$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft File: EPSBzyjc51gajMuOUN4Jj3yLyRU.mft (raw, json) Hash identifier: 0UwXvQvg4Umf3USyAw+hBC/I8X3zLb3WwrXkm1MjuBI= Subject key identifier: 51:97:D7:C7:57:64:42:EE:A6:61:9D:84:8F:94:C5:91:E2:28:D4:C4 Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 Certificate issuer: /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft Manifest number: 0115 Signing time: Thu 19 Jun 2025 04:15:59 +0000 Manifest this update: Thu 19 Jun 2025 04:15:58 +0000 Manifest next update: Thu 26 Jun 2025 04:15:58 +0000 Files and hashes: 1: EPSBzyjc51gajMuOUN4Jj3yLyRU.crl (hash: MDB+9NpIxcOZNsX0wTbLKOWVsrRZXTgJd/wIEiCdRV8=) 2: E070CA0CAA2E11EEA404D421C4F9AE02.roa (hash: iZU8zdfl9m+d7mdN1RiWPOsL2RUjP7KC4vEHrZwKmZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 04:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122134, serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Validity Not Before: Jun 19 04:15:58 2025 GMT Not After : Jun 26 04:15:58 2025 GMT Subject: CN=68538eff-d341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4b:88:9e:5c:cb:7b:6f:cd:fa:4a:84:fe:29: 0f:2b:01:26:7b:3a:5a:31:28:fa:a7:32:9e:1b:e9: 93:1a:dd:9e:d2:66:bd:d7:19:e3:19:c6:79:cd:4c: 87:80:d4:d5:68:8c:02:a6:cc:cb:64:d2:d0:6d:b7: ad:40:29:4c:6f:7c:a0:a2:75:c7:12:2a:1a:ba:84: 34:7c:29:c7:cb:af:1e:6a:63:8f:40:e0:de:10:20: fb:67:c4:46:f9:59:e7:5f:42:d5:2e:45:e0:27:91: 5b:31:5f:c7:5a:b5:f4:ce:06:1b:2d:21:d6:45:d0: 60:3d:dc:06:27:4c:71:5f:19:27:e0:ed:74:b1:c0: 2b:65:0f:f6:e4:7b:da:14:4f:cd:d6:18:9e:50:f7: b5:72:a9:e4:eb:28:64:a8:3c:ec:c7:d5:9d:7f:79: e5:5d:67:d4:d6:ff:d7:36:45:5d:8e:3e:36:5a:38: c9:ab:c6:29:eb:5d:59:60:fd:c1:55:79:f6:10:00: 16:f9:bf:d5:d5:55:c4:6d:d6:06:42:52:8e:47:7a: 7f:a3:8c:c3:9e:ad:e5:d0:62:45:ca:f9:20:1e:b8: d3:5e:ff:7e:aa:87:59:fc:b3:60:fe:f9:de:7a:eb: 22:91:88:78:5d:47:d8:df:f5:48:33:8a:af:6d:89: d4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:97:D7:C7:57:64:42:EE:A6:61:9D:84:8F:94:C5:91:E2:28:D4:C4 X509v3 Authority Key Identifier: keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:cd:0f:ed:2e:c5:4d:ae:43:c1:58:36:93:a2:13:ca:35:9b: 3c:5b:10:0f:22:0b:ef:35:97:15:d0:90:31:d4:dc:dd:8b:86: 80:a1:77:93:7a:71:3a:df:d5:d6:98:af:e0:a8:9e:63:44:a1: 9b:be:6a:10:58:e6:25:09:d9:b4:86:1a:f0:be:47:4d:1a:07: d2:2a:d5:dd:7e:6e:03:24:38:69:70:fd:f3:72:e8:e3:a8:16: ed:3f:4d:ce:e1:9f:70:74:99:22:46:1a:18:67:be:79:89:03: 61:93:97:cf:10:a6:46:83:f0:02:78:97:33:95:dc:3b:9e:76: c4:48:15:99:33:09:b0:cd:41:c6:16:4f:9a:7f:fb:4f:11:a1: 75:8d:f4:e1:72:8d:f9:28:4e:7a:0d:bb:91:b0:18:cb:1f:2e: 34:f5:4b:ef:ae:43:88:16:38:19:06:36:b7:80:af:57:b4:3c: 99:b0:38:8e:e9:77:6f:c1:52:10:0c:8a:36:b7:bc:5a:25:6a: a4:bf:c3:58:d7:39:96:04:57:91:80:4f:59:7f:9d:b2:49:9c: df:bc:70:35:38:21:dd:72:a0:54:df:44:f9:6f:43:db:b1:ec: 7a:89:3b:bd:65:11:c4:1a:1d:9b:25:b5:7d:6d:da:be:be:84: bd:a2:4d:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxMzQxMTAvBgNVBAUTKDEwRjQ4MUNGMjhEQ0U3NTgxQThDQ0I4RTUwREUwOThG N0M4QkM5MTUwHhcNMjUwNjE5MDQxNTU4WhcNMjUwNjI2MDQxNTU4WjAYMRYwFAYD VQQDEw02ODUzOGVmZi1kMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UuInlzLe2/N+kqE/ikPKwEmezpaMSj6pzKeG+mTGt2e0ma91xnjGcZ5zUyH gNTVaIwCpszLZNLQbbetQClMb3ygonXHEioauoQ0fCnHy68eamOPQODeECD7Z8RG +VnnX0LVLkXgJ5FbMV/HWrX0zgYbLSHWRdBgPdwGJ0xxXxkn4O10scArZQ/25Hva FE/N1hieUPe1cqnk6yhkqDzsx9Wdf3nlXWfU1v/XNkVdjj42WjjJq8Yp611ZYP3B VXn2EAAW+b/V1VXEbdYGQlKOR3p/o4zDnq3l0GJFyvkgHrjTXv9+qodZ/LNg/vne eusikYh4XUfY3/VIM4qvbYnUdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFGX18dX ZELupmGdhI+UxZHiKNTEMB8GA1UdIwQYMBaAFBD0gc8o3OdYGozLjlDeCY98i8kV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjEzNC83OUEzMzU3NkFB MkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUxZ2FqTXVPVU40SmozeUx5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQU0J6eWpjNTFnYWpNdU9VTjRKajN5THlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjEzNC83OUEzMzU3NkFBMkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUx Z2FqTXVPVU40SmozeUx5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNzQ/tLsVNrkPBWDaTohPKNZs8WxAPIgvvNZcV0JAx1Nzdi4aAoXeT enE639XWmK/gqJ5jRKGbvmoQWOYlCdm0hhrwvkdNGgfSKtXdfm4DJDhpcP3zcujj qBbtP03O4Z9wdJkiRhoYZ755iQNhk5fPEKZGg/ACeJczldw7nnbESBWZMwmwzUHG Fk+af/tPEaF1jfThco35KE56DbuRsBjLHy409UvvrkOIFjgZBja3gK9XtDyZsDiO 6XdvwVIQDIo2t7xaJWqkv8NY1zmWBFeRgE9Zf52ySZzfvHA1OCHdcqBU30T5b0Pb sex6iTu9ZRHEGh2bJbV9bdq+voS9ok2O -----END CERTIFICATE-----Generated at Thu Jun 19 23:43:07 2025 by rpki-client