$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft File: EEz4cGO16r803k4l_s6ata9zbBQ.mft (raw, json) Hash identifier: 4TBd5lrQYxJF1gfr81quXUD528y9ScI7iHayj7UU5Dw= Subject key identifier: 1F:65:74:B9:C8:E2:C8:22:BE:64:4B:41:48:DB:1B:08:7B:19:05:F7 Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14 Certificate issuer: /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft Manifest number: 4C Signing time: Fri 13 Jun 2025 06:16:49 +0000 Manifest this update: Fri 13 Jun 2025 06:16:49 +0000 Manifest next update: Fri 20 Jun 2025 06:16:49 +0000 Files and hashes: 1: EEz4cGO16r803k4l_s6ata9zbBQ.crl (hash: ANhwRBMs+IunSsclAHIQcwkn91xxN7oLd2XSKcoU+zI=) 2: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (hash: HNlYiglg+bBDY8hf2XbMc61T9NCbbnRV5gfydPimiu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14 Validity Not Before: Jun 13 06:16:49 2025 GMT Not After : Jun 20 06:16:49 2025 GMT Subject: CN=684bc251-416c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:6d:0e:b6:c1:e3:96:9b:dd:70:88:10:a4:5b: d1:68:d4:93:40:bc:8e:c8:be:9f:00:00:2f:9f:f2: 89:fd:19:56:62:4c:a0:d5:24:7b:41:7f:a3:b7:2c: 49:04:18:45:1d:6a:2f:9d:4a:29:b8:1c:7b:9c:fb: 10:16:d8:eb:71:e9:a8:e0:63:a1:11:b4:63:32:24: 3f:6e:a1:6e:3b:ac:62:c1:f5:b8:de:c0:d3:70:a7: 70:5a:9a:37:64:c5:0c:c0:b1:8c:b4:01:a3:35:f1: 03:4f:1f:be:a4:b3:d9:80:76:ba:1e:3b:f9:7d:4c: 1f:52:7a:1d:c1:3e:9e:d5:4e:13:52:c8:14:7a:90: a5:88:c0:30:16:36:d2:b0:bc:a0:c0:5a:71:1d:b1: dd:88:ff:5c:e2:50:08:34:09:9c:bc:7d:69:25:7c: 5e:88:95:1a:2c:28:51:91:89:53:e0:58:23:8b:87: db:62:59:b1:cf:f5:c6:e4:f6:a8:d7:56:f8:9c:3b: 77:97:5e:78:0f:60:09:1e:a1:10:fb:6f:9b:93:77: 35:20:c0:00:d9:06:ef:a3:d7:cf:8b:19:e8:1e:6f: 78:62:0d:3b:f9:91:d2:3d:87:6e:f4:d6:bf:d4:80: 73:a0:86:ad:bf:77:25:59:67:74:f3:33:1c:58:dd: 3d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:74:B9:C8:E2:C8:22:BE:64:4B:41:48:DB:1B:08:7B:19:05:F7 X509v3 Authority Key Identifier: keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:8d:c2:6d:a1:41:8a:bb:03:1b:1d:1b:f3:61:97:29:6b:65: 6e:b0:2a:cd:e9:d3:c3:f3:9a:34:ef:e7:6d:2b:20:38:c0:d2: cc:e3:27:4e:9f:c0:f8:7f:b9:56:46:ad:65:ec:ec:a7:90:74: 0d:7c:f8:11:08:10:c3:a1:b8:26:0c:79:9a:95:e2:ea:eb:da: 06:82:40:b5:ae:7f:a8:1c:c9:6f:98:ff:38:80:94:f2:94:ba: e4:21:85:4d:ae:d0:58:4f:bf:69:24:94:c2:e6:f3:07:0d:45: 8c:2c:59:a6:d4:ad:5f:95:0b:a9:b3:cb:45:5f:6d:34:fa:c7: 78:a5:c6:3b:12:eb:3f:d0:05:8a:69:c7:1f:dd:b4:70:ab:72: ec:3f:c9:2a:1b:19:87:e6:3d:16:dc:96:99:23:bc:71:a8:83: 89:ac:74:37:30:d6:19:12:0c:a0:87:c9:6e:a4:b9:a3:8e:a0: 11:24:98:49:f0:94:58:fe:ed:62:55:3b:2d:99:de:85:35:e0: 88:9e:17:04:07:67:e1:a6:37:42:e4:fe:95:13:10:67:f7:61: 9d:14:85:67:d2:a0:22:2f:65:8a:a5:96:e5:bf:74:b3:0e:12: 9d:bd:bf:98:2e:dc:e2:5b:ca:be:5f:39:7a:0d:7a:29:9d:a5: a6:5f:01:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUZGRDExMC8GA1UEBRMoMTA0Q0Y4NzA2M0I1RUFCRjM0REU0RTI1RkVDRTlBQjVB RjczNkMxNDAeFw0yNTA2MTMwNjE2NDlaFw0yNTA2MjAwNjE2NDlaMBgxFjAUBgNV BAMTDTY4NGJjMjUxLTQxNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5bQ62weOWm91wiBCkW9Fo1JNAvI7Ivp8AAC+f8on9GVZiTKDVJHtBf6O3LEkE GEUdai+dSim4HHuc+xAW2Otx6ajgY6ERtGMyJD9uoW47rGLB9bjewNNwp3Bamjdk xQzAsYy0AaM18QNPH76ks9mAdroeO/l9TB9Seh3BPp7VThNSyBR6kKWIwDAWNtKw vKDAWnEdsd2I/1ziUAg0CZy8fWklfF6IlRosKFGRiVPgWCOLh9tiWbHP9cbk9qjX VvicO3eXXngPYAkeoRD7b5uTdzUgwADZBu+j18+LGegeb3hiDTv5kdI9h2701r/U gHOghq2/dyVZZ3TzMxxY3T1NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUH2V0ucji yCK+ZEtBSNsbCHsZBfcwHwYDVR0jBBgwFoAUEEz4cGO16r803k4l/s6ata9zbBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRkZELzQyRUIwNTM0REQz ODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4MDNrNGxfczZhdGE5emJC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRUV6NGNHTzE2cjgwM2s0bF9zNmF0YTl6YkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RkZELzQyRUIwNTM0REQzODExRUY5QzM0Njc0NUM0RjlBRTAyL0VFejRjR08xNnI4 MDNrNGxfczZhdGE5emJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAGNwm2hQYq7AxsdG/NhlylrZW6wKs3p08PzmjTv520rIDjA0szjJ06f wPh/uVZGrWXs7KeQdA18+BEIEMOhuCYMeZqV4urr2gaCQLWuf6gcyW+Y/ziAlPKU uuQhhU2u0FhPv2kklMLm8wcNRYwsWabUrV+VC6mzy0VfbTT6x3ilxjsS6z/QBYpp xx/dtHCrcuw/ySobGYfmPRbclpkjvHGog4msdDcw1hkSDKCHyW6kuaOOoBEkmEnw lFj+7WJVOy2Z3oU14IieFwQHZ+GmN0Lk/pUTEGf3YZ0UhWfSoCIvZYqlluW/dLMO Ep29v5gu3OJbyr5fOXoNeimdpaZfATs= -----END CERTIFICATE-----Generated at Sun Jun 15 08:42:11 2025 by rpki-client