$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft File: ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft (raw, json) Hash identifier: wYXIq6Q4U3QF5IyWFXb4tMrI0cTM1XImFISM5QkZV8c= Subject key identifier: 80:28:F6:5C:21:22:34:8D:A6:47:D5:94:A4:B1:61:2D:F5:6B:7B:91 Authority key identifier: 7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13 Certificate issuer: /CN=A9157B93/serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft Manifest number: 15 Signing time: Fri 13 Jun 2025 06:52:47 +0000 Manifest this update: Fri 13 Jun 2025 06:52:46 +0000 Manifest next update: Fri 20 Jun 2025 06:52:46 +0000 Files and hashes: 1: ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl (hash: 8qurkQvmxlcuoT8LLmLP9AQVZCpE7srnKDsMYgAPV2s=) 2: 7C487C522AD711F0889A9C4CC4F9AE02.roa (hash: i3SSpb1Cthad3ua7didgYcv0s4weTT24AcNiu2w0kbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B93, serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913 Validity Not Before: Jun 13 06:52:46 2025 GMT Not After : Jun 20 06:52:46 2025 GMT Subject: CN=684bcabf-0996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bf:0f:7b:d0:d0:47:89:42:db:27:b4:8c:81: 86:92:3a:cc:be:d2:d5:4a:e6:95:f2:02:62:63:04: 7e:82:8d:3b:4b:d0:f9:9f:ac:cc:35:95:71:72:05: da:db:1f:19:f0:a2:55:67:82:d8:86:a7:82:aa:04: 60:c2:cd:3c:ad:85:da:ec:53:45:8a:0d:5d:65:bd: 76:bc:73:97:48:61:79:1b:b1:95:4a:db:90:37:62: bc:94:a3:31:8f:1d:37:44:20:5d:a9:34:0b:bf:08: 5c:9c:7c:70:69:7b:f2:25:43:c7:e6:76:4b:56:64: 6e:8e:9f:c2:80:89:27:8d:be:70:7e:f0:89:58:90: 1a:18:92:a3:05:c8:5d:64:21:85:5b:d0:3f:20:d7: 8f:3b:cb:f7:04:ce:38:fa:31:6f:1a:9c:a2:e3:fd: 76:49:ff:90:47:ba:ce:50:62:df:bc:a8:25:de:97: 14:57:1b:ca:93:2b:7e:3c:2f:a9:97:e3:74:9a:b1: 1c:15:55:13:58:64:76:79:55:2b:de:4c:2d:77:ea: 24:63:d6:9e:06:7f:1d:8b:25:9e:59:c7:40:3e:cb: 06:22:c7:87:1a:31:0e:b5:10:c3:52:56:fb:cd:d7: b0:91:c2:9e:95:f0:6a:09:ca:98:fa:cd:79:27:b8: 7b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:28:F6:5C:21:22:34:8D:A6:47:D5:94:A4:B1:61:2D:F5:6B:7B:91 X509v3 Authority Key Identifier: keyid:7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:09:ae:21:5e:43:2c:61:5e:62:d1:d4:4f:44:2d:27:16:04: 4e:fc:81:9b:6b:20:35:3d:bf:d1:17:e8:15:90:b0:14:54:4e: 92:92:56:21:b2:40:bd:18:08:32:33:83:de:26:62:af:aa:a7: f3:24:7d:b1:ec:9f:34:69:5a:bd:70:01:93:96:bd:84:8c:32: c8:ea:49:27:a9:8e:43:d3:ca:28:48:29:a1:ce:b4:7e:ca:2b: 29:15:91:9e:ff:c6:ff:f0:aa:5b:c9:79:e3:1d:5a:1a:07:00: c1:e6:5b:31:02:ca:b7:e5:bf:ef:44:47:87:4c:92:f5:ee:fd: 50:48:ce:36:9c:a8:fd:7d:37:1b:5f:c1:d6:a0:f3:7d:8c:74: 0b:97:b3:a6:cb:08:df:2c:ec:97:56:e0:7e:1b:67:7e:55:c3: a1:c3:ac:ca:79:d4:5f:ee:52:28:e9:f3:ff:64:c6:e3:70:4d: b8:b3:23:f7:8c:eb:f9:a2:f2:ae:a6:c5:ca:8d:db:c6:f3:25: c4:59:79:a0:f0:a9:3d:84:3c:aa:7b:0c:97:de:d5:c1:6d:33: 10:7d:ce:c4:f1:c0:32:2f:d5:ba:33:76:c6:9c:30:c9:72:28: 18:1d:0d:28:85:d6:a4:97:e1:61:8d:86:71:98:9c:fe:96:4b: ab:17:8f:a6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0I5MzExMC8GA1UEBRMoN0IzRjYxNTdFOTk3RUYxN0NBNTA3RTY2MTA3RkM4OUU4 RTNFMzkxMzAeFw0yNTA2MTMwNjUyNDZaFw0yNTA2MjAwNjUyNDZaMBgxFjAUBgNV BAMTDTY4NGJjYWJmLTA5OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcvw970NBHiULbJ7SMgYaSOsy+0tVK5pXyAmJjBH6CjTtL0PmfrMw1lXFyBdrb HxnwolVngtiGp4KqBGDCzTythdrsU0WKDV1lvXa8c5dIYXkbsZVK25A3YryUozGP HTdEIF2pNAu/CFycfHBpe/IlQ8fmdktWZG6On8KAiSeNvnB+8IlYkBoYkqMFyF1k IYVb0D8g1487y/cEzjj6MW8anKLj/XZJ/5BHus5QYt+8qCXelxRXG8qTK348L6mX 43SasRwVVRNYZHZ5VSveTC136iRj1p4Gfx2LJZ5Zx0A+ywYix4caMQ61EMNSVvvN 17CRwp6V8GoJypj6zXknuHt9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgCj2XCEi NI2mR9WUpLFhLfVre5EwHwYDVR0jBBgwFoAUez9hV+mX7xfKUH5mEH/Ino4+ORMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3QjkzLzc3M0RGQjcyMjlG RDExRjBCRDU1MjAzM0M0RjlBRTAyL2V6OWhWLW1YN3hmS1VINW1FSF9Jbm80LU9S TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXo5aFYtbVg3eGZLVUg1bUVIX0lubzQtT1JNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 QjkzLzc3M0RGQjcyMjlGRDExRjBCRDU1MjAzM0M0RjlBRTAyL2V6OWhWLW1YN3hm S1VINW1FSF9Jbm80LU9STS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYJriFeQyxhXmLR1E9ELScWBE78gZtrIDU9v9EX6BWQsBRUTpKSViGy QL0YCDIzg94mYq+qp/MkfbHsnzRpWr1wAZOWvYSMMsjqSSepjkPTyihIKaHOtH7K KykVkZ7/xv/wqlvJeeMdWhoHAMHmWzECyrflv+9ER4dMkvXu/VBIzjacqP19Nxtf wdag832MdAuXs6bLCN8s7JdW4H4bZ35Vw6HDrMp51F/uUijp8/9kxuNwTbizI/eM 6/mi8q6mxcqN28bzJcRZeaDwqT2EPKp7DJfe1cFtMxB9zsTxwDIv1bozdsacMMly KBgdDSiF1qSX4WGNhnGYnP6WS6sXj6Y= -----END CERTIFICATE-----Generated at Sat Jun 14 19:02:13 2025 by rpki-client