$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: XmDTziBa3O1jcu8r62k5hvPDDZ7GoLhA4O91wU3Q4OY= Subject key identifier: DC:F0:F2:19:EC:BF:FF:A5:A6:74:47:CE:C1:D4:AC:74:53:E8:7A:C7 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 03CD Signing time: Sun 15 Jun 2025 00:21:59 +0000 Manifest this update: Sun 15 Jun 2025 00:21:58 +0000 Manifest next update: Sun 22 Jun 2025 00:21:58 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: 01zfpeOYH+3WBTpvbyE1/1Zjb5LL06v3+Ps5q7OZ0t0=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: sKV1Z0cYRUE+VWc2YxnGxIUnhyBPTtnJSFk2o11IcBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Jun 15 00:21:58 2025 GMT Not After : Jun 22 00:21:58 2025 GMT Subject: CN=684e1227-a3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:68:1d:7d:1c:f2:4a:6e:9a:8e:7f:f3:98: a4:ee:c2:f3:b4:ad:9f:6f:ab:a8:60:71:b7:84:61: c2:28:9c:8c:0a:10:67:dd:41:0f:bd:68:c5:5a:1d: 51:8b:85:38:2b:12:62:1c:72:de:87:c1:99:f5:5b: 82:78:52:bd:36:2f:6e:5f:7d:56:66:7c:4c:80:a7: 57:2f:94:85:d3:80:e2:56:5d:02:a5:49:74:fa:15: d2:ff:6a:3c:be:f0:19:f3:38:f1:29:e1:fe:c3:23: 78:2a:f7:6b:e8:e4:d6:68:b8:d3:f4:00:6b:71:7f: e1:07:cb:4d:97:ee:66:45:d4:e3:dd:7a:a5:3c:fe: 82:fd:e3:a9:b9:c7:38:f0:93:e9:e2:7a:8f:d6:73: 36:3c:35:81:87:40:a0:4c:5f:10:3e:12:f7:58:72: 18:fa:ec:d3:7f:ed:4f:4c:c7:e4:46:e9:16:57:2f: 64:0d:32:4b:e4:3c:07:b5:36:38:fa:4f:05:b2:85: 0a:c5:01:4c:21:d4:85:5b:3c:30:28:26:60:15:5c: c0:8c:61:be:86:a5:de:36:6b:64:2d:cd:2a:df:f3: 09:8a:dc:98:f1:f1:a2:9b:f0:e0:30:4e:50:2f:a3: c5:db:83:49:b5:15:62:85:03:aa:53:c3:b8:bd:b2: 76:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F0:F2:19:EC:BF:FF:A5:A6:74:47:CE:C1:D4:AC:74:53:E8:7A:C7 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f8:a8:87:04:a1:10:9f:90:8e:37:f5:e7:21:e2:2f:86:60: 93:dd:3f:85:75:f0:ba:f6:e3:6b:c0:d4:9a:d1:f4:49:f4:e2: e8:58:42:61:e0:8b:8d:e6:37:e5:24:13:d3:6b:6e:e2:7f:86: 04:7d:8d:86:46:b9:02:8b:be:c4:d4:2b:b6:a7:7d:5e:62:d1: 7a:1f:70:af:b3:6e:cb:37:1f:50:c7:18:68:ba:26:b3:2f:94: 69:a9:c2:0a:51:a6:54:07:0b:28:73:e1:b3:bc:60:9d:09:9b: ae:b6:3e:9e:97:95:15:1e:0e:da:e7:4b:57:87:d3:79:15:af: 9d:30:1a:32:8c:bb:76:69:0e:e0:40:16:54:df:02:fe:1a:29: 2b:b0:2c:b9:8e:77:c7:3e:a9:1d:3e:0c:d4:85:8e:b6:cf:a5: 6a:53:52:67:ea:67:19:73:d0:a2:af:98:98:f2:d1:e8:83:bb: 9e:eb:b5:9b:a2:aa:7d:00:99:9d:b1:37:07:0b:08:fc:4c:8a: 82:17:df:f7:04:40:5d:f3:60:87:64:ca:77:db:36:9f:b2:72: 28:57:36:7f:95:34:6d:e7:2f:6e:30:80:9f:2e:ac:89:f2:4d: 32:51:72:94:75:18:1a:c8:ed:7b:6e:e8:14:57:61:70:ce:86: 99:0a:67:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjUwNjE1MDAyMTU4WhcNMjUwNjIyMDAyMTU4WjAYMRYwFAYD VQQDEw02ODRlMTIyNy1hM2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnRoHX0c8kpumo5/85ik7sLztK2fb6uoYHG3hGHCKJyMChBn3UEPvWjFWh1R i4U4KxJiHHLeh8GZ9VuCeFK9Ni9uX31WZnxMgKdXL5SF04DiVl0CpUl0+hXS/2o8 vvAZ8zjxKeH+wyN4Kvdr6OTWaLjT9ABrcX/hB8tNl+5mRdTj3XqlPP6C/eOpucc4 8JPp4nqP1nM2PDWBh0CgTF8QPhL3WHIY+uzTf+1PTMfkRukWVy9kDTJL5DwHtTY4 +k8FsoUKxQFMIdSFWzwwKCZgFVzAjGG+hqXeNmtkLc0q3/MJityY8fGim/DgME5Q L6PF24NJtRVihQOqU8O4vbJ24wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzw8hns v/+lpnRHzsHUrHRT6HrHMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw+KiHBKEQn5CON/XnIeIvhmCT3T+FdfC69uNrwNSa0fRJ9OLoWEJh 4IuN5jflJBPTa27if4YEfY2GRrkCi77E1Cu2p31eYtF6H3Cvs27LNx9Qxxhouiaz L5RpqcIKUaZUBwsoc+GzvGCdCZuutj6el5UVHg7a50tXh9N5Fa+dMBoyjLt2aQ7g QBZU3wL+GikrsCy5jnfHPqkdPgzUhY62z6VqU1Jn6mcZc9Cir5iY8tHog7ue67Wb oqp9AJmdsTcHCwj8TIqCF9/3BEBd82CHZMp32zafsnIoVzZ/lTRt5y9uMICfLqyJ 8k0yUXKUdRgayO17bugUV2FwzoaZCmfD -----END CERTIFICATE-----Generated at Sun Jun 15 09:58:29 2025 by rpki-client