$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft File: EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft (raw, json) Hash identifier: YCXJJG71IQn5KQHfTa4bUdF67V2ubdlWjE5AhkuBTt8= Subject key identifier: 80:5F:49:36:ED:0E:49:93:E2:F0:93:7B:24:7F:08:60:5C:0C:03:F7 Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F Certificate issuer: /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Certificate serial: 1541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft Manifest number: 1504 Signing time: Sat 14 Jun 2025 16:47:36 +0000 Manifest this update: Sat 14 Jun 2025 16:47:35 +0000 Manifest next update: Sat 21 Jun 2025 16:47:35 +0000 Files and hashes: 1: EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl (hash: /5dq3zAiOhL3TZmiqBMKI1ocRlzXWVO8NDJ9LBL/gk8=) 2: F99707CEBAC511E9A77CDE7BC4F9AE02.roa (hash: 5uUW31UVlhS1EMeW8SdNyNqfE7foPIsbvKPSkNYxTTw=) 3: E7084A18E1FF11ED8291C918C4F9AE02.roa (hash: 825LdLpPgTmUB6Z/jlNKQqUyb06kFuccOU7CVvrtwj4=) 4: E80E94F8E1FF11ED8291C918C4F9AE02.roa (hash: sEzbj9zVcGYfQVtymkbJCAL7nuZefcCGjL2IRtqWF/o=) 5: 065737305C9511EDABB9FA49C4F9AE02.roa (hash: A9mSeJtqPQ5OLPMu8OwuZB0s+QUpXaZBGlbtc6BBl4M=) 6: E5E5AB76E1FF11ED8291C918C4F9AE02.roa (hash: uZ4XGMAryuNiLEYH4OkW1daYwrGTX1yw6VXfeQKddWo=) 7: E4C72AB2E1FF11ED8291C918C4F9AE02.roa (hash: evUrAmQOOHS6gFCNS5NNu+gRFX265k9Xi2+XGDvOjys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5441 (0x1541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Validity Not Before: Jun 14 16:47:35 2025 GMT Not After : Jun 21 16:47:35 2025 GMT Subject: CN=684da7a7-debc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2a:31:20:47:b5:77:06:9a:45:60:3d:2a:8e: 98:f4:0c:87:a0:44:4a:b1:e6:fd:28:18:09:89:f4: e6:4b:33:86:6f:ed:8b:5e:10:f4:8b:51:99:56:3e: c0:dd:a6:df:71:8d:bf:13:e0:90:3f:1e:7a:e2:c9: 1c:cf:52:59:0b:35:ad:a7:a8:eb:df:84:3a:23:d3: fe:43:40:e6:c3:17:e2:8e:26:68:0c:a0:0a:cb:01: 40:8f:86:12:ce:ab:52:33:d8:39:e8:dc:03:77:c2: a5:96:01:ef:97:dc:21:f0:23:0e:5b:43:d3:13:77: f5:3c:9f:40:ef:a4:de:d1:48:79:db:1b:49:83:00: c9:5f:b9:67:b5:06:51:fb:a5:00:36:9a:33:5f:6d: 67:79:74:2d:2d:e6:e0:53:13:a1:e0:a1:3f:24:e7: ca:2c:96:b7:79:56:fc:28:88:ff:50:f4:23:e5:39: 3b:0e:fa:10:69:c2:e4:ad:2c:ab:ff:ba:00:ed:20: 58:a3:64:66:48:f2:d2:18:a2:6d:5f:b6:51:9c:f5: 51:bd:a8:76:eb:c5:42:78:4f:ac:a7:a8:50:f2:12: 52:6f:4a:c6:b7:af:f5:95:f0:27:89:a1:07:a8:f7: 20:98:34:df:6c:f1:7a:f8:55:0a:58:de:ad:f8:47: ef:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5F:49:36:ED:0E:49:93:E2:F0:93:7B:24:7F:08:60:5C:0C:03:F7 X509v3 Authority Key Identifier: keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6f:23:15:94:15:40:27:e7:2a:bc:96:44:52:92:84:18:8a: 6c:ab:33:ce:dc:05:8b:3e:a5:dd:cd:50:05:52:b8:91:1d:e1: c2:4e:bf:a7:21:e3:d1:34:52:3f:ac:f3:9b:15:81:b1:cb:67: 07:fd:a8:ca:68:f8:71:8b:a8:f7:af:df:ca:3a:4c:c9:48:20: 73:62:d6:b2:e7:cb:b8:b6:be:c3:b9:6b:23:3d:ca:d6:a8:68: 96:c6:7f:58:d2:0e:4f:9e:35:d4:93:c5:45:d6:79:30:7f:97: 49:18:66:7f:a1:a0:c6:f0:0c:b9:1a:a4:f8:a1:2f:c7:3b:10: f3:4f:8f:6d:e7:95:61:be:b0:e1:08:e1:34:f0:7c:1a:63:9b: a5:64:6e:68:eb:a0:15:ae:6d:b7:2d:b2:27:e1:04:aa:8f:da: 09:d3:b2:8e:6c:8b:5f:3a:64:54:e5:f9:8b:f2:f9:b0:69:e3: 24:e5:c0:c9:0c:58:b7:bf:e4:c5:e5:8a:59:81:c6:53:72:ca: f3:e2:75:55:1b:ba:9a:26:04:f0:52:b7:09:de:56:cc:6c:0a: 45:f7:c8:80:2e:38:0b:0c:43:65:30:0f:ec:cc:b4:41:c0:03: ef:49:89:08:0c:a1:4e:3f:23:92:88:42:01:64:81:55:9d:53: 0c:7c:e9:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE NEM2RDU3MUYwHhcNMjUwNjE0MTY0NzM1WhcNMjUwNjIxMTY0NzM1WjAYMRYwFAYD VQQDEw02ODRkYTdhNy1kZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApioxIEe1dwaaRWA9Ko6Y9AyHoERKseb9KBgJifTmSzOGb+2LXhD0i1GZVj7A 3abfcY2/E+CQPx564skcz1JZCzWtp6jr34Q6I9P+Q0DmwxfijiZoDKAKywFAj4YS zqtSM9g56NwDd8KllgHvl9wh8CMOW0PTE3f1PJ9A76Te0Uh52xtJgwDJX7lntQZR +6UANpozX21neXQtLebgUxOh4KE/JOfKLJa3eVb8KIj/UPQj5Tk7DvoQacLkrSyr /7oA7SBYo2RmSPLSGKJtX7ZRnPVRvah268VCeE+sp6hQ8hJSb0rGt6/1lfAniaEH qPcgmDTfbPF6+FUKWN6t+EfvUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBfSTbt DkmT4vCTeyR/CGBcDAP3MB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2 NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlGQy84MTA0NUUzQTU2NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1R bXg5UE5KaE9uRGJVeHRWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvbyMVlBVAJ+cqvJZEUpKEGIpsqzPO3AWLPqXdzVAFUriRHeHCTr+n IePRNFI/rPObFYGxy2cH/ajKaPhxi6j3r9/KOkzJSCBzYtay58u4tr7DuWsjPcrW qGiWxn9Y0g5PnjXUk8VF1nkwf5dJGGZ/oaDG8Ay5GqT4oS/HOxDzT49t55VhvrDh COE08HwaY5ulZG5o66AVrm23LbIn4QSqj9oJ07KObItfOmRU5fmL8vmwaeMk5cDJ DFi3v+TF5YpZgcZTcsrz4nVVG7qaJgTwUrcJ3lbMbApF98iALjgLDENlMA/szLRB wAPvSYkIDKFOPyOSiEIBZIFVnVMMfOni -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:04 2025 by rpki-client