$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: GS/Oj46aknqh5J6llrfTF7f9ydEslGXwgQU745R6a7A= Subject key identifier: 96:F3:2A:7F:41:5A:1B:61:76:6B:E0:50:99:4A:65:CF:5C:10:B2:F8 Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 0626 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 0621 Signing time: Fri 22 Aug 2025 22:56:54 +0000 Manifest this update: Fri 22 Aug 2025 22:56:53 +0000 Manifest next update: Fri 29 Aug 2025 22:56:53 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: 83o9ncVIL5vWx5rLKU1Kb+lPXSr1zS/eMzCKM1RsnD0=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: 6T0bGam9Fz3MuC3/hi4HGnadBCMddUZ6zt+H3AVBHfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: Aug 22 22:56:53 2025 GMT Not After : Aug 29 22:56:53 2025 GMT Subject: CN=68a8f5b5-106f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:f1:d3:f9:2f:e6:e8:e8:60:fc:88:21:95: 9e:f6:ac:96:d7:06:e1:b3:aa:49:a7:a0:cb:26:a2: da:dd:de:c2:35:07:d7:a3:b0:43:da:10:c2:b4:e0: cb:89:f0:54:b0:b9:8c:ef:86:0a:ee:e6:09:db:a9: c3:92:c3:37:24:20:52:bf:f8:4a:db:37:c0:60:40: 04:69:b3:df:74:77:f1:ce:fa:80:87:5d:8f:39:e5: bd:a2:6e:8e:1c:62:2a:45:bf:47:fb:63:98:eb:35: 39:e1:2b:7a:33:57:48:2d:db:4e:d3:5c:ca:6c:03: a3:c9:48:a3:ea:54:87:13:94:03:80:7a:ba:1c:27: 77:fd:80:c6:fb:60:fb:f4:ab:50:3b:11:00:24:fc: ed:94:74:70:9b:fd:6a:be:ee:f3:25:21:4f:42:9b: 91:24:61:55:0e:c0:3d:db:6c:83:0e:26:92:55:b0: df:79:09:bc:2d:06:02:8f:2e:bf:da:57:73:55:d1: be:a7:8b:61:2f:ee:86:39:60:28:8f:d3:a8:1a:2e: 01:2f:c0:32:8d:58:61:b2:3f:95:96:5b:f1:99:81: 18:7c:67:db:d9:20:31:a3:0c:0e:e7:db:c2:28:00: 96:04:e2:69:99:9b:a8:f5:04:c3:a8:6d:c7:31:87: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F3:2A:7F:41:5A:1B:61:76:6B:E0:50:99:4A:65:CF:5C:10:B2:F8 X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:34:d8:e4:53:30:bd:cb:b9:8c:ae:3f:6d:97:9d:cf:af:e7: 43:70:e5:15:48:34:85:58:ab:4c:04:eb:73:7c:99:db:2c:fa: 91:dd:25:be:66:2e:55:c5:ad:58:24:ed:11:46:00:c7:b6:6e: 14:e6:29:dc:be:ac:b3:0a:42:2d:4a:72:41:53:8b:79:92:20: 20:7a:e3:b6:59:01:40:0e:50:7e:42:77:76:d5:00:58:60:37: dd:26:83:4b:94:85:ef:68:a0:b1:a4:2c:cd:1c:a8:4a:41:f9: 83:85:e1:ba:68:04:bf:47:04:99:c0:fc:74:61:f0:81:3d:10: 80:cd:2f:b6:b4:f1:3b:45:a6:b7:81:87:b9:df:e8:ea:7a:7d: 6d:b3:c0:1f:d6:39:c3:82:ef:7c:f9:1d:0e:67:39:0d:e3:c7: a5:77:a1:6a:6d:7f:fc:ad:ee:44:a5:34:81:fa:9e:cd:75:bd: c6:83:25:fa:41:f5:a0:ee:c0:34:9d:7f:c4:f2:c7:05:c5:d8: 83:0b:6a:3e:73:22:72:32:a6:a0:f2:c8:2a:71:2f:2c:45:a6: f5:7b:2f:52:71:fd:c4:8e:91:9c:69:a7:45:44:d3:05:c2:da: 2f:5b:39:c0:9b:17:ee:9f:2e:a6:79:ed:8e:5a:9b:ff:22:71: 93:06:48:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjUwODIyMjI1NjUzWhcNMjUwODI5MjI1NjUzWjAYMRYwFAYD VQQDEw02OGE4ZjViNS0xMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b/x0/kv5ujoYPyIIZWe9qyW1wbhs6pJp6DLJqLa3d7CNQfXo7BD2hDCtODL ifBUsLmM74YK7uYJ26nDksM3JCBSv/hK2zfAYEAEabPfdHfxzvqAh12POeW9om6O HGIqRb9H+2OY6zU54St6M1dILdtO01zKbAOjyUij6lSHE5QDgHq6HCd3/YDG+2D7 9KtQOxEAJPztlHRwm/1qvu7zJSFPQpuRJGFVDsA922yDDiaSVbDfeQm8LQYCjy6/ 2ldzVdG+p4thL+6GOWAoj9OoGi4BL8AyjVhhsj+VllvxmYEYfGfb2SAxowwO59vC KACWBOJpmZuo9QTDqG3HMYdYHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbzKn9B WhthdmvgUJlKZc9cELL4MB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKNNjkUzC9y7mMrj9tl53Pr+dDcOUVSDSFWKtMBOtzfJnbLPqR3SW+ Zi5Vxa1YJO0RRgDHtm4U5incvqyzCkItSnJBU4t5kiAgeuO2WQFADlB+Qnd21QBY YDfdJoNLlIXvaKCxpCzNHKhKQfmDheG6aAS/RwSZwPx0YfCBPRCAzS+2tPE7Raa3 gYe53+jqen1ts8Af1jnDgu98+R0OZzkN48eld6FqbX/8re5EpTSB+p7Ndb3GgyX6 QfWg7sA0nX/E8scFxdiDC2o+cyJyMqag8sgqcS8sRab1ey9Scf3EjpGcaadFRNMF wtovWznAmxfuny6mee2OWpv/InGTBki3 -----END CERTIFICATE-----Generated at Sun Aug 24 06:34:35 2025 by rpki-client