$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft File: EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft (raw, json) Hash identifier: FDF0CdQS+rrgISuzIdIanQDUnXnYfXGV5+9pAo9ioB8= Subject key identifier: 54:CC:8C:E5:45:51:34:CF:56:C5:7D:FA:C2:04:C4:40:E6:31:B0:08 Authority key identifier: 12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D Certificate issuer: /CN=A914B46A/serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft Manifest number: 059C Signing time: Fri 22 Aug 2025 23:23:34 +0000 Manifest this update: Fri 22 Aug 2025 23:23:33 +0000 Manifest next update: Fri 29 Aug 2025 23:23:33 +0000 Files and hashes: 1: EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl (hash: AXrSW1VgUM3sZWQ4I/DZ0vSTxQZwFaM6JmtP+tQT75g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B46A, serialNumber=1204FE315C0090B15D9125B429855A06F4D4211D Validity Not Before: Aug 22 23:23:33 2025 GMT Not After : Aug 29 23:23:33 2025 GMT Subject: CN=68a8fbf5-1685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:f3:0c:29:d3:b8:15:6e:77:10:ec:a7:b3: 3f:43:26:c4:28:ff:77:91:10:88:90:16:bd:ee:d1: 6d:bc:ed:1b:e7:93:0d:63:ee:41:5f:eb:e9:75:62: e3:1e:be:dc:bf:60:f1:69:ce:8d:68:ec:2a:b4:68: 81:4c:58:1a:fa:f3:bf:dd:0f:d6:76:6b:f6:23:19: 67:b1:77:56:1d:2c:9d:b8:6b:59:20:a3:8f:d1:38: 6d:b2:25:c4:b3:a5:90:45:39:08:40:a2:91:51:e6: a1:12:10:2b:13:37:f0:ba:3e:0b:2c:eb:58:0a:10: c1:cc:f8:a4:92:9b:db:7d:61:4c:fc:75:a0:f2:71: 8b:c7:79:83:b6:0e:36:fd:82:f0:ff:03:ee:cc:24: 91:46:2b:a2:79:d8:6e:d7:e7:a8:c1:f5:9e:50:c9: c3:bd:38:6a:b0:bc:c8:48:bd:27:63:e1:40:77:22: 57:e8:e9:e4:90:e7:70:48:03:a3:ba:c7:e6:2b:fc: ac:78:05:7d:61:20:93:7f:00:64:71:93:d7:80:d8: 5e:42:cf:ff:a8:df:85:85:16:58:b6:c8:43:8d:46: 1a:ba:68:e5:3a:de:2b:3d:ec:4c:ce:1c:1a:98:4b: 88:1c:81:c6:95:fc:79:55:f8:d9:d6:f5:80:96:2a: 6c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CC:8C:E5:45:51:34:CF:56:C5:7D:FA:C2:04:C4:40:E6:31:B0:08 X509v3 Authority Key Identifier: keyid:12:04:FE:31:5C:00:90:B1:5D:91:25:B4:29:85:5A:06:F4:D4:21:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EgT-MVwAkLFdkSW0KYVaBvTUIR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/00A4D5F0E09911EB92760B4DC4F9AE02/EgT-MVwAkLFdkSW0KYVaBvTUIR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ab:a8:15:55:40:85:d7:f8:b8:b6:3e:09:3f:d1:65:b0:7a: c0:e9:d6:48:bd:6d:27:7c:c0:9c:23:6c:eb:c5:c0:94:28:91: 02:ba:df:e6:c9:53:ca:78:b0:30:e8:ca:69:f4:f8:d8:c3:8c: 36:ba:fc:8a:88:a5:02:6e:03:8b:9a:f2:4c:be:94:3d:fe:3a: 12:70:2b:9f:ae:52:e1:6e:d3:a6:dd:43:2f:20:41:c6:b2:ea: e4:d3:5a:a4:7f:bb:2d:82:29:c5:ea:ec:1b:d7:e0:3a:b1:9c: 0e:65:b6:e4:e3:b2:33:90:2a:9c:03:5f:6b:2c:2b:93:fc:14: a0:67:28:a8:18:79:f0:4a:dd:d3:bc:fb:94:d7:1c:50:6f:1b: a0:f1:35:ef:4a:05:b6:b0:9f:37:b6:a5:ec:b2:a6:2f:bc:4a: 57:58:e1:4f:23:3a:70:5a:80:3f:4d:7f:fc:be:c1:0a:80:5a: 29:02:73:49:23:0c:5f:06:ed:c2:76:d9:49:f5:57:d5:76:a1: 95:42:36:0b:01:13:43:16:93:a7:06:c1:61:98:69:3d:3a:69: 27:85:38:a0:ba:54:80:67:ea:b1:12:73:99:d2:53:97:9a:dd: 3c:90:4d:b4:29:94:87:0b:a6:90:5d:f4:70:6c:45:c1:3f:31: 9d:be:05:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NkExMTAvBgNVBAUTKDEyMDRGRTMxNUMwMDkwQjE1RDkxMjVCNDI5ODU1QTA2 RjRENDIxMUQwHhcNMjUwODIyMjMyMzMzWhcNMjUwODI5MjMyMzMzWjAYMRYwFAYD VQQDEw02OGE4ZmJmNS0xNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyz7zDCnTuBVudxDsp7M/QybEKP93kRCIkBa97tFtvO0b55MNY+5BX+vpdWLj Hr7cv2Dxac6NaOwqtGiBTFga+vO/3Q/Wdmv2IxlnsXdWHSyduGtZIKOP0ThtsiXE s6WQRTkIQKKRUeahEhArEzfwuj4LLOtYChDBzPikkpvbfWFM/HWg8nGLx3mDtg42 /YLw/wPuzCSRRiuiedhu1+eowfWeUMnDvThqsLzISL0nY+FAdyJX6OnkkOdwSAOj usfmK/yseAV9YSCTfwBkcZPXgNheQs//qN+FhRZYtshDjUYaumjlOt4rPexMzhwa mEuIHIHGlfx5VfjZ1vWAlipsZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTMjOVF UTTPVsV9+sIExEDmMbAIMB8GA1UdIwQYMBaAFBIE/jFcAJCxXZEltCmFWgb01CEd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ2QS8wMEE0RDVGMEUw OTkxMUVCOTI3NjBCNERDNEY5QUUwMi9FZ1QtTVZ3QWtMRmRrU1cwS1lWYUJ2VFVJ UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VnVC1NVndBa0xGZGtTVzBLWVZhQnZUVUlSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjQ2QS8wMEE0RDVGMEUwOTkxMUVCOTI3NjBCNERDNEY5QUUwMi9FZ1QtTVZ3QWtM RmRrU1cwS1lWYUJ2VFVJUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkq6gVVUCF1/i4tj4JP9FlsHrA6dZIvW0nfMCcI2zrxcCUKJECut/m yVPKeLAw6Mpp9PjYw4w2uvyKiKUCbgOLmvJMvpQ9/joScCufrlLhbtOm3UMvIEHG surk01qkf7stginF6uwb1+A6sZwOZbbk47IzkCqcA19rLCuT/BSgZyioGHnwSt3T vPuU1xxQbxug8TXvSgW2sJ83tqXssqYvvEpXWOFPIzpwWoA/TX/8vsEKgFopAnNJ IwxfBu3CdtlJ9VfVdqGVQjYLARNDFpOnBsFhmGk9OmknhTigulSAZ+qxEnOZ0lOX mt08kE20KZSHC6aQXfRwbEXBPzGdvgUh -----END CERTIFICATE-----Generated at Sat Aug 23 12:38:46 2025 by rpki-client