$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: MxMpIIQVsI38bKVyUxTpj61+QfIqlH6mAOmyUHlsL98= Subject key identifier: 53:26:24:9B:B6:2F:0A:EA:77:BC:F4:75:1D:24:1F:91:99:94:A4:76 Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 01F0 Signing time: Fri 13 Jun 2025 01:35:08 +0000 Manifest this update: Fri 13 Jun 2025 01:35:08 +0000 Manifest next update: Fri 20 Jun 2025 01:35:08 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: W+PfyjlbAHAX2J94PBNNEJYdx8GTYzIWvjHQzo4lG7c=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: y8u3ZZNWwXMV6EsCoReGtHsNbMX1mb+g+HfYKyQ+Y/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: Jun 13 01:35:08 2025 GMT Not After : Jun 20 01:35:08 2025 GMT Subject: CN=684b804c-d5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:17:7f:0d:3c:f9:aa:60:b0:39:a4:2b:44:04: bb:ed:8d:95:a6:74:8d:91:71:15:74:8d:80:53:5f: 91:ae:c3:b2:9d:3c:f3:8b:2d:35:06:54:05:87:54: 1c:dd:df:ce:00:4c:12:2a:89:56:47:55:5c:a7:a7: b6:22:01:88:4c:a5:78:09:82:4d:81:31:e7:8f:cc: 98:68:11:03:31:ab:e5:05:ce:f4:f3:c9:04:07:b1: c1:61:6c:6e:18:69:74:84:d7:89:19:68:d0:3a:1a: 60:e0:c6:2d:ff:5b:0d:75:99:fd:a2:bc:ea:9e:10: 4c:5b:48:82:50:8d:37:d4:80:e0:df:52:e4:aa:d0: d8:55:db:2b:4c:97:a1:02:4b:e1:c7:69:43:65:b7: 60:7e:c0:8e:b4:c4:77:be:dc:de:5e:6a:72:9b:0c: 1a:a1:9c:6e:ff:aa:02:b5:b3:54:1d:64:80:48:25: 1d:36:44:18:74:d6:e4:d5:48:8b:a2:a3:95:3d:95: cf:52:bd:ea:fd:a6:fa:fd:d8:c8:a9:b5:db:4c:60: ae:f4:d6:1f:f6:f5:2f:68:5e:c7:85:26:a0:33:51: 7f:8c:21:6b:fb:59:79:a7:56:dc:78:b7:c7:8e:06: 8f:9c:bf:de:24:87:b9:0d:8b:b4:50:64:50:fe:e3: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:26:24:9B:B6:2F:0A:EA:77:BC:F4:75:1D:24:1F:91:99:94:A4:76 X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:db:dd:fa:f1:3c:0f:79:90:cc:65:8d:75:7e:45:81:2c:8b: d6:ce:c3:4f:5f:14:98:d9:c1:54:d5:29:d6:4d:b5:7b:69:75: 14:e3:78:e6:5d:2c:e0:9c:6a:7b:17:80:b0:68:37:d6:b9:7c: 23:cf:a8:f0:4b:84:7b:e6:98:92:77:bd:b2:ec:e0:3a:dd:e5: a8:9c:af:5a:cc:6a:d1:1c:ce:c3:d8:f2:88:5e:55:a8:25:c7: 4e:70:1e:1e:f9:bb:dc:13:55:66:c1:ed:f9:3b:f1:27:48:64: 47:13:db:c7:90:a1:ab:96:48:53:f1:04:54:50:ea:78:75:64: 81:f8:eb:48:ef:82:f0:04:72:5e:11:3b:9a:78:a2:91:88:3d: ab:54:47:b5:67:40:16:37:6a:ab:31:38:1f:9b:22:2d:62:e1: 36:83:97:c9:1d:d4:6c:ce:b8:a3:96:c5:ef:21:47:cc:26:f1: cf:b5:80:97:34:44:cf:e6:43:8d:cc:e0:f4:47:da:ad:cb:74: 24:07:80:9c:b1:2f:62:ac:dc:48:51:76:7e:29:fa:a3:2b:e4: 98:20:8f:a2:32:d0:dd:75:f7:be:e3:2e:88:52:55:db:8f:34: 39:5b:25:70:25:df:20:d6:87:f4:cb:3a:b1:67:46:96:58:49: 0b:e7:8e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjUwNjEzMDEzNTA4WhcNMjUwNjIwMDEzNTA4WjAYMRYwFAYD VQQDEw02ODRiODA0Yy1kNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Rd/DTz5qmCwOaQrRAS77Y2VpnSNkXEVdI2AU1+RrsOynTzziy01BlQFh1Qc 3d/OAEwSKolWR1Vcp6e2IgGITKV4CYJNgTHnj8yYaBEDMavlBc7088kEB7HBYWxu GGl0hNeJGWjQOhpg4MYt/1sNdZn9orzqnhBMW0iCUI031IDg31LkqtDYVdsrTJeh Akvhx2lDZbdgfsCOtMR3vtzeXmpymwwaoZxu/6oCtbNUHWSASCUdNkQYdNbk1UiL oqOVPZXPUr3q/ab6/djIqbXbTGCu9NYf9vUvaF7HhSagM1F/jCFr+1l5p1bceLfH jgaPnL/eJIe5DYu0UGRQ/uN9rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMmJJu2 Lwrqd7z0dR0kH5GZlKR2MB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG29368TwPeZDMZY11fkWBLIvWzsNPXxSY2cFU1SnWTbV7aXUU43jm XSzgnGp7F4CwaDfWuXwjz6jwS4R75piSd72y7OA63eWonK9azGrRHM7D2PKIXlWo JcdOcB4e+bvcE1Vmwe35O/EnSGRHE9vHkKGrlkhT8QRUUOp4dWSB+OtI74LwBHJe ETuaeKKRiD2rVEe1Z0AWN2qrMTgfmyItYuE2g5fJHdRszrijlsXvIUfMJvHPtYCX NETP5kONzOD0R9qty3QkB4CcsS9irNxIUXZ+KfqjK+SYII+iMtDddfe+4y6IUlXb jzQ5WyVwJd8g1of0yzqxZ0aWWEkL544d -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:31 2025 by rpki-client