$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft File: iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json) Hash identifier: rTorxMLCprGO89yKaYtCeN2vZJnniFgGIiz+jhjKwWo= Subject key identifier: 56:10:79:F2:E3:93:18:54:B9:3C:D9:39:69:5D:8E:E4:86:37:0E:BD Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 Certificate issuer: /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft Manifest number: 0151 Signing time: Sun 15 Jun 2025 03:23:36 +0000 Manifest this update: Sun 15 Jun 2025 03:23:35 +0000 Manifest next update: Sun 22 Jun 2025 03:23:35 +0000 Files and hashes: 1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: 8rVpIEgNEPyUDQXK3dfl+gBGbQIcS7AuasS24PsY+ik=) 2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: UvdgbLYF5+vRHqxdggCtIs+aJSz12jANKpYmMkrt0HU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3 Validity Not Before: Jun 15 03:23:35 2025 GMT Not After : Jun 22 03:23:35 2025 GMT Subject: CN=684e3cb8-326f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:48:31:f8:c4:62:ee:40:24:65:48:76:53: 35:74:c6:f8:1a:31:05:13:6e:6e:5b:0d:13:21:fb: ba:d7:f0:9a:25:40:bf:4a:54:5f:94:33:58:f5:8f: 8e:f3:10:b3:90:92:df:54:fa:19:a3:2c:64:8e:f7: c1:2e:0b:35:41:9b:6c:fc:eb:c1:8c:db:de:52:3f: 49:9f:09:2e:4b:eb:70:8f:f2:32:d9:11:82:ef:87: 6a:f6:45:de:09:cf:ec:fc:42:df:47:21:48:13:c3: 8c:0a:5d:92:9b:56:8b:70:a4:e2:5c:0e:60:63:56: 43:2f:10:49:b2:80:bd:a6:7e:7f:92:22:92:5c:07: 19:eb:90:cc:a9:50:dc:a0:12:d9:63:a0:0e:e2:62: 8c:83:4c:57:54:32:79:2c:de:40:8f:c3:3d:1c:b4: 5c:5e:1c:39:51:8a:73:85:17:d0:20:21:0d:10:65: 78:a8:c1:1c:6c:46:11:41:bd:ed:d0:a2:2c:c0:a9: 96:81:78:53:4b:38:2a:8a:07:a3:09:35:b3:75:70: eb:de:a3:f6:20:b1:94:7a:62:de:55:ed:3a:9a:1e: 84:d0:5d:2b:c0:38:2e:49:aa:a8:94:67:42:18:f8: ed:05:6c:4e:93:36:09:00:60:98:3b:35:9b:c5:9a: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:10:79:F2:E3:93:18:54:B9:3C:D9:39:69:5D:8E:E4:86:37:0E:BD X509v3 Authority Key Identifier: keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:49:91:7b:51:9a:68:e0:3e:38:e3:ba:f8:e7:ab:bd:15:73: 15:25:3b:e5:55:f9:e1:c1:2e:53:37:0d:83:f4:ec:26:b6:06: af:a9:0f:89:f0:a1:35:57:cc:d2:fa:55:4b:ab:8d:9b:c6:9f: 1e:3e:17:ae:0c:95:8e:b5:c4:93:7a:ce:c6:6c:bb:07:27:d6: 2b:18:af:7e:03:5b:14:dc:10:f5:11:78:65:70:9b:df:77:34: 1b:67:7c:6e:62:dc:09:c5:a5:2a:c2:38:ce:d7:20:27:15:93: 4f:c3:cd:2a:74:11:d6:bc:77:bc:28:44:02:45:54:3f:d7:52: 56:82:62:e8:11:37:b2:d2:80:13:77:b2:62:90:d5:33:c8:a4: e3:a2:48:f8:0c:e0:39:e0:de:37:30:fc:57:5e:ff:83:e1:f8: 80:4c:d0:ea:55:cb:f9:a7:b0:a9:40:de:57:bb:76:6e:b1:20: c8:95:5d:d3:82:b0:4f:92:c0:a6:69:ad:95:03:a1:0f:aa:a2: 77:ef:8c:e6:8e:f7:82:d6:73:84:67:c7:fe:44:dc:6c:1f:ae: 70:15:9e:67:7f:69:04:ae:2e:65:ac:d3:dd:33:92:dd:2e:cf: ce:b9:81:8a:c7:0d:c9:90:6f:dd:42:86:f3:47:cb:65:cd:4a: fa:2a:0c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE MTAxOUY4QTMwHhcNMjUwNjE1MDMyMzM1WhcNMjUwNjIyMDMyMzM1WjAYMRYwFAYD VQQDEw02ODRlM2NiOC0zMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrpIMfjEYu5AJGVIdlM1dMb4GjEFE25uWw0TIfu61/CaJUC/SlRflDNY9Y+O 8xCzkJLfVPoZoyxkjvfBLgs1QZts/OvBjNveUj9JnwkuS+twj/Iy2RGC74dq9kXe Cc/s/ELfRyFIE8OMCl2Sm1aLcKTiXA5gY1ZDLxBJsoC9pn5/kiKSXAcZ65DMqVDc oBLZY6AO4mKMg0xXVDJ5LN5Aj8M9HLRcXhw5UYpzhRfQICENEGV4qMEcbEYRQb3t 0KIswKmWgXhTSzgqigejCTWzdXDr3qP2ILGUemLeVe06mh6E0F0rwDguSaqolGdC GPjtBWxOkzYJAGCYOzWbxZqBwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYQefLj kxhUuTzZOWldjuSGNw69MB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D bG5GTVU2V2hLQV9SQVotS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkSZF7UZpo4D4447r456u9FXMVJTvlVfnhwS5TNw2D9OwmtgavqQ+J 8KE1V8zS+lVLq42bxp8ePheuDJWOtcSTes7GbLsHJ9YrGK9+A1sU3BD1EXhlcJvf dzQbZ3xuYtwJxaUqwjjO1yAnFZNPw80qdBHWvHe8KEQCRVQ/11JWgmLoETey0oAT d7JikNUzyKTjokj4DOA54N43MPxXXv+D4fiATNDqVcv5p7CpQN5Xu3ZusSDIlV3T grBPksCmaa2VA6EPqqJ374zmjveC1nOEZ8f+RNxsH65wFZ5nf2kEri5lrNPdM5Ld Ls/OuYGKxw3JkG/dQobzR8tlzUr6Kgyz -----END CERTIFICATE-----Generated at Sun Jun 15 08:31:13 2025 by rpki-client