$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft File: EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft (raw, json) Hash identifier: 9R/Wg1jrJuIAtk//smJ200BbOnmReFAwjKIZvjRa7pw= Subject key identifier: 36:EE:1E:4D:65:B2:6C:EE:04:17:30:77:F6:88:0C:37:0B:95:4A:35 Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F Certificate issuer: /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Certificate serial: 154A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft Manifest number: 150D Signing time: Wed 02 Jul 2025 16:59:51 +0000 Manifest this update: Wed 02 Jul 2025 16:59:51 +0000 Manifest next update: Wed 09 Jul 2025 16:59:51 +0000 Files and hashes: 1: EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl (hash: HI0UdU3SZUQ0K4/t+Kqvc35iKGdwtbv0jauq1O8tK44=) 2: F99707CEBAC511E9A77CDE7BC4F9AE02.roa (hash: 5uUW31UVlhS1EMeW8SdNyNqfE7foPIsbvKPSkNYxTTw=) 3: E7084A18E1FF11ED8291C918C4F9AE02.roa (hash: 825LdLpPgTmUB6Z/jlNKQqUyb06kFuccOU7CVvrtwj4=) 4: E80E94F8E1FF11ED8291C918C4F9AE02.roa (hash: sEzbj9zVcGYfQVtymkbJCAL7nuZefcCGjL2IRtqWF/o=) 5: 065737305C9511EDABB9FA49C4F9AE02.roa (hash: A9mSeJtqPQ5OLPMu8OwuZB0s+QUpXaZBGlbtc6BBl4M=) 6: E5E5AB76E1FF11ED8291C918C4F9AE02.roa (hash: uZ4XGMAryuNiLEYH4OkW1daYwrGTX1yw6VXfeQKddWo=) 7: E4C72AB2E1FF11ED8291C918C4F9AE02.roa (hash: evUrAmQOOHS6gFCNS5NNu+gRFX265k9Xi2+XGDvOjys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5450 (0x154a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Validity Not Before: Jul 2 16:59:51 2025 GMT Not After : Jul 9 16:59:51 2025 GMT Subject: CN=68656587-d35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:65:4e:7b:b3:e7:ab:d0:19:3f:3b:5b:1c:d2: 05:88:4b:50:be:80:33:a9:38:79:37:67:51:f1:27: b5:b2:6c:60:8d:00:1a:10:94:b4:a4:5b:8c:e1:f7: 50:36:ff:db:3b:4f:65:75:2a:ea:81:a7:9e:f3:8b: 65:76:ef:2f:75:d4:47:3a:ba:c5:85:96:0b:27:9a: 34:16:e4:79:79:ea:dd:3b:da:64:ba:c3:9c:8b:30: 37:2f:a7:77:8e:4d:cf:b9:17:4c:b0:a2:20:70:21: 75:89:f7:f1:31:78:08:8b:a2:32:54:61:25:6c:81: 33:0b:f3:bc:9a:68:49:ef:8a:cf:83:dd:fc:5f:87: c7:94:39:60:87:55:57:4e:bb:27:a6:b8:4c:fc:c8: 8c:32:e4:04:b2:e7:bd:90:81:4d:0c:67:7a:16:e2: 8d:f6:78:a0:e7:ba:08:15:81:b3:be:c3:03:30:b2: 98:20:1d:e7:32:96:0a:b8:be:7e:a9:dc:3e:c9:13: 1a:ff:12:34:a9:22:a8:0b:f5:0f:a4:9a:a1:5f:f9: b5:69:ee:d3:23:f1:97:52:57:7d:36:9e:5d:50:ae: b7:82:2e:ca:0b:d1:d3:aa:1f:d5:a3:bc:74:db:77: 28:9c:68:58:73:0f:0c:98:55:3d:e3:1b:63:e4:fc: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EE:1E:4D:65:B2:6C:EE:04:17:30:77:F6:88:0C:37:0B:95:4A:35 X509v3 Authority Key Identifier: keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:32:64:eb:f8:88:60:56:a0:cf:bc:2e:1a:cf:c5:46:6b:55: 63:ea:f4:cd:b3:41:b4:e8:05:64:9f:70:f6:a0:a4:c4:07:c6: 0c:d3:23:63:dc:27:05:9f:bc:0e:6c:b3:71:f8:94:14:94:b1: 01:c6:87:07:d7:61:09:11:20:13:2e:72:10:d1:d6:58:03:e8: e6:5a:0b:e9:ee:2f:26:6f:41:04:7e:dd:a5:73:53:4b:75:4a: 43:d0:e5:a3:f1:e5:a9:86:dc:c9:3a:52:a7:9e:e2:4f:60:5d: 6b:23:1a:5e:f1:a0:33:06:c7:9e:a4:84:f5:63:1c:b1:7f:8c: 0f:e1:b4:af:6e:07:78:c1:90:a8:d2:20:4f:dc:07:40:e2:5a: 86:36:cf:52:29:7a:80:23:a0:61:b4:b8:d6:a9:8b:34:95:75: ae:d1:39:b7:00:ba:ac:b2:d0:22:04:d7:76:ff:4b:59:05:2b: 58:32:12:79:09:07:37:1b:8b:9d:1a:9a:02:20:90:3d:74:79: 99:b6:9f:d7:e4:90:75:4a:27:ba:f8:5a:5a:a5:18:cf:8b:54: a3:08:d1:43:0c:56:4f:56:9e:83:13:b1:9b:71:62:b2:18:17: 8e:67:75:d0:ee:22:09:14:b3:a0:c9:e2:cf:4a:b4:7f:ca:60: cd:96:0a:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE NEM2RDU3MUYwHhcNMjUwNzAyMTY1OTUxWhcNMjUwNzA5MTY1OTUxWjAYMRYwFAYD VQQDEw02ODY1NjU4Ny1kMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGVOe7Pnq9AZPztbHNIFiEtQvoAzqTh5N2dR8Se1smxgjQAaEJS0pFuM4fdQ Nv/bO09ldSrqgaee84tldu8vddRHOrrFhZYLJ5o0FuR5eerdO9pkusOcizA3L6d3 jk3PuRdMsKIgcCF1iffxMXgIi6IyVGElbIEzC/O8mmhJ74rPg938X4fHlDlgh1VX TrsnprhM/MiMMuQEsue9kIFNDGd6FuKN9nig57oIFYGzvsMDMLKYIB3nMpYKuL5+ qdw+yRMa/xI0qSKoC/UPpJqhX/m1ae7TI/GXUld9Np5dUK63gi7KC9HTqh/Vo7x0 23conGhYcw8MmFU94xtj5PxV/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbuHk1l smzuBBcwd/aIDDcLlUo1MB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2 NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlGQy84MTA0NUUzQTU2NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1R bXg5UE5KaE9uRGJVeHRWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzMmTr+IhgVqDPvC4az8VGa1Vj6vTNs0G06AVkn3D2oKTEB8YM0yNj 3CcFn7wObLNx+JQUlLEBxocH12EJESATLnIQ0dZYA+jmWgvp7i8mb0EEft2lc1NL dUpD0OWj8eWphtzJOlKnnuJPYF1rIxpe8aAzBseepIT1Yxyxf4wP4bSvbgd4wZCo 0iBP3AdA4lqGNs9SKXqAI6BhtLjWqYs0lXWu0Tm3ALqsstAiBNd2/0tZBStYMhJ5 CQc3G4udGpoCIJA9dHmZtp/X5JB1Sie6+FpapRjPi1SjCNFDDFZPVp6DE7GbcWKy GBeOZ3XQ7iIJFLOgyeLPSrR/ymDNlgrI -----END CERTIFICATE-----Generated at Fri Jul 4 04:02:38 2025 by rpki-client