$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft File: eQckJnCjuJ00jVqEHayNGC62YH4.mft (raw, json) Hash identifier: mcA6hOZM/0WqZ+Q3TMWNljj9+8zs/rU0BMJDGEYCBI0= Subject key identifier: 69:43:4B:2A:AC:10:36:14:42:32:53:64:A2:8E:73:5E:2A:86:78:20 Authority key identifier: 79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E Certificate issuer: /CN=A913DC32/serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft Manifest number: 39 Signing time: Thu 19 Jun 2025 06:59:45 +0000 Manifest this update: Thu 19 Jun 2025 06:59:45 +0000 Manifest next update: Thu 26 Jun 2025 06:59:45 +0000 Files and hashes: 1: eQckJnCjuJ00jVqEHayNGC62YH4.crl (hash: 1kIfeOJuazyquAwLoMKjEcF6m77uVk1Hgtq+qMlovpI=) 2: 22E5730815AC11F0BA789D40C4F9AE02.roa (hash: iWmeds3ikQddJ0zOLOMR2/nAx9kIXx/domN/vEqWgPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC32, serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Validity Not Before: Jun 19 06:59:45 2025 GMT Not After : Jun 26 06:59:45 2025 GMT Subject: CN=6853b561-f0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7e:99:c5:bd:9f:90:91:64:b2:9a:11:46:1a: 6b:c1:0d:13:82:76:b5:d7:93:0f:e7:37:53:d6:ab: da:4d:ca:dd:3a:4d:a7:3b:30:a2:98:34:26:fb:80: 06:ec:2d:17:99:ec:59:13:28:b2:af:dd:ac:28:e1: 7b:cb:e5:1e:b2:0c:80:48:9e:02:a4:a5:ee:3c:8f: 44:d0:fc:8d:02:d1:25:84:c1:a4:28:1b:96:ba:5b: d2:71:ee:b5:d7:57:4c:c3:d3:04:17:98:67:57:78: b8:66:82:95:b9:6d:89:b7:3a:12:7a:a6:9f:c9:58: 2a:f2:bd:a8:ff:66:07:fe:07:dc:82:80:18:b0:0c: e7:92:0f:82:d5:48:bf:33:ed:e5:c8:2a:85:9a:c9: 0e:d3:99:7e:cc:37:9b:09:17:14:55:38:19:7b:2e: df:89:d1:f3:40:03:1c:92:e0:8e:cd:79:0d:90:62: b9:a0:00:71:68:b1:f5:d7:fd:02:b7:ad:62:86:63: 9e:d4:51:c2:d6:c8:1e:f3:a8:ed:a0:07:d6:72:82: f2:59:77:a5:fc:f2:c0:0a:32:2a:d3:f3:a5:1a:74: 7c:c8:9a:be:03:dd:75:a3:67:f4:26:0f:e6:21:6f: e6:cc:9f:f9:70:9a:d8:1f:b0:2c:ed:8a:e5:39:1a: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:43:4B:2A:AC:10:36:14:42:32:53:64:A2:8E:73:5E:2A:86:78:20 X509v3 Authority Key Identifier: keyid:79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:88:3a:f6:27:f8:9d:e0:88:95:c6:40:67:d3:5a:89:44:21: ac:54:2e:17:85:32:68:39:16:fe:9b:6e:64:89:24:bf:35:45: bf:77:cc:df:48:e2:65:ab:f2:c2:51:72:10:ea:fa:78:e9:64: 3a:f2:1e:b1:5d:9c:c8:d8:e3:8b:67:12:61:cc:f5:98:8b:6f: 23:d6:6a:27:39:5a:51:21:1a:05:60:67:db:ad:14:27:b1:c3: 09:88:33:87:d7:ec:64:2f:6b:1b:33:ee:62:31:d8:11:21:dc: 96:22:df:a0:4a:a4:2d:bf:99:4b:9d:b4:ab:8c:2d:57:47:75: 2b:16:f2:35:a6:7a:46:1b:82:30:5e:72:fa:6d:2c:c3:86:90: e5:21:d5:02:32:7b:7e:6f:d9:4f:77:fd:18:50:f5:f0:fd:a2: c6:8e:01:0a:d2:1a:be:93:90:78:3b:30:29:1d:96:5c:7c:3c: fe:ba:de:c4:48:c1:71:05:94:1d:6e:50:f6:07:29:92:54:8e: 1a:1b:25:2c:f5:fa:3b:5b:dd:9a:0a:cf:06:c9:af:3d:68:60: 20:3d:9b:96:40:91:36:1e:d8:2c:51:0e:38:02:02:c2:ec:66: 3f:8a:14:35:79:0e:71:ac:dc:ac:bf:79:81:72:5a:22:9a:3d: da:f7:65:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REMzMjExMC8GA1UEBRMoNzkwNzI0MjY3MEEzQjg5RDM0OEQ1QTg0MURBQzhEMTgy RUI2NjA3RTAeFw0yNTA2MTkwNjU5NDVaFw0yNTA2MjYwNjU5NDVaMBgxFjAUBgNV BAMTDTY4NTNiNTYxLWYwZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOfpnFvZ+QkWSymhFGGmvBDROCdrXXkw/nN1PWq9pNyt06Tac7MKKYNCb7gAbs LReZ7FkTKLKv3awo4XvL5R6yDIBIngKkpe48j0TQ/I0C0SWEwaQoG5a6W9Jx7rXX V0zD0wQXmGdXeLhmgpW5bYm3OhJ6pp/JWCryvaj/Zgf+B9yCgBiwDOeSD4LVSL8z 7eXIKoWayQ7TmX7MN5sJFxRVOBl7Lt+J0fNAAxyS4I7NeQ2QYrmgAHFosfXX/QK3 rWKGY57UUcLWyB7zqO2gB9ZygvJZd6X88sAKMirT86UadHzImr4D3XWjZ/QmD+Yh b+bMn/lwmtgfsCztiuU5GlidAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaUNLKqwQ NhRCMlNkoo5zXiqGeCAwHwYDVR0jBBgwFoAUeQckJnCjuJ00jVqEHayNGC62YH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQzMyLzdCNzUwQkZFRkNG RDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUowMGpWcUVIYXlOR0M2MllI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVFja0puQ2p1SjAwalZxRUhheU5HQzYyWUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE QzMyLzdCNzUwQkZFRkNGRDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUow MGpWcUVIYXlOR0M2MllINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABiIOvYn+J3giJXGQGfTWolEIaxULheFMmg5Fv6bbmSJJL81Rb93zN9I 4mWr8sJRchDq+njpZDryHrFdnMjY44tnEmHM9ZiLbyPWaic5WlEhGgVgZ9utFCex wwmIM4fX7GQvaxsz7mIx2BEh3JYi36BKpC2/mUudtKuMLVdHdSsW8jWmekYbgjBe cvptLMOGkOUh1QIye35v2U93/RhQ9fD9osaOAQrSGr6TkHg7MCkdllx8PP663sRI wXEFlB1uUPYHKZJUjhobJSz1+jtb3ZoKzwbJrz1oYCA9m5ZAkTYe2CxRDjgCAsLs Zj+KFDV5DnGs3Ky/eYFyWiKaPdr3ZWI= -----END CERTIFICATE-----Generated at Fri Jun 20 23:41:31 2025 by rpki-client