$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: cZZO4UTo963ox4HzegKtd4M8wpf6pI6abSfMtyRb5r0= Subject key identifier: F1:6E:D6:5C:93:F9:81:60:40:DB:F2:1D:33:B2:90:79:F0:EF:7C:45 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 03EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 03D6 Signing time: Thu 03 Jul 2025 00:58:25 +0000 Manifest this update: Thu 03 Jul 2025 00:58:25 +0000 Manifest next update: Thu 10 Jul 2025 00:58:25 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: 3RUeSW+Tkz/FQai5isgEJDXTLjmWdLndIAoZY09d6bQ=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: sKV1Z0cYRUE+VWc2YxnGxIUnhyBPTtnJSFk2o11IcBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1004 (0x3ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Jul 3 00:58:25 2025 GMT Not After : Jul 10 00:58:25 2025 GMT Subject: CN=6865d5b1-a279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:b5:9d:ca:04:8a:06:af:38:6b:81:e7:4e: 42:a5:f8:b6:5b:a7:2d:21:de:b5:99:57:af:f4:2c: 28:db:7d:02:d0:c0:b3:f7:ea:87:af:7d:f1:ea:34: 76:3b:df:35:57:4a:47:35:98:e4:26:9c:cc:42:b9: c1:09:a0:3f:dd:d3:ae:73:0b:75:46:37:cf:b8:53: da:5c:a2:1e:8d:bd:b6:71:70:b4:1e:9e:af:72:9d: 2a:ef:92:73:47:67:02:5d:0c:db:06:7e:2b:6a:96: a2:77:9f:fb:97:da:dd:24:76:4a:56:d2:71:24:e1: dc:13:26:dd:fd:a9:2e:ee:2e:33:fb:0c:14:b8:1f: 4d:d5:6c:58:4f:30:d1:48:e3:e7:c1:ae:41:0b:d8: c7:40:c0:82:1e:df:1f:b3:fa:ff:59:6d:53:e7:8b: 36:dd:a8:26:2d:97:5c:84:d2:22:9c:6c:3b:2d:38: 7d:a9:b7:12:9c:b2:37:2e:04:93:cb:64:97:b5:08: 2d:4f:7c:2d:b1:b1:92:e0:90:d1:e5:0e:3e:31:18: e6:72:05:e2:74:23:47:53:bf:c1:d9:b6:9e:95:ee: c3:fc:eb:ef:2a:8f:05:1a:11:60:a0:ae:5b:be:9f: 34:8e:a9:b1:52:c1:95:5e:1d:26:48:dc:42:4f:4a: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6E:D6:5C:93:F9:81:60:40:DB:F2:1D:33:B2:90:79:F0:EF:7C:45 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:6a:94:40:96:74:ef:04:17:02:9f:18:c8:98:3a:eb:93:72: 04:fb:23:80:d8:39:86:94:eb:60:da:13:23:d1:08:c1:c9:de: e9:97:96:99:d8:94:5a:20:4b:b5:73:7a:b9:4c:a6:78:fb:7d: 7e:b9:30:48:b8:f5:e2:c8:4e:d0:96:79:01:b5:1b:22:70:97: 2b:9b:72:54:bb:2a:53:e2:6d:c1:dc:6d:a7:28:5b:57:4d:67: ef:cf:49:ca:7f:62:d4:53:36:46:65:31:4f:3b:d1:ee:fe:aa: ff:03:eb:82:82:7c:44:4d:a3:41:fc:3b:c1:0f:69:a5:61:bd: 47:5c:29:87:74:e1:a8:8b:ac:f7:e8:5f:fd:ea:55:e5:a3:19: ad:2e:70:47:44:1a:bd:12:13:45:00:0d:95:7f:6a:b9:f3:79: c1:a8:88:28:bb:ae:3f:19:c9:8f:30:aa:e5:39:c3:ee:bf:b9: d2:4b:70:59:1d:36:6f:88:00:bd:46:9c:9d:d3:0c:75:7a:41: 9c:8b:46:c3:3d:b2:b0:74:a7:33:a9:b7:0e:9b:a6:0d:53:54: d9:e9:b2:ba:de:db:7e:06:b3:4f:98:a5:c9:56:fb:52:f1:7b: ad:14:e3:f4:fb:e9:4f:43:ca:5a:d6:87:f2:bd:ee:53:94:fd: e2:e8:f3:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUwNzAzMDA1ODI1WhcNMjUwNzEwMDA1ODI1WjAYMRYwFAYD VQQDEw02ODY1ZDViMS1hMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdu1ncoEigavOGuB505Cpfi2W6ctId61mVev9Cwo230C0MCz9+qHr33x6jR2 O981V0pHNZjkJpzMQrnBCaA/3dOucwt1RjfPuFPaXKIejb22cXC0Hp6vcp0q75Jz R2cCXQzbBn4rapaid5/7l9rdJHZKVtJxJOHcEybd/aku7i4z+wwUuB9N1WxYTzDR SOPnwa5BC9jHQMCCHt8fs/r/WW1T54s23agmLZdchNIinGw7LTh9qbcSnLI3LgST y2SXtQgtT3wtsbGS4JDR5Q4+MRjmcgXidCNHU7/B2baele7D/OvvKo8FGhFgoK5b vp80jqmxUsGVXh0mSNxCT0pzEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFu1lyT +YFgQNvyHTOykHnw73xFMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlapRAlnTvBBcCnxjImDrrk3IE+yOA2DmGlOtg2hMj0QjByd7pl5aZ 2JRaIEu1c3q5TKZ4+31+uTBIuPXiyE7QlnkBtRsicJcrm3JUuypT4m3B3G2nKFtX TWfvz0nKf2LUUzZGZTFPO9Hu/qr/A+uCgnxETaNB/DvBD2mlYb1HXCmHdOGoi6z3 6F/96lXloxmtLnBHRBq9EhNFAA2Vf2q583nBqIgou64/GcmPMKrlOcPuv7nSS3BZ HTZviAC9Rpyd0wx1ekGci0bDPbKwdKczqbcOm6YNU1TZ6bK63tt+BrNPmKXJVvtS 8XutFOP0++lPQ8pa1ofyve5TlP3i6PO3 -----END CERTIFICATE-----Generated at Thu Jul 3 06:06:10 2025 by rpki-client