$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: iK4v1Krof6GA+/wHk/CY4FybjRdS3tcbmTOmB1MehpA= Subject key identifier: F8:68:AE:D0:C0:CF:BF:AE:B0:76:4C:70:AC:02:FB:CD:E7:0F:77:94 Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 05FD Signing time: Thu 12 Jun 2025 22:30:41 +0000 Manifest this update: Thu 12 Jun 2025 22:30:41 +0000 Manifest next update: Thu 19 Jun 2025 22:30:41 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: MXeECoEct7mrE62c3tmM8hQlu2+hk4yCY3xE/mKTHiU=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: 6T0bGam9Fz3MuC3/hi4HGnadBCMddUZ6zt+H3AVBHfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: Jun 12 22:30:41 2025 GMT Not After : Jun 19 22:30:41 2025 GMT Subject: CN=684b5511-edb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:ef:bb:e5:2f:9b:d9:f8:d4:56:45:33:06: d1:12:c5:dc:26:72:e7:39:6f:37:8c:0d:f0:87:34: a1:7a:9f:55:46:ee:32:6d:df:bf:f2:b8:f5:45:ad: fc:43:3e:ce:0f:bb:c6:2c:3b:a1:ce:ce:91:fd:9f: 11:fb:84:d8:de:0f:73:8f:19:05:c8:fc:29:6a:ec: d1:47:f9:71:c7:2f:3c:80:db:4c:a5:6a:ee:9a:5c: 98:30:56:31:8f:82:c7:61:5c:63:d0:e2:dd:f3:b7: c5:40:17:88:e2:5c:c9:c3:6c:de:f2:5b:88:85:19: 07:3e:62:c5:fb:e6:e8:6a:e3:2b:dc:da:42:2f:bf: 8a:97:85:fa:73:0a:fc:9e:f2:5c:aa:88:fe:96:b9: 72:9f:28:30:68:9a:1b:a9:39:1f:85:66:36:08:39: 49:cf:e3:59:74:d1:36:70:5b:94:53:50:96:cb:bb: e8:33:cb:d1:00:06:6e:0a:aa:ad:fd:2d:42:16:c5: f7:9b:13:bb:83:03:dd:14:c5:f7:ab:1b:32:d5:1e: 95:bb:2c:65:d1:29:64:23:99:3c:e2:58:29:97:f4: fd:a1:ff:f4:8f:b8:ab:69:d9:9b:37:e4:a5:c4:e1: 4a:26:e8:3d:0e:07:35:95:24:e9:9a:43:4e:cb:3d: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:68:AE:D0:C0:CF:BF:AE:B0:76:4C:70:AC:02:FB:CD:E7:0F:77:94 X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7f:0a:72:be:26:26:7a:38:04:80:89:38:92:82:ae:49:c6: 15:a6:24:0f:19:52:e8:fc:23:61:cc:8e:87:b7:11:84:ce:c9: 30:1f:22:8b:e0:55:e7:2e:04:e6:6f:99:44:34:4f:8c:37:a1: 82:0f:29:bc:3c:17:c2:08:82:c9:52:d6:1f:4d:fa:a7:cb:7f: ad:e8:72:d0:a0:fb:8f:f8:c6:a2:b0:78:73:0d:7c:b6:23:33: d2:32:16:c9:cc:b0:3a:39:be:cc:7f:96:d6:0e:90:1a:65:1e: 5d:c2:f8:a8:67:aa:1b:0e:52:7a:f0:04:9f:20:9a:ba:e3:39: 12:63:ee:c9:98:6f:57:c8:32:78:1c:86:d9:8a:b5:41:dc:d1: 95:57:a8:8d:9a:7b:ac:87:4c:9f:7f:36:c9:76:28:21:96:86: cb:f5:34:b4:42:d2:3e:6b:0f:75:b1:77:10:28:0e:5b:05:2c: 93:ac:90:53:e1:74:43:85:e8:74:9d:f9:3c:41:ae:d1:91:b9: a0:06:eb:c9:66:02:84:26:8b:b6:7e:17:39:57:24:83:b2:b4: 0d:7e:0a:bd:89:1f:22:50:7c:21:5a:cd:b2:85:22:b8:34:7f: bc:44:b2:81:32:1d:6d:27:11:16:79:35:57:14:f3:78:e0:33: db:e7:99:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjUwNjEyMjIzMDQxWhcNMjUwNjE5MjIzMDQxWjAYMRYwFAYD VQQDEw02ODRiNTUxMS1lZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyl3vu+Uvm9n41FZFMwbREsXcJnLnOW83jA3whzShep9VRu4ybd+/8rj1Ra38 Qz7OD7vGLDuhzs6R/Z8R+4TY3g9zjxkFyPwpauzRR/lxxy88gNtMpWrumlyYMFYx j4LHYVxj0OLd87fFQBeI4lzJw2ze8luIhRkHPmLF++boauMr3NpCL7+Kl4X6cwr8 nvJcqoj+lrlynygwaJobqTkfhWY2CDlJz+NZdNE2cFuUU1CWy7voM8vRAAZuCqqt /S1CFsX3mxO7gwPdFMX3qxsy1R6Vuyxl0SlkI5k84lgpl/T9of/0j7iradmbN+Sl xOFKJug9Dgc1lSTpmkNOyz19vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhortDA z7+usHZMcKwC+83nD3eUMB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANfwpyviYmejgEgIk4koKuScYVpiQPGVLo/CNhzI6HtxGEzskwHyKL 4FXnLgTmb5lENE+MN6GCDym8PBfCCILJUtYfTfqny3+t6HLQoPuP+MaisHhzDXy2 IzPSMhbJzLA6Ob7Mf5bWDpAaZR5dwvioZ6obDlJ68ASfIJq64zkSY+7JmG9XyDJ4 HIbZirVB3NGVV6iNmnush0yffzbJdighlobL9TS0QtI+aw91sXcQKA5bBSyTrJBT 4XRDheh0nfk8Qa7RkbmgBuvJZgKEJou2fhc5VySDsrQNfgq9iR8iUHwhWs2yhSK4 NH+8RLKBMh1tJxEWeTVXFPN44DPb55nd -----END CERTIFICATE-----Generated at Sat Jun 14 19:23:08 2025 by rpki-client