$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: 5oCACoCc4IDwyZZrrYF0XY5jROfprzz4eF4C6beeb/o= Subject key identifier: 16:E8:B0:1E:E7:63:D4:AF:59:1B:7B:8A:DC:A2:DA:5E:F0:A8:35:DE Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 58 Signing time: Tue 17 Jun 2025 06:05:40 +0000 Manifest this update: Tue 17 Jun 2025 06:05:40 +0000 Manifest next update: Tue 24 Jun 2025 06:05:40 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: zGv46jpN115d4IV1GNX2jTIJJYZfpVcEQXWXuB48QiU=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: D8sGSIRpeb4KU8twC3M5LxWoSrBlM5fxXQEFrUY0ChI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 06:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Jun 17 06:05:40 2025 GMT Not After : Jun 24 06:05:40 2025 GMT Subject: CN=685105b4-6007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:35:63:f9:bd:89:c2:f9:0c:13:53:44:1e:4d: 55:9f:f9:63:55:13:ee:9f:9b:22:1c:5f:cf:da:a2: ff:56:f5:aa:65:ae:f6:f4:af:d6:ed:ae:64:85:6c: 94:c8:43:f4:c8:68:58:75:cd:ba:67:33:1e:a6:6c: 1c:6a:da:ff:30:b1:3a:65:83:be:4b:4f:35:19:c7: cb:4a:4e:eb:c0:1e:41:2a:8f:89:42:46:9f:2e:a2: 84:85:a6:4a:73:14:b3:45:d7:d1:12:a6:44:fa:a9: e6:40:f0:00:e1:3a:62:b4:05:45:61:e7:ca:8b:e3: bb:46:6c:0d:4d:27:88:a6:52:dc:06:5f:a4:90:23: 34:9a:fb:53:80:ff:2d:1f:9c:cc:e9:1b:3c:1b:d1: 59:c4:7d:46:5b:64:10:39:1d:23:a0:ae:bb:d8:5a: 0d:38:73:cd:c0:c0:16:06:65:b3:8e:e4:b6:a5:b1: 53:76:e1:ec:83:4a:da:b6:30:34:d8:04:14:9e:5a: 65:01:61:29:f4:93:0f:34:59:b9:f8:66:08:9f:56: 84:59:f0:fa:13:da:57:bb:50:0c:96:ae:de:9f:32: aa:a4:e9:1a:46:de:a5:c6:90:23:b6:98:24:24:bf: 67:b1:e6:20:96:19:38:16:c4:16:f8:63:23:ff:ba: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E8:B0:1E:E7:63:D4:AF:59:1B:7B:8A:DC:A2:DA:5E:F0:A8:35:DE X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:52:b4:0c:36:7a:2f:2b:92:33:e8:92:c8:c6:6f:02:aa:4f: c2:de:da:77:2a:ef:a6:8a:c4:80:b4:bb:ea:7e:62:94:bc:86: 46:fb:9a:96:d2:2f:70:5f:14:6a:e3:0e:62:e5:fd:60:ed:0b: 6f:da:ae:53:b1:44:b8:7c:19:1d:1f:93:6c:e4:3b:7c:46:49: 74:72:94:4c:66:0e:fb:ad:13:c8:b9:6a:b8:dc:de:99:d7:fa: ef:2d:fa:06:7d:9c:a3:00:00:ed:0d:d2:34:46:99:7e:0f:f5: d1:5b:21:32:89:9e:03:69:13:7a:5e:c2:7f:61:ae:e4:f3:2d: 98:eb:10:7a:c2:77:fe:7f:85:50:c5:f4:9c:22:5d:12:2f:3c: 72:f7:59:6d:74:2c:bb:66:79:9e:5e:f1:c3:15:bc:07:6f:d7: cf:00:2e:a0:a9:84:0b:83:ff:1b:c6:57:9d:13:24:9b:30:63: 0d:1a:1a:6e:5a:a9:10:cf:ad:25:22:92:6d:a9:68:db:24:8a: e1:a5:bf:70:b6:7f:c3:8b:40:51:2d:9d:c9:34:b3:96:c1:5a: c3:f2:cd:30:05:1f:54:4f:5e:43:ad:2b:56:b1:c0:70:d0:a0: 78:57:a2:54:9b:d2:20:a7:f0:52:12:49:c2:81:9b:fd:c7:a6: 6f:84:2b:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzIzODExMC8GA1UEBRMoMTJBMTAyRjA4RUQxNEY2MjNGQTZFMzFEQkFCNDlBMjRE MUI5QTE1MTAeFw0yNTA2MTcwNjA1NDBaFw0yNTA2MjQwNjA1NDBaMBgxFjAUBgNV BAMTDTY4NTEwNWI0LTYwMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmNWP5vYnC+QwTU0QeTVWf+WNVE+6fmyIcX8/aov9W9aplrvb0r9btrmSFbJTI Q/TIaFh1zbpnMx6mbBxq2v8wsTplg75LTzUZx8tKTuvAHkEqj4lCRp8uooSFpkpz FLNF19ESpkT6qeZA8ADhOmK0BUVh58qL47tGbA1NJ4imUtwGX6SQIzSa+1OA/y0f nMzpGzwb0VnEfUZbZBA5HSOgrrvYWg04c83AwBYGZbOO5LalsVN24eyDStq2MDTY BBSeWmUBYSn0kw80Wbn4ZgifVoRZ8PoT2le7UAyWrt6fMqqk6RpG3qXGkCO2mCQk v2ex5iCWGTgWxBb4YyP/uhZhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFuiwHudj 1K9ZG3uK3KLaXvCoNd4wHwYDVR0jBBgwFoAUEqEC8I7RT2I/puMdurSaJNG5oVEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDMjM4L0NENzE3RDlDQ0JG MzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9W RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXFFQzhJN1JUMklfcHVNZHVyU2FKTkc1b1ZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD MjM4L0NENzE3RDlDQ0JGMzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJ X3B1TWR1clNhSk5HNW9WRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHlStAw2ei8rkjPoksjGbwKqT8Le2ncq76aKxIC0u+p+YpS8hkb7mpbS L3BfFGrjDmLl/WDtC2/arlOxRLh8GR0fk2zkO3xGSXRylExmDvutE8i5arjc3pnX +u8t+gZ9nKMAAO0N0jRGmX4P9dFbITKJngNpE3pewn9hruTzLZjrEHrCd/5/hVDF 9JwiXRIvPHL3WW10LLtmeZ5e8cMVvAdv188ALqCphAuD/xvGV50TJJswYw0aGm5a qRDPrSUikm2paNskiuGlv3C2f8OLQFEtnck0s5bBWsPyzTAFH1RPXkOtK1axwHDQ oHhXolSb0iCn8FISScKBm/3Hpm+EKxo= -----END CERTIFICATE-----Generated at Wed Jun 18 03:14:19 2025 by rpki-client