$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft File: EEjCfhFLkRMVXq68kL7G3YD4xss.mft (raw, json) Hash identifier: t+gQRcLLiELjhlSeOEUeDClwq92OoAappPU2bJe1AGU= Subject key identifier: FA:92:59:F0:AD:1E:61:9D:42:EF:A9:D6:82:0E:31:D2:E0:A0:59:01 Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB Certificate issuer: /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft Manifest number: 0650 Signing time: Mon 16 Jun 2025 22:13:41 +0000 Manifest this update: Mon 16 Jun 2025 22:13:40 +0000 Manifest next update: Mon 23 Jun 2025 22:13:40 +0000 Files and hashes: 1: EEjCfhFLkRMVXq68kL7G3YD4xss.crl (hash: F9bpJuGMLFavxdUZKjX/Iw48BPer0VdN1lHFzBxYwDg=) 2: 5F506D7C8C7911EBB7E88620C4F9AE02.roa (hash: AgY8IbFur1Q4oa6eGF7ycAtrRQlqnrORaZ4AABeYzt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E08E, serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB Validity Not Before: Jun 16 22:13:40 2025 GMT Not After : Jun 23 22:13:40 2025 GMT Subject: CN=68509715-cbc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8e:ad:78:8d:99:e5:ad:f5:63:61:5b:90:44: 1b:97:f3:bd:c8:ce:ae:d6:28:9c:20:13:a3:ba:d5: 73:f7:c3:69:66:17:c8:8e:02:08:f3:63:f0:16:86: 7d:e8:19:5c:20:fc:79:e9:85:90:73:34:c2:9c:5f: 60:1a:de:e2:4e:03:df:a1:88:21:d9:92:a2:39:79: 03:72:ac:2c:d7:8a:fe:16:cd:7c:9e:7a:92:0e:1f: d1:9d:80:d7:4a:3a:d3:ad:6d:65:4b:fe:f2:5a:58: 63:ea:58:67:07:b2:c6:4c:ab:d2:d8:69:f3:61:f7: 1e:38:4a:6d:9b:e5:91:f8:b8:f5:f1:b5:47:5f:fd: 5f:29:24:cf:2d:ec:0d:1a:b4:96:75:81:bb:52:65: e9:18:98:e4:22:eb:89:47:8b:80:0f:5b:9e:a5:21: c1:11:04:1f:3b:0e:5d:40:a7:de:8f:e7:a8:6b:ba: 71:8e:e2:9f:56:df:03:17:91:83:39:12:20:6b:b8: b7:99:b4:4b:e0:4b:85:23:44:7d:a0:8b:33:ef:38: d7:74:7d:46:b8:c6:e5:fa:f9:fb:fe:1d:5d:ea:8e: b2:9b:90:b3:91:c8:71:1e:3a:89:f9:86:d1:d0:c7: 5f:f2:c1:6b:80:55:db:a3:f2:3e:ef:41:8e:f5:cb: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:92:59:F0:AD:1E:61:9D:42:EF:A9:D6:82:0E:31:D2:E0:A0:59:01 X509v3 Authority Key Identifier: keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f6:56:3e:c3:28:17:70:70:30:a7:8a:59:b8:2b:6e:87:29: b5:f1:ad:ab:a8:6a:2e:6b:55:f7:9e:a5:7d:32:29:af:06:8f: 14:12:2f:ed:a6:83:b7:f1:da:3e:48:e2:66:dd:03:8b:78:d8: a8:b2:fd:c2:fa:fe:fc:0b:39:f8:aa:5c:58:61:a1:3c:53:88: 80:b0:ba:de:15:13:6c:ef:5b:0b:6d:b6:31:2e:7d:5c:9e:a1: 4e:bd:40:09:dd:01:04:2f:39:f0:c9:7e:0b:9e:ae:65:59:b2: 48:13:0e:68:24:ea:25:33:43:a1:f2:4b:29:1f:e1:b6:17:99: cb:ca:4b:2d:49:8d:72:9d:5c:b9:34:c2:30:f8:82:d2:0c:08: 7e:45:0e:3b:07:5d:f9:e4:d8:c6:ba:90:57:56:05:17:32:36: a1:45:dd:70:7b:96:d7:0b:1f:19:b5:d5:2e:10:90:67:03:9f: 36:77:ef:b2:45:f5:87:72:0a:10:44:c6:11:54:ee:16:2b:6e: a4:dd:1d:b2:2a:96:ab:01:73:e7:59:ca:4a:cc:98:0a:8a:3b: 2b:1f:61:f8:f8:a1:16:11:24:7b:0a:db:28:cd:e0:82:de:a7: 00:83:00:70:3d:8c:5e:8c:91:52:33:b3:ea:56:8f:8b:ea:d3: a1:db:99:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUwOEUxMTAvBgNVBAUTKDEwNDhDMjdFMTE0QjkxMTMxNTVFQUVCQzkwQkVDNkRE ODBGOEM2Q0IwHhcNMjUwNjE2MjIxMzQwWhcNMjUwNjIzMjIxMzQwWjAYMRYwFAYD VQQDEw02ODUwOTcxNS1jYmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Y6teI2Z5a31Y2FbkEQbl/O9yM6u1iicIBOjutVz98NpZhfIjgII82PwFoZ9 6BlcIPx56YWQczTCnF9gGt7iTgPfoYgh2ZKiOXkDcqws14r+Fs18nnqSDh/RnYDX SjrTrW1lS/7yWlhj6lhnB7LGTKvS2GnzYfceOEptm+WR+Lj18bVHX/1fKSTPLewN GrSWdYG7UmXpGJjkIuuJR4uAD1uepSHBEQQfOw5dQKfej+eoa7pxjuKfVt8DF5GD ORIga7i3mbRL4EuFI0R9oIsz7zjXdH1GuMbl+vn7/h1d6o6ym5CzkchxHjqJ+YbR 0Mdf8sFrgFXbo/I+70GO9cvD8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqSWfCt HmGdQu+p1oIOMdLgoFkBMB8GA1UdIwQYMBaAFBBIwn4RS5ETFV6uvJC+xt2A+MbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTA4RS9FMUNBNTg0NjhD NzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtSTVZYcTY4a0w3RzNZRDR4 c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFakNmaEZMa1JNVlhxNjhrTDdHM1lENHhzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTA4RS9FMUNBNTg0NjhDNzcxMUVCODg1QjMxMUZDNEY5QUUwMi9FRWpDZmhGTGtS TVZYcTY4a0w3RzNZRDR4c3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr9lY+wygXcHAwp4pZuCtuhym18a2rqGoua1X3nqV9MimvBo8UEi/t poO38do+SOJm3QOLeNiosv3C+v78Czn4qlxYYaE8U4iAsLreFRNs71sLbbYxLn1c nqFOvUAJ3QEELznwyX4Lnq5lWbJIEw5oJOolM0Oh8kspH+G2F5nLykstSY1ynVy5 NMIw+ILSDAh+RQ47B1355NjGupBXVgUXMjahRd1we5bXCx8ZtdUuEJBnA582d++y RfWHcgoQRMYRVO4WK26k3R2yKparAXPnWcpKzJgKijsrH2H4+KEWESR7CtsozeCC 3qcAgwBwPYxejJFSM7PqVo+L6tOh25kL -----END CERTIFICATE-----Generated at Tue Jun 17 01:34:55 2025 by rpki-client