$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: 6kK4XNwpe/KpYkg5/FF1IWJmEZq3u+Ex+VGXee0phms= Subject key identifier: EF:D9:5A:5B:D9:DB:CC:65:D3:B5:39:D8:50:39:93:4D:64:EE:09:7C Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: 9F Signing time: Sat 23 Aug 2025 06:33:19 +0000 Manifest this update: Sat 23 Aug 2025 06:33:19 +0000 Manifest next update: Sat 30 Aug 2025 06:33:19 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: SwPMHNz+YL3N+fYEQK/mFCLY91PlHIVwFHCY3jY4RWM=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: 5nFCTmC5xU4JIe+ocqPzYmN20Z681T2Mb6LU4xxafNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Aug 23 06:33:19 2025 GMT Not After : Aug 30 06:33:19 2025 GMT Subject: CN=68a960af-a3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:f5:40:92:35:9c:ec:4f:80:87:53:cf:2d: 37:52:b6:00:e0:f4:bd:dd:33:ce:e7:bc:0a:a7:bd: ee:a7:cb:68:56:db:f9:c7:ed:ab:70:12:71:0f:e4: 1e:5c:49:fe:22:18:e4:76:c8:d3:ac:a6:bf:73:46: c1:e2:11:b6:bd:ea:6c:3b:3c:0c:92:9e:d1:f1:19: f8:9d:81:80:a1:bd:fe:33:40:52:26:2a:ec:33:65: 10:c8:65:5c:e5:56:ea:b5:75:21:f8:93:04:ef:64: 74:28:28:3d:75:3e:ae:e1:1a:38:b9:43:1e:97:49: 1f:eb:8b:e6:86:a8:e4:b1:87:4a:e0:5d:05:cd:38: 9d:24:50:a2:da:25:97:f6:b8:1f:bd:ae:69:ed:fa: 38:a4:20:96:a8:4f:19:f5:58:0a:9a:73:fe:17:5b: 32:d2:31:0e:a2:f4:7c:36:2a:c7:2d:88:44:2b:4a: 87:cb:8c:37:e2:4e:25:e1:6c:3b:68:f5:20:11:26: 90:5f:b4:9a:89:a4:86:7d:ac:57:cc:fd:ef:84:88: 26:2a:84:ae:75:6f:36:65:48:82:98:3f:48:e0:4a: 30:e9:a9:99:24:48:e6:88:40:07:30:ed:6c:84:05: 60:65:d0:2b:f3:70:5d:44:3b:f0:15:9c:33:85:76: f6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D9:5A:5B:D9:DB:CC:65:D3:B5:39:D8:50:39:93:4D:64:EE:09:7C X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:2e:3e:18:11:7b:e6:8b:0b:1b:c9:80:4a:1f:1c:d5:4f:bc: 1b:5f:ff:2d:67:6a:0b:4f:11:61:7e:97:c9:58:7f:ff:c9:2e: 75:f2:77:ec:5e:6e:6e:8b:8b:fb:e7:fd:e6:4c:de:89:61:06: 8c:d4:34:27:47:82:55:ec:0a:59:d9:0d:1c:bc:dd:58:8a:3d: 48:6a:7e:65:fd:93:9b:65:95:07:46:21:55:f7:0d:df:33:29: d6:6c:41:37:df:e2:93:5a:02:cf:99:21:68:31:61:87:74:6d: 1a:78:23:e5:cc:a4:b5:cc:a2:75:12:c0:67:03:43:7d:f0:60: c5:52:ac:97:e1:9a:8e:c9:fb:c3:14:40:e5:fc:89:63:fa:26: e6:3b:69:ae:e1:9a:28:9b:d9:b0:2b:49:3b:8d:ec:1b:3a:08: b9:d6:8b:5b:4d:74:b4:d2:6a:d3:9d:ab:e0:d1:0c:f0:d3:94: 44:0a:30:bc:73:78:6e:46:c3:5d:85:da:f1:28:04:6f:98:64: c3:43:7c:47:6b:6c:07:f9:1c:b5:12:15:44:e8:07:d0:c5:94: ac:4a:d6:17:59:d2:b9:76:3a:f4:f2:92:49:63:14:f2:32:74: 5f:4e:e8:a7:4b:ec:e4:76:12:2f:4d:2f:85:45:3f:9f:f6:90: 4f:29:58:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2RTcxMTAvBgNVBAUTKDEyNDcwODFFOUJBOTdDMTNDN0REM0Q2OEU0NDNEMUY1 NDc5QjJBRkYwHhcNMjUwODIzMDYzMzE5WhcNMjUwODMwMDYzMzE5WjAYMRYwFAYD VQQDEw02OGE5NjBhZi1hM2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEP1QJI1nOxPgIdTzy03UrYA4PS93TPO57wKp73up8toVtv5x+2rcBJxD+Qe XEn+IhjkdsjTrKa/c0bB4hG2vepsOzwMkp7R8Rn4nYGAob3+M0BSJirsM2UQyGVc 5VbqtXUh+JME72R0KCg9dT6u4Ro4uUMel0kf64vmhqjksYdK4F0FzTidJFCi2iWX 9rgfva5p7fo4pCCWqE8Z9VgKmnP+F1sy0jEOovR8NirHLYhEK0qHy4w34k4l4Ww7 aPUgESaQX7SaiaSGfaxXzP3vhIgmKoSudW82ZUiCmD9I4Eow6amZJEjmiEAHMO1s hAVgZdAr83BdRDvwFZwzhXb2lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/ZWlvZ 28xl07U52FA5k01k7gl8MB8GA1UdIwQYMBaAFBJHCB6bqXwTx909aORD0fVHmyr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTZFNy8wNjc5QUNGNDkx MjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZCUEgzVDFvNUVQUjlVZWJL djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTZFNy8wNjc5QUNGNDkxMjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZC UEgzVDFvNUVQUjlVZWJLdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKLj4YEXvmiwsbyYBKHxzVT7wbX/8tZ2oLTxFhfpfJWH//yS518nfs Xm5ui4v75/3mTN6JYQaM1DQnR4JV7ApZ2Q0cvN1Yij1Ian5l/ZObZZUHRiFV9w3f MynWbEE33+KTWgLPmSFoMWGHdG0aeCPlzKS1zKJ1EsBnA0N98GDFUqyX4ZqOyfvD FEDl/Ilj+ibmO2mu4Zoom9mwK0k7jewbOgi51otbTXS00mrTnavg0Qzw05RECjC8 c3huRsNdhdrxKARvmGTDQ3xHa2wH+Ry1EhVE6AfQxZSsStYXWdK5djr08pJJYxTy MnRfTuinS+zkdhIvTS+FRT+f9pBPKVhy -----END CERTIFICATE-----Generated at Sat Aug 23 12:31:13 2025 by rpki-client