$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json) Hash identifier: N5ef0fpcPbka7lLoS8KQrHitMMxuWeKbgTZNu/vA9+w= Subject key identifier: C4:88:08:39:86:15:E9:A9:1E:73:47:32:18:EE:3B:38:09:02:80:C3 Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft Manifest number: 66 Signing time: Sat 21 Jun 2025 06:05:15 +0000 Manifest this update: Sat 21 Jun 2025 06:05:14 +0000 Manifest next update: Sat 28 Jun 2025 06:05:14 +0000 Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: vJY2q//CLmMd2GUYB/VmndVApnugg2g6ZeLH7Itnwn4=) 2: AD3C9B54BE2611EFA4133323C4F9AE02.roa (hash: 2/xqAVW2RjqNg3GXYQ9uSs72OTWvi6aXWMtqLBm8vdk=) 3: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: dqTwEXk6/WsKatxBnEyYDrfeHsARE7OU6TqF9rX2NCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 06:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Validity Not Before: Jun 21 06:05:14 2025 GMT Not After : Jun 28 06:05:14 2025 GMT Subject: CN=68564b9a-7ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:35:b0:ba:b7:57:3d:74:c1:02:2e:ae:67: 24:15:f4:cd:6d:fc:e6:20:49:18:21:fb:65:09:e8: 56:5c:29:e7:6f:09:c1:69:25:e0:9d:ec:89:d5:5b: 82:76:b3:61:26:14:fc:de:1d:a9:bb:07:29:cc:2d: 99:d4:3d:ce:44:cf:8c:31:1a:8f:b1:05:ca:0f:48: 05:59:09:d8:77:fa:5f:39:3a:85:44:2c:cd:81:d9: 62:0c:f9:fc:f2:c4:ae:d3:30:ff:93:b8:3c:58:da: b1:ee:d5:bd:62:73:8f:a8:d5:09:30:0f:4c:1f:fb: 3a:03:f6:6d:23:fe:f5:40:67:cf:a3:7b:39:47:f0: 74:68:7b:53:cb:21:33:0f:7a:36:4c:37:7c:8e:3e: 31:9b:bd:d2:2a:e1:ab:70:e0:98:a5:f3:6f:27:19: 3e:c2:3b:9b:62:f2:2e:91:fd:a3:79:18:9b:59:b7: f8:eb:c3:64:b9:b0:51:54:69:f5:95:2f:21:e6:23: a3:23:ff:0a:b2:27:ac:1e:8a:60:2c:c2:a5:d1:f1: 52:d5:ff:4c:3b:fb:0b:25:c1:c4:9e:ff:88:59:76: 46:90:3a:eb:e9:36:91:d7:ef:a1:66:d7:83:0f:42: c4:d5:f4:47:db:f2:5e:bd:06:97:33:32:c9:85:72: 01:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:88:08:39:86:15:E9:A9:1E:73:47:32:18:EE:3B:38:09:02:80:C3 X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6b:b7:19:95:db:01:11:ec:f9:e9:a3:26:01:04:cb:2a:68: 6f:f1:03:76:58:73:fe:fd:1a:33:06:93:56:78:12:13:c0:08: 36:54:8b:db:46:3e:c0:84:20:0f:90:4d:bb:4b:cb:31:a5:76: 62:dd:b4:ad:f0:82:80:01:61:a5:2b:d4:90:24:06:47:f4:30: 5b:57:b3:09:0b:e0:0e:0f:04:85:b4:e7:b6:59:17:68:a0:d6: d0:60:85:f9:8c:81:65:57:47:c5:ff:29:ee:81:7e:81:cc:39: f1:a9:40:a3:2b:94:e4:a4:56:4e:3f:1e:5f:e4:e3:c3:dd:54: 1d:ee:8c:74:8e:8d:90:db:5b:b4:89:78:59:fd:85:4e:8f:64: 61:1f:99:6b:71:56:81:b4:26:99:14:0f:d1:30:e2:3e:f8:a1: 08:77:91:b1:24:ef:ee:85:33:34:99:13:8f:76:8a:e6:4d:0c: 11:c9:b7:b5:06:0b:19:87:ce:1b:a5:01:50:cf:75:d2:e7:af: ee:b4:b3:60:66:c2:b7:12:99:f0:ba:f1:69:c7:24:ba:98:69: 25:f4:f9:a4:9c:e6:60:83:ec:0c:f6:b9:fd:37:d9:12:7c:5e: e0:92:75:69:5b:8d:63:4a:20:69:90:4d:52:63:3b:1a:b4:ce: 8b:cf:e2:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzkxODExMC8GA1UEBRMoNzlDN0ZDNUQxQTVFRUYwQjI5OEUwMDcyMzI2QUI3MzY4 NkJERkU3ODAeFw0yNTA2MjEwNjA1MTRaFw0yNTA2MjgwNjA1MTRaMBgxFjAUBgNV BAMTDTY4NTY0YjlhLTdmZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJRDWwurdXPXTBAi6uZyQV9M1t/OYgSRgh+2UJ6FZcKedvCcFpJeCd7InVW4J2 s2EmFPzeHam7BynMLZnUPc5Ez4wxGo+xBcoPSAVZCdh3+l85OoVELM2B2WIM+fzy xK7TMP+TuDxY2rHu1b1ic4+o1QkwD0wf+zoD9m0j/vVAZ8+jezlH8HRoe1PLITMP ejZMN3yOPjGbvdIq4atw4Jil828nGT7CO5ti8i6R/aN5GJtZt/jrw2S5sFFUafWV LyHmI6Mj/wqyJ6weimAswqXR8VLV/0w7+wslwcSe/4hZdkaQOuvpNpHX76Fm14MP QsTV9Efb8l69BpczMsmFcgFNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxIgIOYYV 6akec0cyGO47OAkCgMMwHwYDVR0jBBgwFoAUecf8XRpe7wspjgByMmq3Noa9/ngw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzOTE4LzhFRTcxNDg2QjZD NDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9u Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWNmOFhScGU3d3NwamdCeU1tcTNOb2E5X25nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz OTE4LzhFRTcxNDg2QjZDNDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dz cGpnQnlNbXEzTm9hOV9uZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH9rtxmV2wER7PnpoyYBBMsqaG/xA3ZYc/79GjMGk1Z4EhPACDZUi9tG PsCEIA+QTbtLyzGldmLdtK3wgoABYaUr1JAkBkf0MFtXswkL4A4PBIW057ZZF2ig 1tBghfmMgWVXR8X/Ke6BfoHMOfGpQKMrlOSkVk4/Hl/k48PdVB3ujHSOjZDbW7SJ eFn9hU6PZGEfmWtxVoG0JpkUD9Ew4j74oQh3kbEk7+6FMzSZE492iuZNDBHJt7UG CxmHzhulAVDPddLnr+60s2BmwrcSmfC68WnHJLqYaSX0+aSc5mCD7Az2uf032RJ8 XuCSdWlbjWNKIGmQTVJjOxq0zovP4kk= -----END CERTIFICATE-----Generated at Sat Jun 21 18:57:22 2025 by rpki-client