$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft File: eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json) Hash identifier: Xutvg6lXCFYUJwX9FtCDQR7Vk7ChOvJZ6kHR25kcEtc= Subject key identifier: 15:6D:41:7D:94:31:C3:83:DD:66:0C:BD:CA:EF:15:C5:94:F9:0C:8E Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2D2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft Manifest number: 2D0F Signing time: Mon 16 Jun 2025 15:35:49 +0000 Manifest this update: Mon 16 Jun 2025 15:35:48 +0000 Manifest next update: Mon 23 Jun 2025 15:35:48 +0000 Files and hashes: 1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: 7Zu5lkIH4vWVlQRAOUxExfYBkHOFpJha0FOiY2Zn3lo=) 2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: Vd/aN0N0PZj/2E1lobGPke/BU2o5Mlhxl5a5kuQS0uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11563 (0x2d2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: Jun 16 15:35:48 2025 GMT Not After : Jun 23 15:35:48 2025 GMT Subject: CN=685039d5-0a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:29:8d:64:c8:fb:87:5a:ac:c2:3e:c5:93: 42:6a:dc:e4:03:14:b8:5b:61:b8:34:55:14:d4:3a: 28:c6:20:ef:b8:29:44:34:79:51:a2:64:0d:10:33: f7:97:09:b4:c8:58:10:be:8f:2f:38:c3:bf:a6:f3: 19:4c:d0:d6:c6:49:8f:52:70:54:e4:de:98:ee:1b: 0f:9f:2e:0a:19:29:1c:b0:7f:20:ab:ca:9f:15:10: 66:ec:3f:09:01:d7:e7:d0:dc:c2:bb:ea:9d:c9:95: b9:c5:27:2b:42:7d:f7:59:7d:63:50:d8:5e:ab:47: 89:57:e3:7c:33:09:5a:9d:36:65:5b:29:0f:e6:fb: c3:11:c9:ce:7a:ee:eb:af:70:0c:c0:ea:8f:c6:b1: 4c:26:b9:85:09:62:9d:93:05:f9:75:e7:b3:0b:ee: 36:1d:07:1b:02:7a:bb:c2:ec:de:0b:db:41:c1:a7: 55:33:a6:81:d9:5d:c2:7e:33:67:dc:51:ad:22:39: 06:de:97:82:47:81:08:f5:4d:18:68:d8:34:6f:17: f1:fb:00:e6:b7:87:f1:1f:5f:8b:96:94:c1:68:73: 47:64:fc:05:8a:89:61:4c:c9:e9:55:3d:06:e4:33: 4f:1a:b2:77:fc:81:e2:41:69:59:60:c1:6c:6a:ea: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6D:41:7D:94:31:C3:83:DD:66:0C:BD:CA:EF:15:C5:94:F9:0C:8E X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:de:a3:5d:fd:68:c3:41:d0:56:be:f4:98:e2:e3:39:2c:04: e4:35:a4:3a:a4:08:a4:a6:e1:db:ca:3e:50:fb:e2:7d:55:3f: 6e:a3:de:f3:99:00:1c:48:20:72:d5:0c:38:79:6a:82:2e:be: aa:5e:3b:97:4a:8a:8e:b9:ab:e4:88:e8:cf:bb:98:4b:13:32: cf:e6:fa:72:63:84:54:2a:31:a8:3a:90:2b:7d:50:72:ac:6a: 8c:1b:e3:16:b4:f8:87:30:a7:69:a5:cd:3f:6c:b7:cf:9c:d6: bf:b0:8d:07:61:a1:b3:6c:37:08:ec:7a:af:03:bd:bc:17:aa: f3:46:3c:5b:f1:c7:13:88:da:f0:2a:6f:e1:e3:c2:8f:81:e0: 86:90:5e:fd:76:22:15:93:4d:55:f8:37:d9:a6:9a:4e:00:9f: 22:bd:f8:63:2b:9c:b5:91:2e:ac:7e:ae:90:08:cb:45:69:9f: cc:a4:f2:84:f7:61:b6:1b:38:12:0b:d7:58:ea:26:e0:47:96: 27:67:a9:ea:e6:ed:54:0f:ad:47:ac:e9:4b:30:ab:1e:5b:21: 83:56:bb:b7:7a:a7:25:73:16:66:75:74:96:39:47:b4:49:4a: fd:54:3b:13:88:af:2f:17:d9:39:5f:af:4f:4d:62:33:d1:2d: e7:7b:de:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjUwNjE2MTUzNTQ4WhcNMjUwNjIzMTUzNTQ4WjAYMRYwFAYD VQQDEw02ODUwMzlkNS0wYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxApjWTI+4darMI+xZNCatzkAxS4W2G4NFUU1DooxiDvuClENHlRomQNEDP3 lwm0yFgQvo8vOMO/pvMZTNDWxkmPUnBU5N6Y7hsPny4KGSkcsH8gq8qfFRBm7D8J Adfn0NzCu+qdyZW5xScrQn33WX1jUNheq0eJV+N8MwlanTZlWykP5vvDEcnOeu7r r3AMwOqPxrFMJrmFCWKdkwX5deezC+42HQcbAnq7wuzeC9tBwadVM6aB2V3CfjNn 3FGtIjkG3peCR4EI9U0YaNg0bxfx+wDmt4fxH1+LlpTBaHNHZPwFiolhTMnpVT0G 5DNPGrJ3/IHiQWlZYMFsauruFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVtQX2U McOD3WYMvcrvFcWU+QyOMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUIyNy8xNjdBOTdFQzlBRTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJt VGwtZkdjVjF2RnFaWGlCVkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa3qNd/WjDQdBWvvSY4uM5LATkNaQ6pAikpuHbyj5Q++J9VT9uo97z mQAcSCBy1Qw4eWqCLr6qXjuXSoqOuavkiOjPu5hLEzLP5vpyY4RUKjGoOpArfVBy rGqMG+MWtPiHMKdppc0/bLfPnNa/sI0HYaGzbDcI7HqvA728F6rzRjxb8ccTiNrw Km/h48KPgeCGkF79diIVk01V+DfZpppOAJ8ivfhjK5y1kS6sfq6QCMtFaZ/MpPKE 92G2GzgSC9dY6ibgR5YnZ6nq5u1UD61HrOlLMKseWyGDVru3eqclcxZmdXSWOUe0 SUr9VDsTiK8vF9k5X69PTWIz0S3ne95I -----END CERTIFICATE-----Generated at Wed Jun 18 06:59:31 2025 by rpki-client