$ rpki-client -vvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft File: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft (raw, json) Hash identifier: wM/5qh1aCQ6p4XaF7mRItTNED0/1U7NhLiRjVJ2f68w= Subject key identifier: E9:BA:D6:96:C1:4D:67:FD:F0:6F:FE:FB:9C:F4:C7:CD:F5:FA:81:81 Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A Certificate issuer: /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft Manifest number: 017B Signing time: Thu 03 Jul 2025 03:45:34 +0000 Manifest this update: Thu 03 Jul 2025 03:45:34 +0000 Manifest next update: Thu 10 Jul 2025 03:45:34 +0000 Files and hashes: 1: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl (hash: akCCV4mcgadI9aYyTRuozjeDTCdGZ28Ov6HKjBWO9zg=) 2: ACC372FE0F4211EE97A24686C4F9AE02.roa (hash: wIa8XsPQEKgPmaham2jaYKS/+u8e3X7+t4uptXIU2FQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A Validity Not Before: Jul 3 03:45:34 2025 GMT Not After : Jul 10 03:45:34 2025 GMT Subject: CN=6865fcde-3540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:a5:ae:d4:e0:c7:f0:74:61:24:77:71:36: 85:cb:75:ab:90:d6:82:fb:12:c2:59:4b:82:0a:8e: 99:80:d6:3c:19:12:e1:3b:59:47:bd:27:80:94:1b: 20:18:5e:87:b8:ef:7b:cf:ff:ce:4e:b8:48:d0:11: b3:d2:3a:6a:05:2e:83:30:c5:10:ae:10:60:af:cc: e6:e5:9f:3c:db:de:ec:ce:d1:e4:13:1f:11:a2:3c: 10:80:e5:ca:a6:98:d0:6b:cf:0b:0a:11:78:2c:55: 54:ec:ea:37:81:a4:d8:00:e9:c2:b4:fd:8a:7d:10: 4b:22:e2:fc:71:4c:5d:11:63:9c:33:d6:ee:14:bb: 1d:a1:79:6a:8a:1f:62:93:30:f9:0f:cd:33:ee:ce: 70:4b:e0:16:a5:8e:99:d7:a5:6e:db:4d:10:1e:6f: 25:6c:d9:9c:5c:6b:24:36:89:fd:00:d9:84:4e:23: 97:f3:41:eb:f5:7d:74:d5:eb:6f:2e:0a:5c:ec:10: e1:a8:86:14:1a:4b:6e:a9:d0:c9:c3:af:82:56:f6: 12:3d:55:7d:a2:7a:d1:27:1b:8e:d4:6f:f2:85:62: 67:22:bf:bf:01:30:8f:d7:2d:bb:54:0b:9e:cf:41: e8:01:fa:c7:bd:b9:9b:2f:68:0b:6c:b6:12:17:d1: 87:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BA:D6:96:C1:4D:67:FD:F0:6F:FE:FB:9C:F4:C7:CD:F5:FA:81:81 X509v3 Authority Key Identifier: keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d1:32:11:bc:a0:c5:e7:34:c2:69:88:17:3a:50:35:50:df: b8:28:22:0b:0c:18:fa:fd:60:47:7c:4d:31:f8:7e:02:17:65: 49:8f:71:28:01:b9:7e:d5:2c:29:da:0b:15:ff:0c:04:7f:d9: 65:6a:2f:61:13:47:91:6b:ed:d7:72:7c:85:d9:3f:43:bb:95: 1f:6c:ca:d8:1f:51:70:b4:06:2f:8e:c5:b7:88:50:bc:9f:35: f0:be:18:d8:c1:6a:b6:cf:46:74:78:93:2c:ac:36:fc:ad:ef: 47:f9:3d:c1:e9:0b:45:76:11:e1:e4:3e:cb:43:ba:8e:ff:6f: bf:49:51:d4:69:6b:cb:0b:c1:dc:f4:01:99:96:bd:c9:60:cd: 38:96:09:79:87:5f:00:64:78:d2:77:fc:1d:4f:e7:47:d5:65: fd:71:60:83:97:d9:83:1d:6c:a2:a6:81:ca:b9:0b:6d:c9:06: ec:11:40:11:c2:9b:d8:19:b8:69:72:7f:c2:91:ea:10:5e:ba: c1:41:f4:b9:2b:ea:7a:07:2f:f6:6b:03:57:e9:ea:1d:ff:c9: fe:ef:ce:b5:ef:90:3a:08:19:6d:36:a8:41:39:0c:83:22:76: a3:c5:4b:d7:d2:7c:6c:e3:d6:ed:fc:62:d6:c4:f4:58:e4:d2: f9:8c:94:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGRjIxMTAvBgNVBAUTKDc5NTI4MjVEMkUxOEZGMDYxQjlCMzZCRDY2MzQyMTJE MkRGMUJGM0EwHhcNMjUwNzAzMDM0NTM0WhcNMjUwNzEwMDM0NTM0WjAYMRYwFAYD VQQDEw02ODY1ZmNkZS0zNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QelrtTgx/B0YSR3cTaFy3WrkNaC+xLCWUuCCo6ZgNY8GRLhO1lHvSeAlBsg GF6HuO97z//OTrhI0BGz0jpqBS6DMMUQrhBgr8zm5Z88297sztHkEx8RojwQgOXK ppjQa88LChF4LFVU7Oo3gaTYAOnCtP2KfRBLIuL8cUxdEWOcM9buFLsdoXlqih9i kzD5D80z7s5wS+AWpY6Z16Vu200QHm8lbNmcXGskNon9ANmETiOX80Hr9X101etv Lgpc7BDhqIYUGktuqdDJw6+CVvYSPVV9onrRJxuO1G/yhWJnIr+/ATCP1y27VAue z0HoAfrHvbmbL2gLbLYSF9GH9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm61pbB TWf98G/++5z0x831+oGBMB8GA1UdIwQYMBaAFHlSgl0uGP8GG5s2vWY0IS0t8b86 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUZGMi85RTRCQTM0RTBG MzkxMUVFQUVDRjU2NjNDNEY5QUUwMi9lVktDWFM0WV93WWJtemE5WmpRaExTM3h2 em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VWS0NYUzRZX3dZYm16YTlaalFoTFMzeHZ6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUZGMi85RTRCQTM0RTBGMzkxMUVFQUVDRjU2NjNDNEY5QUUwMi9lVktDWFM0WV93 WWJtemE5WmpRaExTM3h2em8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI0TIRvKDF5zTCaYgXOlA1UN+4KCILDBj6/WBHfE0x+H4CF2VJj3Eo Abl+1Swp2gsV/wwEf9llai9hE0eRa+3XcnyF2T9Du5UfbMrYH1FwtAYvjsW3iFC8 nzXwvhjYwWq2z0Z0eJMsrDb8re9H+T3B6QtFdhHh5D7LQ7qO/2+/SVHUaWvLC8Hc 9AGZlr3JYM04lgl5h18AZHjSd/wdT+dH1WX9cWCDl9mDHWyipoHKuQttyQbsEUAR wpvYGbhpcn/CkeoQXrrBQfS5K+p6By/2awNX6eod/8n+786175A6CBltNqhBOQyD InajxUvX0nxs49bt/GLWxPRY5NL5jJRt -----END CERTIFICATE-----Generated at Thu Jul 3 12:17:17 2025 by rpki-client