$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft File: EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft (raw, json) Hash identifier: Fmka6wN28kTRWu24SFUHJp/geNIu7y4WmKClGJEUYx0= Subject key identifier: E0:7E:80:60:94:8A:05:73:7D:A3:C2:BA:70:69:62:C9:09:6C:91:7C Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9 Certificate issuer: /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft Manifest number: 0125 Signing time: Tue 17 Jun 2025 03:41:04 +0000 Manifest this update: Tue 17 Jun 2025 03:41:04 +0000 Manifest next update: Tue 24 Jun 2025 03:41:04 +0000 Files and hashes: 1: EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl (hash: sALyZ+vHmAswOz5Kgpg2dafVemdB0FP62BV7QhS2PgU=) 2: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (hash: r83+P5wwwiIwwYZo3ZZK7LMVTjywGsoMBTEhdRdJ9rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 03:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9 Validity Not Before: Jun 17 03:41:04 2025 GMT Not After : Jun 24 03:41:04 2025 GMT Subject: CN=6850e3d0-b585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:e0:c2:8b:3e:aa:73:c7:27:27:ac:5a:9f: 27:de:af:7e:33:57:b3:f0:ed:dc:02:d6:94:7c:04: 03:4d:31:46:76:fa:3f:30:00:85:11:53:8a:ec:03: b9:2a:50:06:bf:e8:44:c2:ce:12:b0:e4:d0:9b:8c: c7:d4:1b:70:11:51:8b:7b:fa:4f:3d:af:65:f8:41: de:f2:1a:51:ae:b6:e3:55:fb:c3:5d:93:4b:4e:6f: 63:91:d6:34:c5:8e:f7:de:20:ca:00:ba:be:22:92: 6e:86:e4:ca:da:30:cb:06:3b:c7:29:e7:5b:b1:df: ad:ab:06:d8:2c:65:9c:bb:44:de:bb:a1:97:38:e2: 67:ad:84:8f:9f:70:4c:a0:4c:24:3f:e0:24:61:52: 4a:fb:60:0d:8a:7e:c6:d8:32:ab:99:90:0f:e7:38: f9:60:72:7c:88:e0:3a:17:12:a5:17:ce:60:2e:dc: 60:01:10:9b:a9:f8:45:40:cc:a1:95:9f:99:28:ac: 07:db:64:42:7a:c2:87:f0:1f:44:db:81:e3:c8:81: 3d:b4:9e:b7:e0:a8:7c:a6:b7:7a:f5:30:00:49:ef: 9e:32:e8:25:4b:6a:bf:45:36:11:30:0f:0e:78:a9: 81:8a:98:4a:f2:7d:01:6e:8e:f9:62:d6:3f:41:b6: 0e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:80:60:94:8A:05:73:7D:A3:C2:BA:70:69:62:C9:09:6C:91:7C X509v3 Authority Key Identifier: keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:2f:57:40:ef:2e:b7:15:1f:aa:ae:42:2a:c6:44:a8:b3:f5: 1f:ab:21:1e:aa:2d:99:b4:ab:09:23:89:d2:c5:73:02:89:62: de:dc:8b:a0:e9:11:a3:3b:9f:1e:d7:a5:bd:0d:0a:03:04:5f: db:24:f5:79:a8:c9:df:3f:5d:43:03:da:6e:b3:17:e9:2a:c0: c3:b4:70:13:25:82:ab:b3:d9:fb:f5:5f:bc:b8:49:68:06:88: 4b:a3:f0:90:ec:52:dc:93:30:30:cf:79:d1:bd:47:ef:ae:e0: 20:bb:51:10:9f:6c:f2:03:09:4a:89:bc:ab:36:9b:27:1b:a9: 38:92:97:3c:de:dd:57:34:43:c0:59:05:c5:3a:e5:92:0c:2d: 33:c3:27:37:22:0b:6a:97:4c:ff:6b:73:7f:47:d5:96:6f:e2: cd:89:9a:87:b6:3b:4f:52:21:3e:81:96:19:97:9d:14:c5:3d: 4d:7b:b9:0b:94:0a:ba:ce:e8:30:13:68:8a:37:c4:c1:b7:b6: 33:22:e5:33:b0:8d:c0:e2:44:42:cc:6e:4f:11:cb:29:ab:40: e8:3d:66:f7:71:a9:4f:47:b2:af:5e:ca:1e:1f:91:5b:df:1d: c0:34:c6:c5:c2:3c:a1:1c:22:4d:ff:04:6b:f9:ad:2f:d6:cf: a4:78:05:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExRkMxMTAvBgNVBAUTKDExOEY5Mjk4NTkwQzc5ODc5QUExRDhGQzZEMTdGNjY1 NDU0QkNCQjkwHhcNMjUwNjE3MDM0MTA0WhcNMjUwNjI0MDM0MTA0WjAYMRYwFAYD VQQDEw02ODUwZTNkMC1iNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAvgwos+qnPHJyesWp8n3q9+M1ez8O3cAtaUfAQDTTFGdvo/MACFEVOK7AO5 KlAGv+hEws4SsOTQm4zH1BtwEVGLe/pPPa9l+EHe8hpRrrbjVfvDXZNLTm9jkdY0 xY733iDKALq+IpJuhuTK2jDLBjvHKedbsd+tqwbYLGWcu0Teu6GXOOJnrYSPn3BM oEwkP+AkYVJK+2ANin7G2DKrmZAP5zj5YHJ8iOA6FxKlF85gLtxgARCbqfhFQMyh lZ+ZKKwH22RCesKH8B9E24HjyIE9tJ634Kh8prd69TAASe+eMuglS2q/RTYRMA8O eKmBiphK8n0Bbo75YtY/QbYOVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOB+gGCU igVzfaPCunBpYskJbJF8MB8GA1UdIwQYMBaAFBGPkphZDHmHmqHY/G0X9mVFS8u5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTFGQy84MTkxRkI2Qzg4 N0ExMUVFOURCNDVCMTRDNEY5QUUwMi9FWS1TbUZrTWVZZWFvZGo4YlJmMlpVVkx5 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZLVNtRmtNZVllYW9kajhiUmYyWlVWTHk3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTFGQy84MTkxRkI2Qzg4N0ExMUVFOURCNDVCMTRDNEY5QUUwMi9FWS1TbUZrTWVZ ZWFvZGo4YlJmMlpVVkx5N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnL1dA7y63FR+qrkIqxkSos/UfqyEeqi2ZtKsJI4nSxXMCiWLe3Iug 6RGjO58e16W9DQoDBF/bJPV5qMnfP11DA9pusxfpKsDDtHATJYKrs9n79V+8uElo BohLo/CQ7FLckzAwz3nRvUfvruAgu1EQn2zyAwlKibyrNpsnG6k4kpc83t1XNEPA WQXFOuWSDC0zwyc3Igtql0z/a3N/R9WWb+LNiZqHtjtPUiE+gZYZl50UxT1Ne7kL lAq6zugwE2iKN8TBt7YzIuUzsI3A4kRCzG5PEcspq0DoPWb3calPR7KvXsoeH5Fb 3x3ANMbFwjyhHCJN/wRr+a0v1s+keAWo -----END CERTIFICATE-----Generated at Tue Jun 17 22:58:58 2025 by rpki-client