$ rpki-client -vvf rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft File: ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft (raw, json) Hash identifier: myqraLNCGLyRkVBYBSgXBj8BNG7UDMAgiIMJu4O5zwo= Subject key identifier: FF:F8:B0:02:85:8D:B6:8B:CE:7D:2E:5F:45:C8:6A:3C:37:72:67:35 Authority key identifier: 7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F Certificate issuer: /CN=A919A285/serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Certificate serial: 087F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft Manifest number: 0878 Signing time: Fri 04 Jul 2025 20:59:42 +0000 Manifest this update: Fri 04 Jul 2025 20:59:41 +0000 Manifest next update: Fri 11 Jul 2025 20:59:41 +0000 Files and hashes: 1: ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl (hash: g0yU5W2rnDuUgBwIYnJ88/766LG+horjCObUc4DkQH8=) 2: 1DCABC72C57811EA950A8643C4F9AE02.roa (hash: 3y+P8Wjw2NbNvaqBtjPXBVu0eGWr6eeBTOCTDHgw4uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A285, serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Validity Not Before: Jul 4 20:59:41 2025 GMT Not After : Jul 11 20:59:41 2025 GMT Subject: CN=686840be-e645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:99:c5:8a:a1:80:51:d5:a8:9d:70:29:74: a0:4c:7a:8e:9a:d2:59:f2:eb:52:e1:63:41:48:13: b0:b5:7f:e9:a5:fc:e7:57:a3:67:34:e1:d9:0c:ed: 52:d5:b7:83:28:26:bb:e2:bd:1e:f0:19:16:ec:14: 8d:7e:69:28:18:1f:4e:a9:ae:ba:be:67:72:8c:19: da:28:6d:4e:ec:00:90:4f:85:a3:95:94:df:e3:28: 68:63:71:c7:53:7f:5c:e3:09:8d:15:60:81:8e:05: a7:50:84:f7:ad:73:f2:50:21:2a:52:3a:18:bb:b8: 00:e0:c9:06:ae:95:07:8e:c0:86:82:1b:88:1e:04: a6:f4:ef:61:1c:55:f6:e2:a5:ed:81:06:22:ab:70: 45:08:b0:6a:66:8e:8c:59:73:e5:96:16:9b:b6:1a: b4:f1:d1:7e:2c:3a:4d:b6:3d:0c:89:79:55:3f:53: 85:07:07:b0:07:08:16:3c:08:3d:71:ca:a7:0d:02: 93:63:35:70:d2:d9:92:21:d4:41:f9:6a:4e:d6:2d: a8:01:45:2b:ab:e4:a9:93:20:70:6b:1b:13:3b:22: be:1a:16:da:ed:03:98:02:af:2b:50:29:2f:13:c2: c0:61:10:e8:ba:82:51:2a:64:a6:92:ea:49:0e:ad: eb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F8:B0:02:85:8D:B6:8B:CE:7D:2E:5F:45:C8:6A:3C:37:72:67:35 X509v3 Authority Key Identifier: keyid:7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:46:45:0c:40:d1:5a:92:f5:3f:23:df:fa:21:8d:b7:12:6b: 92:ee:ba:8c:13:2d:b9:2f:87:47:3f:39:84:56:72:86:8f:db: e6:6a:a3:38:dc:a2:4f:a8:9a:3c:2a:24:be:aa:fe:ab:28:96: f0:53:f1:a7:9c:ee:a6:73:bc:81:e7:9d:95:93:1b:5d:1c:ac: e3:52:e4:82:c2:e4:0f:bd:d3:51:6a:f0:43:77:91:9f:2e:b1: 55:d6:4c:40:0f:c7:3d:29:6c:30:88:13:dd:16:5c:63:a8:97: ae:cf:1e:06:c2:b8:a9:21:0c:00:bb:a1:75:05:87:dc:99:d5: 02:57:d3:bc:00:15:18:6d:6e:3f:e5:8a:9e:85:b1:50:1d:69: c3:8e:83:2b:07:25:aa:71:86:3d:4f:46:0d:1b:ca:09:b9:83: 25:cf:61:dd:28:9a:d8:43:02:41:3d:ff:23:0b:a2:76:4a:0f: 38:65:52:f1:c5:76:35:de:8f:61:b5:81:34:74:bc:24:0f:e4: db:b2:19:0c:64:df:74:a7:b5:28:5b:bb:44:db:f3:30:78:87: 2b:2d:2a:2b:78:c6:27:d7:fd:42:05:56:1c:4b:cc:15:9f:63: f3:c1:54:ae:ce:4b:e0:86:50:a8:ef:7f:c7:83:cd:48:42:36: ab:dc:73:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEyODUxMTAvBgNVBAUTKDdBMzFENTczOTc5OEIwNjRBNjAwNzEzM0FBM0U1QjlD RDBFRUQ0NUYwHhcNMjUwNzA0MjA1OTQxWhcNMjUwNzExMjA1OTQxWjAYMRYwFAYD VQQDEw02ODY4NDBiZS1lNjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KWZxYqhgFHVqJ1wKXSgTHqOmtJZ8utS4WNBSBOwtX/ppfznV6NnNOHZDO1S 1beDKCa74r0e8BkW7BSNfmkoGB9Oqa66vmdyjBnaKG1O7ACQT4WjlZTf4yhoY3HH U39c4wmNFWCBjgWnUIT3rXPyUCEqUjoYu7gA4MkGrpUHjsCGghuIHgSm9O9hHFX2 4qXtgQYiq3BFCLBqZo6MWXPllhabthq08dF+LDpNtj0MiXlVP1OFBwewBwgWPAg9 ccqnDQKTYzVw0tmSIdRB+WpO1i2oAUUrq+SpkyBwaxsTOyK+Ghba7QOYAq8rUCkv E8LAYRDouoJRKmSmkupJDq3rqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/4sAKF jbaLzn0uX0XIajw3cmc1MB8GA1UdIwQYMBaAFHox1XOXmLBkpgBxM6o+W5zQ7tRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTI4NS9ERDYyODlBQUM1 NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNHU21BSEV6cWo1Ym5ORHUx RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqSFZjNWVZc0dTbUFIRXpxajVibk5EdTFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTI4NS9ERDYyODlBQUM1NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNH U21BSEV6cWo1Ym5ORHUxRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBERkUMQNFakvU/I9/6IY23EmuS7rqMEy25L4dHPzmEVnKGj9vmaqM4 3KJPqJo8KiS+qv6rKJbwU/GnnO6mc7yB552VkxtdHKzjUuSCwuQPvdNRavBDd5Gf LrFV1kxAD8c9KWwwiBPdFlxjqJeuzx4GwripIQwAu6F1BYfcmdUCV9O8ABUYbW4/ 5YqehbFQHWnDjoMrByWqcYY9T0YNG8oJuYMlz2HdKJrYQwJBPf8jC6J2Sg84ZVLx xXY13o9htYE0dLwkD+TbshkMZN90p7UoW7tE2/MweIcrLSoreMYn1/1CBVYcS8wV n2PzwVSuzkvghlCo73/Hg81IQjar3HPp -----END CERTIFICATE-----Generated at Sun Jul 6 01:09:28 2025 by rpki-client