$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft File: eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json) Hash identifier: I6/WFYiQIoUFzbzoWgtsFE0YDtzqAHbkBBhVoBCFgsY= Subject key identifier: 2D:6C:48:F7:BC:21:2F:18:C4:BD:E7:D6:AA:2A:27:CF:4F:66:DF:2F Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Certificate serial: 0966 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft Manifest number: 095F Signing time: Thu 12 Jun 2025 19:58:00 +0000 Manifest this update: Thu 12 Jun 2025 19:57:59 +0000 Manifest next update: Thu 19 Jun 2025 19:57:59 +0000 Files and hashes: 1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: scWEx49MpVYz/AI8+qXXAcwt+AbEi6zDS9zLx8oyO1M=) 2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: IM9yFzmqS+Is/NhhSreqHJdhDGFnp0WA0QJtpqV2ULo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2406 (0x966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Validity Not Before: Jun 12 19:57:59 2025 GMT Not After : Jun 19 19:57:59 2025 GMT Subject: CN=684b3148-b5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:06:43:4e:c9:90:99:4d:14:cf:6c:37:73:92: f8:3e:ea:c9:dc:59:ad:c6:4b:78:91:98:44:53:ed: 2d:3d:ae:37:eb:01:fe:a4:18:17:58:52:6a:06:65: fc:c6:20:0c:e4:26:4a:3b:02:5c:f5:66:c0:04:0c: 55:87:2e:4c:c3:db:e9:db:68:a7:33:03:bb:d0:0f: 0d:c7:35:a0:03:80:c1:5d:04:e9:b6:85:e6:bf:39: 08:27:93:e6:6f:e3:48:4b:ae:6e:bd:94:3f:8a:3c: 49:80:6f:29:19:d1:0e:ec:73:d4:8b:fb:77:d0:44: 57:9e:2e:29:a6:a1:9e:45:7e:7c:56:6c:d2:18:6a: 87:a2:34:6b:08:9d:da:53:e4:49:f2:8a:3f:2c:c2: 2f:02:3e:98:9e:56:52:49:b0:21:60:a4:27:34:5a: cf:03:68:22:6e:49:28:8a:85:68:c7:f3:4f:f1:b0: ac:0a:d2:43:e6:48:12:7a:b7:19:90:80:a9:55:26: ec:5d:52:68:de:53:2c:8e:4d:04:b0:80:e2:4f:ac: 7e:9f:35:e5:4e:b6:22:d4:dc:89:24:33:4b:be:f5: fa:f4:37:35:0b:16:78:ff:5e:23:37:a7:e6:dd:96: f0:29:f6:cd:54:f6:6a:8e:dc:5a:ea:b7:f7:83:69: 85:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6C:48:F7:BC:21:2F:18:C4:BD:E7:D6:AA:2A:27:CF:4F:66:DF:2F X509v3 Authority Key Identifier: keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:8f:2e:8e:48:2b:47:3c:56:07:83:1d:be:ed:04:b9:96:f3: 59:a7:ae:52:58:2d:19:bb:12:cb:bc:8c:3b:bb:d1:23:be:9f: 89:67:08:31:03:ad:6e:ea:ce:d9:3c:3e:be:64:1a:44:52:04: 6c:1e:39:1f:ca:79:9f:07:5a:0f:98:6f:33:db:bb:0c:8a:37: b4:6d:28:27:20:05:24:4c:88:eb:3f:b8:f1:59:78:1f:d3:ed: 2e:ea:58:ad:87:3e:b5:21:fe:c3:8c:c3:03:5f:ca:6c:f0:c9: 12:ac:7a:47:a3:0b:fc:23:f9:1e:28:f8:d3:ee:b5:6a:7b:cf: c1:94:b7:9f:b2:09:fa:48:39:fc:97:7d:d5:cb:db:46:33:4b: 33:9a:29:40:f3:2d:c4:c4:5d:51:8c:1d:57:07:03:df:8f:23: 0e:02:a1:98:ca:df:2f:9c:3c:a6:03:19:7e:4e:e3:4e:d7:d2: c2:63:74:af:e9:3a:76:2d:88:8c:e7:28:80:a3:1e:ab:15:03: 40:71:91:1f:46:d0:29:9f:7c:66:b5:93:e8:3e:99:b5:f6:95: 2b:7d:d3:5c:ab:5d:ae:3a:74:eb:b5:7d:83:9c:19:70:9c:c3: 4c:80:00:a1:e7:ef:52:35:39:fd:70:db:69:54:96:f5:d6:48: fa:22:98:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF MjEzMjIzNDkwHhcNMjUwNjEyMTk1NzU5WhcNMjUwNjE5MTk1NzU5WjAYMRYwFAYD VQQDEw02ODRiMzE0OC1iNWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QZDTsmQmU0Uz2w3c5L4PurJ3Fmtxkt4kZhEU+0tPa436wH+pBgXWFJqBmX8 xiAM5CZKOwJc9WbABAxVhy5Mw9vp22inMwO70A8NxzWgA4DBXQTptoXmvzkIJ5Pm b+NIS65uvZQ/ijxJgG8pGdEO7HPUi/t30ERXni4ppqGeRX58VmzSGGqHojRrCJ3a U+RJ8oo/LMIvAj6YnlZSSbAhYKQnNFrPA2gibkkoioVox/NP8bCsCtJD5kgSercZ kICpVSbsXVJo3lMsjk0EsIDiT6x+nzXlTrYi1NyJJDNLvvX69Dc1CxZ4/14jN6fm 3ZbwKfbNVPZqjtxa6rf3g2mFNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1sSPe8 IS8YxL3n1qoqJ89PZt8vMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3 NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw Tng1TXdZVkluX3JpRXlJMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7jy6OSCtHPFYHgx2+7QS5lvNZp65SWC0ZuxLLvIw7u9Ejvp+JZwgx A61u6s7ZPD6+ZBpEUgRsHjkfynmfB1oPmG8z27sMije0bSgnIAUkTIjrP7jxWXgf 0+0u6lithz61If7DjMMDX8ps8MkSrHpHowv8I/keKPjT7rVqe8/BlLefsgn6SDn8 l33Vy9tGM0szmilA8y3ExF1RjB1XBwPfjyMOAqGYyt8vnDymAxl+TuNO19LCY3Sv 6Tp2LYiM5yiAox6rFQNAcZEfRtApn3xmtZPoPpm19pUrfdNcq12uOnTrtX2DnBlw nMNMgACh5+9SNTn9cNtpVJb11kj6Ipir -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:08 2025 by rpki-client