$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: CERZik38yfC8C+qIR32UgpuMB878UTHmNuVYFaoLN3c= Subject key identifier: 05:A6:9C:85:90:3B:E7:6B:C8:98:2F:45:B0:FC:70:EE:82:F9:6D:11 Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 0214 Signing time: Sat 23 Aug 2025 02:13:59 +0000 Manifest this update: Sat 23 Aug 2025 02:13:58 +0000 Manifest next update: Sat 30 Aug 2025 02:13:58 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: yoa/tmRLN90hH6hMuOLTQAcDWqfddPtI52+E1Quuiow=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: y8u3ZZNWwXMV6EsCoReGtHsNbMX1mb+g+HfYKyQ+Y/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: Aug 23 02:13:58 2025 GMT Not After : Aug 30 02:13:58 2025 GMT Subject: CN=68a923e6-bd6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:d8:f2:37:82:56:2b:f9:c6:3b:e5:83:3c: 41:34:93:cd:d6:54:65:03:39:89:bf:af:fa:93:66: e3:49:bd:8c:da:75:19:bb:b0:7f:a3:59:8e:91:fc: 80:84:ec:d0:2e:45:6e:98:69:06:f3:08:7c:f7:2a: 9f:a1:ad:5f:d9:79:96:69:96:5d:66:ea:4f:35:4f: 86:fc:a1:c3:31:03:6f:83:bb:57:45:ae:bf:a9:8a: c3:44:1f:f0:a5:34:ad:b8:cb:1d:e4:63:6d:b7:a0: f2:c5:64:77:f7:96:3d:01:ac:68:ca:e2:2d:16:9c: a6:20:cd:a2:b6:17:3a:bc:60:37:3e:d4:5d:e4:79: 3c:e9:43:73:81:99:c6:8e:16:c7:d5:0a:63:44:cd: 51:e9:fa:8b:6d:98:c7:24:7c:37:e9:31:2a:d4:a8: 5f:87:a2:88:9b:de:18:65:37:55:03:ac:d0:9f:93: 9e:72:25:e0:06:c9:b3:d9:37:20:ad:48:5a:62:42: 4c:3a:31:f5:8f:32:61:5f:20:d5:48:a0:a2:2b:70: 05:23:4d:cc:73:db:c4:97:2f:80:bd:35:4c:6a:06: f8:49:b9:98:fe:dd:c8:6d:55:7e:9f:45:7d:9b:da: 4a:c2:35:2a:78:88:63:84:d5:43:2d:56:45:d2:81: 5f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A6:9C:85:90:3B:E7:6B:C8:98:2F:45:B0:FC:70:EE:82:F9:6D:11 X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:30:12:17:f2:47:a6:0e:71:15:1c:fb:f3:93:a6:ca:a6:68: ee:b8:26:e8:44:74:39:fa:7f:dc:8e:ed:dd:09:3d:94:d2:1b: 68:94:37:d9:f4:67:00:63:67:8e:7f:0e:1e:fa:fe:66:5e:11: 35:a2:34:17:19:30:db:bd:73:b5:3e:8d:d3:c0:40:d4:2a:b8: 5f:c9:03:b6:02:c3:2f:36:f6:79:4e:d4:da:94:d8:fe:59:ef: 73:1c:27:58:b6:eb:93:b9:b5:97:a9:dd:89:2e:01:4d:71:17: 98:ab:b2:68:91:a4:1e:76:67:53:09:9f:e8:da:19:34:51:8a: 66:d5:95:09:d4:66:77:e9:fa:59:4b:ba:c3:47:06:4f:25:88: 7b:bf:e3:78:d6:cf:a7:13:86:1c:bd:02:e0:73:d6:3b:c2:38: b9:92:06:23:f5:76:84:a3:e7:3e:25:9a:d4:77:cb:7d:70:bd: 8c:5b:32:ac:86:96:8f:04:0d:3e:bc:00:c8:a2:9d:54:5f:95: a8:5c:15:5f:73:44:34:83:fa:33:a2:93:17:b0:78:b1:89:eb: b2:7e:d0:7c:ef:99:d1:1a:91:64:6a:6c:48:55:7b:44:6e:a2: 07:db:3b:30:79:73:ae:8d:2e:ea:b8:fb:62:f8:8d:45:0d:77: cf:ee:c9:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjUwODIzMDIxMzU4WhcNMjUwODMwMDIxMzU4WjAYMRYwFAYD VQQDEw02OGE5MjNlNi1iZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoA/Y8jeCViv5xjvlgzxBNJPN1lRlAzmJv6/6k2bjSb2M2nUZu7B/o1mOkfyA hOzQLkVumGkG8wh89yqfoa1f2XmWaZZdZupPNU+G/KHDMQNvg7tXRa6/qYrDRB/w pTStuMsd5GNtt6DyxWR395Y9AaxoyuItFpymIM2ithc6vGA3PtRd5Hk86UNzgZnG jhbH1QpjRM1R6fqLbZjHJHw36TEq1Khfh6KIm94YZTdVA6zQn5OeciXgBsmz2Tcg rUhaYkJMOjH1jzJhXyDVSKCiK3AFI03Mc9vEly+AvTVMagb4SbmY/t3IbVV+n0V9 m9pKwjUqeIhjhNVDLVZF0oFfgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWmnIWQ O+dryJgvRbD8cO6C+W0RMB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKMBIX8kemDnEVHPvzk6bKpmjuuCboRHQ5+n/cju3dCT2U0htolDfZ 9GcAY2eOfw4e+v5mXhE1ojQXGTDbvXO1Po3TwEDUKrhfyQO2AsMvNvZ5TtTalNj+ We9zHCdYtuuTubWXqd2JLgFNcReYq7JokaQedmdTCZ/o2hk0UYpm1ZUJ1GZ36fpZ S7rDRwZPJYh7v+N41s+nE4YcvQLgc9Y7wji5kgYj9XaEo+c+JZrUd8t9cL2MWzKs hpaPBA0+vADIop1UX5WoXBVfc0Q0g/ozopMXsHixieuyftB875nRGpFkamxIVXtE bqIH2zsweXOujS7quPti+I1FDXfP7skh -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:48 2025 by rpki-client