$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft File: eameEjE6dnHw2VkHDVD_70tSVSU.mft (raw, json) Hash identifier: t3igZGOMlK8HvNWwEql7dk6SKWOv2Qf/jE8L1i5u+Hc= Subject key identifier: 73:36:4E:41:4F:46:0D:8E:DD:CE:EE:1A:10:EA:C0:FD:1F:30:85:5C Authority key identifier: 79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25 Certificate issuer: /CN=A91E3015/serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft Manifest number: CE Signing time: Tue 01 Jul 2025 06:14:27 +0000 Manifest this update: Tue 01 Jul 2025 06:14:26 +0000 Manifest next update: Tue 08 Jul 2025 06:14:26 +0000 Files and hashes: 1: eameEjE6dnHw2VkHDVD_70tSVSU.crl (hash: +mXbgEpZbu1HvRb0H45+sgrv5L5W2CBOYHpc+5E92hI=) 2: 732ACDFA1C7D11EF95F4D214C4F9AE02.roa (hash: lDKMw2Uv+LSmUmslKOyptDJ98K3bb4g5+88hD0kPwgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3015, serialNumber=79A99E12313A7671F0D959070D50FFEF4B525525 Validity Not Before: Jul 1 06:14:26 2025 GMT Not After : Jul 8 06:14:26 2025 GMT Subject: CN=68637cc3-601f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:1b:7f:95:8e:0e:de:49:25:23:7d:93:24: 0b:dc:f7:90:6b:71:fb:6b:6d:b4:f6:93:43:2a:46: 79:04:7e:e2:1b:9c:78:7a:25:2c:0a:97:0e:73:f3: ac:67:f3:2c:6a:46:3b:9a:81:a7:6f:9b:d3:7b:08: 12:dc:5c:fc:00:0c:73:f2:07:01:f6:3d:dd:e1:09: 53:88:4a:97:7f:96:5d:f7:8c:ba:63:c1:24:30:37: ae:38:3b:25:0c:31:18:17:33:d9:f0:50:b3:41:b6: 4e:7e:05:57:6b:bf:64:4c:c1:9a:85:24:30:7d:9e: a0:ac:8a:c2:e7:87:bb:93:39:7e:9e:3c:23:bb:b1: 50:f1:a5:00:12:47:8c:0b:6f:b6:84:7c:61:a5:15: cc:4b:5b:87:9d:c7:22:aa:34:8b:a6:ca:f0:c0:bd: 46:45:35:57:d3:a6:53:c0:81:5f:f0:31:06:bf:5e: 58:ee:f6:80:04:8a:c7:a7:9f:3a:7d:d3:e9:2c:64: 1f:39:c0:1f:f9:84:1e:84:42:62:e6:58:84:12:71: 5d:21:96:1b:3e:e8:3d:c8:01:5b:f2:39:3a:43:b2: 27:72:1f:e3:d8:0c:61:86:2a:b9:b5:ec:53:91:1b: d9:67:33:08:47:7c:37:cf:d8:31:30:c7:c1:ab:bb: 53:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:36:4E:41:4F:46:0D:8E:DD:CE:EE:1A:10:EA:C0:FD:1F:30:85:5C X509v3 Authority Key Identifier: keyid:79:A9:9E:12:31:3A:76:71:F0:D9:59:07:0D:50:FF:EF:4B:52:55:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eameEjE6dnHw2VkHDVD_70tSVSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3015/4A248ED81C7C11EFB996112DC4F9AE02/eameEjE6dnHw2VkHDVD_70tSVSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:de:9b:4c:50:f3:2d:43:dc:f9:cf:e0:2f:21:06:6c:8d:98: ff:1b:c8:7d:55:a7:f5:e1:50:51:9d:1d:09:2e:9b:e4:8b:11: 46:bc:26:d6:7d:00:a1:c1:b1:82:33:a1:74:4c:6a:14:08:3c: c1:ef:89:39:ae:ec:cf:05:c7:d0:59:a9:76:dc:4f:a9:f5:ac: c8:a4:0d:80:35:7e:95:8f:eb:77:14:dc:12:e1:01:30:08:34: c1:36:b6:b0:74:2c:25:8e:5e:7e:b4:f4:38:20:5b:b4:1d:22: 43:2b:47:9d:0a:85:94:53:4c:ec:f4:52:85:0c:71:07:d1:db: c7:6c:a0:6a:ee:74:4d:8b:45:4a:15:fc:1e:cf:fa:35:f5:24: d6:9c:be:66:4d:e1:e2:07:e3:e6:48:40:cd:a0:93:e2:57:bd: 7a:a1:fe:f9:09:95:4c:e2:a1:9e:52:05:bf:8f:04:95:bb:11: 47:b9:55:f8:b2:f8:fe:c6:ec:3c:93:19:6e:0a:09:90:eb:87: 23:39:57:be:b1:83:1c:0a:6d:49:6e:94:3e:8b:f1:eb:d8:b8: 26:5a:24:93:58:3f:31:b8:b9:76:3f:56:c1:57:5f:0b:8e:69: 68:47:3c:da:4c:cc:12:ad:f4:49:f3:7d:f0:66:79:03:b3:53: e5:91:8c:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMwMTUxMTAvBgNVBAUTKDc5QTk5RTEyMzEzQTc2NzFGMEQ5NTkwNzBENTBGRkVG NEI1MjU1MjUwHhcNMjUwNzAxMDYxNDI2WhcNMjUwNzA4MDYxNDI2WjAYMRYwFAYD VQQDEw02ODYzN2NjMy02MDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnAEbf5WODt5JJSN9kyQL3PeQa3H7a2209pNDKkZ5BH7iG5x4eiUsCpcOc/Os Z/MsakY7moGnb5vTewgS3Fz8AAxz8gcB9j3d4QlTiEqXf5Zd94y6Y8EkMDeuODsl DDEYFzPZ8FCzQbZOfgVXa79kTMGahSQwfZ6grIrC54e7kzl+njwju7FQ8aUAEkeM C2+2hHxhpRXMS1uHncciqjSLpsrwwL1GRTVX06ZTwIFf8DEGv15Y7vaABIrHp586 fdPpLGQfOcAf+YQehEJi5liEEnFdIZYbPug9yAFb8jk6Q7Inch/j2Axhhiq5texT kRvZZzMIR3w3z9gxMMfBq7tTSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM2TkFP Rg2O3c7uGhDqwP0fMIVcMB8GA1UdIwQYMBaAFHmpnhIxOnZx8NlZBw1Q/+9LUlUl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzAxNS80QTI0OEVEODFD N0MxMUVGQjk5NjExMkRDNEY5QUUwMi9lYW1lRWpFNmRuSHcyVmtIRFZEXzcwdFNW U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VhbWVFakU2ZG5IdzJWa0hEVkRfNzB0U1ZTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzAxNS80QTI0OEVEODFDN0MxMUVGQjk5NjExMkRDNEY5QUUwMi9lYW1lRWpFNmRu SHcyVmtIRFZEXzcwdFNWU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI3ptMUPMtQ9z5z+AvIQZsjZj/G8h9Vaf14VBRnR0JLpvkixFGvCbW fQChwbGCM6F0TGoUCDzB74k5ruzPBcfQWal23E+p9azIpA2ANX6Vj+t3FNwS4QEw CDTBNrawdCwljl5+tPQ4IFu0HSJDK0edCoWUU0zs9FKFDHEH0dvHbKBq7nRNi0VK Ffwez/o19STWnL5mTeHiB+PmSEDNoJPiV716of75CZVM4qGeUgW/jwSVuxFHuVX4 svj+xuw8kxluCgmQ64cjOVe+sYMcCm1JbpQ+i/Hr2LgmWiSTWD8xuLl2P1bBV18L jmloRzzaTMwSrfRJ833wZnkDs1PlkYz0 -----END CERTIFICATE-----Generated at Wed Jul 2 20:04:04 2025 by rpki-client