$ rpki-client -vvf rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft File: EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft (raw, json) Hash identifier: D5T4nLym/CKfXI1Q8PrTAJ6S5sOIvyIWU14Mr5DuXWc= Subject key identifier: 7D:54:2C:15:3A:18:C3:04:87:0D:A1:A6:1B:DA:04:5B:1F:75:81:2C Authority key identifier: 10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B Certificate issuer: /CN=A918DFCE/serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft Manifest number: 0111 Signing time: Tue 01 Jul 2025 05:31:13 +0000 Manifest this update: Tue 01 Jul 2025 05:31:12 +0000 Manifest next update: Tue 08 Jul 2025 05:31:12 +0000 Files and hashes: 1: EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl (hash: HRp5B2N10QdxFMQ+WByMARniil0iHYGQZ3Y533cRX34=) 2: B5E8546EBF2611EE8879BB66C4F9AE02.roa (hash: Ffk69KcnGpR49Ar8hlO4ru2sBWN0PK6gedzkE21rPTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DFCE, serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B Validity Not Before: Jul 1 05:31:12 2025 GMT Not After : Jul 8 05:31:12 2025 GMT Subject: CN=686372a1-f5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:98:52:80:29:51:b9:b3:b9:51:51:f9:c6: 42:af:41:80:01:d1:82:ce:0b:36:10:fb:1b:f8:4b: f6:62:36:fb:5b:44:38:94:c9:80:b9:91:64:cc:d8: 33:1e:96:7c:b4:23:64:5d:16:c3:c5:a0:6a:7c:85: 07:fd:59:a5:45:e6:fa:c7:c3:af:d1:96:88:d2:df: 71:8e:f5:5a:dd:8f:1f:42:9c:32:4f:a9:b5:6e:d1: ea:8f:b9:83:b1:f0:cd:79:19:ca:87:28:b2:11:da: 48:e3:69:45:44:cc:37:78:bd:ab:97:06:72:79:13: a9:77:ba:bc:32:69:ae:44:07:97:e9:24:0b:18:b9: e5:cc:f5:01:28:fe:6a:63:76:af:65:32:04:7e:5c: 16:17:16:37:51:26:98:e9:5a:72:44:44:cf:9d:23: 7d:9c:0d:37:61:ab:32:54:14:2e:7e:e4:ba:5b:e3: e5:9b:a7:dd:9d:a0:0e:d6:0e:71:30:c4:6e:80:2b: 2f:97:ab:e7:a2:bc:72:30:2e:04:c2:6c:3b:01:73: 5d:1b:97:ad:da:49:a0:10:cb:99:64:58:1f:0a:35: bc:b1:38:d5:e0:5a:ef:a8:a9:eb:5a:a8:7e:33:85: 5b:8a:2e:fc:79:d0:5c:b4:f8:b5:92:ca:70:42:3f: 4c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:54:2C:15:3A:18:C3:04:87:0D:A1:A6:1B:DA:04:5B:1F:75:81:2C X509v3 Authority Key Identifier: keyid:10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:8f:9c:0b:1a:0f:1d:64:7b:c5:bb:f7:cf:af:d8:6d:1b:77: fb:6c:f9:66:3b:91:14:4f:b0:af:76:24:9a:6a:5a:19:86:e1: 83:01:1e:62:47:9e:9f:42:37:81:b0:f7:ed:1b:a7:a1:d6:3c: ba:6f:dd:5d:7b:9c:4e:a9:dc:e5:5e:bd:24:ef:10:ab:ff:4e: 8c:e7:05:3a:e8:3d:63:ca:b2:c2:f3:69:59:5f:dd:20:67:fb: 0b:47:1c:43:69:d3:d0:44:c5:f4:f6:3d:45:ca:72:81:bb:01: c6:1f:c2:49:f5:65:c9:c2:aa:af:dd:43:a2:84:c2:2b:7e:b5: e4:2c:c3:b8:0d:ac:2c:1e:6e:de:9f:d0:3e:90:72:e6:39:a0: e2:b6:cc:2f:be:c4:ed:d7:53:2f:a6:a0:f9:d7:20:a7:c0:7d: 0f:0c:bc:6f:2c:de:e9:6b:28:34:44:56:91:1a:f8:d9:e7:8f: 2a:86:fe:e5:c7:22:17:60:8a:ae:78:9c:f5:ce:69:3f:ee:f6: f6:c8:56:58:2f:75:ff:40:5b:59:d5:d0:e3:bf:c2:cb:dd:1d: 95:6b:b8:1c:15:87:fe:82:80:39:b7:33:00:21:da:9c:3c:47: 8e:7b:68:06:f0:ff:cc:8e:3b:81:d5:8b:91:80:fe:ea:7b:3a: dc:53:73:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERGQ0UxMTAvBgNVBAUTKDEwNDQwMjlGRjgzMTc0QzZGMUQ2NkM4QUQwRDNGQTE2 NjRFRkU1M0IwHhcNMjUwNzAxMDUzMTEyWhcNMjUwNzA4MDUzMTEyWjAYMRYwFAYD VQQDEw02ODYzNzJhMS1mNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXOYUoApUbmzuVFR+cZCr0GAAdGCzgs2EPsb+Ev2Yjb7W0Q4lMmAuZFkzNgz HpZ8tCNkXRbDxaBqfIUH/VmlReb6x8Ov0ZaI0t9xjvVa3Y8fQpwyT6m1btHqj7mD sfDNeRnKhyiyEdpI42lFRMw3eL2rlwZyeROpd7q8MmmuRAeX6SQLGLnlzPUBKP5q Y3avZTIEflwWFxY3USaY6VpyRETPnSN9nA03YasyVBQufuS6W+Plm6fdnaAO1g5x MMRugCsvl6vnorxyMC4Ewmw7AXNdG5et2kmgEMuZZFgfCjW8sTjV4FrvqKnrWqh+ M4Vbii78edBctPi1kspwQj9MgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1ULBU6 GMMEhw2hphvaBFsfdYEsMB8GA1UdIwQYMBaAFBBEAp/4MXTG8dZsitDT+hZk7+U7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REZDRS84MEFDNTRDQUJG MUQxMUVFODc1QUUyN0ZDNEY5QUUwMi9FRVFDbl9neGRNYngxbXlLME5QNkZtVHY1 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFUUNuX2d4ZE1ieDFteUswTlA2Rm1UdjVUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REZDRS84MEFDNTRDQUJGMUQxMUVFODc1QUUyN0ZDNEY5QUUwMi9FRVFDbl9neGRN YngxbXlLME5QNkZtVHY1VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAij5wLGg8dZHvFu/fPr9htG3f7bPlmO5EUT7CvdiSaaloZhuGDAR5i R56fQjeBsPftG6eh1jy6b91de5xOqdzlXr0k7xCr/06M5wU66D1jyrLC82lZX90g Z/sLRxxDadPQRMX09j1FynKBuwHGH8JJ9WXJwqqv3UOihMIrfrXkLMO4DawsHm7e n9A+kHLmOaDitswvvsTt11MvpqD51yCnwH0PDLxvLN7payg0RFaRGvjZ548qhv7l xyIXYIqueJz1zmk/7vb2yFZYL3X/QFtZ1dDjv8LL3R2Va7gcFYf+goA5tzMAIdqc PEeOe2gG8P/MjjuB1YuRgP7qezrcU3Mk -----END CERTIFICATE-----Generated at Thu Jul 3 05:06:44 2025 by rpki-client