$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft File: eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json) Hash identifier: 2GC0FVu9yatb5TVrRp1xfk0XHtTvcXuVGdCBo8Dq4qU= Subject key identifier: 77:16:99:64:0F:B4:D3:99:66:9C:D6:CB:4D:BA:D6:D7:98:C7:54:E3 Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft Manifest number: 014F Signing time: Fri 13 Jun 2025 03:11:15 +0000 Manifest this update: Fri 13 Jun 2025 03:11:15 +0000 Manifest next update: Fri 20 Jun 2025 03:11:15 +0000 Files and hashes: 1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: gGoqnf+gRIOxzyQhQCfv9KRoYu3w62QC9jjrw891Qkc=) 2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: ta+wizYmG5Li1UNdnV+RjnG6RQDSQFnDtjBK6l15sJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Validity Not Before: Jun 13 03:11:15 2025 GMT Not After : Jun 20 03:11:15 2025 GMT Subject: CN=684b96d3-ce44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:40:73:1c:1a:51:d8:73:e7:8d:4d:bb:14:36: 26:cd:82:c0:fc:73:e9:83:5f:5d:e9:f2:3b:ff:b5: 1a:f8:d7:9e:e8:00:74:38:b9:70:f3:0e:f2:62:8c: 5d:f7:71:00:8d:9f:a8:17:98:22:50:cf:12:71:4c: 44:0e:7f:98:13:2c:c3:6a:55:e7:87:82:44:69:cd: 57:7c:19:80:ba:d8:7c:7b:37:d3:e7:5c:e2:6b:24: 33:24:7f:65:d0:e0:06:15:3b:f6:cb:6b:09:23:3b: 57:3c:6e:93:2c:79:c0:b8:ae:c9:40:e0:02:2e:6d: 5d:ac:b6:be:21:c4:d8:b4:8e:6e:1d:b7:26:b5:a3: 28:72:15:f4:72:b6:b1:ac:c3:f0:fb:dc:96:02:37: 82:1a:99:58:c9:fc:8b:fc:67:ff:11:1e:71:8b:7d: 09:3f:4d:3c:65:b5:3d:e3:60:39:e2:f9:49:cd:0c: 03:97:b5:25:e9:9b:e2:83:12:36:2a:de:d6:4b:d7: 8d:e9:46:c8:19:da:8a:3e:eb:6e:e4:b8:69:63:4a: 9f:ef:78:b0:52:08:f5:33:04:74:3d:06:c5:8b:16: fa:64:de:37:60:87:0f:eb:a7:83:00:e8:81:81:58: 97:e2:9c:79:87:21:51:f0:18:d1:bf:c0:fe:9d:0d: 46:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:16:99:64:0F:B4:D3:99:66:9C:D6:CB:4D:BA:D6:D7:98:C7:54:E3 X509v3 Authority Key Identifier: keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e0:e0:88:53:fd:b4:48:09:f5:b9:8f:73:04:14:cb:5a:e9: 0d:19:43:95:50:83:8f:e3:88:f7:43:58:33:1f:6d:36:ae:47: 93:05:a6:5b:d9:d0:56:08:d5:78:6a:10:12:dc:3b:16:29:23: fe:f4:f0:18:35:8c:ae:28:42:45:3b:64:20:dd:65:67:f2:e6: 0c:ef:6b:1e:c2:f0:3c:ff:70:74:10:fe:8b:f1:8d:f7:d2:76: 38:d1:5b:da:a9:be:3d:7a:58:b5:6d:07:29:77:8e:72:8c:27: 41:85:b9:b3:8d:ad:3c:d3:29:43:1f:2f:53:7d:3a:08:2f:a9: 97:fa:86:7b:43:b9:77:a0:27:d5:bd:c4:a4:7a:0b:c7:f8:bb: a1:c5:12:c4:a7:fa:e5:0c:46:ce:3f:d8:88:64:de:37:3b:07: 19:a8:39:dd:22:71:d7:f5:de:e6:41:8d:27:c9:45:5b:d0:dc: a5:51:45:fb:a6:96:7a:6f:27:ea:ea:d5:95:56:57:21:be:6b: 56:f4:a3:a6:88:44:1c:a4:91:47:0f:39:37:dc:7a:d5:0d:0d: b0:b4:26:42:74:ba:d0:60:d9:2e:c8:6e:83:ad:9e:ac:2d:31: 79:ea:04:9f:c8:17:c9:b5:6f:ac:d3:13:14:a4:c0:3c:2d:e0: 66:f7:17:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG QjA4NjIwRDgwHhcNMjUwNjEzMDMxMTE1WhcNMjUwNjIwMDMxMTE1WjAYMRYwFAYD VQQDEw02ODRiOTZkMy1jZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0BzHBpR2HPnjU27FDYmzYLA/HPpg19d6fI7/7Ua+Nee6AB0OLlw8w7yYoxd 93EAjZ+oF5giUM8ScUxEDn+YEyzDalXnh4JEac1XfBmAuth8ezfT51ziayQzJH9l 0OAGFTv2y2sJIztXPG6TLHnAuK7JQOACLm1drLa+IcTYtI5uHbcmtaMochX0crax rMPw+9yWAjeCGplYyfyL/Gf/ER5xi30JP008ZbU942A54vlJzQwDl7Ul6ZvigxI2 Kt7WS9eN6UbIGdqKPutu5LhpY0qf73iwUgj1MwR0PQbFixb6ZN43YIcP66eDAOiB gViX4px5hyFR8BjRv8D+nQ1GsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcWmWQP tNOZZpzWy0261teYx1TjMB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qjc5Ri9EQTY4MzdGMDRFMjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1S V0FzbmJjREN5WHY3Q0dJTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK4OCIU/20SAn1uY9zBBTLWukNGUOVUIOP44j3Q1gzH202rkeTBaZb 2dBWCNV4ahAS3DsWKSP+9PAYNYyuKEJFO2Qg3WVn8uYM72sewvA8/3B0EP6L8Y33 0nY40Vvaqb49eli1bQcpd45yjCdBhbmzja080ylDHy9TfToIL6mX+oZ7Q7l3oCfV vcSkegvH+LuhxRLEp/rlDEbOP9iIZN43OwcZqDndInHX9d7mQY0nyUVb0NylUUX7 ppZ6byfq6tWVVlchvmtW9KOmiEQcpJFHDzk33HrVDQ2wtCZCdLrQYNkuyG6DrZ6s LTF56gSfyBfJtW+s0xMUpMA8LeBm9xe9 -----END CERTIFICATE-----Generated at Sat Jun 14 19:08:52 2025 by rpki-client