$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft File: EEjCfhFLkRMVXq68kL7G3YD4xss.mft (raw, json) Hash identifier: ULrgzoHJF+tkbwFngyxqvHoedamd1b1KYuvxEojojYA= Subject key identifier: AD:81:85:B5:63:0A:67:2F:91:21:D3:08:C4:83:B3:AB:28:01:C3:10 Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB Certificate issuer: /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB Certificate serial: 0643 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft Manifest number: 063E Signing time: Sat 10 May 2025 22:13:04 +0000 Manifest this update: Sat 10 May 2025 22:13:04 +0000 Manifest next update: Sat 17 May 2025 22:13:04 +0000 Files and hashes: 1: EEjCfhFLkRMVXq68kL7G3YD4xss.crl (hash: VCwNsAou6qNwZ2qWw1vmn/YHFxalTMpLVNsqB/BvRiU=) 2: 5F506D7C8C7911EBB7E88620C4F9AE02.roa (hash: AgY8IbFur1Q4oa6eGF7ycAtrRQlqnrORaZ4AABeYzt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1603 (0x643) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E08E, serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB Validity Not Before: May 10 22:13:04 2025 GMT Not After : May 17 22:13:04 2025 GMT Subject: CN=681fcf70-1991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fb:18:82:72:fe:70:3f:90:90:d6:30:e6:63: e4:18:5c:3b:e1:1d:7c:05:8a:73:0a:c1:2f:0f:e3: 61:ef:49:8d:bb:96:ab:70:30:33:82:3c:58:69:27: 54:25:10:eb:06:e5:d2:47:ac:ca:7d:ce:9e:6b:30: 7f:60:ca:fd:2c:99:47:e1:0f:26:be:ad:64:fd:2b: ac:62:d1:e2:3a:a5:f0:21:72:fe:78:b9:e1:2c:39: 75:a2:02:0b:14:c7:f6:d7:ad:c3:a7:a8:13:f1:4c: c8:23:de:a3:b5:1a:8f:15:14:79:ee:ba:50:f3:fa: 16:f9:c9:1b:a9:13:d2:df:37:83:61:73:cd:9f:ec: 17:c2:80:d2:ea:3e:41:a9:85:54:e3:70:54:c7:7b: b2:ca:1c:1c:50:7e:9c:06:55:ff:ab:e6:00:88:68: e8:59:70:f9:b5:82:8e:38:ea:f7:14:14:2c:32:95: bf:a3:e6:3d:25:43:d3:6d:15:43:dd:5f:db:88:5d: af:ad:b6:6c:99:44:09:21:d4:05:23:19:6d:76:0f: 6e:ea:c8:a7:75:e6:26:f5:64:95:49:5a:c5:ef:c0: 2c:b0:47:b2:6b:2b:84:be:b5:90:63:2d:b0:74:e3: 8a:09:e0:dc:30:c2:b8:8e:32:ff:cb:f6:5d:e5:b5: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:81:85:B5:63:0A:67:2F:91:21:D3:08:C4:83:B3:AB:28:01:C3:10 X509v3 Authority Key Identifier: keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ae:a3:8f:7b:24:c8:58:e0:ba:84:fe:36:70:ec:74:b2:8d: 8f:38:28:1d:7b:0a:5c:47:ac:c7:e3:a5:ba:6b:5a:80:66:8b: f4:14:44:4f:99:92:3a:83:22:e6:7e:24:07:17:93:39:b9:62: c0:cc:6d:e9:e0:a3:4c:4f:b7:0f:dc:22:e0:56:5c:fa:00:3f: 69:e3:13:19:da:73:fb:72:d5:1f:96:41:2b:47:95:fd:03:a3: 61:4c:9b:0b:6f:6c:a8:46:d5:6c:14:e6:f7:8a:b5:a2:e5:81: dd:59:ca:ae:bc:ec:43:6f:97:50:c1:f6:d7:dc:d2:5a:4b:be: b3:b2:7b:2e:a8:b8:89:20:92:c8:be:a7:57:0b:e7:ce:59:7d: cb:ce:2c:19:08:c2:e2:16:31:bb:14:c8:6f:b4:d6:f1:94:02: 33:70:f7:c6:a9:21:44:d8:6e:3c:e8:5e:86:f7:ea:7e:19:08: 0a:06:bc:ea:6b:f0:f1:51:67:fc:83:d3:8e:bd:84:d8:77:4a: ab:2c:5d:2f:b6:87:fe:17:1b:cd:36:ad:72:58:6b:02:86:36: f2:10:7d:8e:34:ed:d0:a2:36:21:4e:80:3d:49:7e:12:ef:f6: 72:2b:8a:51:80:5a:d9:1f:a5:56:49:db:71:0a:10:e3:db:7a: c2:34:c3:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUwOEUxMTAvBgNVBAUTKDEwNDhDMjdFMTE0QjkxMTMxNTVFQUVCQzkwQkVDNkRE ODBGOEM2Q0IwHhcNMjUwNTEwMjIxMzA0WhcNMjUwNTE3MjIxMzA0WjAYMRYwFAYD VQQDEw02ODFmY2Y3MC0xOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vsYgnL+cD+QkNYw5mPkGFw74R18BYpzCsEvD+Nh70mNu5arcDAzgjxYaSdU JRDrBuXSR6zKfc6eazB/YMr9LJlH4Q8mvq1k/SusYtHiOqXwIXL+eLnhLDl1ogIL FMf2163Dp6gT8UzII96jtRqPFRR57rpQ8/oW+ckbqRPS3zeDYXPNn+wXwoDS6j5B qYVU43BUx3uyyhwcUH6cBlX/q+YAiGjoWXD5tYKOOOr3FBQsMpW/o+Y9JUPTbRVD 3V/biF2vrbZsmUQJIdQFIxltdg9u6sindeYm9WSVSVrF78AssEeyayuEvrWQYy2w dOOKCeDcMMK4jjL/y/Zd5bUilwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2BhbVj CmcvkSHTCMSDs6soAcMQMB8GA1UdIwQYMBaAFBBIwn4RS5ETFV6uvJC+xt2A+MbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTA4RS9FMUNBNTg0NjhD NzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtSTVZYcTY4a0w3RzNZRDR4 c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFakNmaEZMa1JNVlhxNjhrTDdHM1lENHhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTA4RS9FMUNBNTg0NjhDNzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtS TVZYcTY4a0w3RzNZRDR4c3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzrqOPeyTIWOC6hP42cOx0so2POCgdewpcR6zH46W6a1qAZov0FERP mZI6gyLmfiQHF5M5uWLAzG3p4KNMT7cP3CLgVlz6AD9p4xMZ2nP7ctUflkErR5X9 A6NhTJsLb2yoRtVsFOb3irWi5YHdWcquvOxDb5dQwfbX3NJaS76zsnsuqLiJIJLI vqdXC+fOWX3LziwZCMLiFjG7FMhvtNbxlAIzcPfGqSFE2G486F6G9+p+GQgKBrzq a/DxUWf8g9OOvYTYd0qrLF0vtof+FxvNNq1yWGsChjbyEH2ONO3QojYhToA9SX4S 7/ZyK4pRgFrZH6VWSdtxChDj23rCNMM2 -----END CERTIFICATE-----Generated at Sun May 11 16:04:54 2025 by rpki-client