$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft File: EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json) Hash identifier: 0DSlrkkUX5NkT5aLiD8wKFIGHprPsl6xe/fJ3w9vE68= Subject key identifier: 52:EE:C5:E2:D8:8C:B1:83:BD:CE:B8:9B:D4:E1:4F:92:23:61:31:3A Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 Certificate issuer: /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Certificate serial: 0456 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft Manifest number: 0452 Signing time: Fri 20 Jun 2025 23:56:56 +0000 Manifest this update: Fri 20 Jun 2025 23:56:55 +0000 Manifest next update: Fri 27 Jun 2025 23:56:55 +0000 Files and hashes: 1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: QPrn/niYL1DGssGYZe/mQgRQ8IkbAXyZcmweyIkB6qM=) 2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: XjunMNzYncJwuOqeAscMtpgQiJ/lvJGQsFB1GF7BxVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 23:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1110 (0x456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7 Validity Not Before: Jun 20 23:56:55 2025 GMT Not After : Jun 27 23:56:55 2025 GMT Subject: CN=6855f547-d369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9e:18:2a:d4:5b:37:3c:9b:74:d6:93:b0:18: 57:73:85:09:18:b5:ff:57:26:75:8c:fc:c3:a1:ac: 20:e4:78:92:1f:9e:4b:bb:60:06:a9:83:fa:8a:56: da:8a:e2:07:e8:6f:66:58:c4:99:c0:84:89:36:29: 7e:ea:73:53:05:4b:4c:f7:38:9b:79:ba:59:ee:4c: 4c:de:91:23:e1:72:cc:67:95:68:42:51:62:c6:0d: 69:c1:81:b4:cd:81:e7:73:d2:2d:26:1e:9b:c9:29: a1:81:e8:06:ef:2c:f9:d2:67:11:0a:25:bb:17:05: 8b:8a:f7:d0:56:5f:6b:78:6e:aa:6e:07:7d:01:32: 79:10:c1:58:71:8a:72:97:3f:41:97:cf:60:d9:56: f5:12:86:a1:c4:52:35:c2:f5:77:ab:b7:60:fe:50: 14:49:86:3c:97:ef:2a:16:ae:c0:19:ca:42:aa:a2: f1:36:20:c5:1d:0c:4e:fe:71:4f:bb:af:56:8e:be: 02:25:b6:a2:94:71:bb:c0:33:4f:07:83:da:c6:f3: b3:3e:61:b5:cf:14:a7:31:b4:52:04:2b:44:f8:56: 0b:dd:01:a6:11:2b:7d:8b:88:10:82:dc:6c:51:22: 4c:36:6d:9a:09:2b:9f:7d:f9:77:11:c8:9d:dd:b4: ed:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EE:C5:E2:D8:8C:B1:83:BD:CE:B8:9B:D4:E1:4F:92:23:61:31:3A X509v3 Authority Key Identifier: keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:46:01:f0:c7:8c:a9:4e:ea:fb:04:5f:2f:16:2b:94:0c:06: 28:88:bc:9a:04:fa:15:5c:eb:6f:9e:68:c0:4e:d8:82:59:fe: e2:80:60:35:d5:32:b2:6a:1d:6e:8c:dc:7b:da:8d:bb:0e:36: 01:66:f5:21:bf:db:46:ba:93:ad:cb:41:85:18:da:3f:eb:ea: a4:e8:47:cd:09:70:29:bc:8b:47:51:ee:63:ba:e4:a7:d2:b8: b4:42:81:18:f3:0c:8e:12:63:46:44:cd:c6:ec:ba:87:ae:a8: 43:ef:1c:58:81:5c:ba:b6:87:42:93:92:e3:31:30:1d:6c:de: 01:fa:85:f0:25:ce:cf:a8:0e:fd:53:38:de:a3:68:b3:83:fc: e4:e1:24:6a:0c:c2:1a:ad:8b:2c:c4:2e:24:90:1d:80:e1:33: 41:d1:05:dd:b1:96:4c:2e:32:91:29:23:52:f1:69:d7:c8:e1: 97:b4:b4:0b:9f:34:d6:35:0e:80:a2:57:50:ee:d9:66:cc:7a: bd:d8:cb:03:12:69:b7:5f:e9:bb:5c:aa:93:01:aa:c2:44:24: 58:e1:07:ea:8d:f6:be:09:1f:69:b5:09:0c:df:90:f2:9f:23: ff:a5:71:57:88:4e:20:61:e0:75:fd:09:75:bf:b5:ed:b8:05: 08:78:b5:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx QzUzMDMxQTcwHhcNMjUwNjIwMjM1NjU1WhcNMjUwNjI3MjM1NjU1WjAYMRYwFAYD VQQDEw02ODU1ZjU0Ny1kMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZ4YKtRbNzybdNaTsBhXc4UJGLX/VyZ1jPzDoawg5HiSH55Lu2AGqYP6ilba iuIH6G9mWMSZwISJNil+6nNTBUtM9zibebpZ7kxM3pEj4XLMZ5VoQlFixg1pwYG0 zYHnc9ItJh6bySmhgegG7yz50mcRCiW7FwWLivfQVl9reG6qbgd9ATJ5EMFYcYpy lz9Bl89g2Vb1EoahxFI1wvV3q7dg/lAUSYY8l+8qFq7AGcpCqqLxNiDFHQxO/nFP u69Wjr4CJbailHG7wDNPB4PaxvOzPmG1zxSnMbRSBCtE+FYL3QGmESt9i4gQgtxs USJMNm2aCSufffl3Ecid3bTtVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLuxeLY jLGDvc64m9ThT5IjYTE6MB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3 NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAyNy8wNDIwN0RGODU3NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0 QlJkTHo0TU1QckljVXdNYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFRgHwx4ypTur7BF8vFiuUDAYoiLyaBPoVXOtvnmjATtiCWf7igGA1 1TKyah1ujNx72o27DjYBZvUhv9tGupOty0GFGNo/6+qk6EfNCXApvItHUe5juuSn 0ri0QoEY8wyOEmNGRM3G7LqHrqhD7xxYgVy6todCk5LjMTAdbN4B+oXwJc7PqA79 Uzjeo2izg/zk4SRqDMIarYssxC4kkB2A4TNB0QXdsZZMLjKRKSNS8WnXyOGXtLQL nzTWNQ6AoldQ7tlmzHq92MsDEmm3X+m7XKqTAarCRCRY4Qfqjfa+CR9ptQkM35Dy nyP/pXFXiE4gYeB1/Ql1v7XtuAUIeLVR -----END CERTIFICATE-----Generated at Sat Jun 21 19:18:05 2025 by rpki-client