$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft File: EEjCfhFLkRMVXq68kL7G3YD4xss.mft (raw, json) Hash identifier: DDkgbLKJjk93MG5qgSnrlt7kMLyPgc6Lw92Fy4ZokY8= Subject key identifier: 42:A0:B9:F1:61:CC:C5:53:99:68:FC:24:D4:2B:F5:5E:8C:0D:C9:2F Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB Certificate issuer: /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB Certificate serial: 065C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft Manifest number: 0657 Signing time: Mon 30 Jun 2025 22:52:22 +0000 Manifest this update: Mon 30 Jun 2025 22:52:22 +0000 Manifest next update: Mon 07 Jul 2025 22:52:22 +0000 Files and hashes: 1: EEjCfhFLkRMVXq68kL7G3YD4xss.crl (hash: i8hctZV+mZ2SrZVBp6e2D3W8x2fvZ2TCsZ12PR+b5Vk=) 2: 5F506D7C8C7911EBB7E88620C4F9AE02.roa (hash: AgY8IbFur1Q4oa6eGF7ycAtrRQlqnrORaZ4AABeYzt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1628 (0x65c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E08E, serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB Validity Not Before: Jun 30 22:52:22 2025 GMT Not After : Jul 7 22:52:22 2025 GMT Subject: CN=68631526-611b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0e:7e:3b:b3:67:bc:af:46:b6:71:f5:92:03: 48:95:ec:7e:04:4a:e7:84:0b:b1:e9:ee:7a:66:45: 5b:7b:09:a3:e2:01:46:e2:ce:95:5d:ff:43:c7:57: 2d:f7:1d:2a:9a:46:31:96:fd:2f:96:0b:27:1c:16: cf:fc:f3:35:7c:21:13:71:44:33:dc:06:40:d2:c1: f8:36:2c:09:6a:ae:41:9f:8d:71:69:b7:54:db:40: d0:aa:6c:87:78:ef:91:a2:e3:5d:c9:26:0a:06:91: 3a:67:1f:71:8b:55:1d:7b:7d:08:c2:0d:3b:5b:4d: 99:c3:d6:ed:78:a9:6e:ce:91:9c:82:3d:68:65:7a: cc:a1:6c:4a:57:9e:65:b9:be:c5:a6:92:71:8d:a0: 16:8f:e8:4e:81:a2:3b:76:cd:04:2a:d1:d7:7c:e5: 1e:fc:f0:ff:e4:9d:57:ec:57:97:f9:e8:a2:6f:30: ee:6b:b3:0e:22:82:14:40:ea:a9:45:c1:51:0d:ed: 70:df:4e:92:6e:04:82:48:59:be:33:ad:ba:6d:60: 21:22:33:f3:84:76:3a:82:b8:ad:8b:2c:9c:07:d1: 2c:6f:09:ea:39:74:3e:00:08:54:7f:19:de:11:84: b1:21:55:80:b8:14:0d:0a:25:24:8b:0d:3e:b5:5c: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A0:B9:F1:61:CC:C5:53:99:68:FC:24:D4:2B:F5:5E:8C:0D:C9:2F X509v3 Authority Key Identifier: keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:9d:88:f6:d8:5f:9d:df:66:75:05:f9:72:82:e9:98:ff:43: 64:97:31:7e:8e:12:3b:da:f5:2b:03:ab:05:f0:81:50:4d:60: 85:6e:a4:ce:e7:e4:6c:a0:28:35:d4:79:f1:ba:2c:49:f1:87: 82:c3:27:92:23:62:63:f4:ef:c5:d2:73:d6:15:7d:e2:2e:c2: 7f:10:1a:e0:78:fc:a2:14:f6:1d:77:56:d1:aa:3b:81:2f:a0: 39:6b:dc:fe:df:95:1a:31:51:e1:b4:7e:e5:ac:f6:02:d0:de: 0d:23:d3:f4:06:16:fe:6f:cf:48:3c:f0:cb:56:df:18:a6:d1: 6f:87:f3:b8:96:e3:e2:e6:c2:0f:ce:f7:cc:de:5b:73:cb:5f: fe:46:ba:fb:7a:20:3d:50:a4:ce:50:38:0c:cb:5e:0e:7a:37: 09:48:a7:3d:8b:c5:0b:c0:19:d4:ca:85:aa:6e:27:93:65:21: 63:33:e7:d6:3d:88:f9:29:9a:cc:51:73:26:89:80:73:17:49: 0a:fe:2b:73:8d:6a:f1:af:10:c0:76:ce:5c:8f:db:6f:1d:d8: cb:85:2a:46:9c:5d:82:f7:56:5d:a7:5d:ff:95:bc:99:81:b9: 17:5a:46:33:31:53:40:9c:ae:2e:61:dc:e4:cf:a4:02:25:e1: 99:dd:51:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUwOEUxMTAvBgNVBAUTKDEwNDhDMjdFMTE0QjkxMTMxNTVFQUVCQzkwQkVDNkRE ODBGOEM2Q0IwHhcNMjUwNjMwMjI1MjIyWhcNMjUwNzA3MjI1MjIyWjAYMRYwFAYD VQQDEw02ODYzMTUyNi02MTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7A5+O7NnvK9GtnH1kgNIlex+BErnhAux6e56ZkVbewmj4gFG4s6VXf9Dx1ct 9x0qmkYxlv0vlgsnHBbP/PM1fCETcUQz3AZA0sH4NiwJaq5Bn41xabdU20DQqmyH eO+RouNdySYKBpE6Zx9xi1Ude30Iwg07W02Zw9bteKluzpGcgj1oZXrMoWxKV55l ub7FppJxjaAWj+hOgaI7ds0EKtHXfOUe/PD/5J1X7FeX+eiibzDua7MOIoIUQOqp RcFRDe1w306SbgSCSFm+M626bWAhIjPzhHY6gritiyycB9EsbwnqOXQ+AAhUfxne EYSxIVWAuBQNCiUkiw0+tVxHHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKgufFh zMVTmWj8JNQr9V6MDckvMB8GA1UdIwQYMBaAFBBIwn4RS5ETFV6uvJC+xt2A+MbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTA4RS9FMUNBNTg0NjhD NzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtSTVZYcTY4a0w3RzNZRDR4 c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFakNmaEZMa1JNVlhxNjhrTDdHM1lENHhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTA4RS9FMUNBNTg0NjhDNzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtS TVZYcTY4a0w3RzNZRDR4c3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCynYj22F+d32Z1BflygumY/0NklzF+jhI72vUrA6sF8IFQTWCFbqTO 5+RsoCg11HnxuixJ8YeCwyeSI2Jj9O/F0nPWFX3iLsJ/EBrgePyiFPYdd1bRqjuB L6A5a9z+35UaMVHhtH7lrPYC0N4NI9P0Bhb+b89IPPDLVt8YptFvh/O4luPi5sIP zvfM3ltzy1/+Rrr7eiA9UKTOUDgMy14OejcJSKc9i8ULwBnUyoWqbieTZSFjM+fW PYj5KZrMUXMmiYBzF0kK/itzjWrxrxDAds5cj9tvHdjLhSpGnF2C91Zdp13/lbyZ gbkXWkYzMVNAnK4uYdzkz6QCJeGZ3VEh -----END CERTIFICATE-----Generated at Tue Jul 1 21:36:12 2025 by rpki-client