$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: ub4m1v3nraxblv5z/J8pgM9CjknJ3nfqXHaucygM0uc= Subject key identifier: BD:0E:CC:0E:3E:67:F5:24:01:8A:63:03:DA:D6:8B:65:9C:77:04:8F Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 5F Signing time: Tue 01 Jul 2025 07:52:45 +0000 Manifest this update: Tue 01 Jul 2025 07:52:44 +0000 Manifest next update: Tue 08 Jul 2025 07:52:44 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: IyvE0YIVslMzSwo0nCTjr7l8ypbU5W6FU1ReLE5+IMA=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: D8sGSIRpeb4KU8twC3M5LxWoSrBlM5fxXQEFrUY0ChI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Jul 1 07:52:44 2025 GMT Not After : Jul 8 07:52:44 2025 GMT Subject: CN=686393cc-d29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:69:b5:40:35:cb:82:b7:8c:3d:0a:24:da: ed:86:a5:f1:cb:8a:cc:81:bd:41:cc:70:ed:cd:12: 20:6e:d3:55:ed:0b:e8:67:44:d8:d1:94:bc:f8:a6: 94:48:bf:90:c1:6f:fa:81:97:8a:e7:04:a7:8e:24: aa:b0:5a:a7:53:68:ef:ff:af:2d:21:c6:52:bf:69: 47:42:b6:18:89:66:1b:9e:3d:45:44:da:e0:5e:30: a8:2a:db:0d:4e:c8:c4:b3:a7:a6:c7:b5:19:3a:16: 92:5a:85:25:f7:b7:f0:ec:2d:b5:6b:c0:eb:13:8a: 9a:cd:24:e4:6a:82:3f:87:71:71:72:b8:7b:40:e3: 71:b9:c3:3b:1d:cb:e5:e2:89:e7:89:21:ef:b2:b9: c7:4b:3f:ed:41:be:0d:9c:e6:53:08:4a:cc:23:23: 0f:4e:29:da:9b:b7:78:d1:30:20:0d:3e:f2:1f:18: f6:49:ef:0c:02:d1:db:54:89:76:e2:ce:cc:b2:62: d3:0b:c2:16:c4:3b:29:3a:b1:4f:34:ad:d8:c2:3a: dc:fb:18:e0:c9:a2:50:ea:4d:bd:e6:0f:b1:d0:a2: 74:e7:b4:c5:4c:e5:f5:59:f5:0a:85:df:f1:ed:a6: 26:80:b0:6e:25:8f:df:ae:14:93:55:cb:0b:55:c7: 67:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0E:CC:0E:3E:67:F5:24:01:8A:63:03:DA:D6:8B:65:9C:77:04:8F X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:da:78:cd:95:2e:bf:6c:0c:9a:f2:3d:8e:ec:43:d5:de:41: 64:42:33:9b:e2:44:2a:a1:62:1d:a5:80:84:b4:c3:48:4a:35: a9:81:a5:9b:84:71:40:31:c4:93:34:9d:48:fc:15:9d:2a:dc: fe:97:5d:4a:df:ad:f1:ad:65:df:92:18:02:c1:8e:d7:02:73: 9d:68:e6:13:1a:8f:22:54:1f:61:99:19:66:ad:d6:6a:b4:a7: 94:57:69:07:a4:12:0b:17:bc:36:a2:49:25:ff:c3:3c:14:e8: 82:e7:6c:a0:8a:06:76:50:c6:df:eb:b0:d2:7f:64:97:7e:43: a7:32:1c:65:21:67:77:45:63:01:7f:5f:e0:52:35:48:81:a1: aa:3e:20:d0:ae:94:24:0a:b7:0b:76:fd:f2:f4:ac:0e:48:8b: 63:27:60:2b:d0:bf:e2:a6:7a:47:0e:67:59:d4:6b:88:cd:1e: a9:e9:79:25:0b:c1:9e:cf:b0:57:4d:e4:24:24:98:0c:da:17: 21:e4:3a:ec:47:71:f3:d8:ee:68:8a:ef:4d:39:91:c5:26:a7: 7a:3f:e9:95:05:25:08:e3:ce:53:01:2e:54:0b:f3:4e:ce:35: f2:7a:fa:18:ad:ac:0f:93:cb:67:03:fb:12:6c:05:89:99:79: 55:9b:7e:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzIzODExMC8GA1UEBRMoMTJBMTAyRjA4RUQxNEY2MjNGQTZFMzFEQkFCNDlBMjRE MUI5QTE1MTAeFw0yNTA3MDEwNzUyNDRaFw0yNTA3MDgwNzUyNDRaMBgxFjAUBgNV BAMTDTY4NjM5M2NjLWQyOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZEmm1QDXLgreMPQok2u2GpfHLisyBvUHMcO3NEiBu01XtC+hnRNjRlLz4ppRI v5DBb/qBl4rnBKeOJKqwWqdTaO//ry0hxlK/aUdCthiJZhuePUVE2uBeMKgq2w1O yMSzp6bHtRk6FpJahSX3t/DsLbVrwOsTiprNJORqgj+HcXFyuHtA43G5wzsdy+Xi ieeJIe+yucdLP+1Bvg2c5lMISswjIw9OKdqbt3jRMCANPvIfGPZJ7wwC0dtUiXbi zsyyYtMLwhbEOyk6sU80rdjCOtz7GODJolDqTb3mD7HQonTntMVM5fVZ9QqF3/Ht piaAsG4lj9+uFJNVywtVx2e9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvQ7MDj5n 9SQBimMD2taLZZx3BI8wHwYDVR0jBBgwFoAUEqEC8I7RT2I/puMdurSaJNG5oVEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDMjM4L0NENzE3RDlDQ0JG MzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9W RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXFFQzhJN1JUMklfcHVNZHVyU2FKTkc1b1ZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD MjM4L0NENzE3RDlDQ0JGMzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJ X3B1TWR1clNhSk5HNW9WRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKbaeM2VLr9sDJryPY7sQ9XeQWRCM5viRCqhYh2lgIS0w0hKNamBpZuE cUAxxJM0nUj8FZ0q3P6XXUrfrfGtZd+SGALBjtcCc51o5hMajyJUH2GZGWat1mq0 p5RXaQekEgsXvDaiSSX/wzwU6ILnbKCKBnZQxt/rsNJ/ZJd+Q6cyHGUhZ3dFYwF/ X+BSNUiBoao+INCulCQKtwt2/fL0rA5Ii2MnYCvQv+KmekcOZ1nUa4jNHqnpeSUL wZ7PsFdN5CQkmAzaFyHkOuxHcfPY7miK7005kcUmp3o/6ZUFJQjjzlMBLlQL807O NfJ6+hitrA+Ty2cD+xJsBYmZeVWbfvM= -----END CERTIFICATE-----Generated at Wed Jul 2 12:20:49 2025 by rpki-client