$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json) Hash identifier: IKrt7BpIX4ers+CwDbB0ZaiA7tAEx+SoF7/qmWWU0cA= Subject key identifier: 94:BF:B4:E9:7D:26:A8:A6:27:85:95:2F:AC:38:27:9F:05:ED:F6:7C Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0E81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft Manifest number: 0E7B Signing time: Mon 30 Jun 2025 17:54:26 +0000 Manifest this update: Mon 30 Jun 2025 17:54:26 +0000 Manifest next update: Mon 07 Jul 2025 17:54:26 +0000 Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: h4imfcH2SCyRyXmIGy6fyVMlMHVBDRhSC0QcKGIbOlM=) 2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: U9KBsxBRcXn+lvll9K6vuuTm2toDlFCHVWsbee/fhwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3713 (0xe81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: Jun 30 17:54:26 2025 GMT Not After : Jul 7 17:54:26 2025 GMT Subject: CN=6862cf52-f8c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:5e:69:53:09:fc:d5:25:6c:22:fe:83:61: 8f:a3:08:b8:91:0f:f4:42:09:bd:22:79:6c:af:45: ba:8d:14:54:77:57:69:ad:d0:1b:51:90:e1:9c:22: 62:87:40:cc:2b:61:9e:e1:06:a3:ee:5d:44:7d:d1: e1:8d:5a:9f:72:b8:02:32:6c:aa:76:81:c1:9a:f3: 7d:ed:d2:39:ba:1e:ed:d0:a0:c0:8a:c8:b0:fc:66: 3d:13:21:20:47:6b:49:af:e4:6f:67:ee:4b:27:74: b1:e0:f2:2f:9c:8d:d7:b9:46:ba:2a:28:0a:b8:55: 05:76:57:a6:db:e4:b9:b1:65:91:7b:74:c1:71:b4: bd:2a:b6:1e:20:e9:07:11:90:20:81:30:59:c6:55: c0:f7:a4:be:b6:55:cd:d6:fb:21:ed:61:70:98:b9: 29:66:37:6c:c3:f6:f8:e1:11:a7:1e:14:3d:8a:5d: d2:a4:8d:7c:02:12:83:51:1c:68:fc:02:26:12:f3: 67:3c:7c:9e:46:d1:17:f0:72:23:34:58:2f:6b:5f: 3f:8d:54:83:b8:52:52:61:fd:6a:d9:a1:ae:e8:fa: ec:0f:bf:3c:4a:1e:f9:c4:08:fc:a3:cf:24:a4:a8: 09:e2:53:88:a1:98:46:62:db:7c:19:f1:a3:7e:29: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BF:B4:E9:7D:26:A8:A6:27:85:95:2F:AC:38:27:9F:05:ED:F6:7C X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:6e:63:8e:9f:b9:fd:21:df:c9:5c:cb:18:1f:59:82:cc:97: 7e:25:f1:e5:73:47:2c:45:a5:b5:dd:f3:02:68:59:1d:d1:89: 9d:9d:78:6c:b8:a9:66:91:3a:90:99:8b:4f:c5:ce:2e:c3:55: b7:57:3c:b2:39:1d:33:2c:eb:e9:57:81:8c:f8:b6:e0:82:32: 0f:b0:c4:13:d8:19:69:f9:06:35:67:24:03:cd:8d:56:f5:81: 82:3b:0b:1f:8b:59:8d:32:61:1a:d9:14:40:5f:f4:29:34:90: 82:dd:87:b6:82:8a:10:f6:a3:b1:78:d6:75:12:9b:b1:07:a1: 83:9f:60:c3:70:8e:40:0c:89:c0:9f:1f:9d:98:9b:84:ac:ff: cb:a4:f4:af:0c:e2:99:ea:a8:6c:a9:13:52:ce:bd:60:db:4e: 41:3a:d3:27:0b:06:09:3e:0e:1d:45:a3:f6:09:95:b2:35:fd: 92:d5:d5:82:a9:8a:4e:19:c8:d2:18:d3:93:a0:2d:2c:ef:2e: bf:68:ca:01:8c:68:ae:2a:a0:ba:84:f8:63:0a:5f:6f:bf:66: 6b:3b:14:b9:d1:90:59:be:f2:fd:52:c2:02:b5:79:d8:11:72: c7:c2:b9:b5:36:c9:1c:2a:08:2a:db:73:b1:68:0c:ad:8f:7d: 38:f3:e4:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjUwNjMwMTc1NDI2WhcNMjUwNzA3MTc1NDI2WjAYMRYwFAYD VQQDEw02ODYyY2Y1Mi1mOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0deaVMJ/NUlbCL+g2GPowi4kQ/0Qgm9Inlsr0W6jRRUd1dprdAbUZDhnCJi h0DMK2Ge4Qaj7l1EfdHhjVqfcrgCMmyqdoHBmvN97dI5uh7t0KDAisiw/GY9EyEg R2tJr+RvZ+5LJ3Sx4PIvnI3XuUa6KigKuFUFdlem2+S5sWWRe3TBcbS9KrYeIOkH EZAggTBZxlXA96S+tlXN1vsh7WFwmLkpZjdsw/b44RGnHhQ9il3SpI18AhKDURxo /AImEvNnPHyeRtEX8HIjNFgva18/jVSDuFJSYf1q2aGu6PrsD788Sh75xAj8o88k pKgJ4lOIoZhGYtt8GfGjfilJawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS/tOl9 JqimJ4WVL6w4J58F7fZ8MB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y alBkaElGRmV5c1l1X2FQa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDObmOOn7n9Id/JXMsYH1mCzJd+JfHlc0csRaW13fMCaFkd0YmdnXhs uKlmkTqQmYtPxc4uw1W3VzyyOR0zLOvpV4GM+LbggjIPsMQT2Blp+QY1ZyQDzY1W 9YGCOwsfi1mNMmEa2RRAX/QpNJCC3Ye2gooQ9qOxeNZ1EpuxB6GDn2DDcI5ADInA nx+dmJuErP/LpPSvDOKZ6qhsqRNSzr1g205BOtMnCwYJPg4dRaP2CZWyNf2S1dWC qYpOGcjSGNOToC0s7y6/aMoBjGiuKqC6hPhjCl9vv2ZrOxS50ZBZvvL9UsICtXnY EXLHwrm1NskcKggq23OxaAytj3048+TK -----END CERTIFICATE-----Generated at Tue Jul 1 21:20:46 2025 by rpki-client