$ rpki-client -vvf rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft File: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft (raw, json) Hash identifier: hmfoahp9pfjvfn+icFlOel2dnPc8wudMkfSWcaucUHM= Subject key identifier: B3:0A:A6:9B:93:5E:59:55:7C:8A:54:C2:9B:57:2B:F5:B7:37:43:BC Authority key identifier: 10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A Certificate issuer: /CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A Certificate serial: 01A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft Manifest number: 018D Signing time: Fri 13 Jun 2025 02:45:17 +0000 Manifest this update: Fri 13 Jun 2025 02:45:17 +0000 Manifest next update: Fri 20 Jun 2025 02:45:17 +0000 Files and hashes: 1: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl (hash: W10lVZUVfT76c6tNXgdJn+DfzSpcua9wvz6+SHlkPq4=) 2: F098580828C511EFB2C79E5FC4F9AE02.roa (hash: hGyVKJOy3s+uSXiEJLjSDUVmn7ewhXLjDLBZl593H3w=) 3: 14C77BFA28C611EFA33ED95FC4F9AE02.roa (hash: kiepz3d3PXC78matqhezJSK/iL+kv++r/FbCbnosOR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 423 (0x1a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91383F0, serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A Validity Not Before: Jun 13 02:45:17 2025 GMT Not After : Jun 20 02:45:17 2025 GMT Subject: CN=684b90bd-149e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b1:bc:c9:43:28:36:34:5b:3b:7e:1d:ab:3b: b5:0c:b3:64:4f:a1:37:66:5c:ab:6b:e3:1d:c6:22: cb:04:07:76:22:af:25:26:6a:60:a6:f8:79:ad:8c: 8d:af:3c:52:fe:24:ec:40:03:29:5e:fa:60:5a:21: b9:0c:0b:e0:97:09:b8:07:6a:ab:fe:74:09:14:86: f7:90:73:9d:ac:e7:de:60:d1:6c:fa:69:b4:7b:fb: 0a:25:81:d1:db:83:af:52:1b:4b:d7:06:58:6c:8d: 78:b1:67:80:07:b4:bb:c0:da:66:0f:0f:10:cf:6c: e8:aa:2e:f5:01:6b:fc:7f:a4:39:71:ea:82:51:95: c6:24:0e:56:44:f7:dd:ec:0d:d5:12:b4:17:0e:1d: 0b:fc:19:dc:d3:e2:6b:db:2b:e5:35:7e:1f:6e:86: 59:f5:b8:6a:fc:24:b2:a5:0b:af:d6:60:0c:d9:3d: a6:41:4e:b8:dc:1a:8a:03:f4:d4:3c:e7:7c:ef:da: 5b:c3:47:cd:ae:b5:11:e7:a6:cf:bc:70:f4:6f:3b: 9f:e0:af:65:6b:57:32:63:8a:28:1d:f0:d8:14:da: 89:8f:3c:29:9a:34:f6:4e:23:e9:ba:76:e7:dd:8c: 69:34:58:6a:36:6a:05:a5:61:7d:33:e1:be:39:da: 9b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0A:A6:9B:93:5E:59:55:7C:8A:54:C2:9B:57:2B:F5:B7:37:43:BC X509v3 Authority Key Identifier: keyid:10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:99:a7:59:78:ce:d9:98:54:56:f0:9b:d7:41:32:61:43:0e: cd:53:05:cd:fb:9e:cd:0f:14:84:f6:cd:bd:b2:45:9b:b0:3b: fc:0b:d8:aa:d1:67:79:15:4a:99:60:71:fb:69:b2:c2:37:e1: 1e:ea:11:12:30:66:db:e5:18:b0:37:46:dd:7b:c6:99:e6:06: 73:9d:99:ad:f5:ae:a2:04:36:e1:0b:6b:9e:25:46:2b:ad:e2: 51:81:a2:1d:de:2a:02:b8:e4:79:a5:e9:15:82:c3:25:04:56: 2d:c5:d6:bc:e0:0d:18:f1:17:ad:bd:01:42:57:0c:96:a4:1e: 2e:ff:0f:68:1c:4c:22:ba:b9:97:69:dd:cf:9a:74:ee:5c:ca: b0:ff:7a:03:be:03:30:c6:12:55:88:a8:27:9d:db:e7:29:16: f9:72:c6:b7:0c:a6:a0:9b:9e:fa:33:ba:a7:f1:76:d0:e4:49: ac:50:58:5f:c0:c0:03:3d:22:4c:32:ec:82:95:b1:14:bf:97: 6c:ba:08:a5:42:d1:d7:b6:f8:3a:cd:38:ab:00:26:ae:c1:40: b4:5f:3b:16:73:d8:1e:b7:d4:f5:2d:2e:62:c8:39:b8:f4:bc: 66:8d:01:2b:88:fe:8e:22:d6:c9:32:a9:12:15:2f:bf:af:68: 94:35:d1:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgzRjAxMTAvBgNVBAUTKDEwMzZDMUUwRkZFMUNGQzM3RDY1NUQ4OUZBNjVENjVG RTIyRTFGN0EwHhcNMjUwNjEzMDI0NTE3WhcNMjUwNjIwMDI0NTE3WjAYMRYwFAYD VQQDEw02ODRiOTBiZC0xNDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubG8yUMoNjRbO34dqzu1DLNkT6E3Zlyra+MdxiLLBAd2Iq8lJmpgpvh5rYyN rzxS/iTsQAMpXvpgWiG5DAvglwm4B2qr/nQJFIb3kHOdrOfeYNFs+mm0e/sKJYHR 24OvUhtL1wZYbI14sWeAB7S7wNpmDw8Qz2zoqi71AWv8f6Q5ceqCUZXGJA5WRPfd 7A3VErQXDh0L/Bnc0+Jr2yvlNX4fboZZ9bhq/CSypQuv1mAM2T2mQU643BqKA/TU POd879pbw0fNrrUR56bPvHD0bzuf4K9la1cyY4ooHfDYFNqJjzwpmjT2TiPpunbn 3YxpNFhqNmoFpWF9M+G+OdqbjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMKppuT XllVfIpUwptXK/W3N0O8MB8GA1UdIwQYMBaAFBA2weD/4c/DfWVdifpl1l/iLh96 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNGMC9EQ0ZDQTZBMjBB ODMxMUVFOUU2QTkyNTBDNEY5QUUwMi9FRGJCNFBfaHo4TjlaVjJKLW1YV1gtSXVI M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VEYkI0UF9oejhOOVpWMkotbVhXWC1JdUgzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODNGMC9EQ0ZDQTZBMjBBODMxMUVFOUU2QTkyNTBDNEY5QUUwMi9FRGJCNFBfaHo4 TjlaVjJKLW1YV1gtSXVIM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhmadZeM7ZmFRW8JvXQTJhQw7NUwXN+57NDxSE9s29skWbsDv8C9iq 0Wd5FUqZYHH7abLCN+Ee6hESMGbb5RiwN0bde8aZ5gZznZmt9a6iBDbhC2ueJUYr reJRgaId3ioCuOR5pekVgsMlBFYtxda84A0Y8RetvQFCVwyWpB4u/w9oHEwiurmX ad3PmnTuXMqw/3oDvgMwxhJViKgnndvnKRb5csa3DKagm576M7qn8XbQ5EmsUFhf wMADPSJMMuyClbEUv5dsugilQtHXtvg6zTirACauwUC0XzsWc9get9T1LS5iyDm4 9LxmjQEriP6OItbJMqkSFS+/r2iUNdEV -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:27 2025 by rpki-client