$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft File: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json) Hash identifier: VRgDy07wyYqjM1zKlETi6E54IChGJFjOKpd8dP1QNTQ= Subject key identifier: E7:FA:8B:45:6A:A1:B0:A3:8C:1B:1F:F0:6C:31:05:9E:70:97:C7:91 Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Certificate serial: 350B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft Manifest number: 34D1 Signing time: Sat 14 Jun 2025 14:44:23 +0000 Manifest this update: Sat 14 Jun 2025 14:44:22 +0000 Manifest next update: Sat 21 Jun 2025 14:44:22 +0000 Files and hashes: 1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: nYLrRw7Urs5UhmviKvohJOx6VG73qhkbSMChV3177K4=) 2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: pAR1FgGTlUIXKdXPzl2g83tghG6tiadwAtJ5qGgzg7c=) 3: 19CCFBDE6F0911ED8A7BD268C4F9AE02.roa (hash: JTK51f8dfP+bxciKZy6FgqfkHpvTyTd0gqBndr+pK/M=) 4: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: S9c42K/e6Cb4RZkOmU2A+Wc3g/Elgh6iQKBCJml/etM=) 5: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: WY+AEtZNGfOw12yKOfvg/F8cjo6zbb8RMRrGslASsW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13579 (0x350b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Validity Not Before: Jun 14 14:44:22 2025 GMT Not After : Jun 21 14:44:22 2025 GMT Subject: CN=684d8ac7-0129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:23:20:94:60:2b:ac:a7:81:0c:7f:48:64: f4:26:9e:20:de:5e:14:3b:0c:57:07:7d:6e:10:c0: 7f:66:df:18:77:21:9a:bb:d6:11:b1:d5:66:e5:7c: 37:28:2c:6f:1b:ef:51:82:65:ad:39:53:23:87:70: 10:22:20:e7:af:f4:74:31:bf:17:8b:e2:98:1f:70: 07:e1:e8:de:a5:ce:2f:fb:23:4f:a0:58:5b:f7:57: 2c:59:0e:64:4c:24:1e:4b:9e:d6:8d:77:18:aa:a9: 53:d1:39:a5:4b:50:75:42:58:54:ab:e1:2a:ff:ab: a3:69:64:94:ba:54:7e:b7:01:ed:ec:16:5f:ed:17: 47:70:e7:58:1c:5d:53:00:05:a6:c6:fd:e9:71:be: 32:7d:60:37:ef:5a:6c:28:d7:cf:0e:60:ea:84:cc: 7e:6f:75:27:68:98:0d:b3:5f:a1:e0:75:a2:26:dc: 49:12:6f:37:52:08:e0:26:ad:73:af:c7:99:05:c4: a4:21:7e:6c:98:6d:30:fc:ea:71:af:82:d7:24:bd: c6:3e:d6:7b:f3:59:f9:df:c5:86:b0:58:73:ba:01: f9:0a:e3:3a:cf:5a:d8:33:8d:9f:10:aa:8c:1d:f9: 6f:57:2e:50:b8:c5:d4:1e:ad:7d:3f:88:3b:a4:4b: f7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FA:8B:45:6A:A1:B0:A3:8C:1B:1F:F0:6C:31:05:9E:70:97:C7:91 X509v3 Authority Key Identifier: keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ff:3b:4f:35:fd:94:db:f7:d4:18:66:5a:fd:7f:1f:7f:69: 6a:21:69:21:18:8b:d3:05:d5:cd:ae:8b:e0:0b:f5:ce:36:fe: d3:94:7a:33:6a:5a:16:76:f5:9f:d8:a8:e3:32:3c:5d:42:9e: 94:b2:19:b4:1c:62:dd:5f:52:a3:61:37:81:f5:84:e1:c2:4d: 60:84:7f:28:1e:ee:09:b0:92:f0:39:bd:24:71:ea:7e:66:d1: a4:86:f7:65:16:65:e9:62:0f:a2:13:5d:7d:21:53:85:49:9f: b8:d9:de:e0:e8:37:cc:48:a7:68:67:75:a1:d7:5d:f7:6d:bc: db:fa:bf:b5:a8:82:45:76:75:7f:00:74:90:8c:1f:5d:38:45: 75:0c:4f:e8:cd:d1:bf:dd:d1:11:f1:74:50:c8:c1:26:8a:5b: 15:86:da:b4:cf:64:06:15:c6:70:c0:2b:0e:de:ff:7d:2c:03: 6c:7c:7e:33:7d:04:08:79:96:a3:42:e6:9d:5f:cd:74:f0:b8: bb:14:db:9c:75:c5:2a:07:6b:4b:32:0d:88:f3:fc:8b:79:dd: aa:b3:b4:e5:37:0f:47:a0:6f:a6:d5:9d:fb:e5:c2:d4:0c:e7: e1:d8:3a:05:2f:65:2b:6d:64:d3:0a:13:2c:0b:ee:20:a3:1c: 1a:a1:68:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQjAxMTAvBgNVBAUTKDEzMjQwNDMwMjFCQjQ1RDdGRjY2RjIwQUZDNjgzOTM0 MzEzMEMzRjIwHhcNMjUwNjE0MTQ0NDIyWhcNMjUwNjIxMTQ0NDIyWjAYMRYwFAYD VQQDEw02ODRkOGFjNy0wMTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KMjIJRgK6yngQx/SGT0Jp4g3l4UOwxXB31uEMB/Zt8YdyGau9YRsdVm5Xw3 KCxvG+9RgmWtOVMjh3AQIiDnr/R0Mb8Xi+KYH3AH4ejepc4v+yNPoFhb91csWQ5k TCQeS57WjXcYqqlT0TmlS1B1QlhUq+Eq/6ujaWSUulR+twHt7BZf7RdHcOdYHF1T AAWmxv3pcb4yfWA371psKNfPDmDqhMx+b3UnaJgNs1+h4HWiJtxJEm83UgjgJq1z r8eZBcSkIX5smG0w/Opxr4LXJL3GPtZ781n538WGsFhzugH5CuM6z1rYM42fEKqM HflvVy5QuMXUHq19P4g7pEv3KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOf6i0Vq obCjjBsf8GwxBZ5wl8eRMB8GA1UdIwQYMBaAFBMkBDAhu0XX/2byCvxoOTQxMMPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCMC9FNTU3QzAwMDFE OTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1JkZl9adklLX0dnNU5ERXd3 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V5UUVNQ0c3UmRmX1p2SUtfR2c1TkRFd3dfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCMC9FNTU3QzAwMDFEOTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1Jk Zl9adklLX0dnNU5ERXd3X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB/ztPNf2U2/fUGGZa/X8ff2lqIWkhGIvTBdXNrovgC/XONv7TlHoz aloWdvWf2KjjMjxdQp6Ushm0HGLdX1KjYTeB9YThwk1ghH8oHu4JsJLwOb0kcep+ ZtGkhvdlFmXpYg+iE119IVOFSZ+42d7g6DfMSKdoZ3Wh1133bbzb+r+1qIJFdnV/ AHSQjB9dOEV1DE/ozdG/3dER8XRQyMEmilsVhtq0z2QGFcZwwCsO3v99LANsfH4z fQQIeZajQuadX8108Li7FNucdcUqB2tLMg2I8/yLed2qs7TlNw9HoG+m1Z375cLU DOfh2DoFL2UrbWTTChMsC+4goxwaoWjT -----END CERTIFICATE-----Generated at Mon Jun 16 10:07:45 2025 by rpki-client