$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft File: eI-02WtgHbphbd3JnP5GXWDDjyE.mft (raw, json) Hash identifier: pPo7WCZDOQyho4tnIMu+SGiEcIgnIXIRcFgtes8F+aY= Subject key identifier: FC:18:08:C7:18:56:65:24:75:B5:5B:D1:16:22:DF:38:40:9E:DB:6E Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 Certificate issuer: /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft Manifest number: 0664 Signing time: Sat 23 Aug 2025 00:23:07 +0000 Manifest this update: Sat 23 Aug 2025 00:23:07 +0000 Manifest next update: Sat 30 Aug 2025 00:23:07 +0000 Files and hashes: 1: eI-02WtgHbphbd3JnP5GXWDDjyE.crl (hash: nHNiD1d0crR/Z64Lo0rIjV0rtMpvDQizeRIldVIHCK8=) 2: 960BB902A6F111EF9E720A74C4F9AE02.roa (hash: B8sszNLunLsrUHs5D3APS7GKyh44CqzKcDt/4Ik4FRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119363, serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21 Validity Not Before: Aug 23 00:23:07 2025 GMT Not After : Aug 30 00:23:07 2025 GMT Subject: CN=68a909eb-70ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b5:e7:82:b4:17:40:ec:67:86:25:2b:d6:1e: 93:a5:5c:a4:5e:90:61:06:19:34:54:66:f0:a4:2c: 9d:7a:54:50:63:f0:96:b4:9b:0d:9b:cd:4d:c0:0d: 61:61:1a:6e:33:d2:4c:52:73:7c:c9:83:9f:37:1f: 56:8d:71:f5:d0:42:49:68:81:2d:43:d2:33:56:09: 17:25:26:44:33:27:1f:b8:f2:47:b4:5a:49:1f:ae: fd:8c:34:7c:8e:02:f6:36:01:27:40:64:4e:93:59: a1:e9:52:07:49:7a:ce:d0:0a:8e:d9:9d:44:26:96: c8:6e:1a:39:84:bd:7f:8a:1f:c1:ea:07:68:38:11: 6f:dd:f6:1b:e8:79:7b:ad:84:0a:f5:17:f4:f9:d7: e5:62:e1:c5:3f:2a:22:d3:cd:56:f6:0f:3b:5d:a0: 4d:75:79:fc:d1:63:f4:52:a9:ce:01:50:9e:cc:1e: 88:d8:37:58:81:fb:69:2d:a3:b1:86:32:b3:20:0f: bf:ef:19:cc:66:c4:83:54:4e:28:c4:12:f0:a3:e4: 19:84:85:30:00:1d:0b:c0:27:03:19:f6:cc:59:c3: 27:85:e7:63:00:d2:84:22:ec:8d:50:bc:90:a8:1f: f0:2f:d3:d9:65:e0:ff:99:2c:75:62:99:cf:76:fa: 10:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:18:08:C7:18:56:65:24:75:B5:5B:D1:16:22:DF:38:40:9E:DB:6E X509v3 Authority Key Identifier: keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3a:39:91:bd:17:6d:d6:0b:4a:c1:78:d5:6c:1c:81:25:87: ea:67:7a:bb:19:1e:f4:d9:60:ef:af:a6:a8:bc:95:d2:73:09: 30:5a:d5:48:8d:5c:30:a0:32:49:9a:4c:9e:37:07:03:f3:cc: 4f:f2:64:c0:2e:23:08:db:f1:f6:c9:b5:7f:76:dc:ca:ce:59: 7c:d5:66:f4:80:09:1c:be:0f:ad:b9:e5:9f:a5:ed:e4:6d:1e: 90:ba:d4:09:1c:2d:e3:8e:68:e7:70:64:4d:96:b5:93:aa:db: db:aa:c3:a0:e8:48:82:d0:01:03:9a:1c:9a:9a:24:7d:ec:a5: 23:7f:4d:87:66:6a:38:bb:ff:58:17:76:6b:ef:d4:f1:fe:f8: a2:ac:a7:4b:2d:78:29:a1:4c:77:59:90:ee:5c:60:5c:41:26: 1d:c9:e6:3c:b9:f2:c7:4c:fa:cf:92:d2:ec:9d:d4:49:30:6a: 37:e6:88:ca:fe:c0:46:bd:37:8b:66:f5:5f:9e:fc:1f:b9:de: 02:cd:53:d2:9c:96:a9:9f:24:2f:1a:d5:79:98:77:16:a9:f7: d6:e4:fb:a3:14:62:a3:d9:42:27:33:cd:7e:3b:b0:f4:f9:df: b3:73:25:fb:f9:33:c7:52:a3:31:6c:05:5a:43:83:c7:7f:e5: 65:ed:29:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkzNjMxMTAvBgNVBAUTKDc4OEZCNEQ5NkI2MDFEQkE2MTZERERDOTlDRkU0NjVE NjBDMzhGMjEwHhcNMjUwODIzMDAyMzA3WhcNMjUwODMwMDAyMzA3WjAYMRYwFAYD VQQDEw02OGE5MDllYi03MGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA77XngrQXQOxnhiUr1h6TpVykXpBhBhk0VGbwpCydelRQY/CWtJsNm81NwA1h YRpuM9JMUnN8yYOfNx9WjXH10EJJaIEtQ9IzVgkXJSZEMycfuPJHtFpJH679jDR8 jgL2NgEnQGROk1mh6VIHSXrO0AqO2Z1EJpbIbho5hL1/ih/B6gdoOBFv3fYb6Hl7 rYQK9Rf0+dflYuHFPyoi081W9g87XaBNdXn80WP0UqnOAVCezB6I2DdYgftpLaOx hjKzIA+/7xnMZsSDVE4oxBLwo+QZhIUwAB0LwCcDGfbMWcMnhedjANKEIuyNULyQ qB/wL9PZZeD/mSx1YpnPdvoQVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwYCMcY VmUkdbVb0RYi3zhAnttuMB8GA1UdIwQYMBaAFHiPtNlrYB26YW3dyZz+Rl1gw48h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD QkExMUVDOEFBMTNFMjRDNEY5QUUwMi9lSS0wMld0Z0hicGhiZDNKblA1R1hXRERq eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VJLTAyV3RnSGJwaGJkM0puUDVHWFdERGp5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi9lSS0wMld0Z0hi cGhiZDNKblA1R1hXRERqeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiOjmRvRdt1gtKwXjVbByBJYfqZ3q7GR702WDvr6aovJXScwkwWtVI jVwwoDJJmkyeNwcD88xP8mTALiMI2/H2ybV/dtzKzll81Wb0gAkcvg+tueWfpe3k bR6QutQJHC3jjmjncGRNlrWTqtvbqsOg6EiC0AEDmhyamiR97KUjf02HZmo4u/9Y F3Zr79Tx/viirKdLLXgpoUx3WZDuXGBcQSYdyeY8ufLHTPrPktLsndRJMGo35ojK /sBGvTeLZvVfnvwfud4CzVPSnJapnyQvGtV5mHcWqffW5PujFGKj2UInM81+O7D0 +d+zcyX7+TPHUqMxbAVaQ4PHf+Vl7Smv -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:13 2025 by rpki-client