$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft File: eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json) Hash identifier: 44vj1vWv9tvW/rQ3krcdr+OqXOPeiMWEtiaFgJo/LLc= Subject key identifier: 14:B9:D1:A6:BE:72:2E:F1:C8:8B:66:6B:68:D9:19:EF:26:8E:04:2D Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 Certificate issuer: /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Certificate serial: 042C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft Manifest number: 0427 Signing time: Mon 16 Jun 2025 23:58:34 +0000 Manifest this update: Mon 16 Jun 2025 23:58:33 +0000 Manifest next update: Mon 23 Jun 2025 23:58:33 +0000 Files and hashes: 1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: K9WljaEPwj6WXEQmkWSGADIXJ+XW1ofed+xlgtaqv0g=) 2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: hAIkEeLEWcB2wcEGanDh+e9b0MM5CnTkz5SOu7dH+to=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 23:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74 Validity Not Before: Jun 16 23:58:33 2025 GMT Not After : Jun 23 23:58:33 2025 GMT Subject: CN=6850afaa-4612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:34:2e:16:68:fe:a3:07:94:cc:30:41:c1: 53:00:47:46:e4:e8:35:b3:da:d7:f7:28:7b:83:50: 78:20:b2:f6:28:cc:cd:33:9b:d8:7a:b1:b9:4b:eb: e7:6e:a1:a8:ce:10:79:e4:07:01:d2:00:47:fa:71: 55:61:68:63:a9:dc:c6:2f:20:a5:69:90:51:99:d7: 17:07:51:dc:b6:f4:13:70:61:a1:17:5d:3e:a5:f1: e8:18:c6:db:96:83:8d:40:7a:3e:1f:26:3d:ae:c6: 0d:a6:39:2d:d9:f5:2e:1c:5f:f9:c7:37:5f:1a:1b: d5:af:79:b6:b6:c0:43:38:83:2f:58:cd:72:ba:17: ad:4c:31:5e:1f:84:d2:bf:5e:6e:dc:5d:e0:be:36: 0b:30:7d:5e:8f:11:65:d9:53:f2:30:3d:14:e2:ef: ad:34:d6:b1:3e:94:7b:46:87:59:42:b0:f8:c6:22: d6:96:71:e3:a0:f6:38:bb:fc:f3:22:81:c4:ca:80: 97:78:83:68:9c:25:c3:6d:bd:e0:de:23:ae:6c:f8: 9f:3c:e6:5b:18:c3:e6:0c:22:ba:d6:94:1d:e4:3b: 74:cc:62:10:cf:ba:eb:6b:ac:e0:98:f1:c4:94:13: 3f:2f:11:92:32:41:aa:40:87:7d:43:dd:fb:b2:90: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B9:D1:A6:BE:72:2E:F1:C8:8B:66:6B:68:D9:19:EF:26:8E:04:2D X509v3 Authority Key Identifier: keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:37:64:af:f1:9a:b7:80:6a:b0:83:7f:92:ec:d6:42:30:89: 62:a6:03:d1:7e:a6:12:0a:87:d7:79:e4:a7:c7:ef:84:2d:55: e4:af:e4:b9:fb:e9:b3:72:af:4a:ce:a5:5b:ad:5b:fa:ac:fe: b7:56:aa:c4:40:0f:39:d2:0e:b3:4c:a3:65:33:c2:22:ce:43: e9:fe:8c:d4:b4:6e:28:17:31:a3:eb:7f:c7:61:2b:0e:2b:39: 15:e5:2b:6a:6b:3a:e1:d1:2c:d0:af:55:50:99:65:b6:61:b4: 34:d3:ad:da:fe:17:de:00:5d:09:cc:61:2c:00:5c:e1:69:f6: 27:5b:a2:ca:b4:1d:a8:8a:a7:bf:e5:06:db:05:70:eb:07:ee: ae:70:0a:58:80:c4:df:91:53:37:93:a2:ca:4e:79:08:44:73: fb:9c:e9:a7:79:55:6a:1f:16:46:4b:81:ac:70:81:74:be:0f: a9:54:ab:a6:15:99:64:3b:c8:61:27:51:64:7c:77:59:2f:7f: c4:24:ec:05:55:df:31:e7:e2:57:6b:1a:d7:fb:84:d0:3f:2d: bb:27:d4:1f:1a:8b:c7:98:0c:25:1f:57:a7:16:46:a3:c3:1f: d7:8a:fa:0f:4c:ad:2e:7a:88:58:28:ae:ea:4d:69:4e:90:c5: b7:ae:4a:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGNTIxMTAvBgNVBAUTKDc5N0RGQTE4ODM5Rjg3RDEzMTBFOUNBOUMzNDEwQUJF QjY4MzlFNzQwHhcNMjUwNjE2MjM1ODMzWhcNMjUwNjIzMjM1ODMzWjAYMRYwFAYD VQQDEw02ODUwYWZhYS00NjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyQ0LhZo/qMHlMwwQcFTAEdG5Og1s9rX9yh7g1B4ILL2KMzNM5vYerG5S+vn bqGozhB55AcB0gBH+nFVYWhjqdzGLyClaZBRmdcXB1HctvQTcGGhF10+pfHoGMbb loONQHo+HyY9rsYNpjkt2fUuHF/5xzdfGhvVr3m2tsBDOIMvWM1yuhetTDFeH4TS v15u3F3gvjYLMH1ejxFl2VPyMD0U4u+tNNaxPpR7RodZQrD4xiLWlnHjoPY4u/zz IoHEyoCXeINonCXDbb3g3iOubPifPOZbGMPmDCK61pQd5Dt0zGIQz7rra6zgmPHE lBM/LxGSMkGqQId9Q937spBT3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBS50aa+ ci7xyItma2jZGe8mjgQtMB8GA1UdIwQYMBaAFHl9+hiDn4fRMQ6cqcNBCr62g550 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0Y1Mi9FOTQ2NjZDQzY4 QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5RXhEcHlwdzBFS3ZyYURu blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYMzZHSU9maDlFeERweXB3MEVLdnJhRG5uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0Y1Mi9FOTQ2NjZDQzY4QUYxMUVDQURENkI1NkZDNEY5QUUwMi9lWDM2R0lPZmg5 RXhEcHlwdzBFS3ZyYURublEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5N2Sv8Zq3gGqwg3+S7NZCMIlipgPRfqYSCofXeeSnx++ELVXkr+S5 ++mzcq9KzqVbrVv6rP63VqrEQA850g6zTKNlM8IizkPp/ozUtG4oFzGj63/HYSsO KzkV5Stqazrh0SzQr1VQmWW2YbQ0063a/hfeAF0JzGEsAFzhafYnW6LKtB2oiqe/ 5QbbBXDrB+6ucApYgMTfkVM3k6LKTnkIRHP7nOmneVVqHxZGS4GscIF0vg+pVKum FZlkO8hhJ1FkfHdZL3/EJOwFVd8x5+JXaxrX+4TQPy27J9QfGovHmAwlH1enFkaj wx/XivoPTK0ueohYKK7qTWlOkMW3rkrz -----END CERTIFICATE-----Generated at Tue Jun 17 16:44:23 2025 by rpki-client