$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft File: eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json) Hash identifier: PlxZNC4gp+Vb+fDMHhmxb7bo2YsUotcl3SdLxfbOx+4= Subject key identifier: F8:7D:D0:F4:C4:67:F7:3A:02:2D:01:34:B0:9D:B3:FA:12:D8:53:6D Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 Certificate issuer: /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft Manifest number: 7B Signing time: Fri 13 Jun 2025 05:42:28 +0000 Manifest this update: Fri 13 Jun 2025 05:42:28 +0000 Manifest next update: Fri 20 Jun 2025 05:42:28 +0000 Files and hashes: 1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: PAAM//wnVccS0CzHYplR3IlECcTQ2UCSiJ/TRufyWtk=) 2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: X4btbpCoiYoIXbuMOSmCOyUWCj9oTbrBupewiVqB8lU=) 3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: aPfjmDHXujlDq60sfxkeUX3+9b02nUsv2TYNf5bZEBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191 Validity Not Before: Jun 13 05:42:28 2025 GMT Not After : Jun 20 05:42:28 2025 GMT Subject: CN=684bba44-ab23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:8c:c5:57:23:62:39:dc:39:04:78:51:68: 18:3e:a8:ce:bc:94:45:1d:8a:8f:60:2e:c5:2d:ad: 36:2a:d3:53:f7:2a:58:9a:9f:06:00:4c:b1:4d:27: 2b:46:8d:d8:58:dc:92:6e:5d:0d:b6:93:e7:75:d5: d6:0d:fa:a5:ee:a3:fa:b0:26:0f:61:b2:13:43:d1: b7:25:19:e3:4f:6d:76:ab:c4:ef:a8:3b:18:cf:65: e9:b8:41:12:21:fa:fa:ca:9b:60:3a:ec:f9:b2:9a: 08:5f:73:ab:c9:67:4f:74:5e:e3:69:14:e5:b1:e5: 3e:63:c6:6d:43:6b:ee:f1:20:4c:63:61:93:96:01: 63:ed:25:23:54:6a:dc:76:9f:3c:36:c1:c2:82:19: e8:21:d5:08:a5:a8:d0:f6:a1:f7:cc:51:6c:05:5b: 1a:d1:ea:e9:8a:d8:a7:72:90:f1:e0:83:a3:2b:e0: bf:81:50:3f:02:44:31:9f:0e:3d:b1:2d:32:3b:25: 5e:03:6c:d6:82:85:a4:45:7a:82:f9:7c:b4:7b:78: a4:54:d1:1b:a5:aa:45:19:01:5c:30:ab:19:62:b9: 9d:48:3e:8d:06:1a:7f:e1:8a:32:00:52:8c:17:d8: e0:11:4b:c5:b6:62:36:d9:19:15:16:74:ee:85:49: 33:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7D:D0:F4:C4:67:F7:3A:02:2D:01:34:B0:9D:B3:FA:12:D8:53:6D X509v3 Authority Key Identifier: keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:33:9f:2a:fa:b7:69:89:05:27:93:14:ba:90:bb:d2:b3:b9: 3f:c1:78:ac:fd:4e:e9:6f:5a:2b:d0:05:72:3a:82:0b:04:6e: b7:0b:43:c9:06:12:a6:03:cd:9d:7f:42:6c:b8:3e:e4:b1:f6: cf:11:de:40:ae:04:1e:9e:42:55:b0:fe:fd:11:02:50:37:45: 50:29:41:f6:56:78:04:73:ce:c5:a1:71:da:0f:ba:fd:8e:1f: ee:48:29:4a:59:63:da:92:9f:dd:8f:a8:76:fe:42:37:17:3d: 21:c8:a3:85:3b:48:6c:32:42:4e:57:63:d9:c2:9f:50:ef:af: de:c1:d5:2f:4e:96:b7:eb:fc:58:1d:89:94:0a:45:66:45:6b: 45:e6:a0:af:92:75:cd:45:8e:7e:36:b9:28:60:d5:e3:37:29: 6f:66:9e:c5:fd:40:45:a8:19:1c:90:33:d3:26:45:dc:97:f5: 8d:ca:70:e7:25:b6:94:52:71:2c:fd:2a:c1:ba:dd:6f:f7:bf: 8a:27:5a:07:84:e5:b2:f9:9b:17:cc:d4:dd:21:bc:64:e2:1c: ff:f0:48:e8:45:fe:5a:8b:fb:15:24:17:0f:34:73:32:81:92: 6e:47:20:b5:43:65:7d:3e:68:b1:a4:e8:a4:ea:b8:f9:63:00: 2b:62:9c:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QTU1NDExMC8GA1UEBRMoNzkyMEY4Q0E4NEVDOTEzQzY5QTk4RDU0MzcxMjA5QjQz NEMzMzE5MTAeFw0yNTA2MTMwNTQyMjhaFw0yNTA2MjAwNTQyMjhaMBgxFjAUBgNV BAMTDTY4NGJiYTQ0LWFiMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF/IzFVyNiOdw5BHhRaBg+qM68lEUdio9gLsUtrTYq01P3KlianwYATLFNJytG jdhY3JJuXQ22k+d11dYN+qXuo/qwJg9hshND0bclGeNPbXarxO+oOxjPZem4QRIh +vrKm2A67Pmymghfc6vJZ090XuNpFOWx5T5jxm1Da+7xIExjYZOWAWPtJSNUatx2 nzw2wcKCGegh1QilqND2offMUWwFWxrR6umK2KdykPHgg6Mr4L+BUD8CRDGfDj2x LTI7JV4DbNaChaRFeoL5fLR7eKRU0RulqkUZAVwwqxliuZ1IPo0GGn/hijIAUowX 2OARS8W2YjbZGRUWdO6FSTNRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+H3Q9MRn 9zoCLQE0sJ2z+hLYU20wHwYDVR0jBBgwFoAUeSD4yoTskTxpqY1UNxIJtDTDMZEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBNTU0Lzc5Rjg5OTgyOTM1 NjExRUZBOEVERUIzM0M0RjlBRTAyL2VTRDR5b1Rza1R4cHFZMVVOeElKdERURE1a RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZVNENHlvVHNrVHhwcVkxVU54SUp0RFRETVpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRB NTU0Lzc5Rjg5OTgyOTM1NjExRUZBOEVERUIzM0M0RjlBRTAyL2VTRDR5b1Rza1R4 cHFZMVVOeElKdERURE1aRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJoznyr6t2mJBSeTFLqQu9KzuT/BeKz9TulvWivQBXI6ggsEbrcLQ8kG EqYDzZ1/Qmy4PuSx9s8R3kCuBB6eQlWw/v0RAlA3RVApQfZWeARzzsWhcdoPuv2O H+5IKUpZY9qSn92PqHb+QjcXPSHIo4U7SGwyQk5XY9nCn1Dvr97B1S9Olrfr/Fgd iZQKRWZFa0XmoK+Sdc1Fjn42uShg1eM3KW9mnsX9QEWoGRyQM9MmRdyX9Y3KcOcl tpRScSz9KsG63W/3v4onWgeE5bL5mxfM1N0hvGTiHP/wSOhF/lqL+xUkFw80czKB km5HILVDZX0+aLGk6KTquPljACtinJE= -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:21 2025 by rpki-client