$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft File: EawzZ40YMzz-vUmJK1aJnifqY0g.mft (raw, json) Hash identifier: asIRp1Jb4vbQbgt9EOgjDtOMWHFT8zrkN9aC/5sq2tk= Subject key identifier: D2:3F:C5:DF:99:5E:A0:7C:F0:19:9E:8A:64:DB:81:6B:B4:FB:EB:2F Authority key identifier: 11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48 Certificate issuer: /CN=A919DA26/serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft Manifest number: 01D0 Signing time: Thu 03 Jul 2025 02:56:35 +0000 Manifest this update: Thu 03 Jul 2025 02:56:34 +0000 Manifest next update: Thu 10 Jul 2025 02:56:34 +0000 Files and hashes: 1: EawzZ40YMzz-vUmJK1aJnifqY0g.crl (hash: rcOPCGfgg+Kf4voxKd9pUzvx9FVSr/FaXIYzqE++MYY=) 2: A7119C2E8FEE11ED83F3C543C4F9AE02.roa (hash: +93D0eusWWNntkjGYUSo149HmgTU1FPvVrCP6VBiF1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA26, serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348 Validity Not Before: Jul 3 02:56:34 2025 GMT Not After : Jul 10 02:56:34 2025 GMT Subject: CN=6865f162-6210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:9f:c3:bc:07:41:f9:be:9a:7d:5e:a1:4b: 5d:e8:08:07:bc:70:18:57:82:fc:63:ed:eb:fd:e7: 7f:a7:98:e7:82:84:73:48:38:3d:5d:83:15:18:2c: 4c:74:59:62:d3:4d:f9:98:83:b0:15:c9:94:c8:a0: fc:b6:dc:a2:65:3c:61:36:db:f7:1f:48:64:0f:3c: 28:92:0b:b9:ef:1c:32:64:db:e5:6a:e1:6f:53:a9: fa:c6:74:c4:11:3b:23:4e:81:47:4e:1f:8f:88:80: 70:6c:29:fa:0a:04:1e:00:2b:29:fe:72:29:39:3f: b2:92:96:29:99:e3:a2:cd:43:bf:91:7b:d6:15:2f: 37:65:fb:08:f4:01:53:71:3b:3b:0a:12:4c:41:9b: 50:2a:f3:3f:97:39:0f:1c:ea:86:96:bc:ea:aa:ff: 01:2a:25:f6:39:3d:3b:ec:4f:1a:b8:80:d4:fe:ac: 20:3e:1f:02:39:0c:c4:8d:23:64:b6:10:fd:e8:67: 48:67:e0:7c:c9:0e:af:a1:b7:7f:95:37:f7:52:6c: 81:a3:03:21:c7:7e:a4:a6:65:48:bd:79:6e:8c:c7: 55:e5:dc:c4:7c:20:e0:0b:06:7c:62:c6:64:86:8b: fe:16:f3:79:ea:48:c8:05:a5:d8:08:52:9e:c9:28: 94:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3F:C5:DF:99:5E:A0:7C:F0:19:9E:8A:64:DB:81:6B:B4:FB:EB:2F X509v3 Authority Key Identifier: keyid:11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:5f:e0:b8:f3:6e:5c:8c:cd:30:7b:18:cc:83:51:a2:2f:49: 21:4b:6d:be:fd:a2:75:f5:93:15:f5:fa:e6:b6:be:cc:8d:ed: c2:d5:3c:63:e3:e7:94:38:a6:e9:b8:57:79:43:ce:35:82:91: 9b:d3:19:fc:ee:64:de:3f:9f:e7:78:a6:bf:33:16:c7:16:a2: c9:59:fc:fc:80:7d:5c:22:cb:b9:a8:90:3c:aa:55:f6:96:d7: f2:f1:9a:72:d7:b9:25:24:65:b2:e0:18:36:8c:dd:b3:20:1c: 31:2e:96:8a:31:dc:88:92:ac:23:45:3f:6b:60:1c:a0:f2:7b: a4:4b:b4:b8:f2:0e:de:6a:de:cf:f2:16:e6:55:4b:0f:44:b9: 24:be:44:d1:dd:73:48:5c:12:48:fd:de:b0:6d:38:c2:2d:82: 3b:67:c2:5d:7a:4c:ae:c2:da:1f:02:2f:cc:3c:f8:1b:eb:b0: 9e:88:54:c0:94:8c:3d:64:a3:ba:19:e4:62:f5:2c:5a:f2:13: 0a:d7:53:c7:a1:37:16:23:7c:31:e9:d8:f1:ff:3e:1d:2f:4f: c0:fb:b7:59:bb:3c:9d:99:f0:83:e8:dc:d5:86:f7:a5:79:9c: bf:96:90:cd:09:2d:e8:c9:a1:c5:b2:30:58:2d:17:f0:fd:b9: 3f:ef:63:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBMjYxMTAvBgNVBAUTKDExQUMzMzY3OEQxODMzM0NGRUJENDk4OTJCNTY4OTlF MjdFQTYzNDgwHhcNMjUwNzAzMDI1NjM0WhcNMjUwNzEwMDI1NjM0WjAYMRYwFAYD VQQDEw02ODY1ZjE2Mi02MjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy06fw7wHQfm+mn1eoUtd6AgHvHAYV4L8Y+3r/ed/p5jngoRzSDg9XYMVGCxM dFli0035mIOwFcmUyKD8ttyiZTxhNtv3H0hkDzwokgu57xwyZNvlauFvU6n6xnTE ETsjToFHTh+PiIBwbCn6CgQeACsp/nIpOT+ykpYpmeOizUO/kXvWFS83ZfsI9AFT cTs7ChJMQZtQKvM/lzkPHOqGlrzqqv8BKiX2OT077E8auIDU/qwgPh8COQzEjSNk thD96GdIZ+B8yQ6vobd/lTf3UmyBowMhx36kpmVIvXlujMdV5dzEfCDgCwZ8YsZk hov+FvN56kjIBaXYCFKeySiU0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI/xd+Z XqB88BmeimTbgWu0++svMB8GA1UdIwQYMBaAFBGsM2eNGDM8/r1JiStWiZ4n6mNI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REEyNi85QjA3MjBBNDhG RUMxMUVEQjkwMUE3NDNDNEY5QUUwMi9FYXd6WjQwWU16ei12VW1KSzFhSm5pZnFZ MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Vhd3paNDBZTXp6LXZVbUpLMWFKbmlmcVkwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REEyNi85QjA3MjBBNDhGRUMxMUVEQjkwMUE3NDNDNEY5QUUwMi9FYXd6WjQwWU16 ei12VW1KSzFhSm5pZnFZMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3X+C4825cjM0wexjMg1GiL0khS22+/aJ19ZMV9frmtr7Mje3C1Txj 4+eUOKbpuFd5Q841gpGb0xn87mTeP5/neKa/MxbHFqLJWfz8gH1cIsu5qJA8qlX2 ltfy8Zpy17klJGWy4Bg2jN2zIBwxLpaKMdyIkqwjRT9rYByg8nukS7S48g7eat7P 8hbmVUsPRLkkvkTR3XNIXBJI/d6wbTjCLYI7Z8JdekyuwtofAi/MPPgb67CeiFTA lIw9ZKO6GeRi9Sxa8hMK11PHoTcWI3wx6djx/z4dL0/A+7dZuzydmfCD6NzVhvel eZy/lpDNCS3oyaHFsjBYLRfw/bk/72OG -----END CERTIFICATE-----Generated at Thu Jul 3 09:34:16 2025 by rpki-client