$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft File: eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json) Hash identifier: Lk2lQpWW5/qedi9kkyUEYLxFKLfzZ51HETjqpGj+Tec= Subject key identifier: 3E:80:B0:AF:10:89:4E:D2:5A:54:03:59:32:ED:28:2C:87:14:18:A9 Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96 Certificate issuer: /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft Manifest number: 0193 Signing time: Sat 23 Aug 2025 03:37:55 +0000 Manifest this update: Sat 23 Aug 2025 03:37:54 +0000 Manifest next update: Sat 30 Aug 2025 03:37:54 +0000 Files and hashes: 1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: H0oq/K7/JT7Peq1FKr7CJl/uRDSeutoFd8BLzurLolk=) 2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: TxTcbAcufMja4FsqpJQTg2We2RY0eq4FwQMk5GLL3ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596 Validity Not Before: Aug 23 03:37:54 2025 GMT Not After : Aug 30 03:37:54 2025 GMT Subject: CN=68a93793-fcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:ce:b7:8d:20:db:dc:b6:bb:c5:9a:02:1c: b5:bc:f8:94:c0:d1:09:ca:4a:97:34:12:1d:10:cf: 28:a9:34:e7:3a:7e:cb:bb:98:e7:c2:4e:df:27:8c: eb:2d:ef:e8:59:99:e8:3c:5b:30:71:0c:f2:88:3a: 8e:a9:56:ff:ad:41:f0:2d:11:4d:32:fd:a7:36:8d: 11:47:bb:19:4b:38:ef:b8:6d:93:bb:da:09:05:77: 62:c5:eb:ce:25:f8:49:21:db:40:c7:f7:69:06:13: 4a:db:02:e0:94:8f:e5:a6:9c:5e:14:64:22:94:5b: 41:04:2b:c6:27:ad:a5:80:fb:fd:2d:e2:61:95:64: 3d:67:60:63:85:9c:44:55:35:3d:96:69:df:f6:bc: 68:4c:42:0c:7b:87:94:5a:97:cd:52:ff:27:c5:ac: 1d:46:c5:d9:db:7b:7e:e8:41:26:70:47:07:db:b0: 75:b6:aa:db:d9:71:81:b5:e7:18:33:b0:8c:d2:a9: ad:cf:cb:e6:8c:a6:f1:2f:db:2d:97:0c:f4:12:c2: 48:fd:0b:59:e7:42:fa:06:1f:00:d5:d9:7a:79:67: 8a:07:ea:08:71:8c:7b:d2:58:98:39:6b:66:8f:d7: 1d:96:03:ad:ba:b8:0c:9b:24:5e:5f:5c:ae:fb:51: 42:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:80:B0:AF:10:89:4E:D2:5A:54:03:59:32:ED:28:2C:87:14:18:A9 X509v3 Authority Key Identifier: keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:dc:20:a8:3f:a1:10:5e:25:29:f8:06:d9:db:2b:f4:33:ba: 67:e9:1c:a6:da:f9:75:e3:b2:f7:74:60:15:32:cd:2c:cc:65: 04:49:fa:1f:0d:ee:b3:d5:17:e7:13:aa:50:e7:6d:27:9f:14: cc:b3:e7:eb:92:fa:40:d6:df:cb:a3:49:77:e3:8c:ab:ab:02: 22:64:b3:65:f5:4b:09:c5:7c:1b:4b:a1:f6:a7:c6:13:b7:68: cf:83:d4:c1:ba:68:20:62:34:4c:5f:dd:15:78:1f:88:e0:d9: 7c:68:68:80:5b:6d:14:b6:82:03:df:a2:ec:0a:49:dd:7d:bc: d2:28:1d:8c:42:47:9e:7c:e9:de:8a:e9:76:be:d7:2a:66:31: 2b:75:32:d7:e7:3b:d6:5d:62:1c:8b:7b:8c:40:c1:52:d3:6f: cb:d3:53:a6:17:b1:47:bf:a2:1b:6e:9d:58:c5:18:e0:d5:75: 06:15:56:2a:ce:c9:a3:b0:9a:b3:2a:33:ff:08:a6:75:f3:0a: e0:7e:35:5f:e1:9a:42:b1:02:ae:65:22:2d:c1:01:b4:4c:9c: 46:6c:1d:8a:8a:2b:9e:c1:54:eb:5a:9e:d9:27:5c:71:76:bc: af:aa:e9:1c:20:82:c6:ac:54:93:04:cd:2e:5d:0b:b3:2b:92: f3:91:29:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNBMjcxMTAvBgNVBAUTKDc5MkUwQjNFQjM2MDQ0MjdGQzg0OEY5NkM3MzRBQzRE OTlGRTc1OTYwHhcNMjUwODIzMDMzNzU0WhcNMjUwODMwMDMzNzU0WjAYMRYwFAYD VQQDEw02OGE5Mzc5My1mY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtknOt40g29y2u8WaAhy1vPiUwNEJykqXNBIdEM8oqTTnOn7Lu5jnwk7fJ4zr Le/oWZnoPFswcQzyiDqOqVb/rUHwLRFNMv2nNo0RR7sZSzjvuG2Tu9oJBXdixevO JfhJIdtAx/dpBhNK2wLglI/lppxeFGQilFtBBCvGJ62lgPv9LeJhlWQ9Z2BjhZxE VTU9lmnf9rxoTEIMe4eUWpfNUv8nxawdRsXZ23t+6EEmcEcH27B1tqrb2XGBtecY M7CM0qmtz8vmjKbxL9stlwz0EsJI/QtZ50L6Bh8A1dl6eWeKB+oIcYx70liYOWtm j9cdlgOturgMmyReX1yu+1FCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6AsK8Q iU7SWlQDWTLtKCyHFBipMB8GA1UdIwQYMBaAFHkuCz6zYEQn/ISPlsc0rE2Z/nWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0EyNy81MzVFQTY0RTIx RjcxMUVFQkI4NDg2MzRDNEY5QUUwMi9lUzRMUHJOZ1JDZjhoSS1XeHpTc1Rabi1k WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VTNExQck5nUkNmOGhJLVd4elNzVFpuLWRaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0EyNy81MzVFQTY0RTIxRjcxMUVFQkI4NDg2MzRDNEY5QUUwMi9lUzRMUHJOZ1JD ZjhoSS1XeHpTc1Rabi1kWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ3CCoP6EQXiUp+AbZ2yv0M7pn6Rym2vl147L3dGAVMs0szGUESfof De6z1RfnE6pQ520nnxTMs+frkvpA1t/Lo0l344yrqwIiZLNl9UsJxXwbS6H2p8YT t2jPg9TBumggYjRMX90VeB+I4Nl8aGiAW20UtoID36LsCkndfbzSKB2MQkeefOne iul2vtcqZjErdTLX5zvWXWIci3uMQMFS02/L01OmF7FHv6Ibbp1YxRjg1XUGFVYq zsmjsJqzKjP/CKZ18wrgfjVf4ZpCsQKuZSItwQG0TJxGbB2KiiuewVTrWp7ZJ1xx dryvqukcIILGrFSTBM0uXQuzK5LzkSnN -----END CERTIFICATE-----Generated at Sat Aug 23 19:30:42 2025 by rpki-client