$ rpki-client -vvf rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft File: ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft (raw, json) Hash identifier: i27XJbvfKTuC0TFBqfKt6B+WSnfbiy99/2auoqpInyk= Subject key identifier: 33:1C:4B:8E:4D:95:4A:13:C8:7D:19:34:14:99:8A:67:26:98:D9:C1 Authority key identifier: 7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F Certificate issuer: /CN=A919A285/serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Certificate serial: 0877 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft Manifest number: 0870 Signing time: Wed 18 Jun 2025 20:30:38 +0000 Manifest this update: Wed 18 Jun 2025 20:30:38 +0000 Manifest next update: Wed 25 Jun 2025 20:30:38 +0000 Files and hashes: 1: ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl (hash: qBNNZgndr72XFGbis6QYzYIVIxwudHhCuzhJmUqKpxQ=) 2: 1DCABC72C57811EA950A8643C4F9AE02.roa (hash: 3y+P8Wjw2NbNvaqBtjPXBVu0eGWr6eeBTOCTDHgw4uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A285, serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Validity Not Before: Jun 18 20:30:38 2025 GMT Not After : Jun 25 20:30:38 2025 GMT Subject: CN=685321ee-b3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ea:10:13:4b:c9:65:3f:99:78:91:21:19:c9: 01:5f:7c:9d:5e:2e:1f:98:37:7b:fc:8b:4c:be:69: 31:5f:90:c3:e8:33:bd:d7:01:10:de:f2:ec:bc:6c: 46:90:fd:35:6b:f0:dd:ec:4a:f6:49:7d:cd:33:71: 49:c9:8e:e5:c0:1a:68:98:c2:0d:09:d7:c4:55:18: 59:16:c3:6d:3b:f7:fc:78:08:4e:24:39:6d:1b:89: 3a:02:83:30:cb:eb:20:8a:a0:aa:06:7f:27:87:90: 65:9e:01:80:39:65:71:93:28:c5:32:43:35:08:67: 45:fb:3b:7d:ac:01:be:5c:df:6d:51:dd:5f:12:7e: fa:b0:60:84:15:df:c5:98:cd:06:b6:84:3b:a2:74: ea:64:62:d4:09:cb:58:00:5e:f9:bf:af:00:c8:f5: 43:c5:e1:11:76:a6:df:90:32:42:95:aa:79:33:00: 9f:46:f0:b5:20:4c:02:da:6a:af:8a:48:d2:d0:ea: a1:ec:ef:62:82:36:dd:4f:a3:b4:46:e3:e6:40:dd: 3b:d0:8a:c3:2f:18:c4:65:65:48:1b:8c:3e:38:d0: 80:fc:1a:50:c3:7a:f0:8d:c6:59:a8:ec:fc:e5:af: d9:6b:e6:de:e3:42:c2:4d:c2:e4:9d:ca:d1:8e:a1: a9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1C:4B:8E:4D:95:4A:13:C8:7D:19:34:14:99:8A:67:26:98:D9:C1 X509v3 Authority Key Identifier: keyid:7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:2a:a0:be:cc:80:b2:7b:01:8e:a5:ad:5c:67:08:1a:ec:f9: 90:b3:24:d1:dd:8c:44:0c:ed:2f:51:aa:7d:42:62:09:6d:5e: 78:d4:87:7c:d5:f9:f5:f5:a2:bb:54:e3:f7:0c:8f:a6:1b:33: aa:0b:56:38:0e:86:1b:4d:0e:67:8e:54:c4:24:a1:54:65:36: ca:37:9f:7c:28:6d:c8:fc:c7:93:9e:01:16:03:81:8b:8d:aa: e1:5a:f9:30:3c:f4:32:65:14:64:6d:c9:4c:f5:c2:e3:b1:a8: de:92:00:67:d2:33:41:2c:61:dd:e6:64:0f:b3:60:30:a3:c6: ec:df:49:9c:5b:58:8f:40:d5:f8:4a:f0:62:76:c8:fd:04:ee: 27:6e:e7:fc:9e:a7:15:e9:48:37:a9:0f:d0:5e:d9:bf:8b:a3: 5b:c2:f8:43:c1:50:e2:17:05:0c:7e:1b:b8:ab:b8:a0:63:b3: 0d:69:cf:f4:5c:9c:7f:64:82:bd:5c:2f:41:ca:14:bb:af:13: 49:e2:bc:2c:d1:2d:c7:ee:07:f9:3d:3a:2e:73:12:5c:b4:5e: c5:83:f4:af:55:2c:56:ee:88:1e:7f:a6:46:54:c1:e7:00:d5: 44:3c:7a:c9:90:3a:41:37:41:65:9c:3a:b9:ff:e5:12:0b:a0: 67:a8:05:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEyODUxMTAvBgNVBAUTKDdBMzFENTczOTc5OEIwNjRBNjAwNzEzM0FBM0U1QjlD RDBFRUQ0NUYwHhcNMjUwNjE4MjAzMDM4WhcNMjUwNjI1MjAzMDM4WjAYMRYwFAYD VQQDEw02ODUzMjFlZS1iM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOoQE0vJZT+ZeJEhGckBX3ydXi4fmDd7/ItMvmkxX5DD6DO91wEQ3vLsvGxG kP01a/Dd7Er2SX3NM3FJyY7lwBpomMINCdfEVRhZFsNtO/f8eAhOJDltG4k6AoMw y+sgiqCqBn8nh5BlngGAOWVxkyjFMkM1CGdF+zt9rAG+XN9tUd1fEn76sGCEFd/F mM0GtoQ7onTqZGLUCctYAF75v68AyPVDxeERdqbfkDJClap5MwCfRvC1IEwC2mqv ikjS0Oqh7O9igjbdT6O0RuPmQN070IrDLxjEZWVIG4w+ONCA/BpQw3rwjcZZqOz8 5a/Za+be40LCTcLkncrRjqGpswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDMcS45N lUoTyH0ZNBSZimcmmNnBMB8GA1UdIwQYMBaAFHox1XOXmLBkpgBxM6o+W5zQ7tRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTI4NS9ERDYyODlBQUM1 NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNHU21BSEV6cWo1Ym5ORHUx RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqSFZjNWVZc0dTbUFIRXpxajVibk5EdTFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTI4NS9ERDYyODlBQUM1NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNH U21BSEV6cWo1Ym5ORHUxRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUKqC+zICyewGOpa1cZwga7PmQsyTR3YxEDO0vUap9QmIJbV541Id8 1fn19aK7VOP3DI+mGzOqC1Y4DoYbTQ5njlTEJKFUZTbKN598KG3I/MeTngEWA4GL jarhWvkwPPQyZRRkbclM9cLjsajekgBn0jNBLGHd5mQPs2Awo8bs30mcW1iPQNX4 SvBidsj9BO4nbuf8nqcV6Ug3qQ/QXtm/i6NbwvhDwVDiFwUMfhu4q7igY7MNac/0 XJx/ZIK9XC9ByhS7rxNJ4rws0S3H7gf5PToucxJctF7Fg/SvVSxW7ogef6ZGVMHn ANVEPHrJkDpBN0FlnDq5/+USC6BnqAUu -----END CERTIFICATE-----Generated at Fri Jun 20 12:57:32 2025 by rpki-client