$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json) Hash identifier: TOgDMP3IO4/Zo/aLX8ql1nLrD2nY8U2l4PDg82Ubmr8= Subject key identifier: 23:2A:2D:B9:DD:72:FD:C8:28:A9:3E:76:03:52:6D:B3:2F:7E:97:30 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 03B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft Manifest number: 0350 Signing time: Fri 13 Jun 2025 00:49:07 +0000 Manifest this update: Fri 13 Jun 2025 00:49:07 +0000 Manifest next update: Fri 20 Jun 2025 00:49:07 +0000 Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: 7rqekCmWqar2WlTlZ3dZsKwxj+/FjSCaQkJ0wrQalts=) 2: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: O+w5tLUYY2vDAPyyihGdNaVeLcPrzrretQfcUAVViMY=) 3: 010342748FE911EDA6F5922AC4F9AE02.roa (hash: 5w2gwK/+zmYTYrBGcuIv1emp3tFDL4QjnfqeQ2tORBo=) 4: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: KY39ZDloooDTLSWdSYEfYOluFdXRey3d+9IwjJV7kvw=) 5: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: w55707A6oGZPVJb5dLEvH7DmAsCJ21ZtMMUXzrwNCRM=) 6: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: PO28TqT7JFAgsJS4OG8H4ivCR2vG+AQUGdE3hSyf+fM=) 7: 7CCE329266F711EF86880681C4F9AE02.roa (hash: 6anx6+tUYpCyea4W0BqwQSGkyUCAr4k+8K9NAhmwsJE=) 8: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: BC1XUzBkjyQzlz4GvtxH81hMdlkimJB+lU8F+PmiFVI=) 9: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: ABW3By8YU2W6olwHz1/qOoSOHNFidR8eMB8CQ1rCUFk=) 10: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: q0o0blyQ81NictXAsmCb5KMZ0BzFrp/mj7hc480MWyw=) 11: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: R17w/Fkdvp/1oePeXfLYVtvseH7RLcT+pcv0SXzugK4=) 12: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: QdBFtLVQnvTC0U8ce4xfWA4Knfofq/bGhnYdWQPREvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 951 (0x3b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Jun 13 00:49:07 2025 GMT Not After : Jun 20 00:49:07 2025 GMT Subject: CN=684b7583-b325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:05:b8:45:ae:1f:b9:d1:54:7c:14:11:ed:15: f1:14:41:c3:f1:28:64:65:26:c5:c6:99:34:0d:d1: 0b:99:d7:68:4f:eb:2c:91:83:03:d3:66:1b:e3:ca: 15:52:52:38:ac:c8:66:56:f0:fe:0c:9b:ce:b8:9f: b8:b5:d8:2e:1b:8c:00:b1:af:76:6a:6b:5a:8d:ac: e1:5e:89:df:20:81:51:fe:8f:c0:5f:1f:d8:a9:93: 42:ef:23:9a:8a:e4:27:69:c1:f1:41:2e:e2:22:62: fc:82:2e:b6:8a:f8:49:a1:42:15:f2:15:e8:69:07: 37:aa:89:a4:b3:ca:da:da:10:a8:cb:16:6d:8d:32: 98:02:0a:6c:5d:66:3b:0c:fb:6c:9d:7e:6d:44:5c: 8a:1b:e6:c4:f0:8b:2e:01:c4:a1:7f:cf:17:25:c1: 5e:10:16:00:db:53:fd:32:6d:b3:75:ed:e3:03:9b: 63:e7:3c:ae:90:c0:c0:f1:9a:4f:cf:1e:e5:3c:a3: f2:d5:08:bf:63:65:4c:de:f2:28:34:b9:25:07:ab: e3:d3:d3:ba:ef:0e:25:ac:e9:52:13:91:80:29:fd: ce:3d:61:a7:9c:82:69:fc:49:5b:39:3d:a2:ea:93: bc:b5:22:15:c4:80:d1:86:38:44:5a:8f:40:69:5c: f6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2A:2D:B9:DD:72:FD:C8:28:A9:3E:76:03:52:6D:B3:2F:7E:97:30 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:60:90:08:8d:dc:b9:d4:e7:0f:f0:a8:36:d5:ef:4f:67:3c: 2c:3b:33:0e:88:31:60:a0:31:7b:d1:4d:b9:e4:49:b7:a4:aa: 8b:54:ed:75:f6:61:8c:0b:e1:b0:03:ae:38:76:5a:fc:05:2b: d3:38:45:89:85:50:89:31:c2:ad:f2:26:b0:cb:3d:ee:6b:36: 53:69:d7:4b:a0:46:57:c1:9c:57:65:fe:4b:11:33:96:be:34: d5:6a:c1:8f:73:02:e1:fc:bf:67:f7:9c:b9:4c:c3:b9:74:75: 33:5f:bf:e9:40:47:a6:aa:e1:bf:b5:55:fa:cf:2b:d1:0f:cf: e1:a9:61:8b:6f:1c:b2:0f:07:34:75:9d:5e:04:37:8e:0c:6e: 11:82:38:5d:b3:25:8b:c1:e8:7a:9f:9e:a3:46:18:c0:67:1f: 86:75:2c:7a:a8:8e:57:7a:cb:42:2d:7f:12:67:c1:de:04:bd: a4:08:06:a4:db:15:5e:22:f6:46:4f:fa:7e:dd:3e:9e:65:18: 19:09:e6:41:dc:54:d0:f2:aa:12:77:e9:e7:05:77:f2:b5:20: 56:9b:1f:da:3a:1a:aa:0f:b9:70:c8:98:7c:96:43:35:9f:cc: 52:90:88:4b:3f:54:ff:60:02:d5:ae:8d:7f:41:da:38:21:eb: b0:fa:50:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwNjEzMDA0OTA3WhcNMjUwNjIwMDA0OTA3WjAYMRYwFAYD VQQDEw02ODRiNzU4My1iMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQW4Ra4fudFUfBQR7RXxFEHD8ShkZSbFxpk0DdELmddoT+sskYMD02Yb48oV UlI4rMhmVvD+DJvOuJ+4tdguG4wAsa92amtajazhXonfIIFR/o/AXx/YqZNC7yOa iuQnacHxQS7iImL8gi62ivhJoUIV8hXoaQc3qomks8ra2hCoyxZtjTKYAgpsXWY7 DPtsnX5tRFyKG+bE8IsuAcShf88XJcFeEBYA21P9Mm2zde3jA5tj5zyukMDA8ZpP zx7lPKPy1Qi/Y2VM3vIoNLklB6vj09O67w4lrOlSE5GAKf3OPWGnnIJp/ElbOT2i 6pO8tSIVxIDRhjhEWo9AaVz2rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMqLbnd cv3IKKk+dgNSbbMvfpcwMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q dXByZFBTZjRYYU9QRS1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAYJAIjdy51OcP8Kg21e9PZzwsOzMOiDFgoDF70U255Em3pKqLVO11 9mGMC+GwA644dlr8BSvTOEWJhVCJMcKt8iawyz3uazZTaddLoEZXwZxXZf5LETOW vjTVasGPcwLh/L9n95y5TMO5dHUzX7/pQEemquG/tVX6zyvRD8/hqWGLbxyyDwc0 dZ1eBDeODG4RgjhdsyWLweh6n56jRhjAZx+GdSx6qI5XestCLX8SZ8HeBL2kCAak 2xVeIvZGT/p+3T6eZRgZCeZB3FTQ8qoSd+nnBXfytSBWmx/aOhqqD7lwyJh8lkM1 n8xSkIhLP1T/YALVro1/Qdo4Ieuw+lD+ -----END CERTIFICATE-----Generated at Sat Jun 14 17:20:42 2025 by rpki-client