$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: 0W/gMNXwY1kEHhn1tIuqUMYKdM+psEjyIRO8xPsk2OQ= Subject key identifier: C4:86:9F:5E:2D:A4:C0:1C:0D:14:3D:B3:FD:C2:6B:43:A0:8C:87:A5 Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: 85 Signing time: Thu 03 Jul 2025 06:50:36 +0000 Manifest this update: Thu 03 Jul 2025 06:50:35 +0000 Manifest next update: Thu 10 Jul 2025 06:50:35 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: TJFo+DgIhBiFEqut37JNCbrukNJ4TmUbHOhx2pBXEyo=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: 5nFCTmC5xU4JIe+ocqPzYmN20Z681T2Mb6LU4xxafNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Jul 3 06:50:35 2025 GMT Not After : Jul 10 06:50:35 2025 GMT Subject: CN=6866283c-d79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:8c:65:c9:db:d9:d1:bc:d0:48:c2:8b:1f: 40:15:8e:34:74:27:c0:3d:a9:c9:1a:3c:f6:83:c9: e4:b2:a3:32:5e:fa:9b:c6:e4:16:5a:fe:5c:bb:71: 6f:33:f9:b1:60:ca:c8:16:78:80:d3:1c:54:5d:cc: fa:3f:55:67:60:4f:db:24:41:5f:17:de:88:30:ff: 81:66:b5:d9:11:b6:af:b9:1f:31:12:5a:e2:2e:9d: 37:db:56:b3:55:bf:ee:2d:c6:b4:91:d1:49:8e:bd: 3c:d0:48:e6:c0:a8:90:64:1c:73:1b:29:00:5f:7b: 08:8c:29:65:45:99:18:00:62:8e:87:7d:bd:cd:dd: cb:57:62:b6:95:60:c4:95:60:e1:43:1e:5e:9a:fd: 10:6c:25:ad:45:01:f9:c1:bb:20:36:5d:f5:70:b4: f7:ae:16:e5:4e:9d:a3:ac:c7:20:09:37:fd:84:77: 08:6e:b5:23:03:2f:0b:f2:72:58:23:7d:df:c2:50: fa:c0:b6:91:c2:33:cb:04:dc:99:77:d9:37:56:a0: b1:cb:2b:9b:b5:39:11:eb:eb:ad:de:94:4a:89:d4: 59:10:36:dd:64:00:5a:c5:a9:9c:84:a4:8e:68:86: b1:d5:03:74:97:c5:9c:d4:b8:cd:73:ab:47:0b:ab: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:86:9F:5E:2D:A4:C0:1C:0D:14:3D:B3:FD:C2:6B:43:A0:8C:87:A5 X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:96:e4:41:b9:2d:46:24:a1:ac:b9:d1:47:29:3e:59:9f:f5: 91:d0:c3:90:94:f2:45:de:e8:ca:5e:34:1d:22:14:e1:51:48: 27:9d:8e:88:cb:d2:48:96:de:13:15:2f:82:21:dc:25:64:b7: 27:5f:8c:15:8d:e6:aa:a5:70:90:9d:80:0d:bc:31:fd:e9:1f: 23:1a:6f:9f:cc:f9:dc:74:b7:34:64:77:56:f9:da:37:65:ae: 74:b9:89:bb:60:b3:f2:9f:b6:c4:f5:f8:9b:ae:c0:a4:59:8e: b7:d3:0d:04:00:84:7f:bb:8d:cb:c3:13:2d:b2:7d:c1:68:3e: aa:60:fc:ce:a2:e8:6a:1a:b1:8e:fb:e9:f1:c5:a3:98:d5:11: ee:5f:23:64:7e:c9:35:a9:7e:e2:87:e1:a7:2d:46:34:99:ab: db:45:f8:09:d3:8a:55:bc:80:03:1d:55:7f:ab:87:7a:cf:41: 0a:b5:d1:85:19:e9:15:dd:2d:fa:24:6c:5e:bd:83:c6:ba:98: ed:4e:17:16:ae:38:c5:34:dc:38:c7:57:b8:56:3b:c1:3e:57: 57:7f:44:00:6e:ab:0f:60:36:ec:0b:3b:1c:48:02:01:ed:63: 11:96:46:28:09:a1:e5:40:0b:ce:d5:e8:68:1b:ea:69:a6:db: a6:7b:e9:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2RTcxMTAvBgNVBAUTKDEyNDcwODFFOUJBOTdDMTNDN0REM0Q2OEU0NDNEMUY1 NDc5QjJBRkYwHhcNMjUwNzAzMDY1MDM1WhcNMjUwNzEwMDY1MDM1WjAYMRYwFAYD VQQDEw02ODY2MjgzYy1kNzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIOMZcnb2dG80EjCix9AFY40dCfAPanJGjz2g8nksqMyXvqbxuQWWv5cu3Fv M/mxYMrIFniA0xxUXcz6P1VnYE/bJEFfF96IMP+BZrXZEbavuR8xElriLp0321az Vb/uLca0kdFJjr080EjmwKiQZBxzGykAX3sIjCllRZkYAGKOh329zd3LV2K2lWDE lWDhQx5emv0QbCWtRQH5wbsgNl31cLT3rhblTp2jrMcgCTf9hHcIbrUjAy8L8nJY I33fwlD6wLaRwjPLBNyZd9k3VqCxyyubtTkR6+ut3pRKidRZEDbdZABaxamchKSO aIax1QN0l8Wc1LjNc6tHC6tbCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSGn14t pMAcDRQ9s/3Ca0OgjIelMB8GA1UdIwQYMBaAFBJHCB6bqXwTx909aORD0fVHmyr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTZFNy8wNjc5QUNGNDkx MjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZCUEgzVDFvNUVQUjlVZWJL djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTZFNy8wNjc5QUNGNDkxMjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZC UEgzVDFvNUVQUjlVZWJLdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxluRBuS1GJKGsudFHKT5Zn/WR0MOQlPJF3ujKXjQdIhThUUgnnY6I y9JIlt4TFS+CIdwlZLcnX4wVjeaqpXCQnYANvDH96R8jGm+fzPncdLc0ZHdW+do3 Za50uYm7YLPyn7bE9fibrsCkWY630w0EAIR/u43LwxMtsn3BaD6qYPzOouhqGrGO ++nxxaOY1RHuXyNkfsk1qX7ih+GnLUY0mavbRfgJ04pVvIADHVV/q4d6z0EKtdGF GekV3S36JGxevYPGupjtThcWrjjFNNw4x1e4VjvBPldXf0QAbqsPYDbsCzscSAIB 7WMRlkYoCaHlQAvO1ehoG+ppptume+l5 -----END CERTIFICATE-----Generated at Thu Jul 3 23:03:29 2025 by rpki-client