$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft File: EouTW4ldrG6Xco__i9w1bokYU-8.mft (raw, json) Hash identifier: 7gMXIjnpFxaq7r5u1gs61uIcqDx1vWu3gu+MamCuIQ4= Subject key identifier: 43:57:45:6A:45:E5:18:39:02:E4:B9:5E:20:46:F5:BE:50:BD:C0:2D Authority key identifier: 12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF Certificate issuer: /CN=A91B7709/serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft Manifest number: 7E Signing time: Tue 17 Jun 2025 05:35:25 +0000 Manifest this update: Tue 17 Jun 2025 05:35:24 +0000 Manifest next update: Tue 24 Jun 2025 05:35:24 +0000 Files and hashes: 1: EouTW4ldrG6Xco__i9w1bokYU-8.crl (hash: Yh2Infazifz6Nc8Gw6wEW5Q9t1DT3f3QBf8K8ZXn7Ck=) 2: 06F9E5368BB711EFB4630B30C4F9AE02.roa (hash: wAMyns8JAwyol9+kP2W1kb8SKSEmxeqxcrfUrnMoAjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7709, serialNumber=128B935B895DAC6E97728FFF8BDC356E891853EF Validity Not Before: Jun 17 05:35:24 2025 GMT Not After : Jun 24 05:35:24 2025 GMT Subject: CN=6850fe9d-331f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:4f:96:06:eb:d6:59:1d:d2:6f:ef:6e:46:41: 51:ae:76:3c:5f:99:b9:ec:70:23:7d:22:cf:7c:a9: e0:43:e5:dd:17:1f:d8:7a:c7:47:75:3e:a7:f9:e0: a5:29:7a:dd:fe:86:e5:49:d7:5e:0b:70:c3:d4:3c: 22:3f:49:20:b9:00:2f:88:42:b8:dd:eb:64:5a:59: b7:ff:30:47:8e:e7:ba:55:52:34:16:fb:bb:40:bd: e3:fa:f1:7b:e1:5c:e8:dd:36:1d:90:ad:d8:f8:ed: 9f:56:93:11:76:18:c2:cb:55:f0:0b:2b:b7:75:7a: 20:5e:df:1a:24:1a:42:33:1c:e1:53:db:bd:b5:a9: 41:2e:73:93:01:17:b1:bf:ef:b9:dd:17:1a:b9:78: 1c:f0:46:a9:80:87:1d:6a:29:6b:aa:1d:f5:49:a7: b2:da:5b:23:56:8d:82:11:53:25:28:b6:cd:f5:3a: 9c:39:7c:5b:66:e1:fd:b7:c2:33:91:87:2b:b6:50: b4:72:e5:e7:de:1f:76:a8:ae:6b:5a:87:e5:e4:a4: ee:46:a2:ef:cf:b8:ee:f1:7a:fe:ed:94:38:a6:60: a8:9f:90:d7:63:ea:e5:fc:0c:c3:04:1f:bb:f2:f2: 96:b4:42:cc:0e:c9:93:82:be:f0:49:2f:bb:c2:6c: 23:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:57:45:6A:45:E5:18:39:02:E4:B9:5E:20:46:F5:BE:50:BD:C0:2D X509v3 Authority Key Identifier: keyid:12:8B:93:5B:89:5D:AC:6E:97:72:8F:FF:8B:DC:35:6E:89:18:53:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EouTW4ldrG6Xco__i9w1bokYU-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/786BDF5E8BB611EF998BAC72C4F9AE02/EouTW4ldrG6Xco__i9w1bokYU-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e9:5f:96:8b:ca:9f:f1:bd:6f:1c:7e:b8:f4:b3:de:a8:13: d2:c7:55:e5:71:f1:95:9a:a8:3b:eb:49:a8:16:54:4b:4e:16: 51:b5:d2:eb:7c:05:69:de:69:5a:c0:73:75:27:17:89:cb:99: 1c:c6:6c:d5:b4:cd:b0:26:a8:41:20:d6:83:11:6c:35:78:c0: c3:85:a9:c8:46:10:20:42:c2:83:4e:b0:19:79:52:3c:39:4b: 93:c2:64:81:20:69:8a:ba:47:45:34:61:8e:59:68:c8:06:05: 39:a9:d2:f0:30:72:1e:40:5f:35:85:5a:bf:fd:88:4d:36:9f: fc:19:a9:de:f8:d6:c9:2f:f2:27:c0:66:57:e5:2b:31:1e:7f: 41:d5:44:80:65:0a:38:d5:91:d5:5c:59:43:a1:d4:57:80:13: e0:e3:0e:92:74:8a:51:e9:ea:42:4b:f3:85:12:32:92:d2:d3: 22:4d:ea:90:e7:27:ee:1a:94:db:09:3e:72:89:90:25:e0:df: e3:3d:d9:f8:85:00:5d:12:b8:b7:f5:d8:d9:d6:42:3a:a2:43: b8:5d:71:65:d2:e5:65:22:5b:30:2f:d3:f7:31:8f:5f:13:d2: a9:76:93:05:91:72:0f:d9:e4:56:7c:a5:e5:b9:5e:19:3b:01: b9:02:31:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzcwOTExMC8GA1UEBRMoMTI4QjkzNUI4OTVEQUM2RTk3NzI4RkZGOEJEQzM1NkU4 OTE4NTNFRjAeFw0yNTA2MTcwNTM1MjRaFw0yNTA2MjQwNTM1MjRaMBgxFjAUBgNV BAMTDTY4NTBmZTlkLTMzMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7T5YG69ZZHdJv725GQVGudjxfmbnscCN9Is98qeBD5d0XH9h6x0d1Pqf54KUp et3+huVJ114LcMPUPCI/SSC5AC+IQrjd62RaWbf/MEeO57pVUjQW+7tAveP68Xvh XOjdNh2Qrdj47Z9WkxF2GMLLVfALK7d1eiBe3xokGkIzHOFT2721qUEuc5MBF7G/ 77ndFxq5eBzwRqmAhx1qKWuqHfVJp7LaWyNWjYIRUyUots31Opw5fFtm4f23wjOR hyu2ULRy5efeH3aormtah+XkpO5Gou/PuO7xev7tlDimYKifkNdj6uX8DMMEH7vy 8pa0QswOyZOCvvBJL7vCbCPdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ1dFakXl GDkC5LleIEb1vlC9wC0wHwYDVR0jBBgwFoAUEouTW4ldrG6Xco//i9w1bokYU+8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3NzA5Lzc4NkJERjVFOEJC NjExRUY5OThCQUM3MkM0RjlBRTAyL0VvdVRXNGxkckc2WGNvX19pOXcxYm9rWVUt OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRW91VFc0bGRyRzZYY29fX2k5dzFib2tZVS04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 NzA5Lzc4NkJERjVFOEJCNjExRUY5OThCQUM3MkM0RjlBRTAyL0VvdVRXNGxkckc2 WGNvX19pOXcxYm9rWVUtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAELpX5aLyp/xvW8cfrj0s96oE9LHVeVx8ZWaqDvrSagWVEtOFlG10ut8 BWneaVrAc3UnF4nLmRzGbNW0zbAmqEEg1oMRbDV4wMOFqchGECBCwoNOsBl5Ujw5 S5PCZIEgaYq6R0U0YY5ZaMgGBTmp0vAwch5AXzWFWr/9iE02n/wZqd741skv8ifA ZlflKzEef0HVRIBlCjjVkdVcWUOh1FeAE+DjDpJ0ilHp6kJL84USMpLS0yJN6pDn J+4alNsJPnKJkCXg3+M92fiFAF0SuLf12NnWQjqiQ7hdcWXS5WUiWzAv0/cxj18T 0ql2kwWRcg/Z5FZ8peW5Xhk7AbkCMfU= -----END CERTIFICATE-----Generated at Wed Jun 18 07:48:33 2025 by rpki-client