$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: D6xMSGzDekUUEfncXcX5dvRNJx1qOIvu/rf9OsjlsHQ= Subject key identifier: 47:D2:E8:8D:59:74:4C:B0:AB:03:52:9C:A1:FB:A5:93:D1:97:C0:CB Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 0393 Signing time: Sun 15 Jun 2025 00:32:00 +0000 Manifest this update: Sun 15 Jun 2025 00:31:59 +0000 Manifest next update: Sun 22 Jun 2025 00:31:59 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: KQ43ZHks0fIdsMiLfXNw2VktcTDI23pAyc7QEeqss7k=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: Jun 15 00:31:59 2025 GMT Not After : Jun 22 00:31:59 2025 GMT Subject: CN=684e1480-315c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d6:7e:0d:d2:e2:f7:81:48:c2:cf:8f:f6:37: d6:67:89:53:fb:b9:e2:ce:e3:46:e2:6b:55:d6:e7: 06:a5:7c:7d:2f:ba:41:52:8d:9b:e0:d0:93:a7:e6: 16:d5:b9:a2:03:8b:ae:28:f5:06:32:d0:e2:6a:1c: 0b:54:17:3c:ff:35:d2:8d:57:03:45:f3:d3:00:3f: 3e:aa:a5:55:dc:17:50:d1:3d:9c:46:33:9f:8b:63: 4f:bd:7e:80:b8:78:0a:0c:7e:90:f4:db:b1:d6:aa: 84:1f:10:aa:de:e7:8d:08:8e:0f:79:58:1a:7b:2b: 8e:9b:a8:d9:bb:4c:21:6d:9d:26:2b:d3:33:47:52: fd:03:9e:4b:8a:c4:c1:d8:aa:59:ec:e5:6f:80:ab: b9:cf:35:b9:76:7f:9c:9b:a2:c6:78:7a:20:0e:81: aa:53:0f:24:3a:d9:38:1e:10:66:b0:ae:47:d8:3a: e4:8a:cc:98:f5:f3:9b:cf:43:0d:17:e0:33:06:fb: 4b:ec:db:63:01:42:47:69:fc:c1:74:b1:6c:ef:f7: 2d:de:a1:ec:3a:f4:a0:96:98:87:68:03:86:b1:bc: 87:ba:00:8a:5d:25:ef:16:f9:24:ee:30:d5:ed:0d: 46:c2:c8:b6:dc:3e:40:c2:45:11:7b:78:86:ec:f5: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D2:E8:8D:59:74:4C:B0:AB:03:52:9C:A1:FB:A5:93:D1:97:C0:CB X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:eb:c5:bf:54:6b:59:a7:6a:b9:9f:e1:e5:e2:68:d9:94:1b: 50:31:69:29:92:83:fb:08:b6:6a:14:f2:29:10:4d:2a:59:83: 26:96:3e:5b:5a:f2:46:30:a1:69:1a:97:3c:9c:b9:fe:8f:9b: 20:14:f1:44:f3:cf:a7:93:ca:46:b7:c6:81:fa:d2:a0:50:cb: 40:cc:d4:3a:a7:d9:d5:5c:af:c3:85:59:e4:a6:d0:4e:53:66: dc:33:1f:92:49:5b:05:9d:60:72:cd:b2:1e:eb:aa:b7:5c:56: 2b:b4:03:fa:2f:92:b3:b3:8d:d1:65:3b:1c:b5:8c:5d:e1:08: 59:d0:e9:2c:29:98:e8:38:f9:bb:67:e9:b6:88:a2:8d:30:58: 78:ae:86:ab:d2:40:ee:90:48:0e:b1:47:49:42:95:af:03:c9: 0c:cf:f7:54:53:91:d4:24:9b:13:82:ca:14:66:1b:87:9e:d0: 25:df:ff:29:ed:93:0a:70:d2:83:0d:de:4a:32:21:94:66:67: df:b3:4b:3e:b6:fb:ce:5b:a9:6c:cf:b9:89:58:3f:46:eb:a3: 1b:1b:4f:0e:f1:20:8e:01:4a:57:19:f0:07:9b:cb:8e:2f:9e: f0:c1:f8:00:d9:50:a8:5c:68:e2:e6:a3:4e:be:6b:59:52:88: 28:7f:f8:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjUwNjE1MDAzMTU5WhcNMjUwNjIyMDAzMTU5WjAYMRYwFAYD VQQDEw02ODRlMTQ4MC0zMTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA79Z+DdLi94FIws+P9jfWZ4lT+7nizuNG4mtV1ucGpXx9L7pBUo2b4NCTp+YW 1bmiA4uuKPUGMtDiahwLVBc8/zXSjVcDRfPTAD8+qqVV3BdQ0T2cRjOfi2NPvX6A uHgKDH6Q9Nux1qqEHxCq3ueNCI4PeVgaeyuOm6jZu0whbZ0mK9MzR1L9A55LisTB 2KpZ7OVvgKu5zzW5dn+cm6LGeHogDoGqUw8kOtk4HhBmsK5H2DrkisyY9fObz0MN F+AzBvtL7NtjAUJHafzBdLFs7/ct3qHsOvSglpiHaAOGsbyHugCKXSXvFvkk7jDV 7Q1Gwsi23D5AwkURe3iG7PUmLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfS6I1Z dEywqwNSnKH7pZPRl8DLMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt68W/VGtZp2q5n+Hl4mjZlBtQMWkpkoP7CLZqFPIpEE0qWYMmlj5b WvJGMKFpGpc8nLn+j5sgFPFE88+nk8pGt8aB+tKgUMtAzNQ6p9nVXK/DhVnkptBO U2bcMx+SSVsFnWByzbIe66q3XFYrtAP6L5Kzs43RZTsctYxd4QhZ0OksKZjoOPm7 Z+m2iKKNMFh4roar0kDukEgOsUdJQpWvA8kMz/dUU5HUJJsTgsoUZhuHntAl3/8p 7ZMKcNKDDd5KMiGUZmffs0s+tvvOW6lsz7mJWD9G66MbG08O8SCOAUpXGfAHm8uO L57wwfgA2VCoXGji5qNOvmtZUogof/i4 -----END CERTIFICATE-----Generated at Mon Jun 16 14:48:09 2025 by rpki-client