$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft File: EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json) Hash identifier: UtFuEysk4tOdJzmK6c86m4E8WpDLjiLkrSomJpsTsew= Subject key identifier: 2A:8B:96:85:CD:CB:4C:9D:A5:04:F1:CD:DB:77:17:7F:C8:1C:38:21 Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 Certificate issuer: /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Certificate serial: 107C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft Manifest number: 1071 Signing time: Wed 18 Jun 2025 17:21:11 +0000 Manifest this update: Wed 18 Jun 2025 17:21:10 +0000 Manifest next update: Wed 25 Jun 2025 17:21:10 +0000 Files and hashes: 1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: mKxfeoGu4AgayrKZ1aZMqCkL8D72jWAj4l0PtGwPG3c=) 2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: S/gVJ+TtEF1mtr8NQHi7hBzO8ZEUNieBwZ0+m5tF7pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4220 (0x107c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Validity Not Before: Jun 18 17:21:10 2025 GMT Not After : Jun 25 17:21:10 2025 GMT Subject: CN=6852f586-e20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4e:fb:6f:c7:5f:55:8c:ca:a8:8c:21:05:f0: 81:05:7f:31:a2:a8:da:fc:a6:c4:8a:06:35:c5:f5: 54:60:2f:0e:cd:4e:75:6a:17:8f:71:f6:99:f3:54: c7:21:dd:9a:ed:ad:d8:f7:7b:70:b3:a0:27:e9:f6: 5c:9e:2f:5e:da:fe:a3:8a:25:d0:bb:7d:ca:82:e4: 7b:2c:05:78:85:47:0c:f4:14:88:f6:01:71:e6:c7: c3:95:4e:f8:c1:97:66:0d:d6:72:d0:0b:74:ba:b5: d5:e9:03:e3:8d:69:73:c8:f7:e5:4c:59:96:80:5d: 89:d0:89:2e:52:77:70:4d:6e:90:de:d9:52:46:25: 58:cf:02:a3:da:d7:19:9c:bb:52:e2:1c:09:b1:c6: 32:eb:8a:0d:40:1e:a5:58:b8:72:b4:89:87:85:43: da:ab:5e:74:3f:d0:22:2d:78:24:58:d0:9d:96:fe: 3a:09:37:9d:80:01:04:61:12:4d:8f:13:db:25:f5: 6b:83:68:7d:d3:54:23:f5:56:56:bc:ba:8a:a7:2b: ee:54:33:f7:17:ad:5a:28:b7:d3:2f:47:80:2d:9c: 5d:79:10:66:15:3b:86:03:b0:8a:86:87:cb:a3:5d: 7d:2f:8c:dd:ea:a2:34:76:f4:59:d2:b1:f2:7d:b0: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8B:96:85:CD:CB:4C:9D:A5:04:F1:CD:DB:77:17:7F:C8:1C:38:21 X509v3 Authority Key Identifier: keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ba:50:89:4c:fd:58:e8:c6:89:6a:d8:55:33:9d:0e:3a:57: c8:74:7a:5e:3c:77:52:d4:15:a5:ba:50:f3:85:6f:31:23:63: d0:fa:88:4d:04:c1:17:f7:d4:61:d4:4d:ab:41:98:7d:13:74: 6a:b8:d1:60:e9:97:d2:2f:3e:66:59:81:ad:25:c1:f3:13:56: 8b:b9:5e:1f:9e:f9:30:9c:05:e8:49:9c:b3:3d:9c:c8:e1:8e: 05:9f:0d:23:4b:8a:fb:fb:b0:0d:8f:22:2d:08:84:17:da:3e: fd:b8:eb:7a:90:a3:f5:69:0c:2a:0a:8f:3d:03:48:45:77:f5: cd:d8:0f:88:f1:0b:67:b5:d0:cd:db:71:8c:49:e9:57:5d:4b: 24:07:b3:27:1a:e8:f3:b1:9d:96:fc:b4:06:ad:b5:9a:2e:61: 09:38:15:42:50:ea:61:d8:81:99:22:65:23:8d:75:d7:2b:10: 69:0a:fd:39:06:06:8c:2c:52:b6:9a:fe:01:43:e7:cd:1b:a7: 87:62:f5:4b:46:3f:ee:cc:b4:eb:8d:57:71:e2:f0:49:6c:d5: a2:3c:2a:66:bf:d2:d7:4e:27:e2:1d:9e:e7:fc:38:a1:91:cc: f8:af:32:51:72:c6:d0:8c:ea:41:8a:fd:6b:8a:20:69:32:3f: de:73:b2:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKDEwRjYxQzZCQkUzNjc0MDQ1MTJGQkM4M0NEREE4NUE5 OUM3RjNDNzUwHhcNMjUwNjE4MTcyMTEwWhcNMjUwNjI1MTcyMTEwWjAYMRYwFAYD VQQDEw02ODUyZjU4Ni1lMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4k77b8dfVYzKqIwhBfCBBX8xoqja/KbEigY1xfVUYC8OzU51ahePcfaZ81TH Id2a7a3Y93tws6An6fZcni9e2v6jiiXQu33KguR7LAV4hUcM9BSI9gFx5sfDlU74 wZdmDdZy0At0urXV6QPjjWlzyPflTFmWgF2J0IkuUndwTW6Q3tlSRiVYzwKj2tcZ nLtS4hwJscYy64oNQB6lWLhytImHhUPaq150P9AiLXgkWNCdlv46CTedgAEEYRJN jxPbJfVrg2h901Qj9VZWvLqKpyvuVDP3F61aKLfTL0eALZxdeRBmFTuGA7CKhofL o119L4zd6qI0dvRZ0rHyfbC3BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqLloXN y0ydpQTxzdt3F3/IHDghMB8GA1UdIwQYMBaAFBD2HGu+NnQEUS+8g83ahamcfzx1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FQzgyMzBFMjNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRBUlJMN3lEemRxRnFaeF9Q SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQWWNhNzQyZEFSUkw3eUR6ZHFGcVp4X1BIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FQzgyMzBFMjNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRB UlJMN3lEemRxRnFaeF9QSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDulCJTP1Y6MaJathVM50OOlfIdHpePHdS1BWlulDzhW8xI2PQ+ohN BMEX99Rh1E2rQZh9E3RquNFg6ZfSLz5mWYGtJcHzE1aLuV4fnvkwnAXoSZyzPZzI 4Y4Fnw0jS4r7+7ANjyItCIQX2j79uOt6kKP1aQwqCo89A0hFd/XN2A+I8QtntdDN 23GMSelXXUskB7MnGujzsZ2W/LQGrbWaLmEJOBVCUOph2IGZImUjjXXXKxBpCv05 BgaMLFK2mv4BQ+fNG6eHYvVLRj/uzLTrjVdx4vBJbNWiPCpmv9LXTifiHZ7n/Dih kcz4rzJRcsbQjOpBiv1riiBpMj/ec7Kj -----END CERTIFICATE-----Generated at Fri Jun 20 10:35:17 2025 by rpki-client