$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json) Hash identifier: tHo5MnaLYXlKbRK/pykVqKKpNqYREEurJ5VHKP+LhxE= Subject key identifier: 47:2B:D9:E1:75:A1:4A:F0:2F:E5:CB:0A:11:A0:49:93:72:54:C6:DF Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft Manifest number: 01A8 Signing time: Sat 23 Aug 2025 03:25:15 +0000 Manifest this update: Sat 23 Aug 2025 03:25:14 +0000 Manifest next update: Sat 30 Aug 2025 03:25:14 +0000 Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: RwOx4E3Ea687ksrsLbQxW2wTgAoT5PzVxcZ4N784U+k=) 2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: cgIQr0GieCik6XIQ9DuWPAAcXd8eAWq6OJRsIDCYebA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Validity Not Before: Aug 23 03:25:14 2025 GMT Not After : Aug 30 03:25:14 2025 GMT Subject: CN=68a9349a-f7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:2d:ed:0d:e9:d4:a1:b1:6e:86:77:70:97: e5:ff:86:a5:c3:f5:1d:06:bc:e3:12:8d:d3:24:42: 18:a2:2f:6e:cb:bb:88:eb:76:31:76:41:01:1d:1b: 7b:83:62:f3:14:3d:7a:f4:0a:d3:d1:c3:46:1e:61: d0:51:58:77:f4:43:01:0f:ba:f2:11:1b:1f:e2:1f: d7:f3:4f:0f:ae:9b:25:42:c2:dd:b2:4a:e6:cf:e3: f6:19:dd:3a:fe:59:71:e4:27:18:84:b6:a9:06:12: 65:ad:d1:b5:60:5b:12:08:21:5f:45:da:ae:62:00: bd:cb:37:f7:32:f9:51:27:2d:2b:18:e2:8f:ce:6f: 2d:d6:21:7b:83:d6:a5:f2:7a:46:ba:26:fb:c7:c6: 55:c9:12:69:fb:4f:7e:9a:fd:dd:8a:46:bb:b5:0d: 97:d5:e6:03:74:ec:69:3d:ba:57:52:99:c1:96:1c: f0:94:b7:06:cf:a2:e1:f9:e3:cb:eb:c4:27:46:80: 61:67:e9:1d:3a:0d:ba:1a:a3:b4:01:c3:ef:ae:88: ea:f0:5c:ef:f3:57:77:70:d5:98:83:52:1a:aa:20: 86:01:65:ae:65:47:a4:1b:66:d3:8c:08:46:af:36: 06:1e:ed:77:c3:fc:58:7f:68:de:f4:b7:5e:6f:55: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2B:D9:E1:75:A1:4A:F0:2F:E5:CB:0A:11:A0:49:93:72:54:C6:DF X509v3 Authority Key Identifier: keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ab:9f:2d:1d:a6:38:51:ed:b2:56:73:6b:22:9f:1f:27:8e: 6e:cd:56:a3:54:99:39:79:60:d3:cc:36:24:7e:e2:8d:0d:81: 0e:b4:2b:23:4f:c6:fb:12:6f:9b:b2:a6:75:56:ec:6f:31:21: 20:53:d6:9d:3c:b6:5b:30:ac:ee:3a:2c:08:b4:a7:4a:94:df: f5:57:cf:6d:fa:04:cb:15:fd:3c:87:a9:12:84:b7:b7:65:21: b0:35:8e:66:be:b9:2f:33:93:b9:51:d9:f8:33:b0:3d:0b:a3: 8b:5f:29:aa:0c:33:a9:78:94:f6:9c:2b:46:de:77:58:93:91: 34:2b:e4:a8:8f:0e:da:6a:21:df:d1:8f:e2:9f:bb:f1:59:66: 62:e3:32:99:ec:75:7d:15:79:89:52:58:52:e9:10:af:e5:89: ef:c9:1b:c4:87:fd:a9:3d:66:fa:35:90:b7:08:31:a5:c7:cd: 3b:5b:39:89:4c:a4:5b:c0:7c:3a:dd:5e:76:aa:06:b6:9c:9e: 43:b4:69:ad:2b:8a:23:f0:4e:3f:2f:57:11:cb:0d:38:90:84: 95:0d:dd:9b:0b:64:2e:a5:81:1e:51:de:e9:8c:be:c2:2e:0e: 95:4e:20:fc:33:cf:d6:17:96:ae:02:59:46:77:48:1d:6c:ed: 6e:50:95:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0 MzI4NzIzQTAwHhcNMjUwODIzMDMyNTE0WhcNMjUwODMwMDMyNTE0WjAYMRYwFAYD VQQDEw02OGE5MzQ5YS1mN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Q0t7Q3p1KGxboZ3cJfl/4alw/UdBrzjEo3TJEIYoi9uy7uI63YxdkEBHRt7 g2LzFD169ArT0cNGHmHQUVh39EMBD7ryERsf4h/X808PrpslQsLdskrmz+P2Gd06 /llx5CcYhLapBhJlrdG1YFsSCCFfRdquYgC9yzf3MvlRJy0rGOKPzm8t1iF7g9al 8npGuib7x8ZVyRJp+09+mv3dika7tQ2X1eYDdOxpPbpXUpnBlhzwlLcGz6Lh+ePL 68QnRoBhZ+kdOg26GqO0AcPvrojq8Fzv81d3cNWYg1IaqiCGAWWuZUekG2bTjAhG rzYGHu13w/xYf2je9Ldeb1Wd2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcr2eF1 oUrwL+XLChGgSZNyVMbfMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0 OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN QllSV2pBWkt1QU5ES0hJNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzq58tHaY4Ue2yVnNrIp8fJ45uzVajVJk5eWDTzDYkfuKNDYEOtCsj T8b7Em+bsqZ1VuxvMSEgU9adPLZbMKzuOiwItKdKlN/1V89t+gTLFf08h6kShLe3 ZSGwNY5mvrkvM5O5Udn4M7A9C6OLXymqDDOpeJT2nCtG3ndYk5E0K+Sojw7aaiHf 0Y/in7vxWWZi4zKZ7HV9FXmJUlhS6RCv5YnvyRvEh/2pPWb6NZC3CDGlx807WzmJ TKRbwHw63V52qga2nJ5DtGmtK4oj8E4/L1cRyw04kISVDd2bC2QupYEeUd7pjL7C Lg6VTiD8M8/WF5auAllGd0gdbO1uUJV8 -----END CERTIFICATE-----Generated at Sun Aug 24 05:17:29 2025 by rpki-client