$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft File: EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json) Hash identifier: lnpIh9Aa7pdFRWYDDMSZ+AbPAuL14f/WfBQQCiH9lNA= Subject key identifier: 25:2A:5C:29:20:03:9E:F9:86:B3:92:25:DA:C7:08:78:E0:70:AC:AA Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 Certificate issuer: /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Certificate serial: 109D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft Manifest number: 1092 Signing time: Fri 22 Aug 2025 17:29:51 +0000 Manifest this update: Fri 22 Aug 2025 17:29:50 +0000 Manifest next update: Fri 29 Aug 2025 17:29:50 +0000 Files and hashes: 1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: /q/Jn/lnz+FdPe5wKXS9iN40BfsaA6zojtVKfz87tGk=) 2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: S/gVJ+TtEF1mtr8NQHi7hBzO8ZEUNieBwZ0+m5tF7pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4253 (0x109d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Validity Not Before: Aug 22 17:29:50 2025 GMT Not After : Aug 29 17:29:50 2025 GMT Subject: CN=68a8a90f-158c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:2b:90:0a:a9:9d:f9:6c:31:71:ae:ba:18: 7c:7b:e6:60:24:c9:2e:a5:4c:76:3c:2a:03:69:b2: b9:3e:a5:f7:aa:1e:d6:06:fe:3f:77:a3:b2:58:d7: 43:ec:19:ee:eb:1d:26:13:6b:b1:4c:35:28:c6:eb: 38:c8:08:c2:37:de:70:26:e3:d7:9d:8b:99:2c:86: 94:33:d1:f3:e8:81:bb:83:f2:8c:77:97:d7:d3:d2: e9:ad:b0:86:67:8f:81:a6:24:46:68:5c:79:44:6f: d4:8e:30:21:ee:87:98:0e:25:39:9b:d1:fe:77:cd: 9a:59:87:bf:3e:d5:0d:9a:6e:24:27:6e:7d:06:1a: 58:af:d0:69:c7:fa:da:c5:c0:32:2b:c9:1e:1d:d2: 3d:c0:f9:f6:63:94:ef:f3:71:1c:05:6a:49:8d:47: 0e:57:fa:53:ec:3d:59:22:8d:a8:a9:07:0a:42:25: 3e:80:26:cc:65:e7:55:95:f6:4f:85:f3:30:b2:d0: bd:81:1b:ba:61:5e:72:8f:ea:a3:9d:82:5b:90:c8: cd:c3:0b:d0:83:87:70:ae:7f:42:a5:36:50:ae:ad: b3:f7:df:23:af:c2:14:31:71:29:6b:76:93:70:b7: 9e:c8:05:1a:ac:04:81:b2:4b:54:58:82:1a:04:37: 4c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:2A:5C:29:20:03:9E:F9:86:B3:92:25:DA:C7:08:78:E0:70:AC:AA X509v3 Authority Key Identifier: keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3f:c8:c9:bd:69:5f:fb:e4:53:f3:84:6c:f8:45:29:d2:f2: a9:2c:8a:0f:1e:a0:42:41:d7:d0:a9:3a:2a:3f:1b:5c:23:40: 23:e1:5b:e7:02:a4:cc:2c:43:12:5a:80:6c:30:41:79:2a:1d: 29:36:ea:a4:4b:d1:62:38:1b:0a:2f:01:3d:56:16:cb:d1:cc: 27:64:97:75:bf:ed:5c:f8:46:d5:eb:b3:0c:00:bf:27:a4:94: 76:13:c7:1e:39:0f:52:e4:98:f6:7a:34:3c:d4:62:8a:70:ef: f3:e5:0a:c2:ef:3b:53:ff:b9:09:50:9b:08:d5:e9:da:91:99: c6:cc:a0:d9:9b:94:46:7b:27:72:b2:22:7c:54:03:06:63:b5: 58:33:d1:ca:64:a6:89:f4:25:1d:87:d9:9b:12:1a:e0:be:e6: 63:38:cb:d1:9c:da:d3:91:51:b6:e2:da:e3:52:3f:99:a4:83: 6a:7d:4d:8a:f8:85:68:49:21:20:f2:7c:f5:2e:41:40:ce:ea: 5b:a4:7e:e6:72:3d:28:ac:ba:ac:ba:79:1a:0b:af:3a:91:42: 0e:4f:6b:80:f2:51:1d:cd:bd:fe:84:78:21:c9:ef:ae:29:21: 78:1f:4d:1f:bd:b5:73:d1:2a:e2:c3:ee:df:5c:45:14:7a:15: 07:8b:c9:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKDEwRjYxQzZCQkUzNjc0MDQ1MTJGQkM4M0NEREE4NUE5 OUM3RjNDNzUwHhcNMjUwODIyMTcyOTUwWhcNMjUwODI5MTcyOTUwWjAYMRYwFAYD VQQDEw02OGE4YTkwZi0xNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB0rkAqpnflsMXGuuhh8e+ZgJMkupUx2PCoDabK5PqX3qh7WBv4/d6OyWNdD 7Bnu6x0mE2uxTDUoxus4yAjCN95wJuPXnYuZLIaUM9Hz6IG7g/KMd5fX09LprbCG Z4+BpiRGaFx5RG/UjjAh7oeYDiU5m9H+d82aWYe/PtUNmm4kJ259BhpYr9Bpx/ra xcAyK8keHdI9wPn2Y5Tv83EcBWpJjUcOV/pT7D1ZIo2oqQcKQiU+gCbMZedVlfZP hfMwstC9gRu6YV5yj+qjnYJbkMjNwwvQg4dwrn9CpTZQrq2z998jr8IUMXEpa3aT cLeeyAUarASBsktUWIIaBDdMlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUqXCkg A575hrOSJdrHCHjgcKyqMB8GA1UdIwQYMBaAFBD2HGu+NnQEUS+8g83ahamcfzx1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FQzgyMzBFMjNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRBUlJMN3lEemRxRnFaeF9Q SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQWWNhNzQyZEFSUkw3eUR6ZHFGcVp4X1BIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FQzgyMzBFMjNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRB UlJMN3lEemRxRnFaeF9QSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWP8jJvWlf++RT84Rs+EUp0vKpLIoPHqBCQdfQqToqPxtcI0Aj4Vvn AqTMLEMSWoBsMEF5Kh0pNuqkS9FiOBsKLwE9VhbL0cwnZJd1v+1c+EbV67MMAL8n pJR2E8ceOQ9S5Jj2ejQ81GKKcO/z5QrC7ztT/7kJUJsI1enakZnGzKDZm5RGeydy siJ8VAMGY7VYM9HKZKaJ9CUdh9mbEhrgvuZjOMvRnNrTkVG24trjUj+ZpINqfU2K +IVoSSEg8nz1LkFAzupbpH7mcj0orLqsunkaC686kUIOT2uA8lEdzb3+hHghye+u KSF4H00fvbVz0Sriw+7fXEUUehUHi8nn -----END CERTIFICATE-----Generated at Sat Aug 23 14:27:01 2025 by rpki-client