$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft File: EPSBzyjc51gajMuOUN4Jj3yLyRU.mft (raw, json) Hash identifier: fIJi55tiPJRHBroODja9oGQvn6NkURzMH3M0Vhzdopk= Subject key identifier: D9:61:CB:62:0C:40:DB:0C:DE:CF:E5:7C:CB:36:BA:47:5F:28:E0:AB Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 Certificate issuer: /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft Manifest number: 0136 Signing time: Sat 23 Aug 2025 04:38:47 +0000 Manifest this update: Sat 23 Aug 2025 04:38:46 +0000 Manifest next update: Sat 30 Aug 2025 04:38:46 +0000 Files and hashes: 1: EPSBzyjc51gajMuOUN4Jj3yLyRU.crl (hash: /ov512cEjFGZaTjHLtGzZAT6PRGjf7FDT0Tb44nrntg=) 2: E070CA0CAA2E11EEA404D421C4F9AE02.roa (hash: iZU8zdfl9m+d7mdN1RiWPOsL2RUjP7KC4vEHrZwKmZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122134, serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Validity Not Before: Aug 23 04:38:46 2025 GMT Not After : Aug 30 04:38:46 2025 GMT Subject: CN=68a945d7-2872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:9d:7e:8d:a6:91:81:ff:81:0a:89:e3:70: eb:d3:73:4b:2f:3a:e0:72:bd:6a:21:93:5a:ae:90: 66:49:ec:78:3d:8f:de:15:13:b2:ba:53:10:04:30: b6:0c:41:0f:aa:13:5a:b6:0c:16:94:0d:da:79:15: 7a:a7:5d:56:96:03:94:59:8a:52:bd:e3:44:b9:78: 98:d4:e8:57:b4:7d:fd:b8:94:94:bc:0c:20:8e:f3: 53:70:26:e3:1f:42:5c:a4:c7:20:26:f7:64:98:9d: 6c:56:f4:0b:76:7b:aa:bd:a2:9c:96:68:39:07:94: 61:cc:68:80:e3:68:d7:9b:bf:16:d5:03:e5:97:35: 92:66:e1:0e:b5:b4:38:57:db:2b:ed:67:d4:fb:59: 02:2d:d6:12:31:b7:73:34:29:64:5d:34:57:82:be: 36:57:8a:15:03:85:7a:2c:ff:b8:e6:f8:0a:43:68: ff:a0:ba:7e:ce:8d:d3:30:c0:e0:c1:69:76:7d:9d: 47:9b:93:a9:a4:68:3f:cc:e6:42:33:9f:2b:c9:62: 57:39:60:f0:f5:e6:33:1f:4b:db:30:78:de:ac:9d: 2e:39:c3:ae:06:8e:80:59:3b:21:92:ad:f5:95:d6: 25:89:fe:22:2e:22:27:00:78:dc:bb:00:07:93:21: 79:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:61:CB:62:0C:40:DB:0C:DE:CF:E5:7C:CB:36:BA:47:5F:28:E0:AB X509v3 Authority Key Identifier: keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:24:aa:bc:bd:1f:e0:f1:e5:e5:73:4f:81:44:61:a1:25:45: bc:35:2a:00:4e:1e:86:ab:40:99:50:4f:64:60:ad:3d:66:5e: 77:de:98:d5:8d:40:b2:3c:25:bc:91:6a:ee:39:39:39:65:c8: b4:1b:49:52:ff:28:b3:69:c2:33:06:c0:41:63:41:3e:51:1d: bf:7e:09:a9:24:e7:21:42:c8:e2:5c:27:c6:bb:31:be:ae:26: f6:b7:45:f6:b2:c7:b3:ec:b2:42:07:77:d2:c1:de:8d:50:b5: a5:3e:16:21:d7:c4:78:6b:9b:d9:d4:96:61:63:34:37:5c:b6: 36:03:77:b6:b0:55:d6:f7:6c:f5:a7:da:40:06:79:2d:9f:06: 8c:6b:64:9b:26:5d:ed:06:3a:23:32:d1:31:ff:39:56:55:4b: 6f:a1:f6:85:31:0c:15:b0:28:e8:6c:f0:cf:54:d7:8b:51:a7: 88:34:f4:cf:d8:cf:c1:19:f1:36:0f:20:4a:21:cc:3f:4b:21: fd:4c:91:0d:63:83:f2:3b:37:4c:16:c5:4f:8d:15:fe:9a:43: 7a:9a:72:82:65:7d:94:9e:d0:93:17:8e:87:a4:e5:7e:77:66: 49:e8:ff:ed:e8:13:ba:38:3c:49:9e:78:d9:64:a3:39:21:4c: 43:b2:68:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxMzQxMTAvBgNVBAUTKDEwRjQ4MUNGMjhEQ0U3NTgxQThDQ0I4RTUwREUwOThG N0M4QkM5MTUwHhcNMjUwODIzMDQzODQ2WhcNMjUwODMwMDQzODQ2WjAYMRYwFAYD VQQDEw02OGE5NDVkNy0yODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIudfo2mkYH/gQqJ43Dr03NLLzrgcr1qIZNarpBmSex4PY/eFROyulMQBDC2 DEEPqhNatgwWlA3aeRV6p11WlgOUWYpSveNEuXiY1OhXtH39uJSUvAwgjvNTcCbj H0JcpMcgJvdkmJ1sVvQLdnuqvaKclmg5B5RhzGiA42jXm78W1QPllzWSZuEOtbQ4 V9sr7WfU+1kCLdYSMbdzNClkXTRXgr42V4oVA4V6LP+45vgKQ2j/oLp+zo3TMMDg wWl2fZ1Hm5OppGg/zOZCM58ryWJXOWDw9eYzH0vbMHjerJ0uOcOuBo6AWTshkq31 ldYlif4iLiInAHjcuwAHkyF5+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlhy2IM QNsM3s/lfMs2ukdfKOCrMB8GA1UdIwQYMBaAFBD0gc8o3OdYGozLjlDeCY98i8kV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjEzNC83OUEzMzU3NkFB MkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUxZ2FqTXVPVU40SmozeUx5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQU0J6eWpjNTFnYWpNdU9VTjRKajN5THlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjEzNC83OUEzMzU3NkFBMkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUx Z2FqTXVPVU40SmozeUx5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqJKq8vR/g8eXlc0+BRGGhJUW8NSoATh6Gq0CZUE9kYK09Zl533pjV jUCyPCW8kWruOTk5Zci0G0lS/yizacIzBsBBY0E+UR2/fgmpJOchQsjiXCfGuzG+ rib2t0X2ssez7LJCB3fSwd6NULWlPhYh18R4a5vZ1JZhYzQ3XLY2A3e2sFXW92z1 p9pABnktnwaMa2SbJl3tBjojMtEx/zlWVUtvofaFMQwVsCjobPDPVNeLUaeINPTP 2M/BGfE2DyBKIcw/SyH9TJENY4PyOzdMFsVPjRX+mkN6mnKCZX2UntCTF46HpOV+ d2ZJ6P/t6BO6ODxJnnjZZKM5IUxDsmjm -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:15 2025 by rpki-client