$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft File: eoryTXjXdw3DOcL_KP18FNE8X7E.mft (raw, json) Hash identifier: YAmfzaAzPdvRIUNShP5PxJeRaGidlykv4XuHPg//yns= Subject key identifier: 4E:80:EA:9D:22:55:5F:60:E4:8C:68:7B:AE:2A:B7:43:B8:98:B4:FC Authority key identifier: 7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 Certificate issuer: /CN=A911EB2D/serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft Manifest number: 0930 Signing time: Sat 14 Jun 2025 20:22:39 +0000 Manifest this update: Sat 14 Jun 2025 20:22:39 +0000 Manifest next update: Sat 21 Jun 2025 20:22:39 +0000 Files and hashes: 1: eoryTXjXdw3DOcL_KP18FNE8X7E.crl (hash: kkHM3oIzXN4RzsPFqlB79v6q53Re17wjh32nfPHuwn8=) 2: 47C98CE6860911EFBACC1172C4F9AE02.roa (hash: YlK6PNNV4o8XYoD4OsO5FY1L+q++AQFySduwH+CQhk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EB2D, serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1 Validity Not Before: Jun 14 20:22:39 2025 GMT Not After : Jun 21 20:22:39 2025 GMT Subject: CN=684dda0f-574e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:03:e1:7d:c4:f5:c9:eb:12:ff:74:09:97: 2d:37:90:df:66:b4:7e:57:60:f9:3c:c6:7c:fe:fc: 8c:35:91:dc:90:7d:ac:b9:b0:e8:3b:4d:09:1e:c1: 20:1c:b8:42:56:25:9a:ec:f2:28:91:19:c7:22:aa: 47:83:99:2c:1e:ce:89:a7:c2:1b:41:46:9e:c0:69: 60:35:c8:51:bb:45:fc:0c:f0:5d:8e:21:ad:7e:38: b9:80:13:01:fb:f9:c1:d9:ab:eb:0c:93:7d:16:42: 9f:29:ac:fa:e1:2c:15:46:a2:33:59:14:05:1c:d1: 1e:e8:94:ae:23:a6:4c:96:90:b8:96:d2:86:da:13: 30:b0:92:84:85:1b:f6:46:af:27:d3:84:0f:80:f9: 4b:0f:0d:3d:aa:80:2d:6e:bd:da:d4:90:ae:a3:16: 0e:82:15:f0:57:46:ac:d6:18:f5:cc:1a:61:98:b2: 1f:c3:df:68:f8:90:00:80:21:a1:06:bf:94:80:e1: bf:ea:63:29:99:2f:a5:ae:3e:b5:94:f6:ae:8f:22: 4e:1c:d4:ab:ac:b0:58:3b:58:b6:95:1e:c4:3b:92: 49:45:cd:69:1a:a3:16:7f:c1:0f:2e:c0:18:d0:ad: c5:61:6a:97:bf:f2:b5:3a:0f:95:a4:78:24:12:e6: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:80:EA:9D:22:55:5F:60:E4:8C:68:7B:AE:2A:B7:43:B8:98:B4:FC X509v3 Authority Key Identifier: keyid:7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5a:45:7b:47:4d:14:84:c4:5f:fc:56:63:32:87:12:86:2a: 12:00:8b:23:e4:f6:45:ed:d7:b5:0b:5b:f6:e5:ee:b6:09:5c: 8f:00:9e:2a:3b:da:ef:8d:e9:83:87:69:14:cc:30:ec:0b:c0: 25:24:1d:bf:eb:fc:6b:1b:91:41:0b:f1:b5:14:39:b0:f4:c7: 85:89:17:61:80:48:f8:94:af:a3:bc:e1:53:05:03:cc:f2:9f: 9a:68:68:9f:3c:ca:34:e7:d2:dd:b2:c4:ea:44:bc:ad:ed:0c: b8:3c:67:66:33:8c:03:27:e0:08:53:a8:18:20:47:0f:ff:0e: 01:16:ec:45:32:46:d7:22:42:c2:c1:98:be:f8:2b:21:ec:1d: f3:b2:69:1c:b9:94:48:34:1b:ed:ba:64:2f:3c:ce:8b:3f:84: 16:70:df:7b:3d:89:4a:91:9c:15:a3:6b:38:fa:59:95:cf:32: e5:1f:73:e8:e1:9a:a7:dd:2c:a7:64:1c:d0:a3:9e:93:34:fd: 93:6f:4d:51:2e:0d:6e:d8:29:12:e2:f9:e7:1a:ae:a2:38:24: 8e:e7:c6:83:fe:95:0f:03:12:9e:49:49:e4:6c:13:77:6e:93: 45:ef:88:d8:5c:32:f0:9c:1c:b1:0d:f9:7e:49:84:0b:8e:0a: 46:c4:4e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVCMkQxMTAvBgNVBAUTKDdBOEFGMjRENzhENzc3MERDMzM5QzJGRjI4RkQ3QzE0 RDEzQzVGQjEwHhcNMjUwNjE0MjAyMjM5WhcNMjUwNjIxMjAyMjM5WjAYMRYwFAYD VQQDEw02ODRkZGEwZi01NzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHsD4X3E9cnrEv90CZctN5DfZrR+V2D5PMZ8/vyMNZHckH2subDoO00JHsEg HLhCViWa7PIokRnHIqpHg5ksHs6Jp8IbQUaewGlgNchRu0X8DPBdjiGtfji5gBMB +/nB2avrDJN9FkKfKaz64SwVRqIzWRQFHNEe6JSuI6ZMlpC4ltKG2hMwsJKEhRv2 Rq8n04QPgPlLDw09qoAtbr3a1JCuoxYOghXwV0as1hj1zBphmLIfw99o+JAAgCGh Br+UgOG/6mMpmS+lrj61lPaujyJOHNSrrLBYO1i2lR7EO5JJRc1pGqMWf8EPLsAY 0K3FYWqXv/K1Og+VpHgkEuZ2QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6A6p0i VV9g5Ixoe64qt0O4mLT8MB8GA1UdIwQYMBaAFHqK8k1413cNwznC/yj9fBTRPF+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF QjMxMUVBODI2ODc2NDNDNEY5QUUwMi9lb3J5VFhqWGR3M0RPY0xfS1AxOEZORThY N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VvcnlUWGpYZHczRE9jTF9LUDE4Rk5FOFg3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUIyRC80QTZDRURBQ0JFQjMxMUVBODI2ODc2NDNDNEY5QUUwMi9lb3J5VFhqWGR3 M0RPY0xfS1AxOEZORThYN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArWkV7R00UhMRf/FZjMocShioSAIsj5PZF7de1C1v25e62CVyPAJ4q O9rvjemDh2kUzDDsC8AlJB2/6/xrG5FBC/G1FDmw9MeFiRdhgEj4lK+jvOFTBQPM 8p+aaGifPMo059LdssTqRLyt7Qy4PGdmM4wDJ+AIU6gYIEcP/w4BFuxFMkbXIkLC wZi++Csh7B3zsmkcuZRINBvtumQvPM6LP4QWcN97PYlKkZwVo2s4+lmVzzLlH3Po 4Zqn3SynZBzQo56TNP2Tb01RLg1u2CkS4vnnGq6iOCSO58aD/pUPAxKeSUnkbBN3 bpNF74jYXDLwnByxDfl+SYQLjgpGxE7c -----END CERTIFICATE-----Generated at Sun Jun 15 19:18:25 2025 by rpki-client