$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft File: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft (raw, json) Hash identifier: tPmQgs+TA5PSqKxN+y7QhBP1qtrR90Jouhmk6yn4qAg= Subject key identifier: 2C:F8:CB:4D:D3:EB:9B:85:DB:DC:F0:05:3F:A2:70:45:04:4B:0C:38 Authority key identifier: 78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32 Certificate issuer: /CN=A917ACF1/serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432 Certificate serial: 039B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft Manifest number: 039B Signing time: Tue 01 Jul 2025 01:23:16 +0000 Manifest this update: Tue 01 Jul 2025 01:23:16 +0000 Manifest next update: Tue 08 Jul 2025 01:23:16 +0000 Files and hashes: 1: eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl (hash: SefU28MMMdKB8E1dZbThb1fMC8sfhLxXtd9oNWFaJyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 923 (0x39b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=7811270E78E52F81EC6F0E96D996C79093C12432 Validity Not Before: Jul 1 01:23:16 2025 GMT Not After : Jul 8 01:23:16 2025 GMT Subject: CN=68633884-4f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:72:39:fa:15:c6:0c:8f:26:2a:d5:ce:5e: 0a:b8:c8:12:2c:17:e0:03:96:cc:59:d5:f6:23:a4: 1c:1e:43:df:ab:ec:8a:de:29:1e:f4:29:9f:67:0e: 3d:d4:9f:46:3d:d3:0c:56:e5:bb:b9:1f:0b:54:9e: 2b:f3:fe:a5:82:07:3a:69:00:b7:bb:90:5e:9c:95: ab:2f:e6:c1:ef:fc:de:41:ea:1d:3e:e9:71:7d:46: d2:ed:e8:d4:9a:eb:91:ef:c0:e2:ea:56:f2:39:2f: 06:79:c0:c0:24:85:fe:53:76:a9:0a:54:59:b2:9d: 72:3c:d9:ed:6c:a4:d1:30:50:ef:26:51:55:66:63: 12:47:19:4b:d5:18:c1:01:e8:45:19:68:b8:18:df: 91:ef:20:38:dd:fd:aa:5a:a2:44:89:a9:4a:60:0a: f6:ab:c5:a3:6f:52:33:32:f8:51:df:f4:05:f6:5d: 5b:36:53:be:a6:40:df:33:38:d5:a9:dd:ef:50:78: e5:3a:e3:f7:40:90:b1:f6:49:ae:6d:52:4d:a8:ae: 6c:d5:10:19:49:1b:31:b0:a7:12:75:bf:f2:eb:ca: fa:b7:a0:68:a2:c3:b2:2e:cb:26:89:4e:d8:2c:33: ef:28:85:b3:44:00:7a:74:28:b9:91:90:71:97:91: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F8:CB:4D:D3:EB:9B:85:DB:DC:F0:05:3F:A2:70:45:04:4B:0C:38 X509v3 Authority Key Identifier: keyid:78:11:27:0E:78:E5:2F:81:EC:6F:0E:96:D9:96:C7:90:93:C1:24:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/909BC028A03911EC8A1F1C23C4F9AE02/eBEnDnjlL4Hsbw6W2ZbHkJPBJDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:c6:4e:1c:37:18:46:f7:4e:f3:c6:ed:8f:cb:f8:7a:f0:8c: f8:1b:df:e6:97:2d:71:8a:ab:7b:34:ee:e6:3d:65:d1:44:5e: f0:93:80:5d:45:20:ec:53:bf:1d:5b:6c:a2:75:89:73:65:f1: a2:14:74:0d:53:7c:57:85:00:66:13:71:74:66:50:97:44:d7: 5a:25:da:be:f4:7b:bb:9b:4e:98:78:e4:9e:cf:9c:84:1e:01: 44:06:b1:c5:a7:b0:50:9a:46:98:a1:66:41:6c:fe:d1:32:46: 93:36:05:2c:4a:87:38:3d:61:1b:a8:f5:0e:ba:fe:2a:5f:1b: 0e:bb:5f:99:52:82:69:e4:9e:7c:26:e8:d6:1e:ef:cc:dd:22: 91:62:a8:ae:e5:5d:57:ac:fa:b3:1c:c7:d2:20:8b:8d:45:4d: f1:3d:ba:8e:34:48:0d:68:33:74:6f:04:4f:b1:6f:4e:f6:a0: 63:0c:ae:8c:fc:62:8d:ee:b6:09:c1:02:66:2b:da:9b:71:0d: 38:90:8b:68:5a:a7:9b:f8:2c:60:d4:24:24:01:b7:35:8b:cc: ee:ce:1e:e5:ad:48:9f:1e:bb:d0:76:65:1e:0c:4f:69:38:d8: 05:ec:2c:24:90:8d:dd:95:c9:24:57:60:1a:60:c3:c1:ff:26: 1d:59:fc:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKDc4MTEyNzBFNzhFNTJGODFFQzZGMEU5NkQ5OTZDNzkw OTNDMTI0MzIwHhcNMjUwNzAxMDEyMzE2WhcNMjUwNzA4MDEyMzE2WjAYMRYwFAYD VQQDEw02ODYzMzg4NC00ZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjhyOfoVxgyPJirVzl4KuMgSLBfgA5bMWdX2I6QcHkPfq+yK3ike9CmfZw49 1J9GPdMMVuW7uR8LVJ4r8/6lggc6aQC3u5BenJWrL+bB7/zeQeodPulxfUbS7ejU muuR78Di6lbyOS8GecDAJIX+U3apClRZsp1yPNntbKTRMFDvJlFVZmMSRxlL1RjB AehFGWi4GN+R7yA43f2qWqJEialKYAr2q8Wjb1IzMvhR3/QF9l1bNlO+pkDfMzjV qd3vUHjlOuP3QJCx9kmubVJNqK5s1RAZSRsxsKcSdb/y68r6t6BoosOyLssmiU7Y LDPvKIWzRAB6dCi5kZBxl5HPnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCz4y03T 65uF29zwBT+icEUESww4MB8GA1UdIwQYMBaAFHgRJw545S+B7G8OltmWx5CTwSQy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS85MDlCQzAyOEEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0SHNidzZXMlpiSGtKUEJK REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VCRW5EbmpsTDRIc2J3NlcyWmJIa0pQQkpESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS85MDlCQzAyOEEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi9lQkVuRG5qbEw0 SHNidzZXMlpiSGtKUEJKREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDlxk4cNxhG907zxu2Py/h68Iz4G9/mly1xiqt7NO7mPWXRRF7wk4Bd RSDsU78dW2yidYlzZfGiFHQNU3xXhQBmE3F0ZlCXRNdaJdq+9Hu7m06YeOSez5yE HgFEBrHFp7BQmkaYoWZBbP7RMkaTNgUsSoc4PWEbqPUOuv4qXxsOu1+ZUoJp5J58 JujWHu/M3SKRYqiu5V1XrPqzHMfSIIuNRU3xPbqONEgNaDN0bwRPsW9O9qBjDK6M /GKN7rYJwQJmK9qbcQ04kItoWqeb+Cxg1CQkAbc1i8zuzh7lrUifHrvQdmUeDE9p ONgF7CwkkI3dlckkV2AaYMPB/yYdWfyI -----END CERTIFICATE-----Generated at Wed Jul 2 20:51:40 2025 by rpki-client