$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json) Hash identifier: Hwjt4t/rXRety1TQpjr+fkVjpyvoWLKtTiqoldsmI5g= Subject key identifier: 3D:DE:7A:94:0E:CC:A5:E8:22:B3:C9:EB:21:FE:6C:F7:10:6E:54:A1 Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft Manifest number: 0134 Signing time: Fri 13 Jun 2025 03:25:54 +0000 Manifest this update: Fri 13 Jun 2025 03:25:54 +0000 Manifest next update: Fri 20 Jun 2025 03:25:54 +0000 Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: yRovuqRklZHW6jt1AqCvMJSHQYPZ7yfcuNSEZIDvmRw=) 2: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: zenPmnV708uWYVdBIohUknKedfQOR1ObJANCzq5j/eI=) 3: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: cNAOWRyYAIXWiMdboiFgiFug53GcE6u1QmL+e/IQa/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Validity Not Before: Jun 13 03:25:54 2025 GMT Not After : Jun 20 03:25:54 2025 GMT Subject: CN=684b9a42-b43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:cb:de:b2:10:cf:eb:3a:a3:ca:69:68:90: d7:2b:8d:b3:4f:42:95:5a:9f:32:b1:30:30:c1:e8: b8:74:6d:80:6c:fa:47:80:99:44:c7:e6:25:0c:70: dc:41:41:d2:27:6d:79:28:a1:fc:ab:a1:1f:f4:46: ce:76:9d:ba:69:b6:5b:de:a8:40:f7:5c:f6:55:da: 76:b3:81:dc:63:8f:80:e0:3d:c0:14:ec:b7:12:6a: 5b:3a:f4:7c:07:fe:fa:d6:15:09:ec:ca:ac:bb:4c: bc:80:53:ff:89:e0:04:a4:55:9a:19:62:4b:8d:a7: d5:36:bb:0f:80:8f:ed:ae:eb:ae:21:e9:d5:7c:e3: 8e:70:d0:da:28:6d:cc:92:5d:b9:d4:76:ce:79:ec: a4:dc:d6:0d:1c:b9:f2:57:1c:4a:ca:6a:fa:43:80: 7a:3f:03:a6:72:25:4d:dd:bc:e9:96:ad:e3:e3:77: a3:34:d6:8e:37:6e:44:d4:f7:f8:58:c8:00:a6:3e: 56:29:0e:02:78:43:6c:35:8b:8d:39:cb:50:18:dc: 67:21:e8:e5:6a:5a:4c:61:1c:a0:22:86:ec:ea:80: 1d:97:9a:6e:1c:be:60:c1:55:8d:ae:63:45:1d:ec: 2d:ea:b2:84:21:fb:ec:21:16:40:08:a9:1b:a2:67: 1a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DE:7A:94:0E:CC:A5:E8:22:B3:C9:EB:21:FE:6C:F7:10:6E:54:A1 X509v3 Authority Key Identifier: keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1f:3b:06:b9:21:c0:51:4e:01:fd:98:e7:db:1a:88:0a:1d: 59:2e:3f:77:bb:5e:47:43:4b:34:be:a0:34:58:ce:c2:da:4b: a5:bf:8a:3d:1a:49:57:9f:01:8a:44:67:34:bc:51:0e:c6:9d: c7:f5:ba:a1:d2:2e:40:b7:da:3d:6a:c6:80:a5:88:ca:47:20: 04:61:bb:6d:69:37:c5:f6:33:89:15:18:e5:58:a2:0c:c7:82: dd:29:5b:2d:4e:75:05:b9:55:c3:bb:67:f6:42:d6:f9:32:f1: eb:ea:5c:b0:96:e6:e6:78:5d:99:ee:f5:cd:5c:10:cc:c7:c1: 8c:b4:20:ad:7d:9f:58:c4:08:e0:34:77:59:ad:b8:dc:4d:bb: a3:a2:55:6f:f2:15:93:da:93:b6:54:3a:d4:50:13:94:f3:98: 49:9c:f2:1a:53:b2:d5:96:a1:27:b7:f5:e8:9e:34:70:4b:47: 72:11:d1:da:5d:50:52:e5:af:01:a5:68:94:56:0c:63:09:c3: c4:3d:cb:12:e3:33:c0:c2:37:1b:d7:27:a2:4a:6a:d1:db:37: bb:91:e0:cc:c6:48:ef:d6:db:60:ba:a0:69:10:86:3f:8f:f9: e4:1a:cd:6d:4a:9f:96:26:a3:3d:b3:2f:f6:37:fe:76:85:73: 1d:34:b0:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0 Mjc4N0FGODMwHhcNMjUwNjEzMDMyNTU0WhcNMjUwNjIwMDMyNTU0WjAYMRYwFAYD VQQDEw02ODRiOWE0Mi1iNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaHL3rIQz+s6o8ppaJDXK42zT0KVWp8ysTAwwei4dG2AbPpHgJlEx+YlDHDc QUHSJ215KKH8q6Ef9EbOdp26abZb3qhA91z2Vdp2s4HcY4+A4D3AFOy3EmpbOvR8 B/761hUJ7Mqsu0y8gFP/ieAEpFWaGWJLjafVNrsPgI/truuuIenVfOOOcNDaKG3M kl251HbOeeyk3NYNHLnyVxxKymr6Q4B6PwOmciVN3bzplq3j43ejNNaON25E1Pf4 WMgApj5WKQ4CeENsNYuNOctQGNxnIejlalpMYRygIobs6oAdl5puHL5gwVWNrmNF Hewt6rKEIfvsIRZACKkbomcapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3eepQO zKXoIrPJ6yH+bPcQblShMB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjgxMy9BODUyNDM2QTZFMkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjIt ME1oMFVwWFFGSmhDZUhyNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2HzsGuSHAUU4B/Zjn2xqICh1ZLj93u15HQ0s0vqA0WM7C2kulv4o9 GklXnwGKRGc0vFEOxp3H9bqh0i5At9o9asaApYjKRyAEYbttaTfF9jOJFRjlWKIM x4LdKVstTnUFuVXDu2f2Qtb5MvHr6lywlubmeF2Z7vXNXBDMx8GMtCCtfZ9YxAjg NHdZrbjcTbujolVv8hWT2pO2VDrUUBOU85hJnPIaU7LVlqEnt/XonjRwS0dyEdHa XVBS5a8BpWiUVgxjCcPEPcsS4zPAwjcb1yeiSmrR2ze7keDMxkjv1ttguqBpEIY/ j/nkGs1tSp+WJqM9sy/2N/52hXMdNLAy -----END CERTIFICATE-----Generated at Sat Jun 14 18:57:09 2025 by rpki-client