$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft File: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft (raw, json) Hash identifier: aj8zORmBXzmzyzbkPim++iqpYPZP4nYucrdKVx+YhIU= Subject key identifier: 76:5D:F4:BF:B1:82:81:AB:A5:2A:FC:61:60:9E:8F:5F:BC:EE:7E:E8 Authority key identifier: 78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 Certificate issuer: /CN=A9163824/serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Certificate serial: 260D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft Manifest number: 2D11 Signing time: Sat 14 Jun 2025 15:40:44 +0000 Manifest this update: Sat 14 Jun 2025 15:40:44 +0000 Manifest next update: Sat 21 Jun 2025 15:40:44 +0000 Files and hashes: 1: eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl (hash: jDLhH+vVuLUXR5EvknFzG7C50d2mt4MkyJOnuIQhm7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9741 (0x260d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824, serialNumber=78A99267D7EEF127F5FB4524F79C59AF0ABBC1F4 Validity Not Before: Jun 14 15:40:44 2025 GMT Not After : Jun 21 15:40:44 2025 GMT Subject: CN=684d97fc-056e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:9a:2d:2d:4e:25:c8:51:33:f6:db:f8:3a: f0:e4:cd:b0:f3:07:93:15:61:6a:63:89:16:fa:90: 1a:ec:79:3a:f0:cd:bd:33:05:20:03:f8:a7:8d:7d: 35:d3:2f:7f:36:3a:c3:3d:f1:91:40:cf:0f:0a:bb: ff:dc:c4:5c:23:0d:dc:4a:5c:b8:be:b2:9b:58:40: c0:d4:09:d1:0d:d3:6c:ae:4b:9c:9b:cb:eb:d7:96: 05:e5:91:5c:76:32:b5:ee:20:c0:f6:85:55:93:ab: 5a:b9:03:85:bd:eb:07:7e:89:77:be:24:b4:98:9d: ed:e0:b9:2a:74:7b:8f:d4:d1:d3:97:d1:7f:8b:35: c6:4f:01:b7:a6:e1:4a:17:fa:87:b3:2c:01:65:81: fa:32:16:f3:d4:da:7d:3c:a0:36:27:ea:a7:79:95: c2:26:10:ba:16:f3:b6:bd:91:b7:92:40:e9:34:1b: f4:12:82:bd:9e:81:df:3f:c7:5a:46:d4:32:59:f1: 23:b2:35:59:44:51:47:a1:aa:ce:0f:d7:63:53:f7: 31:78:65:85:e8:cc:42:e7:ab:71:39:e1:2b:87:db: b2:64:9d:1b:66:ec:1f:ed:61:9b:39:4a:b6:02:da: 56:bb:63:b7:e5:e2:bf:10:e3:02:60:dd:9b:7c:1d: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5D:F4:BF:B1:82:81:AB:A5:2A:FC:61:60:9E:8F:5F:BC:EE:7E:E8 X509v3 Authority Key Identifier: keyid:78:A9:92:67:D7:EE:F1:27:F5:FB:45:24:F7:9C:59:AF:0A:BB:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/eKmSZ9fu8Sf1-0Uk95xZrwq7wfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:0a:51:89:06:82:7a:3c:ea:35:69:8d:bb:19:9f:b3:05:ae: 02:c7:14:f0:23:b9:58:c5:05:63:d4:1d:c2:48:df:a4:7f:33: 18:a5:17:d5:1b:0b:86:06:37:ea:09:a4:bd:ef:ea:26:45:54: 1b:5f:b1:71:6d:7f:b8:c1:ee:74:5c:7f:d7:ec:51:6a:4a:aa: 8a:07:1a:87:a2:49:25:6f:6e:23:bf:cf:82:22:92:bb:6e:08: ab:c4:1e:3f:92:90:96:46:62:03:71:5a:db:65:30:40:66:fd: 30:ef:0d:45:ed:52:5a:47:cc:b1:f1:e2:26:9f:7a:c6:15:c0: 16:58:0a:48:df:5f:aa:8a:b7:7e:36:fe:41:26:1d:0c:33:03: 14:b4:86:94:99:5e:3f:fb:a5:ff:14:74:15:0f:d0:32:3e:7a: 04:1b:d3:92:d5:f8:24:bd:cd:a4:2f:b4:76:04:64:f9:4e:03: a0:16:e9:e6:20:43:75:55:fe:2b:17:a6:09:9f:9a:65:8f:e6: 3c:f5:a1:82:aa:c5:88:8a:f6:0f:61:4c:bd:f2:2c:fd:3a:d3: 9f:3c:9f:78:99:63:2e:6f:dd:dd:9b:19:37:49:6a:96:32:c2: c9:56:09:90:eb:cc:24:4b:bf:a4:16:8f:af:60:af:e4:95:68: e2:ab:66:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDc4QTk5MjY3RDdFRUYxMjdGNUZCNDUyNEY3OUM1OUFG MEFCQkMxRjQwHhcNMjUwNjE0MTU0MDQ0WhcNMjUwNjIxMTU0MDQ0WjAYMRYwFAYD VQQDEw02ODRkOTdmYy0wNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTyaLS1OJchRM/bb+Drw5M2w8weTFWFqY4kW+pAa7Hk68M29MwUgA/injX01 0y9/NjrDPfGRQM8PCrv/3MRcIw3cSly4vrKbWEDA1AnRDdNsrkucm8vr15YF5ZFc djK17iDA9oVVk6tauQOFvesHfol3viS0mJ3t4LkqdHuP1NHTl9F/izXGTwG3puFK F/qHsywBZYH6Mhbz1Np9PKA2J+qneZXCJhC6FvO2vZG3kkDpNBv0EoK9noHfP8da RtQyWfEjsjVZRFFHoarOD9djU/cxeGWF6MxC56txOeErh9uyZJ0bZuwf7WGbOUq2 AtpWu2O35eK/EOMCYN2bfB3UTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZd9L+x goGrpSr8YWCej1+87n7oMB8GA1UdIwQYMBaAFHipkmfX7vEn9ftFJPecWa8Ku8H0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThTZjEtMFVrOTV4WnJ3cTd3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVNaOWZ1OFNmMS0wVWs5NXhacndxN3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzgyNC9CQTBFRkU1MkZEMjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9lS21TWjlmdThT ZjEtMFVrOTV4WnJ3cTd3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiClGJBoJ6POo1aY27GZ+zBa4CxxTwI7lYxQVj1B3CSN+kfzMYpRfV GwuGBjfqCaS97+omRVQbX7FxbX+4we50XH/X7FFqSqqKBxqHokklb24jv8+CIpK7 bgirxB4/kpCWRmIDcVrbZTBAZv0w7w1F7VJaR8yx8eImn3rGFcAWWApI31+qird+ Nv5BJh0MMwMUtIaUmV4/+6X/FHQVD9AyPnoEG9OS1fgkvc2kL7R2BGT5TgOgFunm IEN1Vf4rF6YJn5plj+Y89aGCqsWIivYPYUy98iz9OtOfPJ94mWMub93dmxk3SWqW MsLJVgmQ68wkS7+kFo+vYK/klWjiq2ZG -----END CERTIFICATE-----Generated at Sun Jun 15 08:36:29 2025 by rpki-client