$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json) Hash identifier: j7hlCzmk5nEFWEHGewt1pNSVjgsN/VnkOAOhnKJHB7U= Subject key identifier: 84:3A:06:D7:22:BC:B9:48:57:19:6B:C5:DF:2C:76:1F:92:14:69:08 Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Certificate serial: A6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft Manifest number: A5 Signing time: Thu 03 Jul 2025 06:20:14 +0000 Manifest this update: Thu 03 Jul 2025 06:20:14 +0000 Manifest next update: Thu 10 Jul 2025 06:20:14 +0000 Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: ynqffPb0f7KJTNdefltlLvy9u/yLRxQ2fSK+9e+mDVc=) 2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: iVgLpNzw9WvLZDCrNCeZKcdKAVuHQLIqgkettJkRmpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 166 (0xa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Validity Not Before: Jul 3 06:20:14 2025 GMT Not After : Jul 10 06:20:14 2025 GMT Subject: CN=6866211e-6a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a9:a6:ff:4b:06:f4:77:a9:0f:8f:36:0b:89: 58:7a:c1:07:a3:6d:0c:38:58:af:55:54:e9:f0:48: 46:22:6b:62:8b:21:a1:a4:73:69:aa:57:d5:33:1b: 93:6f:15:82:0b:24:5d:09:ef:dd:80:16:f7:63:a8: ad:b4:15:d9:bf:e1:6a:8e:8f:6a:01:57:8f:2a:97: 4d:d2:04:1c:37:b9:e3:5d:5c:39:92:91:4f:28:4f: 2c:74:4f:aa:ea:02:38:12:82:0d:e6:e0:3b:e8:1b: 64:16:db:fa:9a:62:a7:9b:70:19:b9:d8:ae:45:b0: ab:fd:e4:cd:82:c7:dc:3d:62:0b:59:d1:a6:75:57: 3f:05:25:24:eb:36:c6:50:f8:60:9d:93:5a:fd:6c: 7b:35:19:62:ae:21:2e:58:cc:86:fc:4c:06:a0:3e: 43:12:6d:7d:24:36:68:84:87:18:c6:12:bd:c5:1d: db:3d:04:d4:23:4b:13:f9:7d:3b:87:b3:69:18:82: d8:a6:ae:33:88:2f:45:be:42:b5:af:32:93:b1:f2: a3:73:ea:70:bc:0f:89:e1:c9:42:16:96:4a:aa:bd: 8f:b1:93:34:af:4d:20:36:76:39:43:a3:61:11:38: 29:53:7d:bc:aa:23:27:81:59:63:7a:98:66:0a:c8: 4e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:3A:06:D7:22:BC:B9:48:57:19:6B:C5:DF:2C:76:1F:92:14:69:08 X509v3 Authority Key Identifier: keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:22:3f:0b:77:28:0e:54:ba:12:05:52:b9:9a:54:51:6d:9f: e7:20:e6:29:32:82:be:21:73:dc:7d:c0:2e:e8:1e:18:24:58: 02:a1:ff:aa:25:b4:9d:64:17:ef:39:39:81:f5:30:0b:74:6f: d1:1b:b1:26:5a:4a:14:9e:c6:2e:d5:4c:21:fc:1e:0a:54:9d: a4:65:8b:36:31:d9:f7:80:ce:03:37:93:64:fa:e0:f4:b3:5b: cf:e0:c2:31:d0:2e:be:38:0d:05:75:08:e2:6a:6b:d0:8b:26: 1a:a8:ca:97:d0:6e:79:31:61:5d:55:10:a3:db:d8:c4:9d:49: 78:ac:77:16:7a:78:95:ff:a8:75:69:2a:ba:3a:91:c2:8f:c7: c8:47:16:06:29:fa:1a:fb:12:05:8b:54:8d:6c:fd:23:c2:d8: eb:d5:83:76:50:7b:59:1f:b1:5d:bc:41:91:14:cb:22:1d:76: 38:73:bb:d8:d7:87:f3:44:c0:d8:73:13:5a:a8:b2:70:3b:53: 0c:0a:10:db:68:90:72:ab:da:6c:2e:e3:d4:b9:ab:b6:b5:fe: 8a:9b:c1:85:de:b3:06:84:cc:48:fa:98:08:65:38:1f:e0:cd: fa:a1:88:2b:8c:a0:eb:f1:9a:0b:ee:d6:48:76:f6:6e:c3:db: 8a:41:ba:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5NjQxMTAvBgNVBAUTKDExNkYwQTJBNkE0QjkyNDJENzdBMjUwQjcxNzAwODE1 RDI5OEREQjkwHhcNMjUwNzAzMDYyMDE0WhcNMjUwNzEwMDYyMDE0WjAYMRYwFAYD VQQDEw02ODY2MjExZS02YTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Kmm/0sG9HepD482C4lYesEHo20MOFivVVTp8EhGImtiiyGhpHNpqlfVMxuT bxWCCyRdCe/dgBb3Y6ittBXZv+Fqjo9qAVePKpdN0gQcN7njXVw5kpFPKE8sdE+q 6gI4EoIN5uA76BtkFtv6mmKnm3AZudiuRbCr/eTNgsfcPWILWdGmdVc/BSUk6zbG UPhgnZNa/Wx7NRliriEuWMyG/EwGoD5DEm19JDZohIcYxhK9xR3bPQTUI0sT+X07 h7NpGILYpq4ziC9FvkK1rzKTsfKjc+pwvA+J4clCFpZKqr2PsZM0r00gNnY5Q6Nh ETgpU328qiMngVljephmCshOOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIQ6Btci vLlIVxlrxd8sdh+SFGkIMB8GA1UdIwQYMBaAFBFvCipqS5JC13olC3FwCBXSmN25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GNTMxRURFNDVC MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtrTFhlaVVMY1hBSUZkS1kz YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VXOEtLbXBMa2tMWGVpVUxjWEFJRmRLWTNiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTk2NC9GNTMxRURFNDVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtr TFhlaVVMY1hBSUZkS1kzYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGIj8LdygOVLoSBVK5mlRRbZ/nIOYpMoK+IXPcfcAu6B4YJFgCof+q JbSdZBfvOTmB9TALdG/RG7EmWkoUnsYu1Uwh/B4KVJ2kZYs2Mdn3gM4DN5Nk+uD0 s1vP4MIx0C6+OA0FdQjiamvQiyYaqMqX0G55MWFdVRCj29jEnUl4rHcWeniV/6h1 aSq6OpHCj8fIRxYGKfoa+xIFi1SNbP0jwtjr1YN2UHtZH7FdvEGRFMsiHXY4c7vY 14fzRMDYcxNaqLJwO1MMChDbaJByq9psLuPUuau2tf6Km8GF3rMGhMxI+pgIZTgf 4M36oYgrjKDr8ZoL7tZIdvZuw9uKQbp7 -----END CERTIFICATE-----Generated at Thu Jul 3 23:42:21 2025 by rpki-client