$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft File: ej5CbJYle98kPDxjt4A4NAUlwqk.mft (raw, json) Hash identifier: 7NBt6+quxBerWRDIoA4BgbvxNZKBKnRA8PBuVAHNjkw= Subject key identifier: D8:44:DF:D0:4C:66:AF:5E:84:B4:67:F7:2F:2E:25:52:BA:C3:08:0B Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 Certificate issuer: /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft Manifest number: 034F Signing time: Thu 19 Jun 2025 01:44:46 +0000 Manifest this update: Thu 19 Jun 2025 01:44:46 +0000 Manifest next update: Thu 26 Jun 2025 01:44:46 +0000 Files and hashes: 1: ej5CbJYle98kPDxjt4A4NAUlwqk.crl (hash: aItjr0LHxgKrTzVGamoPjB8RBuwmsQk3SUiSrBGsw48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Validity Not Before: Jun 19 01:44:46 2025 GMT Not After : Jun 26 01:44:46 2025 GMT Subject: CN=68536b8e-06a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:00:18:4f:98:d0:29:37:bd:80:5b:9f:2e: d8:97:13:26:db:fa:7d:7e:65:4a:4a:68:94:f5:c5: 00:7b:0a:2a:3a:17:ba:52:0e:c5:d5:f4:b3:dd:30: 3e:49:34:ee:f7:ee:46:db:c1:b2:e2:90:a5:91:48: 9e:e0:1a:33:37:6a:29:f9:13:1d:d9:93:be:ef:50: 2c:be:15:35:2e:64:97:c6:c8:04:eb:67:b1:59:46: d9:4e:96:2a:b0:1b:8a:8e:10:40:a0:b9:1d:dd:f4: f8:d0:e3:ab:4d:e7:f7:c4:ba:ae:31:3a:64:da:e8: 13:48:44:dd:a3:dd:8e:76:a4:96:67:f8:ea:de:3f: df:7e:a2:62:c2:7c:fa:da:87:d5:78:76:51:8e:f3: ea:f8:a8:92:cc:7c:ed:48:b7:56:a4:3a:07:a1:30: 4f:88:bb:1e:a4:63:01:e8:c5:d6:18:85:c1:92:63: 32:9a:42:dc:3d:b3:d5:4c:ce:3d:1f:9d:2f:e0:68: d6:47:fe:16:87:db:00:a8:b9:7b:a7:59:6d:ee:f3: 39:13:48:60:99:ab:f8:05:3d:e0:02:da:9c:ae:90: dd:e1:a7:11:ac:31:08:59:11:07:4a:bb:7b:f9:98: 89:a5:db:5c:b1:1d:03:39:94:b4:7d:5b:cc:7b:35: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:44:DF:D0:4C:66:AF:5E:84:B4:67:F7:2F:2E:25:52:BA:C3:08:0B X509v3 Authority Key Identifier: keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:75:90:a9:0c:4e:30:9b:04:e7:9f:17:aa:a7:71:fa:aa:d8: b2:37:97:92:1a:c4:8b:a0:ae:23:72:74:42:93:bc:65:40:97: ef:80:30:39:6c:a5:b0:85:1c:4f:ca:7f:11:97:6c:2c:fc:56: 75:db:e5:38:21:a3:02:3c:27:01:54:03:2b:5d:18:4e:a5:e6: 7d:cb:14:93:30:6e:86:c1:9c:fb:10:2a:f7:a8:a6:a6:aa:85: e1:e1:6d:c2:99:98:8f:94:ed:30:29:38:03:0f:ec:7a:ac:61: a7:2b:75:c9:87:87:b9:bc:28:14:ef:62:e0:e6:f4:37:43:e9: 8e:9a:42:1d:65:3e:49:1e:e8:5e:36:cd:95:8c:02:98:e1:8b: a6:29:da:48:97:e8:9b:71:95:0c:8c:5a:c0:65:b1:1a:07:45: f2:c6:32:29:02:c2:e2:4f:52:fa:98:96:64:17:11:89:dd:da: 56:1d:3c:ac:95:5a:59:9f:b0:2a:9d:68:bf:63:6c:97:be:ce: 5b:6d:6e:1a:e0:65:df:72:03:b4:13:ce:74:14:fe:48:df:b4: 22:9e:6f:e8:6b:ef:a3:66:3a:92:00:63:c7:86:c4:b4:b4:4e: 6b:a2:67:31:81:57:9d:a3:1d:7c:81:8a:bc:56:cd:3e:c7:3f: e0:97:f8:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKDdBM0U0MjZDOTYyNTdCREYyNDNDM0M2M0I3ODAzODM0 MDUyNUMyQTkwHhcNMjUwNjE5MDE0NDQ2WhcNMjUwNjI2MDE0NDQ2WjAYMRYwFAYD VQQDEw02ODUzNmI4ZS0wNmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgUAGE+Y0Ck3vYBbny7YlxMm2/p9fmVKSmiU9cUAewoqOhe6Ug7F1fSz3TA+ STTu9+5G28Gy4pClkUie4BozN2op+RMd2ZO+71AsvhU1LmSXxsgE62exWUbZTpYq sBuKjhBAoLkd3fT40OOrTef3xLquMTpk2ugTSETdo92OdqSWZ/jq3j/ffqJiwnz6 2ofVeHZRjvPq+KiSzHztSLdWpDoHoTBPiLsepGMB6MXWGIXBkmMymkLcPbPVTM49 H50v4GjWR/4Wh9sAqLl7p1lt7vM5E0hgmav4BT3gAtqcrpDd4acRrDEIWREHSrt7 +ZiJpdtcsR0DOZS0fVvMezXdIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhE39BM Zq9ehLRn9y8uJVK6wwgLMB8GA1UdIwQYMBaAFHo+QmyWJXvfJDw8Y7eAODQFJcKp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5OGtQRHhqdDRBNE5BVWx3 cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqNUNiSllsZTk4a1BEeGp0NEE0TkFVbHdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5 OGtQRHhqdDRBNE5BVWx3cWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIdZCpDE4wmwTnnxeqp3H6qtiyN5eSGsSLoK4jcnRCk7xlQJfvgDA5 bKWwhRxPyn8Rl2ws/FZ12+U4IaMCPCcBVAMrXRhOpeZ9yxSTMG6GwZz7ECr3qKam qoXh4W3CmZiPlO0wKTgDD+x6rGGnK3XJh4e5vCgU72Lg5vQ3Q+mOmkIdZT5JHuhe Ns2VjAKY4YumKdpIl+ibcZUMjFrAZbEaB0XyxjIpAsLiT1L6mJZkFxGJ3dpWHTys lVpZn7AqnWi/Y2yXvs5bbW4a4GXfcgO0E850FP5I37Qinm/oa++jZjqSAGPHhsS0 tE5romcxgVedox18gYq8Vs0+xz/gl/j2 -----END CERTIFICATE-----Generated at Fri Jun 20 01:11:33 2025 by rpki-client