$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft File: tN_eECSMkMVYSwFupua0nnge2CA.mft (raw, json) Hash identifier: /jUos9ZxoivM+glPD4UTyUjzpo+f1mz2lYCINq7CZCU= Subject key identifier: 5A:CE:8C:03:9C:22:45:FC:D2:E7:C5:BB:3F:48:47:95:A0:A9:45:4B Authority key identifier: B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20 Certificate issuer: /CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820 Certificate serial: 06A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft Manifest number: 06A0 Signing time: Wed 02 Jul 2025 22:28:43 +0000 Manifest this update: Wed 02 Jul 2025 22:28:42 +0000 Manifest next update: Wed 09 Jul 2025 22:28:42 +0000 Files and hashes: 1: tN_eECSMkMVYSwFupua0nnge2CA.crl (hash: cAHD8bQch04O9oLsSJGRX2Q7t+kar74ObnfCVlYfYkM=) 2: 9E9FA4C40AB011EC8906F464C4F9AE02.roa (hash: y+B4buIfbruqaejaK6x75+RSn7pa5KBjABUZlRGt/q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1702 (0x6a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A5B, serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820 Validity Not Before: Jul 2 22:28:42 2025 GMT Not After : Jul 9 22:28:42 2025 GMT Subject: CN=6865b29b-ce2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:f7:0c:2d:6a:10:00:7e:32:05:ed:fb:51: 18:ef:10:c7:85:f4:c7:de:6e:08:52:aa:22:87:75: 2c:90:45:5d:66:8e:3a:1f:7f:af:0c:01:b6:fa:6c: 80:41:89:fc:ec:69:2d:12:58:39:20:b2:51:09:6e: 5c:e1:e4:15:e4:b1:6d:e8:a7:18:1c:06:4c:74:6b: f4:86:0f:f6:53:46:49:32:bb:9f:60:59:53:76:2a: ef:13:e9:42:56:69:5e:03:80:99:b8:39:1d:e5:38: f9:8a:35:b9:22:95:70:f2:57:3f:3d:76:37:de:a1: 09:d0:aa:62:e2:7e:6b:14:3a:be:c9:e5:5f:11:d4: 52:08:74:7f:32:cd:67:35:29:17:11:7d:f5:e5:40: 35:4e:ed:87:b4:9c:29:21:b2:78:92:59:8f:55:69: 8f:69:b1:dd:ed:fc:63:97:4d:78:6c:0b:46:25:b2: 8e:83:b1:73:46:69:45:fa:94:dd:f1:b1:93:15:e7: 7e:b4:6e:74:a2:b4:47:de:31:69:2b:b3:8c:3f:dc: 80:45:94:ce:9c:c9:08:7f:22:91:21:4a:6a:1b:01: 82:46:7f:55:b6:57:38:6b:8a:dd:38:ad:18:55:99: 20:b4:4a:70:5a:9d:64:7a:b3:e5:02:ad:38:ae:22: 53:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CE:8C:03:9C:22:45:FC:D2:E7:C5:BB:3F:48:47:95:A0:A9:45:4B X509v3 Authority Key Identifier: keyid:B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:bf:4e:29:4c:57:65:32:76:4e:c4:0e:3e:fa:3a:11:73:eb: ee:d0:46:0e:aa:2a:b0:f0:cd:a6:0a:fb:cf:0d:ff:5c:cf:c3: bd:95:9d:72:58:cb:87:5f:9b:ba:5c:b1:b1:aa:8a:24:f7:25: 46:f9:87:50:7c:29:d7:5d:ed:4e:2e:67:7b:7d:08:bb:85:08: 8b:3e:2a:59:65:6e:86:f3:0a:26:c4:8a:49:41:ef:88:bf:2a: 65:6c:0e:51:3a:e3:08:2b:3b:1a:0c:75:15:11:31:6a:f8:8f: 03:60:d9:fa:7c:c4:cb:54:a4:8c:79:65:79:65:bb:48:d0:ee: 91:21:1c:5e:64:9f:4a:f3:a9:a9:d9:c3:61:b0:2b:d8:d0:cc: c3:05:88:f9:92:75:bb:fa:16:de:f4:c4:4f:df:ff:85:37:ac: b2:31:79:10:b1:36:d3:f8:45:d3:78:b5:db:37:f6:15:b2:18: 35:5c:a3:7b:82:78:86:52:ea:53:ea:ff:87:2f:85:8f:ed:29: 09:83:ee:b6:81:e5:df:2c:c1:58:fd:85:5b:1f:32:24:c1:b6: 45:f8:de:77:0e:31:d4:ed:c4:08:ed:00:72:66:e2:23:35:19: 8d:7e:8b:17:89:7d:d6:d6:3c:54:01:3b:d5:db:b6:ba:e1:c9: 15:0a:8f:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNUIxMTAvBgNVBAUTKEI0REZERTEwMjQ4QzkwQzU1ODRCMDE2RUE2RTZCNDlF NzgxRUQ4MjAwHhcNMjUwNzAyMjIyODQyWhcNMjUwNzA5MjIyODQyWjAYMRYwFAYD VQQDEw02ODY1YjI5Yi1jZTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOr3DC1qEAB+MgXt+1EY7xDHhfTH3m4IUqoih3UskEVdZo46H3+vDAG2+myA QYn87GktElg5ILJRCW5c4eQV5LFt6KcYHAZMdGv0hg/2U0ZJMrufYFlTdirvE+lC VmleA4CZuDkd5Tj5ijW5IpVw8lc/PXY33qEJ0Kpi4n5rFDq+yeVfEdRSCHR/Ms1n NSkXEX315UA1Tu2HtJwpIbJ4klmPVWmPabHd7fxjl014bAtGJbKOg7FzRmlF+pTd 8bGTFed+tG50orRH3jFpK7OMP9yARZTOnMkIfyKRIUpqGwGCRn9Vtlc4a4rdOK0Y VZkgtEpwWp1kerPlAq04riJTTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrOjAOc IkX80ufFuz9IR5WgqUVLMB8GA1UdIwQYMBaAFLTf3hAkjJDFWEsBbqbmtJ54Htgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE1Qi8xMUU5NkIzNDcw MTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtNVllTd0Z1cHVhMG5uZ2Uy Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROX2VFQ1NNa01WWVN3RnVwdWEwbm5nZTJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEE1Qi8xMUU5NkIzNDcwMTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtN VllTd0Z1cHVhMG5uZ2UyQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRv04pTFdlMnZOxA4++joRc+vu0EYOqiqw8M2mCvvPDf9cz8O9lZ1y WMuHX5u6XLGxqook9yVG+YdQfCnXXe1OLmd7fQi7hQiLPipZZW6G8womxIpJQe+I vyplbA5ROuMIKzsaDHUVETFq+I8DYNn6fMTLVKSMeWV5ZbtI0O6RIRxeZJ9K86mp 2cNhsCvY0MzDBYj5knW7+hbe9MRP3/+FN6yyMXkQsTbT+EXTeLXbN/YVshg1XKN7 gniGUupT6v+HL4WP7SkJg+62geXfLMFY/YVbHzIkwbZF+N53DjHU7cQI7QByZuIj NRmNfosXiX3W1jxUATvV27a64ckVCo9z -----END CERTIFICATE-----Generated at Thu Jul 3 03:26:35 2025 by rpki-client