$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: Y+NSSysexNN1QrEPQnwNmTEKwQYKVm5wMTIf9JYVqIo= Subject key identifier: 51:7E:0C:09:A7:DD:32:78:0F:B3:1C:75:C6:88:31:0C:03:FC:13:39 Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 039B Signing time: Tue 01 Jul 2025 01:22:59 +0000 Manifest this update: Tue 01 Jul 2025 01:22:59 +0000 Manifest next update: Tue 08 Jul 2025 01:22:59 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: BOz6SlhfdUItF23j6JfPcnldhRqdtfHP6iYfODGHza4=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: Jul 1 01:22:59 2025 GMT Not After : Jul 8 01:22:59 2025 GMT Subject: CN=68633873-11ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:e5:8d:23:f0:b8:73:b5:b1:0c:7a:82:b2: ee:98:dc:c8:82:5d:2a:11:41:d4:5b:46:ca:8f:62: 09:ea:2d:e6:29:be:36:9c:e5:d4:2e:c0:95:cc:1a: 1c:32:bd:d7:d2:cf:c7:17:e7:89:20:e1:e9:51:17: 66:03:e0:d0:35:fe:02:d5:ae:b8:03:b3:d0:c6:e8: 57:7c:11:78:9f:3d:87:89:37:1e:81:19:d8:ed:6d: cb:66:ab:95:26:3b:cc:45:9d:0f:f4:67:3d:97:49: 61:6d:95:e2:e5:1a:a3:eb:97:43:c8:ae:a8:8d:38: ff:fe:32:8d:df:95:6e:25:48:ab:65:ef:33:8f:d0: f4:ce:e5:97:4b:b4:31:ca:95:5b:a7:1e:04:8b:34: 05:86:fc:14:55:94:16:df:35:bb:ee:aa:4d:41:3e: 95:a4:72:3d:3a:71:fe:ee:16:18:8b:98:38:0d:6f: 9b:70:0b:ba:7a:10:2f:1c:63:b4:3c:41:45:ff:5c: 85:f3:59:e0:84:30:1e:81:57:64:7c:ba:1a:77:31: 87:a9:0b:d9:8d:5e:04:87:85:15:61:bb:54:a9:d7: 38:26:14:e7:b7:16:b3:63:67:00:ac:f2:96:b1:81: c2:e6:b5:39:38:1b:2c:9e:db:ec:6b:15:63:f7:de: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7E:0C:09:A7:DD:32:78:0F:B3:1C:75:C6:88:31:0C:03:FC:13:39 X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:bf:28:ce:16:f0:d9:d9:1a:90:03:5a:3f:5f:3a:8f:c5:dd: 79:da:61:fd:81:40:80:db:5e:c8:c7:93:7b:af:d7:d0:40:97: ec:54:3c:80:5e:f2:ba:5b:68:af:89:a3:de:e8:f7:78:19:0b: 2a:b3:90:fc:7d:d0:72:e3:d9:6b:c4:f0:e1:fe:8b:e2:3d:8f: 3c:1d:6b:59:de:a3:90:61:6e:16:f3:aa:5b:8d:a9:a0:3c:b1: 40:21:9f:56:68:5e:d1:a5:a9:50:90:ad:8c:c0:a6:c4:65:ca: 96:18:a3:6b:4c:97:52:28:ea:ac:dc:38:43:fc:af:4b:5a:eb: 1f:bf:58:f5:0b:c6:85:d4:48:c8:2f:e7:7c:cd:3d:b1:23:4c: 48:43:6a:8e:0b:9c:40:f7:42:bd:4c:a7:5f:f1:b6:de:6e:e8: 4b:0e:f2:f1:c4:ec:8c:3f:e0:f3:c4:5c:ec:b7:89:1c:2c:c1: bd:08:29:a0:1f:2b:54:5d:1b:0d:85:ae:5c:2b:fe:c3:60:7f: 2e:27:3d:05:53:72:d1:5c:0a:af:2e:96:49:c1:60:c7:5c:07: fe:37:ab:ac:3b:83:c3:49:4e:7b:82:d3:34:92:60:5b:ae:b2: da:f8:70:8d:35:f7:38:ad:72:89:cc:ab:9d:b8:0f:27:05:8a: 0a:9d:35:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjUwNzAxMDEyMjU5WhcNMjUwNzA4MDEyMjU5WjAYMRYwFAYD VQQDEw02ODYzMzg3My0xMWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvTljSPwuHO1sQx6grLumNzIgl0qEUHUW0bKj2IJ6i3mKb42nOXULsCVzBoc Mr3X0s/HF+eJIOHpURdmA+DQNf4C1a64A7PQxuhXfBF4nz2HiTcegRnY7W3LZquV JjvMRZ0P9Gc9l0lhbZXi5Rqj65dDyK6ojTj//jKN35VuJUirZe8zj9D0zuWXS7Qx ypVbpx4EizQFhvwUVZQW3zW77qpNQT6VpHI9OnH+7hYYi5g4DW+bcAu6ehAvHGO0 PEFF/1yF81nghDAegVdkfLoadzGHqQvZjV4Eh4UVYbtUqdc4JhTntxazY2cArPKW sYHC5rU5OBssntvsaxVj995rCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFF+DAmn 3TJ4D7McdcaIMQwD/BM5MB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0vyjOFvDZ2RqQA1o/XzqPxd152mH9gUCA217Ix5N7r9fQQJfsVDyA XvK6W2iviaPe6Pd4GQsqs5D8fdBy49lrxPDh/oviPY88HWtZ3qOQYW4W86pbjamg PLFAIZ9WaF7RpalQkK2MwKbEZcqWGKNrTJdSKOqs3DhD/K9LWusfv1j1C8aF1EjI L+d8zT2xI0xIQ2qOC5xA90K9TKdf8bbebuhLDvLxxOyMP+DzxFzst4kcLMG9CCmg HytUXRsNha5cK/7DYH8uJz0FU3LRXAqvLpZJwWDHXAf+N6usO4PDSU57gtM0kmBb rrLa+HCNNfc4rXKJzKuduA8nBYoKnTUv -----END CERTIFICATE-----Generated at Wed Jul 2 00:36:21 2025 by rpki-client