$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft File: Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json) Hash identifier: ksUFhD1NErpN7b3FyeS8ygjr/9aKR7w7llo7iaHzKZo= Subject key identifier: 3E:EA:DC:B5:99:B9:5F:B3:A9:D3:9F:45:82:8B:D4:24:FB:2E:25:A4 Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 Certificate issuer: /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft Manifest number: E7 Signing time: Fri 13 Jun 2025 04:24:44 +0000 Manifest this update: Fri 13 Jun 2025 04:24:44 +0000 Manifest next update: Fri 20 Jun 2025 04:24:44 +0000 Files and hashes: 1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: 5doytYoBowVe32e1avgiyyS7rVEwPlcbS/aVyCi+M4w=) 2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: nAAaBPNOT83reooBTbRysc5FUHQ0lj/e8r5J8CDIx/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386 Validity Not Before: Jun 13 04:24:44 2025 GMT Not After : Jun 20 04:24:44 2025 GMT Subject: CN=684ba80c-38fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:d8:41:31:99:82:ec:7d:3d:c5:56:30:a6: 27:28:c6:b8:23:c1:95:d5:5b:cd:f7:40:b9:89:2b: ef:3c:7a:40:06:fa:68:47:bb:96:8d:d3:50:22:33: 06:1a:11:83:f1:93:3c:fb:db:9e:c3:ff:45:60:99: 24:dd:ae:76:f9:f8:c1:1c:f6:4a:7b:b3:78:60:03: 12:dc:61:15:9a:d7:9d:b8:4c:35:35:9a:96:71:b2: 6a:a6:97:ce:65:8d:c6:e0:d2:50:1f:f8:aa:69:bb: 23:bc:e4:22:be:b6:21:8d:a4:eb:23:45:73:e3:1a: 4e:b3:d0:e3:74:f5:03:6c:33:1b:24:54:57:95:a7: ce:76:15:62:f1:82:52:9d:ae:aa:50:e1:47:29:ab: 31:0d:24:70:23:e0:bb:16:7a:5d:13:02:fc:28:6f: 1b:38:13:55:aa:3b:ba:4d:9d:ea:4e:be:72:27:40: 63:dd:7b:55:36:a3:40:d6:d5:93:1a:f2:85:4c:c1: 68:06:48:95:fa:2f:51:45:ab:93:2d:90:09:61:d7: 0a:2c:69:d0:b9:94:2d:94:47:05:e1:91:90:ff:69: fc:19:96:87:cc:5c:9c:f8:26:38:ee:44:e8:1d:ff: c1:fc:d5:6f:a6:ec:75:e7:6f:59:96:00:09:ce:ab: 29:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EA:DC:B5:99:B9:5F:B3:A9:D3:9F:45:82:8B:D4:24:FB:2E:25:A4 X509v3 Authority Key Identifier: keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7a:69:0e:a1:c3:d1:7c:a8:fd:fd:38:c9:08:df:31:30:b6: f2:33:cf:5e:c1:31:c8:eb:a6:0a:7a:87:9f:7c:f4:72:85:db: cd:d6:da:88:21:32:f5:95:51:b2:2d:4f:12:a0:79:1b:90:f4: 66:56:59:e9:36:95:ed:f7:87:d1:82:98:e8:ee:85:4c:2a:44: 12:06:6f:56:cf:85:4d:cf:3c:20:24:38:d2:52:c9:64:22:92: e2:9e:b0:15:fc:68:1a:5d:b6:c5:ec:21:02:cd:a7:9f:49:91: 24:51:34:15:63:47:b7:2e:e4:63:4f:72:e3:c4:0d:bc:d3:25: f8:2e:67:8c:27:cb:5b:18:1f:68:a5:59:7f:fd:d1:ea:c2:49: cd:d3:7e:ff:db:43:d9:89:a9:ae:09:11:43:4c:91:f3:a6:99: d8:27:66:91:97:5c:27:87:74:e1:d3:bd:bc:3f:6e:28:9e:28: fe:e4:0e:b8:98:39:7d:03:4d:27:cb:e2:ba:6e:76:ad:f6:e1: 20:75:80:be:55:31:94:df:8f:6d:25:30:c4:32:f0:26:f5:3e: b2:73:9c:f9:1d:a8:a2:d7:db:5a:ec:2a:12:be:77:9a:75:e0: 71:d2:4a:91:75:23:89:9f:38:d5:68:0d:3b:00:40:0a:70:aa: fb:63:d3:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD MjBBRTUzODYwHhcNMjUwNjEzMDQyNDQ0WhcNMjUwNjIwMDQyNDQ0WjAYMRYwFAYD VQQDEw02ODRiYTgwYy0zOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf7YQTGZgux9PcVWMKYnKMa4I8GV1VvN90C5iSvvPHpABvpoR7uWjdNQIjMG GhGD8ZM8+9uew/9FYJkk3a52+fjBHPZKe7N4YAMS3GEVmteduEw1NZqWcbJqppfO ZY3G4NJQH/iqabsjvOQivrYhjaTrI0Vz4xpOs9DjdPUDbDMbJFRXlafOdhVi8YJS na6qUOFHKasxDSRwI+C7FnpdEwL8KG8bOBNVqju6TZ3qTr5yJ0Bj3XtVNqNA1tWT GvKFTMFoBkiV+i9RRauTLZAJYdcKLGnQuZQtlEcF4ZGQ/2n8GZaHzFyc+CY47kTo Hf/B/NVvpux1529ZlgAJzqspOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7q3LWZ uV+zqdOfRYKL1CT7LiWkMB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4 RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN U1R5S19INkcxbW5DQ3VVNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcemkOocPRfKj9/TjJCN8xMLbyM89ewTHI66YKeoeffPRyhdvN1tqI ITL1lVGyLU8SoHkbkPRmVlnpNpXt94fRgpjo7oVMKkQSBm9Wz4VNzzwgJDjSUslk IpLinrAV/GgaXbbF7CECzaefSZEkUTQVY0e3LuRjT3LjxA280yX4LmeMJ8tbGB9o pVl//dHqwknN037/20PZiamuCRFDTJHzppnYJ2aRl1wnh3Th0728P24onij+5A64 mDl9A00ny+K6bnat9uEgdYC+VTGU349tJTDEMvAm9T6yc5z5Haii19ta7CoSvnea deBx0kqRdSOJnzjVaA07AEAKcKr7Y9Nt -----END CERTIFICATE-----Generated at Sat Jun 14 18:27:56 2025 by rpki-client