$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft File: eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json) Hash identifier: NuUPs0/Bu6oGr3pm6rO9LBun4CeomdtcmVopDJIqeKU= Subject key identifier: 36:35:C0:FF:AF:19:F8:15:70:68:7B:36:B8:33:AF:49:C0:FD:D7:FE Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 Certificate issuer: /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft Manifest number: 0173 Signing time: Sat 23 Aug 2025 03:56:49 +0000 Manifest this update: Sat 23 Aug 2025 03:56:48 +0000 Manifest next update: Sat 30 Aug 2025 03:56:48 +0000 Files and hashes: 1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: 2biSBfTgirLgXJJEo36Gyk9l8Yw3R9Wmx7ML7iaJVd8=) 2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: ta+wizYmG5Li1UNdnV+RjnG6RQDSQFnDtjBK6l15sJs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8 Validity Not Before: Aug 23 03:56:48 2025 GMT Not After : Aug 30 03:56:48 2025 GMT Subject: CN=68a93c01-fb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:40:bc:30:a7:d0:f3:16:e0:81:0e:2d:5f:36: 83:3f:2d:3c:e8:60:2a:3b:cb:ab:bc:e2:e5:14:3a: cb:2c:2c:7c:a7:8e:71:05:f2:c5:52:ff:a4:f3:ea: 04:4d:c7:05:5b:b9:90:60:a9:60:fb:2e:41:5f:4f: 84:29:c8:18:dc:3a:4c:0c:75:8a:30:f3:75:0c:b8: 58:d3:f4:f4:c5:ec:97:c1:9f:61:99:fe:f3:ae:8c: a7:64:dd:cd:21:8a:42:da:93:19:80:be:a6:5f:5e: 9b:0d:22:6e:fc:5d:b3:8b:93:3e:d5:4f:43:76:ef: f2:8c:7b:dc:df:aa:89:b3:a1:25:86:d4:62:48:54: 1b:87:dd:fe:0d:e4:0e:29:81:bf:b1:2f:46:8f:77: 7e:9c:f9:79:25:ad:e0:b6:1f:db:bf:43:d8:62:36: 02:49:c6:fa:79:29:44:98:ab:52:f3:f3:77:e4:84: 11:98:75:9b:0a:7d:6e:80:68:7a:0a:34:70:0b:2a: 54:c1:df:18:0c:f7:4e:37:4b:1d:11:46:58:31:72: 19:c9:f2:13:2f:42:73:a4:3d:0b:21:3c:93:d3:47: 39:b8:f2:0b:9d:f5:3a:bf:98:c7:a3:6f:36:3f:6a: 63:35:2f:a4:af:21:f7:c9:27:ce:91:aa:a9:7e:a0: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:35:C0:FF:AF:19:F8:15:70:68:7B:36:B8:33:AF:49:C0:FD:D7:FE X509v3 Authority Key Identifier: keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ec:1c:ce:ae:ba:4f:38:ff:33:b0:d3:99:11:f1:c1:0d:7c: 5f:c7:89:0e:4b:ce:e8:40:a4:e4:df:17:2f:66:7b:17:58:33: 77:1e:94:ac:97:e4:b1:e5:df:1e:2b:4e:e2:32:58:7c:dc:ca: ac:69:33:4d:55:f1:e8:c8:80:8a:e1:e5:d4:58:a3:f0:a2:47: 8c:15:e4:84:4f:79:bd:21:9d:0e:79:47:0e:4c:c4:b3:25:92: 2e:25:4a:bf:51:bc:42:5a:ae:c4:95:08:26:b2:7b:6c:69:52: 0a:7a:14:2a:37:de:15:5b:d0:7b:f7:be:99:e4:3c:a0:79:19: 18:2a:13:a7:a3:78:0b:b0:08:2b:d2:a4:86:77:37:b2:0a:e7: 62:00:17:17:ec:97:6b:ac:c8:eb:aa:88:5f:87:3d:30:18:ee: 15:ab:68:d0:8e:b8:c1:36:f3:b6:a7:43:5d:d7:4e:a8:a4:0c: 36:1e:d4:b3:50:dd:0b:cb:77:3a:c2:86:42:db:d7:d6:1f:47: cd:b5:c0:8d:fd:1d:d6:cf:c0:d9:78:e0:1b:75:4e:64:54:9f: 74:85:5c:e6:5c:ec:8d:70:ff:0a:ad:53:79:6a:57:71:01:cf: 58:0e:91:56:66:f1:67:33:02:a0:34:e7:3e:11:7d:c4:a9:78: 57:a7:2b:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG QjA4NjIwRDgwHhcNMjUwODIzMDM1NjQ4WhcNMjUwODMwMDM1NjQ4WjAYMRYwFAYD VQQDEw02OGE5M2MwMS1mYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0C8MKfQ8xbggQ4tXzaDPy086GAqO8urvOLlFDrLLCx8p45xBfLFUv+k8+oE TccFW7mQYKlg+y5BX0+EKcgY3DpMDHWKMPN1DLhY0/T0xeyXwZ9hmf7zroynZN3N IYpC2pMZgL6mX16bDSJu/F2zi5M+1U9Ddu/yjHvc36qJs6ElhtRiSFQbh93+DeQO KYG/sS9Gj3d+nPl5Ja3gth/bv0PYYjYCScb6eSlEmKtS8/N35IQRmHWbCn1ugGh6 CjRwCypUwd8YDPdON0sdEUZYMXIZyfITL0JzpD0LITyT00c5uPILnfU6v5jHo282 P2pjNS+kryH3ySfOkaqpfqAj1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY1wP+v GfgVcGh7Nrgzr0nA/df+MB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qjc5Ri9EQTY4MzdGMDRFMjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1S V0FzbmJjREN5WHY3Q0dJTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD7BzOrrpPOP8zsNOZEfHBDXxfx4kOS87oQKTk3xcvZnsXWDN3HpSs l+Sx5d8eK07iMlh83MqsaTNNVfHoyICK4eXUWKPwokeMFeSET3m9IZ0OeUcOTMSz JZIuJUq/UbxCWq7ElQgmsntsaVIKehQqN94VW9B7976Z5DygeRkYKhOno3gLsAgr 0qSGdzeyCudiABcX7JdrrMjrqohfhz0wGO4Vq2jQjrjBNvO2p0Nd106opAw2HtSz UN0Ly3c6woZC29fWH0fNtcCN/R3Wz8DZeOAbdU5kVJ90hVzmXOyNcP8KrVN5aldx Ac9YDpFWZvFnMwKgNOc+EX3EqXhXpyub -----END CERTIFICATE-----Generated at Sun Aug 24 04:56:10 2025 by rpki-client