$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json) Hash identifier: hy0XYnxfKp6YUXMBv/kATYo2esKN176YmeqiKK4Z/zg= Subject key identifier: D3:91:00:1F:1A:E9:63:66:87:F1:E4:A1:1F:8A:19:76:DA:04:1A:C7 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 03BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft Manifest number: 0358 Signing time: Sun 29 Jun 2025 00:48:41 +0000 Manifest this update: Sun 29 Jun 2025 00:48:40 +0000 Manifest next update: Sun 06 Jul 2025 00:48:40 +0000 Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: fWGM3wrkY/0Bq5ccAiEdg8Pz4Hq7rnLaxPCTX9MaQFo=) 2: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: O+w5tLUYY2vDAPyyihGdNaVeLcPrzrretQfcUAVViMY=) 3: 010342748FE911EDA6F5922AC4F9AE02.roa (hash: 5w2gwK/+zmYTYrBGcuIv1emp3tFDL4QjnfqeQ2tORBo=) 4: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: KY39ZDloooDTLSWdSYEfYOluFdXRey3d+9IwjJV7kvw=) 5: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: w55707A6oGZPVJb5dLEvH7DmAsCJ21ZtMMUXzrwNCRM=) 6: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: PO28TqT7JFAgsJS4OG8H4ivCR2vG+AQUGdE3hSyf+fM=) 7: 7CCE329266F711EF86880681C4F9AE02.roa (hash: 6anx6+tUYpCyea4W0BqwQSGkyUCAr4k+8K9NAhmwsJE=) 8: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: BC1XUzBkjyQzlz4GvtxH81hMdlkimJB+lU8F+PmiFVI=) 9: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: ABW3By8YU2W6olwHz1/qOoSOHNFidR8eMB8CQ1rCUFk=) 10: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: q0o0blyQ81NictXAsmCb5KMZ0BzFrp/mj7hc480MWyw=) 11: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: R17w/Fkdvp/1oePeXfLYVtvseH7RLcT+pcv0SXzugK4=) 12: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: QdBFtLVQnvTC0U8ce4xfWA4Knfofq/bGhnYdWQPREvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Jun 29 00:48:40 2025 GMT Not After : Jul 6 00:48:40 2025 GMT Subject: CN=68608d68-ca58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:45:2f:be:e1:9b:98:b1:3e:ae:31:3d:52:ea: ef:3b:d8:f2:6d:dd:ad:1c:43:c3:41:f5:8e:5b:70: 66:6f:50:45:56:a5:b1:c4:3f:cf:aa:0c:36:ef:3f: 6c:87:cd:98:f7:da:37:e5:14:ac:1d:9a:c4:81:8d: b3:2e:1c:a7:8b:84:65:df:4b:3a:a3:e3:c4:57:4e: 63:c1:03:ef:ef:37:51:3b:7f:99:41:6a:85:cd:c8: 78:31:0f:db:89:a0:2e:33:86:b2:33:72:d9:f0:79: 7e:04:fa:9e:c5:83:36:70:67:ba:3f:5b:1f:e7:9c: 2c:2b:f8:f5:b8:7a:1b:b2:60:dc:de:5a:11:1d:f4: 2c:17:89:3e:4f:64:67:3a:37:28:dd:f4:af:5a:fa: 9b:11:af:23:d3:66:7d:b9:ac:cb:7a:aa:19:fe:82: f2:b2:09:ea:04:5b:82:65:f2:7f:fb:33:63:8b:59: b0:cd:a6:52:be:27:8e:a2:c1:17:c5:33:43:92:66: 98:fa:97:3f:de:ef:85:26:59:0c:23:9a:c6:5a:bd: 51:f7:6a:e8:78:ad:ab:c3:cb:49:3c:73:85:6a:58: 37:96:d5:2e:02:c8:1c:6e:03:d8:b0:4b:4a:5a:48: f1:8c:d5:98:03:e2:56:e2:cd:86:06:0d:7f:62:de: c2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:91:00:1F:1A:E9:63:66:87:F1:E4:A1:1F:8A:19:76:DA:04:1A:C7 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:b2:27:53:02:ec:03:c3:80:b1:c0:c7:17:ff:be:0b:d8:e0: ff:35:2b:61:39:f3:e0:b8:29:7d:4d:e5:b7:54:40:4e:e0:51: 37:b6:f3:e2:23:75:04:a3:2a:04:3d:15:ad:57:ea:05:0d:cb: d5:22:af:fd:df:82:8f:5e:b8:27:36:b5:8f:99:05:81:0d:6a: 36:c7:50:e9:99:25:6f:0e:7f:c9:64:88:1f:95:b9:76:34:4c: 41:e0:b9:06:99:88:f5:9b:44:cd:20:00:73:7c:59:53:56:d4: b3:02:4a:36:ad:a2:ee:3d:80:14:52:3f:c1:4d:67:2c:3f:85: 49:f4:63:d5:6a:32:23:c7:ac:e9:b5:cb:da:b6:6a:28:88:a4: e1:60:d3:54:f5:15:a0:dc:50:b7:02:c0:04:ec:ae:03:9f:14: 66:2c:07:9c:6b:87:b3:f4:2b:eb:fb:22:b8:30:5c:f5:60:b1: da:cd:64:29:bc:f7:d6:8e:36:77:a5:ab:da:2a:11:a6:7c:47: 7e:b4:03:fb:0c:81:33:d0:21:4f:ea:92:69:68:4b:d2:9c:7f: b0:b4:54:6e:1c:63:29:f4:1b:9c:54:67:5d:0e:b6:19:d7:19: 6d:06:12:d5:7d:c1:ea:4d:84:03:09:37:43:bc:87:85:b0:ed: 6a:a5:58:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwNjI5MDA0ODQwWhcNMjUwNzA2MDA0ODQwWjAYMRYwFAYD VQQDEw02ODYwOGQ2OC1jYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnEUvvuGbmLE+rjE9UurvO9jybd2tHEPDQfWOW3Bmb1BFVqWxxD/Pqgw27z9s h82Y99o35RSsHZrEgY2zLhyni4Rl30s6o+PEV05jwQPv7zdRO3+ZQWqFzch4MQ/b iaAuM4ayM3LZ8Hl+BPqexYM2cGe6P1sf55wsK/j1uHobsmDc3loRHfQsF4k+T2Rn Ojco3fSvWvqbEa8j02Z9uazLeqoZ/oLysgnqBFuCZfJ/+zNji1mwzaZSvieOosEX xTNDkmaY+pc/3u+FJlkMI5rGWr1R92roeK2rw8tJPHOFalg3ltUuAsgcbgPYsEtK WkjxjNWYA+JW4s2GBg1/Yt7CqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNORAB8a 6WNmh/HkoR+KGXbaBBrHMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q dXByZFBTZjRYYU9QRS1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGsidTAuwDw4CxwMcX/74L2OD/NSthOfPguCl9TeW3VEBO4FE3tvPi I3UEoyoEPRWtV+oFDcvVIq/934KPXrgnNrWPmQWBDWo2x1DpmSVvDn/JZIgflbl2 NExB4LkGmYj1m0TNIABzfFlTVtSzAko2raLuPYAUUj/BTWcsP4VJ9GPVajIjx6zp tcvatmooiKThYNNU9RWg3FC3AsAE7K4DnxRmLAeca4ez9Cvr+yK4MFz1YLHazWQp vPfWjjZ3pavaKhGmfEd+tAP7DIEz0CFP6pJpaEvSnH+wtFRuHGMp9BucVGddDrYZ 1xltBhLVfcHqTYQDCTdDvIeFsO1qpVhq -----END CERTIFICATE-----Generated at Sun Jun 29 14:01:17 2025 by rpki-client