$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json) Hash identifier: Lfn8UaYg/B8EWMNH70wnbbYwfsqGy3+57QChxlHyMPE= Subject key identifier: 37:57:E1:D9:F2:93:30:F8:DB:A7:38:1D:3D:BB:8E:42:E5:56:67:A2 Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft Manifest number: 0661 Signing time: Thu 12 Jun 2025 22:59:24 +0000 Manifest this update: Thu 12 Jun 2025 22:59:23 +0000 Manifest next update: Thu 19 Jun 2025 22:59:23 +0000 Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: 8Uh+BLtFtw6gUCwJZDCtAjCW8d2AyTHTgnvo9DOvwn4=) 2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: dJfXhzg8XYwoUOs2sQdFfnXRTK5+51aUZ+Zq8zrXhMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 22:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: Jun 12 22:59:23 2025 GMT Not After : Jun 19 22:59:23 2025 GMT Subject: CN=684b5bcb-0cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d3:e8:13:a9:30:50:9d:e6:ac:d7:2c:3c:82: 0d:70:fc:aa:d5:87:34:35:e2:ea:09:8b:5f:9a:88: 19:4b:51:b0:c4:40:26:81:58:66:8c:17:80:04:eb: 21:4f:64:a4:76:2d:9e:1b:33:20:ff:89:0e:5c:30: 2b:7b:c5:c3:36:68:6c:06:8b:7d:51:97:d2:3f:a9: d7:de:f8:46:76:f0:c1:29:54:02:bd:ef:27:7a:fa: 67:73:a3:87:21:c8:bd:c8:ff:b9:ef:0d:59:2d:8f: 26:a3:b4:46:46:1d:87:f5:80:7c:99:15:35:40:af: b7:52:91:cb:1c:42:8b:bb:94:c0:d5:8f:f8:9f:61: 25:6e:6e:1a:23:5a:75:fc:2f:c4:d6:c6:4b:62:02: 01:bb:97:a1:2a:dc:b9:2d:45:91:8b:a4:87:2b:c2: 6c:9c:0f:6a:d4:a0:5c:60:91:7e:4c:ba:99:73:c7: 37:b9:7c:f4:a2:6d:00:1c:0e:ff:b6:98:d5:35:d8: 87:c4:73:da:ec:ed:35:e4:64:ee:c1:76:fc:0e:0e: fd:95:4f:38:e9:85:73:9f:1a:96:cc:7b:39:e8:9a: 8b:2e:90:ed:14:fe:6b:e5:68:db:bc:ce:7d:f4:1b: 33:8d:77:6d:21:01:23:14:0d:5e:5d:8a:d2:a4:93: 74:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:57:E1:D9:F2:93:30:F8:DB:A7:38:1D:3D:BB:8E:42:E5:56:67:A2 X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:2b:6d:d8:fa:8d:09:cc:17:be:73:fe:79:a1:38:45:38:f5: 11:ab:b7:2c:f5:35:02:2a:8d:3d:bc:f4:95:f3:e5:61:60:20: 31:6e:5f:0d:48:27:ab:f1:ca:38:06:56:4e:a6:7f:0d:ca:52: 03:43:f8:e0:69:7e:b7:e2:ed:35:32:fd:c9:83:91:a1:0c:36: 4e:dc:2c:2f:d4:9f:d5:b3:5c:93:77:e8:2d:5a:d9:0a:c3:37: 05:71:7b:82:5d:96:a3:f2:6f:65:4a:23:a1:eb:7d:cd:74:73: 39:6b:c5:46:33:e9:cc:d0:4f:77:e1:fd:67:e6:45:ca:50:52: 30:c4:f7:38:e8:23:43:e5:1f:7e:95:3a:2e:a5:ff:2b:f2:0b: e1:1e:03:1e:b4:a8:e5:2f:6c:bf:8a:0b:60:1e:d2:ac:77:01: 94:c0:2f:ee:3c:47:56:0a:d6:ae:f1:72:dd:f0:17:0c:7b:c0: 8b:c0:d2:5b:f7:73:9e:53:fe:ea:72:46:49:33:84:ed:2e:50: 9d:88:7d:83:a7:88:fd:22:9a:e0:e2:fb:9c:ef:83:da:e5:1c: 54:ba:9f:47:f2:51:c9:c8:01:cc:be:41:86:4f:8b:2d:eb:81: 27:78:d4:d8:00:24:a1:ba:07:40:86:30:37:b3:bb:f4:a9:85: d6:63:c9:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz M0UwMkMwMTkwHhcNMjUwNjEyMjI1OTIzWhcNMjUwNjE5MjI1OTIzWjAYMRYwFAYD VQQDEw02ODRiNWJjYi0wY2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdPoE6kwUJ3mrNcsPIINcPyq1Yc0NeLqCYtfmogZS1GwxEAmgVhmjBeABOsh T2Skdi2eGzMg/4kOXDAre8XDNmhsBot9UZfSP6nX3vhGdvDBKVQCve8nevpnc6OH Ici9yP+57w1ZLY8mo7RGRh2H9YB8mRU1QK+3UpHLHEKLu5TA1Y/4n2Elbm4aI1p1 /C/E1sZLYgIBu5ehKty5LUWRi6SHK8JsnA9q1KBcYJF+TLqZc8c3uXz0om0AHA7/ tpjVNdiHxHPa7O015GTuwXb8Dg79lU846YVznxqWzHs56JqLLpDtFP5r5WjbvM59 9BszjXdtIQEjFA1eXYrSpJN0MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdX4dny kzD426c4HT27jkLlVmeiMB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3 QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu cWZJYlRFLWd5R1l6NEN3QmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4K23Y+o0JzBe+c/55oThFOPURq7cs9TUCKo09vPSV8+VhYCAxbl8N SCer8co4BlZOpn8NylIDQ/jgaX634u01Mv3Jg5GhDDZO3Cwv1J/Vs1yTd+gtWtkK wzcFcXuCXZaj8m9lSiOh633NdHM5a8VGM+nM0E934f1n5kXKUFIwxPc46CND5R9+ lToupf8r8gvhHgMetKjlL2y/igtgHtKsdwGUwC/uPEdWCtau8XLd8BcMe8CLwNJb 93OeU/7qckZJM4TtLlCdiH2Dp4j9Iprg4vuc74Pa5RxUup9H8lHJyAHMvkGGT4st 64EneNTYACShugdAhjA3s7v0qYXWY8mK -----END CERTIFICATE-----Generated at Sat Jun 14 19:24:34 2025 by rpki-client