$ rpki-client -vvf rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft File: eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft (raw, json) Hash identifier: sKihIY53H2AJWAvfnSHEVFYrTuK4AowrpztjvIWdZYs= Subject key identifier: 30:20:89:BF:F9:F7:A0:74:DC:F6:1C:E9:F8:DD:71:CA:44:A2:7B:DF Authority key identifier: 78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51 Certificate issuer: /CN=A914CFBF/serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft Manifest number: 42 Signing time: Thu 19 Jun 2025 06:51:20 +0000 Manifest this update: Thu 19 Jun 2025 06:51:19 +0000 Manifest next update: Thu 26 Jun 2025 06:51:19 +0000 Files and hashes: 1: eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl (hash: /Bn51R+nmXKi+HTXw/VtXJwMqLBZbZZjh4IgoAZVAv0=) 2: FDB7B000370C11F08D3A0061C4F9AE02.roa (hash: Oi7qbfIeedADNBuGLbSCRcKYQPpXPMSZUOd7rqg8qXg=) 3: 7FDB55F4ED1211EFAD21985DC4F9AE02.roa (hash: SxbvQb0AhwJxdqmMLleQ5Oebk4aeq+L/Y76ffLrCJ+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CFBF, serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051 Validity Not Before: Jun 19 06:51:19 2025 GMT Not After : Jun 26 06:51:19 2025 GMT Subject: CN=6853b368-4051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:6c:6a:ef:5d:ef:b0:86:a6:5e:75:24:ad: 56:08:b3:60:cc:38:84:77:6c:20:aa:7c:e8:9a:02: dd:79:5b:08:d4:25:0d:8e:0d:eb:a1:ca:14:89:67: 0d:2c:3b:12:5d:00:71:10:06:f7:39:cf:00:41:6a: 83:51:b9:d1:85:56:c1:82:08:1e:37:86:38:97:46: ad:2f:d0:bb:e3:3f:15:c7:e9:86:53:a0:94:e0:35: 2c:ee:bb:f1:13:7b:0b:ce:c9:2f:43:36:db:2a:56: 3f:d8:0b:03:4a:e0:2d:78:94:f1:98:9b:64:28:b0: 45:8d:a5:0f:4c:0d:7a:27:73:42:49:ab:71:e1:a0: ab:36:5f:78:46:9e:ae:3e:4a:82:2c:9e:00:f8:52: 1b:cc:b6:47:1e:85:31:96:94:3a:d5:e9:96:04:b1: 2d:88:3d:ad:c7:45:cb:32:b6:34:ac:a8:91:44:69: 29:8e:a2:e5:b1:d0:b7:3e:ed:c6:e0:09:be:be:99: 34:63:76:a1:8e:ae:1f:cc:58:9b:1e:c1:a1:9b:1e: 3b:6a:87:93:6b:41:5e:51:44:5e:0f:6f:4a:5a:92: 58:9e:74:d7:a8:61:56:75:20:4d:8d:82:e9:70:bd: 54:17:c8:08:8d:a2:d9:1b:15:89:b6:54:c3:92:34: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:20:89:BF:F9:F7:A0:74:DC:F6:1C:E9:F8:DD:71:CA:44:A2:7B:DF X509v3 Authority Key Identifier: keyid:78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:de:46:24:a2:81:61:68:ce:04:a1:70:00:27:c8:cf:34:e8: e7:ba:78:75:42:ee:37:63:66:60:42:3e:3c:4c:45:65:db:76: c0:f0:53:b8:00:76:ba:fe:68:8b:00:fb:0d:25:9b:13:47:47: eb:28:69:ba:21:5f:9e:4e:43:63:87:f8:d0:78:86:27:c3:77: e6:f4:72:49:d4:d5:a0:79:1f:59:11:80:81:cc:74:19:e1:7c: 58:65:3f:19:ef:a3:3f:65:e1:87:d0:52:b6:24:c6:cd:4f:44: a5:64:fe:4b:d1:67:22:4f:cf:16:14:d8:1e:41:e4:36:dd:db: 83:68:d1:77:72:48:43:b6:56:50:bd:1d:8f:44:e4:68:a3:7d: ec:f7:1f:2b:47:ec:0b:35:da:65:09:9e:08:8e:de:9f:79:18: 30:db:e5:76:7b:1d:94:ca:fb:25:c1:3f:a2:cb:5f:3d:f3:5c: 3e:a2:1b:c5:6e:28:c5:40:60:b6:8c:95:47:54:61:60:41:cd: 20:34:f5:4c:d3:3b:b8:21:57:f5:9b:71:68:54:64:b6:f3:64: ad:ca:ee:81:7c:1e:95:74:50:72:97:cb:ab:04:cf:e6:27:55: 23:e8:ab:46:70:04:37:5d:1a:f5:9d:3c:63:40:0d:19:ce:17: ec:71:f0:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0ZCRjExMC8GA1UEBRMoNzhFQzBGMEU0OTRGMjI4RUFBNDM4M0Q2QzYwREVCMUMz NjJBNTA1MTAeFw0yNTA2MTkwNjUxMTlaFw0yNTA2MjYwNjUxMTlaMBgxFjAUBgNV BAMTDTY4NTNiMzY4LTQwNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPvGxq713vsIamXnUkrVYIs2DMOIR3bCCqfOiaAt15WwjUJQ2ODeuhyhSJZw0s OxJdAHEQBvc5zwBBaoNRudGFVsGCCB43hjiXRq0v0LvjPxXH6YZToJTgNSzuu/ET ewvOyS9DNtsqVj/YCwNK4C14lPGYm2QosEWNpQ9MDXonc0JJq3HhoKs2X3hGnq4+ SoIsngD4UhvMtkcehTGWlDrV6ZYEsS2IPa3HRcsytjSsqJFEaSmOouWx0Lc+7cbg Cb6+mTRjdqGOrh/MWJsewaGbHjtqh5NrQV5RRF4Pb0pakliedNeoYVZ1IE2Ngulw vVQXyAiNotkbFYm2VMOSNO+/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMCCJv/n3 oHTc9hzp+N1xykSie98wHwYDVR0jBBgwFoAUeOwPDklPIo6qQ4PWxg3rHDYqUFEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDRkJGLzMyNzYxMDM4RUQx MjExRUY5QjJENDk1Q0M0RjlBRTAyL2VPd1BEa2xQSW82cVE0UFd4ZzNySERZcVVG RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZU93UERrbFBJbzZxUTRQV3hnM3JIRFlxVUZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD RkJGLzMyNzYxMDM4RUQxMjExRUY5QjJENDk1Q0M0RjlBRTAyL2VPd1BEa2xQSW82 cVE0UFd4ZzNySERZcVVGRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANneRiSigWFozgShcAAnyM806Oe6eHVC7jdjZmBCPjxMRWXbdsDwU7gA drr+aIsA+w0lmxNHR+soabohX55OQ2OH+NB4hifDd+b0cknU1aB5H1kRgIHMdBnh fFhlPxnvoz9l4YfQUrYkxs1PRKVk/kvRZyJPzxYU2B5B5Dbd24No0XdySEO2VlC9 HY9E5Gijfez3HytH7As12mUJngiO3p95GDDb5XZ7HZTK+yXBP6LLXz3zXD6iG8Vu KMVAYLaMlUdUYWBBzSA09UzTO7ghV/WbcWhUZLbzZK3K7oF8HpV0UHKXy6sEz+Yn VSPoq0ZwBDddGvWdPGNADRnOF+xx8As= -----END CERTIFICATE-----Generated at Thu Jun 19 21:15:33 2025 by rpki-client