$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json) Hash identifier: nanqFjfHwIbSkiAzwEM9Mdyu4KpxXmZIidLFFCVEEPw= Subject key identifier: E8:6D:AF:ED:7E:82:C0:E3:93:CE:81:9D:61:FE:4F:08:FE:FC:D0:C0 Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft Manifest number: 0104 Signing time: Sun 15 Jun 2025 04:14:55 +0000 Manifest this update: Sun 15 Jun 2025 04:14:54 +0000 Manifest next update: Sun 22 Jun 2025 04:14:54 +0000 Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: DhO8DqsNI+cRWSsUtWtyG8UOWsFtZwJ3W2tsltwwhWw=) 2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: 97zPU/AWi/C0nV9VIKmemXWGwZXv9hj/Vz3ExXILCII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Validity Not Before: Jun 15 04:14:54 2025 GMT Not After : Jun 22 04:14:54 2025 GMT Subject: CN=684e48be-d68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:98:ed:45:8d:9a:2e:5f:e0:01:66:8d:b8:1a: 4e:1d:86:1a:95:77:37:af:2b:12:55:96:bf:79:c7: 9a:5b:5f:2f:e6:84:00:89:87:42:6c:eb:30:2d:77: c5:77:82:80:6b:c6:c1:17:31:14:0e:22:8b:ec:87: 40:44:c5:09:5c:2b:ee:cf:61:0e:77:b7:ae:da:5a: 3d:ad:b2:1e:38:89:1b:27:89:13:5e:ac:d2:a3:ae: 0b:3a:52:fe:e2:cc:c0:8d:38:72:a1:8b:46:8a:9b: 1c:50:cd:44:d0:80:0d:93:48:a2:b7:d3:db:71:7d: 1a:63:43:14:aa:05:45:75:01:33:0e:b6:cb:76:98: c9:07:ef:20:5e:90:ad:a4:4e:6a:f9:18:3d:ae:e3: a8:84:32:c5:36:37:be:97:20:e0:6e:30:81:d1:53: b1:9f:a4:f6:a1:37:a9:ef:c3:80:0c:66:82:4d:71: 28:e9:f7:10:98:30:8d:f0:d5:25:4d:e3:95:7f:09: ed:c1:d3:52:45:7d:ee:03:88:1d:8b:7f:f1:03:46: 35:02:0b:6c:bc:db:42:2f:96:7b:c2:03:f7:e8:f3: 43:a5:39:f3:92:aa:6a:30:f1:74:c9:c6:e2:84:65: 49:03:73:4c:bf:2a:5e:ad:9f:cc:b3:2d:46:98:9f: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6D:AF:ED:7E:82:C0:E3:93:CE:81:9D:61:FE:4F:08:FE:FC:D0:C0 X509v3 Authority Key Identifier: keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:03:24:13:0c:5d:b9:2c:5f:93:a1:4a:76:bd:2d:5a:73:14: 58:82:22:b8:59:8b:fb:4e:de:02:07:a9:cc:4d:48:ee:e3:c4: ee:df:23:d1:87:9b:23:2d:4c:5d:66:0e:1b:75:f4:89:96:9e: 1d:56:79:cb:64:ce:9b:2b:d7:b0:2d:09:2a:d8:57:00:cd:02: 07:2e:38:5e:9e:26:61:04:17:d9:76:f9:3c:d4:b7:75:61:86: b4:ed:dd:27:23:f1:f9:70:87:26:c4:ce:65:db:9f:82:95:70: aa:02:90:17:65:52:ea:d9:e1:f3:49:04:1c:fa:10:d8:c5:eb: 58:c1:06:f2:e5:94:3d:1c:14:39:2e:72:7d:8d:38:20:9b:7a: 14:8b:d4:0b:5d:3d:2b:42:42:16:57:0a:4b:09:46:9d:06:df: 25:0d:36:28:44:df:fd:54:78:a4:ea:dd:03:2f:b3:1f:7e:cc: bb:d5:c7:4e:9a:f6:92:16:76:23:5d:2d:3b:51:20:d9:25:33: ad:8d:f9:a0:36:62:61:c0:39:0e:a2:78:71:9c:b0:cc:a0:45: 60:42:d9:d7:ae:e8:65:91:28:89:14:e7:38:bd:19:3c:88:86: 69:d2:a7:9c:19:9e:88:c4:16:0e:c9:87:8b:b0:fe:d8:d0:b6: c6:13:07:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDEyMThERTc1QjI1ODhCNjYzM0E2QkY4OENEMzg4RjMx QzQzQUM5QzAwHhcNMjUwNjE1MDQxNDU0WhcNMjUwNjIyMDQxNDU0WjAYMRYwFAYD VQQDEw02ODRlNDhiZS1kNjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZjtRY2aLl/gAWaNuBpOHYYalXc3rysSVZa/eceaW18v5oQAiYdCbOswLXfF d4KAa8bBFzEUDiKL7IdARMUJXCvuz2EOd7eu2lo9rbIeOIkbJ4kTXqzSo64LOlL+ 4szAjThyoYtGipscUM1E0IANk0iit9PbcX0aY0MUqgVFdQEzDrbLdpjJB+8gXpCt pE5q+Rg9ruOohDLFNje+lyDgbjCB0VOxn6T2oTep78OADGaCTXEo6fcQmDCN8NUl TeOVfwntwdNSRX3uA4gdi3/xA0Y1AgtsvNtCL5Z7wgP36PNDpTnzkqpqMPF0ycbi hGVJA3NMvyperZ/Msy1GmJ/qeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhtr+1+ gsDjk86BnWH+Twj+/NDAMB8GA1UdIwQYMBaAFBIY3nWyWItmM6a/iM04jzHEOsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GMTQyNjE0QUJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWkyWXpwci1JelRpUE1jUTZ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VoamVkYkpZaTJZenByLUl6VGlQTWNRNnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GMTQyNjE0QUJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWky WXpwci1JelRpUE1jUTZ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYAyQTDF25LF+ToUp2vS1acxRYgiK4WYv7Tt4CB6nMTUju48Tu3yPR h5sjLUxdZg4bdfSJlp4dVnnLZM6bK9ewLQkq2FcAzQIHLjheniZhBBfZdvk81Ld1 YYa07d0nI/H5cIcmxM5l25+ClXCqApAXZVLq2eHzSQQc+hDYxetYwQby5ZQ9HBQ5 LnJ9jTggm3oUi9QLXT0rQkIWVwpLCUadBt8lDTYoRN/9VHik6t0DL7Mffsy71cdO mvaSFnYjXS07USDZJTOtjfmgNmJhwDkOonhxnLDMoEVgQtnXruhlkSiJFOc4vRk8 iIZp0qecGZ6IxBYOyYeLsP7Y0LbGEwdB -----END CERTIFICATE-----Generated at Mon Jun 16 14:41:37 2025 by rpki-client