$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json) Hash identifier: rZ434mLRHUF12O7YLEDOZ5HywanHq7Hpwr/HuncyIKY= Subject key identifier: 4C:13:10:BF:88:A1:DB:28:81:BE:DA:3D:CE:A8:00:1B:A3:86:D4:72 Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 Certificate issuer: /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft Manifest number: D9 Signing time: Sat 23 Aug 2025 05:41:34 +0000 Manifest this update: Sat 23 Aug 2025 05:41:33 +0000 Manifest next update: Sat 30 Aug 2025 05:41:33 +0000 Files and hashes: 1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: jL66WMzdZgCAwY9e7ZQnJnqQinuL18UonUlWGRiJdaQ=) 2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: C6HUwf1FQ1jXt6f1hhjL5V8WYMVbIiest2VH946jwa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Validity Not Before: Aug 23 05:41:33 2025 GMT Not After : Aug 30 05:41:33 2025 GMT Subject: CN=68a9548d-268e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:21:fc:5c:e3:eb:75:d9:0b:83:9a:7b:68:6d: 07:d8:23:d4:a0:26:72:1d:f4:c9:a5:8e:84:ce:87: 44:b7:4b:e2:23:5b:e5:e8:23:7e:4f:d4:bb:1e:ec: b8:67:d5:ec:e2:63:31:0f:35:f2:e1:17:82:52:e9: 7b:c3:20:e6:aa:3c:21:28:58:6a:cb:a0:e7:7f:26: fe:e9:f7:eb:6a:74:38:26:eb:09:5f:fe:56:fe:86: 63:96:51:63:96:05:00:e7:02:9a:8f:d2:f3:52:00: 54:a3:28:a4:21:f8:13:22:14:5e:2d:c2:7d:28:d0: 8f:19:63:3c:55:3a:b1:13:e9:07:ce:fc:0b:4c:be: 4c:de:73:9d:ba:d9:4f:f9:cd:f3:e1:1c:8e:4d:12: 62:dd:a7:2f:b7:31:4f:95:8e:67:01:0b:57:c0:1b: df:e7:e9:fb:18:4c:95:b6:85:1b:31:da:b1:39:50: 53:8a:ab:1e:ec:c0:fd:3c:56:c2:19:08:57:a5:5b: 73:fe:39:58:2f:58:f7:cc:b9:3d:30:21:53:c2:5a: 2a:1d:a7:b9:a4:1d:13:ad:54:66:cf:eb:ce:a6:03: 7d:40:dd:6c:72:05:d3:36:d5:02:09:c0:d2:33:ea: 4e:47:67:e9:c7:ff:67:ba:a3:2e:7d:a5:c8:33:24: f4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:13:10:BF:88:A1:DB:28:81:BE:DA:3D:CE:A8:00:1B:A3:86:D4:72 X509v3 Authority Key Identifier: keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:fc:89:a3:f5:43:7a:37:c4:5b:27:7b:40:ba:c0:95:46:8c: ab:d0:99:74:5e:7a:0a:2b:84:22:48:87:6e:57:ec:23:71:d1: b3:7d:47:13:db:f3:67:c8:84:0f:03:de:81:a4:47:15:e6:f3: d7:13:cb:bd:cf:35:1b:13:97:a7:43:f7:a9:e7:d6:4d:83:af: f0:67:5a:b5:30:27:0b:ea:11:e6:b8:18:4e:b5:53:40:b9:70: c1:eb:69:ed:c7:9f:06:7a:f8:bc:58:b3:9a:0a:d2:90:87:41: e8:7c:20:54:29:73:1b:cd:39:07:08:86:ff:34:25:c6:c0:b4: 03:b8:b9:0d:ab:b6:ab:d0:68:c3:1a:c1:2d:34:56:cd:3c:13: 72:6f:95:ae:34:4c:7f:eb:10:bd:44:f9:fa:90:01:3a:3b:b4: cf:94:18:a2:a0:20:a5:17:7f:26:77:fa:2e:f1:6a:8a:65:b5: ed:bf:1d:18:6c:37:8c:46:22:e2:24:71:80:8d:76:11:47:2f: de:07:73:db:df:2b:5d:5a:02:e0:eb:f7:e7:9b:4b:6b:21:7f: 65:f5:9e:fb:5b:ad:3b:b9:cb:0c:c5:ea:eb:49:3b:7c:da:97: ed:eb:de:65:bf:06:67:9f:be:da:82:a9:da:6b:f3:61:6b:76: 1f:a9:de:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0RjAxMTAvBgNVBAUTKDEzNDZGNjVENjI5RkZGOTM2QjBGQzRDRjEyNzUwOUI2 ODJFOEUzRTQwHhcNMjUwODIzMDU0MTMzWhcNMjUwODMwMDU0MTMzWjAYMRYwFAYD VQQDEw02OGE5NTQ4ZC0yNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yH8XOPrddkLg5p7aG0H2CPUoCZyHfTJpY6EzodEt0viI1vl6CN+T9S7Huy4 Z9Xs4mMxDzXy4ReCUul7wyDmqjwhKFhqy6Dnfyb+6ffranQ4JusJX/5W/oZjllFj lgUA5wKaj9LzUgBUoyikIfgTIhReLcJ9KNCPGWM8VTqxE+kHzvwLTL5M3nOdutlP +c3z4RyOTRJi3acvtzFPlY5nAQtXwBvf5+n7GEyVtoUbMdqxOVBTiqse7MD9PFbC GQhXpVtz/jlYL1j3zLk9MCFTwloqHae5pB0TrVRmz+vOpgN9QN1scgXTNtUCCcDS M+pOR2fpx/9nuqMufaXIMyT0bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwTEL+I odsogb7aPc6oABujhtRyMB8GA1UdIwQYMBaAFBNG9l1in/+Taw/EzxJ1CbaC6OPk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzRGMC8wRDQ2Q0JFODM0 MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81TnJEOFRQRW5VSnRvTG80 LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UwYjJYV0tmXzVOckQ4VFBFblVKdG9MbzQtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzRGMC8wRDQ2Q0JFODM0MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81 TnJEOFRQRW5VSnRvTG80LVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf/Imj9UN6N8RbJ3tAusCVRoyr0Jl0XnoKK4QiSIduV+wjcdGzfUcT 2/NnyIQPA96BpEcV5vPXE8u9zzUbE5enQ/ep59ZNg6/wZ1q1MCcL6hHmuBhOtVNA uXDB62ntx58Gevi8WLOaCtKQh0HofCBUKXMbzTkHCIb/NCXGwLQDuLkNq7ar0GjD GsEtNFbNPBNyb5WuNEx/6xC9RPn6kAE6O7TPlBiioCClF38md/ou8WqKZbXtvx0Y bDeMRiLiJHGAjXYRRy/eB3Pb3ytdWgLg6/fnm0trIX9l9Z77W607ucsMxerrSTt8 2pft695lvwZnn77agqnaa/Nha3Yfqd67 -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:44 2025 by rpki-client