2:be:58:1a:fa:2c:13:6d:0d:73:dc:78:90: 58:8c:48:a9:e1:fa:f0:7d:e7:7a:70:6a:33:db:7d: 23:5b:a8:fd:47:ca:b0:70:85:4a:de:9e:7a:e3:55: cc:99:dd:54:6e:38:50:55:ec:e7:fd:02:71:cc:2c: c4:74:10:6e:68:5e:15:63:c1:aa:ae:d5:99:ca:bf: d8:48:80:c9:11:b9:b7:b6:43:ab:cb:9d:ec:16:0f: b0:62:7f:0d:86:a7:f0:63:d0:4a:2a:51:2c:e6:b2: 7b:ca:0e:5b:d1:69:cf:52:16:61:74:de:a2:70:9c: 2d:5f:22:ca:8d:3e:85:78:d5:35:d2:c2:0e:51:ac: 66:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:ED:65:C6:14:D4:E9:F6:36:5F:0A:B5:E8:C1:A4:C4:43:76:DF:F3 X509v3 Authority Key Identifier: keyid:11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:61:bb:17:13:45:d2:3e:e4:21:e5:2b:e5:1c:b4:dd:96:cc: 02:3b:78:d7:71:ce:22:03:72:4c:65:3d:66:e3:34:ca:e5:95: 3f:e8:0c:c4:16:8c:6c:1c:86:81:bf:88:27:d9:31:5f:3f:6a: d9:99:45:90:d2:07:aa:ba:03:85:5b:b6:77:3e:f4:03:d7:fd: 0c:50:fa:cb:af:8a:79:95:81:0e:9f:0d:5d:5e:77:87:e9:f5: 61:c1:d1:9e:f5:7e:e6:0d:90:e4:3a:11:d9:56:c6:be:7c:5b: aa:84:24:da:d6:7b:e5:ab:83:80:73:59:c6:11:46:b4:33:e7: 06:e0:78:3d:d9:92:ac:84:e1:f8:b7:6c:5b:45:46:94:6c:81: 78:ec:ce:f8:e9:0b:a3:b7:74:80:a6:1f:3a:e1:fa:66:d5:46: 29:eb:d6:69:5f:fb:19:a7:0b:c7:f5:ee:2e:48:58:b3:20:98: 3e:14:2d:1e:97:01:ac:dc:84:e8:04:32:b0:74:b0:07:78:73: 97:97:b4:d7:ef:ff:8c:c0:8c:39:f6:0b:cd:29:d1:a4:07:07: 72:f1:1f:4a:50:4d:13:7e:95:f4:1d:0f:0e:f1:86:95:f3:03: 3a:b5:e5:84:ff:04:cb:3e:31:17:6f:85:c5:2f:47:4b:21:0a: 74:c8:89:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzOUYxMTAvBgNVBAUTKDExRTczRjUyQkYwRjU4NkYyQjlGQTY5RUUyQ0ExNUYy MTg1RjY2QzIwHhcNMjUwNzAxMDYwNzE0WhcNMjUwNzA4MDYwNzE0WjAYMRYwFAYD VQQDEw02ODYzN2IxMi1mZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwTvfpbkYMP6fdVD333d4oxDowbgTWid4ChpEwEy5CFvTHZh+40FPzQVRjH4 R9ADqNIaxAxt0XwwfBoLbMLWgD1EJNIjTZuNDxWSoRO2UMYCzvHq8enywOv9tOx+ hh/eeftqCzm02PnKX4bu86I/di0P9Jl0sdygneK+WBr6LBNtDXPceJBYjEip4frw fed6cGoz230jW6j9R8qwcIVK3p5641XMmd1UbjhQVezn/QJxzCzEdBBuaF4VY8Gq rtWZyr/YSIDJEbm3tkOry53sFg+wYn8NhqfwY9BKKlEs5rJ7yg5b0WnPUhZhdN6i cJwtXyLKjT6FeNU10sIOUaxmiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/tZcYU 1On2Nl8KtejBpMRDdt/zMB8GA1UdIwQYMBaAFBHnP1K/D1hvK5+mnuLKFfIYX2bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM5Ri9CNTA5NUEyMjA4 NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdHOHJuNmFlNHNvVjhoaGZa c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VlY19VcjhQV0c4cm42YWU0c29WOGhoZlpzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM5Ri9CNTA5NUEyMjA4NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdH OHJuNmFlNHNvVjhoaGZac0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGYbsXE0XSPuQh5SvlHLTdlswCO3jXcc4iA3JMZT1m4zTK5ZU/6AzE FoxsHIaBv4gn2TFfP2rZmUWQ0gequgOFW7Z3PvQD1/0MUPrLr4p5lYEOnw1dXneH 6fVhwdGe9X7mDZDkOhHZVsa+fFuqhCTa1nvlq4OAc1nGEUa0M+cG4Hg92ZKshOH4 t2xbRUaUbIF47M746Qujt3SAph864fpm1UYp69ZpX/sZpwvH9e4uSFizIJg+FC0e lwGs3IToBDKwdLAHeHOXl7TX7/+MwIw59gvNKdGkBwdy8R9KUE0TfpX0HQ8O8YaV 8wM6teWE/wTLPjEXb4XFL0dLIQp0yIly -----END CERTIFICATE-----Generated at Wed Jul 2 20:15:26 2025 by rpki-client