$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json) Hash identifier: /RFqnScOvEDbZRXb22Un8PFqhKWWHAkPsA7UnoxO02c= Subject key identifier: 2E:86:AA:E5:46:98:DD:51:89:88:DA:84:A1:4C:97:9C:2D:37:08:2A Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft Manifest number: 0127 Signing time: Sat 23 Aug 2025 04:49:52 +0000 Manifest this update: Sat 23 Aug 2025 04:49:51 +0000 Manifest next update: Sat 30 Aug 2025 04:49:51 +0000 Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: 2jQh3S1t7lpFu8yQsDm+OQ8e915mW9+jibkNU1fj5Yw=) 2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: 97zPU/AWi/C0nV9VIKmemXWGwZXv9hj/Vz3ExXILCII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Validity Not Before: Aug 23 04:49:51 2025 GMT Not After : Aug 30 04:49:51 2025 GMT Subject: CN=68a9486f-508a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:e5:dd:a8:65:08:92:48:ec:d8:8d:5f:22: ed:94:2c:24:8c:e6:01:9c:2b:0a:89:84:5a:70:1f: 04:61:91:6f:47:b0:9f:34:2a:67:48:65:4f:92:c0: f4:86:05:47:84:2e:16:82:29:69:ee:a8:14:15:ef: 9e:65:02:86:fe:47:59:a0:14:f8:6c:ba:e8:ed:e8: f0:3b:3e:eb:db:5d:4f:ad:27:e6:06:ab:2c:7e:6e: 42:65:a8:98:53:52:6b:15:39:93:08:fa:a1:ea:ab: c8:89:95:54:2c:24:54:77:1d:a6:4d:43:3d:ea:1f: 62:46:55:2f:10:2b:45:63:ee:73:83:e9:18:a3:cc: 0f:da:75:d3:71:57:7d:4d:4f:6c:a1:ff:c3:b0:d6: d4:84:0f:b0:fa:1c:0a:2e:8b:9f:9e:92:54:2b:13: d4:6f:a4:d5:47:95:fa:71:a3:5c:0a:76:cd:39:6c: d3:e6:86:e8:1e:20:8c:2f:c9:03:b0:6a:b0:f8:57: 81:b6:35:70:49:2e:c2:a3:1b:32:5c:5c:91:1a:a6: 17:9c:4d:b9:a9:a0:2e:dd:72:5e:33:26:e4:38:2d: e0:75:2f:0f:9b:a5:6c:01:25:d7:63:9a:fd:dd:52: b3:de:7e:75:fb:c8:c7:02:e7:09:27:17:2a:a1:32: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:86:AA:E5:46:98:DD:51:89:88:DA:84:A1:4C:97:9C:2D:37:08:2A X509v3 Authority Key Identifier: keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:01:e5:f1:bb:a4:bc:dc:54:9e:f5:48:4e:9f:ea:01:5f:f6: 6a:cf:f1:85:2a:df:8d:79:ea:ae:7a:3d:1e:65:e2:e9:6e:ae: 58:7c:11:1f:ed:ec:10:28:39:d8:c7:ec:56:4f:b8:c9:4d:0e: 09:f7:7f:d5:65:0e:23:e8:b7:75:0d:34:43:e4:c3:0c:8b:4b: b1:e2:72:23:fc:cb:e6:f4:dd:df:15:db:94:9e:5a:09:55:d4: 84:a3:a8:65:ca:77:32:38:55:5c:19:19:de:9b:33:1f:c2:7f: cb:65:ac:dd:9a:88:6b:fa:70:92:f5:eb:7b:09:8a:62:b3:11: 07:cf:56:da:a9:a9:e2:c3:06:be:3a:02:3c:1e:5b:85:cc:00: 22:aa:a7:c3:5f:8b:85:57:c4:36:73:93:2b:b6:99:f3:55:02: 43:97:3b:1d:0f:90:be:44:1c:31:b7:60:07:2d:71:9e:f3:e6: 03:6c:53:90:e2:04:ba:ac:15:ae:47:df:61:af:2c:18:f2:88: a5:32:d9:45:33:13:13:cc:b0:92:7d:15:9f:80:49:96:49:07: 4b:73:39:4e:a0:43:5a:98:af:49:15:f5:af:25:cc:24:58:8c: eb:bd:46:21:48:7d:bb:81:09:86:e2:6a:74:d8:00:73:36:d0: f4:05:bb:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDEyMThERTc1QjI1ODhCNjYzM0E2QkY4OENEMzg4RjMx QzQzQUM5QzAwHhcNMjUwODIzMDQ0OTUxWhcNMjUwODMwMDQ0OTUxWjAYMRYwFAYD VQQDEw02OGE5NDg2Zi01MDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kXl3ahlCJJI7NiNXyLtlCwkjOYBnCsKiYRacB8EYZFvR7CfNCpnSGVPksD0 hgVHhC4Wgilp7qgUFe+eZQKG/kdZoBT4bLro7ejwOz7r211PrSfmBqssfm5CZaiY U1JrFTmTCPqh6qvIiZVULCRUdx2mTUM96h9iRlUvECtFY+5zg+kYo8wP2nXTcVd9 TU9sof/DsNbUhA+w+hwKLoufnpJUKxPUb6TVR5X6caNcCnbNOWzT5oboHiCML8kD sGqw+FeBtjVwSS7CoxsyXFyRGqYXnE25qaAu3XJeMybkOC3gdS8Pm6VsASXXY5r9 3VKz3n51+8jHAucJJxcqoTIOEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6GquVG mN1RiYjahKFMl5wtNwgqMB8GA1UdIwQYMBaAFBIY3nWyWItmM6a/iM04jzHEOsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GMTQyNjE0QUJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWkyWXpwci1JelRpUE1jUTZ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VoamVkYkpZaTJZenByLUl6VGlQTWNRNnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GMTQyNjE0QUJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWky WXpwci1JelRpUE1jUTZ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxAeXxu6S83FSe9UhOn+oBX/Zqz/GFKt+Neequej0eZeLpbq5YfBEf 7ewQKDnYx+xWT7jJTQ4J93/VZQ4j6Ld1DTRD5MMMi0ux4nIj/Mvm9N3fFduUnloJ VdSEo6hlyncyOFVcGRnemzMfwn/LZazdmohr+nCS9et7CYpisxEHz1baqaniwwa+ OgI8HluFzAAiqqfDX4uFV8Q2c5MrtpnzVQJDlzsdD5C+RBwxt2AHLXGe8+YDbFOQ 4gS6rBWuR99hrywY8oilMtlFMxMTzLCSfRWfgEmWSQdLczlOoENamK9JFfWvJcwk WIzrvUYhSH27gQmG4mp02ABzNtD0BbtQ -----END CERTIFICATE-----Generated at Sat Aug 23 10:25:54 2025 by rpki-client