$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: 5JfTFAoH9yHZRgJnXUK+22iFNoNFm/4n/etpWNDHrSU= Subject key identifier: A4:96:4C:5F:C1:EE:1E:4D:26:5D:4D:95:6A:F6:F9:25:1A:69:E7:50 Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 019D Signing time: Thu 03 Jul 2025 03:29:09 +0000 Manifest this update: Thu 03 Jul 2025 03:29:08 +0000 Manifest next update: Thu 10 Jul 2025 03:29:08 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: TZgsIAEdvwiPEEeJFb0+CU4mqEmuYzEBEHSlXlX3e1E=) 2: 71F97AC0560E11EEA8088470C4F9AE02.roa (hash: M1Z0vPN0xRUeI7aXSO+zgJ15zwwVDL1Npd3KMXS/ZDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Jul 3 03:29:08 2025 GMT Not After : Jul 10 03:29:08 2025 GMT Subject: CN=6865f904-40f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:78:f7:86:0f:af:f8:4d:0d:7a:3b:12:58: 85:67:98:77:29:bf:c4:8c:98:4e:5b:5d:12:b2:4d: fa:b5:fb:df:30:b4:a4:53:e7:c1:7e:24:6b:ce:c3: 78:a9:e9:43:24:be:de:08:6d:50:a4:78:a7:19:a0: a8:3b:bc:93:cd:8a:b0:e6:bd:22:68:74:38:9d:f2: 07:8e:0f:a7:e7:97:0d:35:db:7f:a4:4e:77:2b:8a: 64:72:8c:8c:fd:39:6c:e4:5b:02:9e:93:a2:75:20: a9:27:67:70:eb:fd:25:94:47:14:20:11:17:3e:81: 1a:b1:10:19:69:a5:cf:44:bd:cc:8b:5e:a2:c2:f9: 2d:15:6b:86:28:77:91:18:3c:fa:c2:e6:c2:bc:02: 06:3a:3d:e5:70:7c:8e:da:e8:47:80:8e:e5:73:9e: 21:46:ca:48:0c:ee:42:11:70:81:32:e4:7e:2e:c0: c6:dd:3c:89:c0:c0:44:93:a0:c3:e2:cb:1b:e9:1d: c5:6a:e5:26:9c:cd:f7:d1:bb:a4:83:2f:74:84:20: 5a:70:86:fd:06:fb:37:46:01:c9:29:0e:0f:37:29: ed:d7:b5:e7:ef:0c:97:24:6c:fe:27:7f:14:fc:e4: c6:de:f3:f2:1b:c5:8b:44:d1:ef:60:56:ea:8d:e0: 4e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:96:4C:5F:C1:EE:1E:4D:26:5D:4D:95:6A:F6:F9:25:1A:69:E7:50 X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9d:0b:c9:91:0b:79:18:f9:72:d4:a9:52:3a:70:8d:3c:01: 68:92:c9:c7:24:a7:60:31:c9:2e:99:ab:fd:b0:7b:d5:50:15: 38:12:5a:70:d3:b1:2f:1e:f0:96:19:81:2e:62:ed:be:6e:60: 4d:d0:e0:48:6d:4c:9c:96:0b:ed:16:5d:44:1d:b0:1b:f8:3e: 23:9a:14:93:de:96:bc:90:10:ed:e4:a9:55:58:9b:e6:97:2e: d8:74:c4:62:2e:61:6e:a1:5d:43:1a:98:fe:91:3c:7e:73:28: f4:67:b0:ac:ea:9d:3c:ce:29:dd:49:64:00:06:ba:82:4b:3d: c4:07:40:92:8d:40:17:63:0a:98:82:ac:78:ca:b7:be:17:ec: 2c:31:84:6a:28:45:04:5e:b1:6c:d8:a1:eb:19:54:bc:ab:73: a8:f4:48:3a:4f:ac:82:a6:f2:6e:12:ee:df:40:9d:9f:0e:32: b6:3a:ca:2d:eb:f2:23:a9:e3:95:dd:34:7a:69:b6:11:2e:4d: 9f:92:f9:25:e0:c3:b0:a2:2b:59:91:f1:3e:c8:af:ee:cc:85: ba:65:d2:14:d7:7e:33:05:f5:81:56:d2:6e:f0:64:13:d3:f7: 71:14:68:cc:39:6f:eb:16:3f:11:27:29:66:57:24:bf:66:82: c0:06:2b:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjUwNzAzMDMyOTA4WhcNMjUwNzEwMDMyOTA4WjAYMRYwFAYD VQQDEw02ODY1ZjkwNC00MGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsh494YPr/hNDXo7EliFZ5h3Kb/EjJhOW10Ssk36tfvfMLSkU+fBfiRrzsN4 qelDJL7eCG1QpHinGaCoO7yTzYqw5r0iaHQ4nfIHjg+n55cNNdt/pE53K4pkcoyM /Tls5FsCnpOidSCpJ2dw6/0llEcUIBEXPoEasRAZaaXPRL3Mi16iwvktFWuGKHeR GDz6wubCvAIGOj3lcHyO2uhHgI7lc54hRspIDO5CEXCBMuR+LsDG3TyJwMBEk6DD 4ssb6R3FauUmnM330bukgy90hCBacIb9Bvs3RgHJKQ4PNynt17Xn7wyXJGz+J38U /OTG3vPyG8WLRNHvYFbqjeBOkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSWTF/B 7h5NJl1NlWr2+SUaaedQMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKnQvJkQt5GPly1KlSOnCNPAFoksnHJKdgMckumav9sHvVUBU4Elpw 07EvHvCWGYEuYu2+bmBN0OBIbUyclgvtFl1EHbAb+D4jmhST3pa8kBDt5KlVWJvm ly7YdMRiLmFuoV1DGpj+kTx+cyj0Z7Cs6p08zindSWQABrqCSz3EB0CSjUAXYwqY gqx4yre+F+wsMYRqKEUEXrFs2KHrGVS8q3Oo9Eg6T6yCpvJuEu7fQJ2fDjK2Osot 6/IjqeOV3TR6abYRLk2fkvkl4MOwoitZkfE+yK/uzIW6ZdIU134zBfWBVtJu8GQT 0/dxFGjMOW/rFj8RJylmVyS/ZoLABiuB -----END CERTIFICATE-----Generated at Thu Jul 3 06:17:48 2025 by rpki-client