$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft File: EEjCfhFLkRMVXq68kL7G3YD4xss.mft (raw, json) Hash identifier: Dc8hP5lc39n4ixphh1NfCB2Dduf4zW1k1du7GZdxqSg= Subject key identifier: 43:4F:32:96:94:F1:13:97:F9:70:7F:24:48:42:7C:36:3A:5F:D8:1C Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB Certificate issuer: /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft Manifest number: 0636 Signing time: Thu 24 Apr 2025 22:25:11 +0000 Manifest this update: Thu 24 Apr 2025 22:25:10 +0000 Manifest next update: Thu 01 May 2025 22:25:10 +0000 Files and hashes: 1: EEjCfhFLkRMVXq68kL7G3YD4xss.crl (hash: YQ0TKbl3lwjmnV9B7Tpb/8vjSZDeLGvuCfqDBdJCzxI=) 2: 5F506D7C8C7911EBB7E88620C4F9AE02.roa (hash: AgY8IbFur1Q4oa6eGF7ycAtrRQlqnrORaZ4AABeYzt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E08E, serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB Validity Not Before: Apr 24 22:25:10 2025 GMT Not After : May 1 22:25:10 2025 GMT Subject: CN=680aba47-b16d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4a:13:ab:07:d7:07:e5:fb:d2:d9:b1:24:9a: 1d:3b:46:b0:31:31:9a:d1:1d:2b:d5:91:8b:05:b3: ec:3a:37:75:bc:e8:24:2b:06:91:c0:90:9f:0c:35: a1:b2:94:f7:e6:57:98:66:e7:3e:f3:e2:9b:c2:c2: 33:66:82:09:40:a6:3a:ce:4b:6c:cb:7b:34:b7:d9: a0:c7:cd:0a:2a:cb:2b:ae:e0:9f:55:1c:3b:c9:8c: db:55:cd:b1:9e:d2:b7:2b:30:5d:09:a4:63:a5:65: 5f:40:e2:38:73:bd:e3:82:39:82:48:9b:ef:2f:f3: 41:74:ca:79:18:4d:0d:67:be:15:3c:f0:bb:6f:be: a8:7f:5f:2b:ef:3e:61:51:f5:93:a0:26:ce:a5:6e: cf:2a:bd:f2:c0:d3:58:1b:c5:69:e5:c2:9b:46:5d: c2:49:63:18:e7:72:fa:e7:e3:79:c1:d0:5a:26:57: b4:9d:28:28:79:39:45:a8:10:8c:40:4f:79:41:6a: b6:eb:a7:75:9f:7a:5c:ee:5a:c8:47:17:82:aa:5b: 43:cf:70:a0:83:7d:95:15:2c:f8:1d:47:f6:bc:5e: 92:d8:b8:a5:a7:80:b6:dd:07:e0:4c:38:5f:70:66: 01:42:b1:b3:76:65:2d:c1:54:c7:a5:21:37:45:21: 9d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4F:32:96:94:F1:13:97:F9:70:7F:24:48:42:7C:36:3A:5F:D8:1C X509v3 Authority Key Identifier: keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:ae:6b:48:9f:e6:f9:be:59:81:be:4b:d6:e4:6d:8b:5b:e7: f5:5e:32:e0:48:88:9d:4c:8f:57:2e:23:33:25:f4:cb:a5:43: c8:73:07:10:b3:46:fe:8d:09:08:e5:08:39:50:4f:49:88:40: 35:d2:73:45:5e:c8:43:90:d2:0b:11:27:e9:59:67:bd:51:83: 54:92:ce:ce:6d:d4:01:83:8b:9b:7d:29:88:7c:50:08:28:a5: ca:1f:75:14:d1:a6:30:29:a7:94:bf:9a:c5:37:85:de:c1:3c: 13:77:da:5d:9f:9a:ad:46:d6:18:3c:02:82:e7:f1:a4:31:8c: 30:58:69:70:8a:30:0c:c9:7f:59:d2:29:4d:7d:90:c1:63:b1: cf:26:a3:7d:8c:0c:18:d8:21:48:c4:9e:ee:e3:4d:a1:61:fc: 71:04:d2:6c:3f:a0:3a:23:08:b5:46:77:58:4d:c8:15:f5:54: 84:6f:b5:ce:80:11:99:a4:ad:ec:b7:f0:2a:5a:79:79:be:74: a9:96:3f:5e:bf:f3:38:2f:60:52:1f:c0:d7:7f:47:46:d2:60: d8:4c:d8:9b:dc:71:9c:33:2f:24:f1:40:6a:65:17:59:31:58: 8d:95:9e:d4:d7:00:a0:b5:3f:1e:54:18:ee:b2:79:ab:d5:50: 8d:92:b3:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUwOEUxMTAvBgNVBAUTKDEwNDhDMjdFMTE0QjkxMTMxNTVFQUVCQzkwQkVDNkRE ODBGOEM2Q0IwHhcNMjUwNDI0MjIyNTEwWhcNMjUwNTAxMjIyNTEwWjAYMRYwFAYD VQQDEw02ODBhYmE0Ny1iMTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5koTqwfXB+X70tmxJJodO0awMTGa0R0r1ZGLBbPsOjd1vOgkKwaRwJCfDDWh spT35leYZuc+8+KbwsIzZoIJQKY6zktsy3s0t9mgx80KKssrruCfVRw7yYzbVc2x ntK3KzBdCaRjpWVfQOI4c73jgjmCSJvvL/NBdMp5GE0NZ74VPPC7b76of18r7z5h UfWToCbOpW7PKr3ywNNYG8Vp5cKbRl3CSWMY53L65+N5wdBaJle0nSgoeTlFqBCM QE95QWq266d1n3pc7lrIRxeCqltDz3Cgg32VFSz4HUf2vF6S2Lilp4C23QfgTDhf cGYBQrGzdmUtwVTHpSE3RSGdtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENPMpaU 8ROX+XB/JEhCfDY6X9gcMB8GA1UdIwQYMBaAFBBIwn4RS5ETFV6uvJC+xt2A+MbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTA4RS9FMUNBNTg0NjhD NzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtSTVZYcTY4a0w3RzNZRDR4 c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFakNmaEZMa1JNVlhxNjhrTDdHM1lENHhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTA4RS9FMUNBNTg0NjhDNzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtS TVZYcTY4a0w3RzNZRDR4c3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUrmtIn+b5vlmBvkvW5G2LW+f1XjLgSIidTI9XLiMzJfTLpUPIcwcQ s0b+jQkI5Qg5UE9JiEA10nNFXshDkNILESfpWWe9UYNUks7ObdQBg4ubfSmIfFAI KKXKH3UU0aYwKaeUv5rFN4XewTwTd9pdn5qtRtYYPAKC5/GkMYwwWGlwijAMyX9Z 0ilNfZDBY7HPJqN9jAwY2CFIxJ7u402hYfxxBNJsP6A6Iwi1RndYTcgV9VSEb7XO gBGZpK3st/AqWnl5vnSplj9ev/M4L2BSH8DXf0dG0mDYTNib3HGcMy8k8UBqZRdZ MViNlZ7U1wCgtT8eVBjusnmr1VCNkrPR -----END CERTIFICATE-----Generated at Sat Apr 26 16:42:05 2025 by rpki-client