$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json) Hash identifier: v71w3WTfJFLo2++A0JBFzOcW3rVRrc1pJBp4sZnnDjs= Subject key identifier: 25:4F:3C:FA:71:D2:1F:45:4E:09:65:7A:EA:65:19:7B:26:FB:33:4C Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft Manifest number: 0677 Signing time: Fri 04 Jul 2025 23:47:29 +0000 Manifest this update: Fri 04 Jul 2025 23:47:29 +0000 Manifest next update: Fri 11 Jul 2025 23:47:29 +0000 Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: 53ngjtxl+Uz+mHWwgGSkoYdtWrDpDJZjlOK56nhSZu0=) 2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: dJfXhzg8XYwoUOs2sQdFfnXRTK5+51aUZ+Zq8zrXhMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: Jul 4 23:47:29 2025 GMT Not After : Jul 11 23:47:29 2025 GMT Subject: CN=68686811-1b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ad:59:d6:1b:30:7b:2f:b3:20:4e:81:c3:db: 7d:60:d3:a9:02:97:04:3a:ba:77:37:ff:b1:67:e7: 51:ec:3e:27:06:60:8a:ba:5c:53:4b:de:43:f1:3e: 0d:a7:e7:53:40:56:72:60:25:b1:aa:1b:f5:b0:27: 37:f4:29:ed:bf:ab:7c:f5:25:06:b1:05:00:47:6c: 95:24:41:c6:c5:9f:a0:a9:5b:fc:b1:7b:af:f8:ef: 73:fd:85:64:99:52:1d:54:7f:b4:e4:35:11:3b:92: a7:ff:93:db:31:62:d6:0e:56:fb:2b:0c:1b:0c:0e: 99:71:99:49:d4:98:ff:a9:3a:b9:5b:31:e1:f7:4b: be:38:78:89:a5:32:f5:da:d9:76:ce:17:21:09:5a: 42:41:1f:3e:62:19:1e:9b:45:a0:19:74:a3:3e:89: 2f:5a:f5:4b:74:27:9a:4c:5c:b9:04:90:98:16:8e: 60:ac:ad:3a:f3:3e:50:22:6d:ac:54:be:e4:a1:f5: ec:a7:36:05:b8:c4:d1:47:66:4a:2a:ae:af:2d:5c: e1:4f:5a:53:6b:11:3e:cb:45:57:e0:65:6e:9c:14: d1:7f:35:9f:cb:79:e0:65:2e:74:49:bf:f0:89:80: 3c:ec:7b:a6:14:17:b7:c5:aa:ee:04:c3:3f:43:d8: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4F:3C:FA:71:D2:1F:45:4E:09:65:7A:EA:65:19:7B:26:FB:33:4C X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:5c:40:59:80:56:e8:8a:f1:18:80:5f:d0:46:c6:51:37:3a: 83:d0:13:32:6d:88:ba:c3:cc:11:82:1a:2a:0c:40:82:0f:d5: e8:5e:7f:26:9e:22:84:e8:82:4c:9a:3d:03:5a:67:47:99:c6: 1f:88:c2:a2:01:93:16:92:b7:fc:d0:8a:e7:6f:53:a6:83:b9: e6:0a:53:5b:50:81:c7:79:83:d0:b6:ee:4f:c7:44:33:fa:60: f0:90:67:50:45:58:af:a3:73:37:b4:60:c4:c6:ed:3f:77:79: db:89:73:db:ef:ec:1d:a1:5f:1c:e7:9b:1f:0d:67:a4:a7:3a: a8:8c:cc:d2:4d:75:64:e7:a6:3e:13:93:34:de:20:5b:76:96: 6b:c0:5b:40:0a:bb:7f:4a:1a:3d:11:8b:d7:e5:c1:a5:a9:a4: a5:db:d1:b2:1e:91:06:a7:55:b2:6e:81:52:57:d2:48:c7:a4: d1:ef:7e:c5:54:85:80:4e:39:d1:9a:34:2d:3e:63:ed:67:ca: dc:1d:85:6a:cc:6b:0a:1a:6f:f7:bf:0c:56:75:84:d3:9f:66: 3a:6d:c3:ee:39:ae:b2:c4:45:ef:6c:2c:9f:dc:25:0b:1a:f9: d1:da:6c:49:34:15:39:4e:2a:a9:61:80:a3:9c:1b:c6:a2:28: 72:9a:6e:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz M0UwMkMwMTkwHhcNMjUwNzA0MjM0NzI5WhcNMjUwNzExMjM0NzI5WjAYMRYwFAYD VQQDEw02ODY4NjgxMS0xYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz61Z1hswey+zIE6Bw9t9YNOpApcEOrp3N/+xZ+dR7D4nBmCKulxTS95D8T4N p+dTQFZyYCWxqhv1sCc39Cntv6t89SUGsQUAR2yVJEHGxZ+gqVv8sXuv+O9z/YVk mVIdVH+05DURO5Kn/5PbMWLWDlb7KwwbDA6ZcZlJ1Jj/qTq5WzHh90u+OHiJpTL1 2tl2zhchCVpCQR8+Yhkem0WgGXSjPokvWvVLdCeaTFy5BJCYFo5grK068z5QIm2s VL7kofXspzYFuMTRR2ZKKq6vLVzhT1pTaxE+y0VX4GVunBTRfzWfy3ngZS50Sb/w iYA87HumFBe3xaruBMM/Q9hcHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVPPPpx 0h9FTglleuplGXsm+zNMMB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3 QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu cWZJYlRFLWd5R1l6NEN3QmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQXEBZgFboivEYgF/QRsZRNzqD0BMybYi6w8wRghoqDECCD9XoXn8m niKE6IJMmj0DWmdHmcYfiMKiAZMWkrf80Irnb1Omg7nmClNbUIHHeYPQtu5Px0Qz +mDwkGdQRVivo3M3tGDExu0/d3nbiXPb7+wdoV8c55sfDWekpzqojMzSTXVk56Y+ E5M03iBbdpZrwFtACrt/Sho9EYvX5cGlqaSl29GyHpEGp1WyboFSV9JIx6TR737F VIWATjnRmjQtPmPtZ8rcHYVqzGsKGm/3vwxWdYTTn2Y6bcPuOa6yxEXvbCyf3CUL GvnR2mxJNBU5TiqpYYCjnBvGoihymm42 -----END CERTIFICATE-----Generated at Sat Jul 5 11:39:08 2025 by rpki-client