$ rpki-client -vvf rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft File: Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft (raw, json) Hash identifier: j9wiTEZJJZQzNLGzTzOnrqnRP5vLe/Oi4ZEp1jx23KY= Subject key identifier: A1:D0:69:D9:15:92:2E:0C:36:15:C0:0E:6E:8B:08:63:1C:26:A1:B7 Authority key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 Certificate issuer: /CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft Manifest number: D3 Signing time: Sun 15 Jun 2025 04:46:41 +0000 Manifest this update: Sun 15 Jun 2025 04:46:40 +0000 Manifest next update: Sun 22 Jun 2025 04:46:40 +0000 Files and hashes: 1: Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl (hash: IiTNnSB+2oJN56E6SL5OQARE48h61hWNc6loa+Q6m0g=) 2: 66387A6C087211EF9EDFC673C4F9AE02.roa (hash: HS/fldQZ4RrI6nmzaLMIdIrXDhqFavfV6tsG7wDJ0JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E39F, serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Validity Not Before: Jun 15 04:46:40 2025 GMT Not After : Jun 22 04:46:40 2025 GMT Subject: CN=684e5031-8386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b3:cc:26:53:03:d1:7c:96:62:40:76:37:8d: ff:3d:96:e9:5d:ff:c6:aa:9a:d7:11:0e:4a:91:3e: 6a:12:e9:bf:8f:07:a5:bc:4c:fd:ce:fe:1a:95:e8: 4a:55:c9:45:d2:e1:e9:42:86:04:22:0c:be:87:71: d3:98:f4:6e:9e:db:56:69:26:af:d2:4b:2e:0c:07: ab:3b:77:88:21:da:42:a2:c5:7f:ad:06:60:2c:e8: de:fd:c2:8b:6f:f8:0d:d8:d8:f7:a8:b7:a9:72:67: 92:0f:6c:b4:7f:e5:cb:d2:39:59:6d:9e:64:20:60: 27:6b:5c:67:77:31:35:42:fa:b4:bc:9b:66:18:03: 97:b0:20:c5:79:fb:51:6c:89:fd:df:ee:33:44:91: fd:3b:2c:6e:b0:80:38:4d:d2:d7:59:d2:34:fd:7b: 9f:f3:f1:d9:1e:61:1f:f6:f7:0a:2a:0e:43:52:ad: 3c:ee:4d:01:dd:8b:d4:31:26:11:9c:5d:6e:20:10: b4:80:a7:b3:7b:cb:50:9d:1d:77:d9:21:c2:c8:43: 07:e0:a4:63:bc:3c:f0:70:97:e2:ce:e6:ae:6d:94: a8:d3:9c:03:8d:ab:02:68:6d:5f:37:d4:1d:98:3f: 2d:ba:ae:0b:93:2c:b3:33:06:be:d4:62:50:0e:26: d5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D0:69:D9:15:92:2E:0C:36:15:C0:0E:6E:8B:08:63:1C:26:A1:B7 X509v3 Authority Key Identifier: keyid:11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9a:37:b8:aa:ae:f8:bf:84:7c:06:1f:d4:c1:c4:2b:5a:e0: 06:54:7a:f1:d3:06:dc:3c:c6:31:68:ff:81:14:23:c3:ac:0b: 31:71:28:31:66:b9:52:a6:c5:91:98:06:a2:68:bd:26:cf:72: 3e:62:7b:a7:57:cd:b2:c8:93:2f:83:96:70:07:8c:0e:1c:89: 9a:7f:8e:ff:30:d1:13:89:04:ba:82:4f:82:da:b3:ab:67:35: dc:79:26:a8:63:69:f2:90:58:d0:eb:d5:ec:a0:05:4a:7f:57: 7f:cd:53:87:fb:e9:70:6e:79:a4:8d:cb:71:ac:43:7a:51:dd: d4:42:b8:6b:a3:8d:65:85:4d:7a:28:e9:e5:f0:40:9f:97:80: 86:3a:63:ec:38:ec:36:e2:99:d8:dd:1f:f1:bf:c5:a0:b8:c1: 71:f8:16:5f:dd:63:2a:e8:c7:8a:ab:cf:b0:4d:63:8d:ba:dc: 7c:aa:c1:0a:03:09:ab:21:93:5d:03:24:19:76:a1:c2:8b:7f: 82:81:c9:88:36:45:3d:17:ae:24:6f:ee:39:a7:a2:69:89:96: b3:e9:e5:7a:4f:4e:59:39:0d:6f:ab:a5:cb:bb:b4:2e:b1:7d: 78:3a:60:1a:e5:93:43:ce:6d:fb:04:0d:97:57:44:b7:f9:cb: b6:2f:84:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzOUYxMTAvBgNVBAUTKDExRTczRjUyQkYwRjU4NkYyQjlGQTY5RUUyQ0ExNUYy MTg1RjY2QzIwHhcNMjUwNjE1MDQ0NjQwWhcNMjUwNjIyMDQ0NjQwWjAYMRYwFAYD VQQDEw02ODRlNTAzMS04Mzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybPMJlMD0XyWYkB2N43/PZbpXf/GqprXEQ5KkT5qEum/jwelvEz9zv4alehK VclF0uHpQoYEIgy+h3HTmPRunttWaSav0ksuDAerO3eIIdpCosV/rQZgLOje/cKL b/gN2Nj3qLepcmeSD2y0f+XL0jlZbZ5kIGAna1xndzE1Qvq0vJtmGAOXsCDFeftR bIn93+4zRJH9OyxusIA4TdLXWdI0/Xuf8/HZHmEf9vcKKg5DUq087k0B3YvUMSYR nF1uIBC0gKeze8tQnR132SHCyEMH4KRjvDzwcJfizuaubZSo05wDjasCaG1fN9Qd mD8tuq4LkyyzMwa+1GJQDibVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHQadkV ki4MNhXADm6LCGMcJqG3MB8GA1UdIwQYMBaAFBHnP1K/D1hvK5+mnuLKFfIYX2bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM5Ri9CNTA5NUEyMjA4 NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdHOHJuNmFlNHNvVjhoaGZa c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VlY19VcjhQV0c4cm42YWU0c29WOGhoZlpzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM5Ri9CNTA5NUEyMjA4NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdH OHJuNmFlNHNvVjhoaGZac0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrmje4qq74v4R8Bh/UwcQrWuAGVHrx0wbcPMYxaP+BFCPDrAsxcSgx ZrlSpsWRmAaiaL0mz3I+YnunV82yyJMvg5ZwB4wOHImaf47/MNETiQS6gk+C2rOr ZzXceSaoY2nykFjQ69XsoAVKf1d/zVOH++lwbnmkjctxrEN6Ud3UQrhro41lhU16 KOnl8ECfl4CGOmPsOOw24pnY3R/xv8WguMFx+BZf3WMq6MeKq8+wTWONutx8qsEK AwmrIZNdAyQZdqHCi3+CgcmINkU9F64kb+45p6JpiZaz6eV6T05ZOQ1vq6XLu7Qu sX14OmAa5ZNDzm37BA2XV0S3+cu2L4Tp -----END CERTIFICATE-----Generated at Sun Jun 15 08:32:51 2025 by rpki-client