$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json) Hash identifier: oDPOel7hgFRHc1os9OuVv3+CiuRQa0jpAf1oCpGH1D4= Subject key identifier: D5:0E:1D:C0:05:FA:F2:79:3D:6D:A3:75:91:B7:D4:3A:D7:9D:D5:6A Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Certificate serial: 0160 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft Manifest number: 015A Signing time: Sat 23 Aug 2025 04:12:29 +0000 Manifest this update: Sat 23 Aug 2025 04:12:28 +0000 Manifest next update: Sat 30 Aug 2025 04:12:28 +0000 Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: H8mhAZfxnPKH6OvqA2wItttUc5jeSqmyF1Ayi7uIfss=) 2: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: 9LMpSs1G6DRXbhafQQ/fnV5UTQZp+aLbxUXgbbTPxiU=) 3: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: FqhwzXNHRNY+XCePlaMxiVUp2AFCJ34p2xGpiCoaVzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 352 (0x160) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Validity Not Before: Aug 23 04:12:28 2025 GMT Not After : Aug 30 04:12:28 2025 GMT Subject: CN=68a93fac-ffbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:fc:a7:a9:1f:0a:3e:fe:7f:c1:88:05:7a: a7:f4:64:e0:01:ad:23:2a:d2:51:56:5c:5b:5f:c4: 3a:fa:cd:d0:b0:fe:ba:92:79:60:5d:29:ca:34:aa: 69:24:1c:77:6f:23:d4:36:37:fe:76:10:38:41:d9: 13:ef:c9:7a:fa:c0:d7:6d:a3:9b:d3:5f:ff:de:fd: 9f:70:c4:9f:aa:40:0f:0b:a4:d2:11:ff:13:5b:f8: 89:e6:b3:09:6c:ab:20:14:57:73:bf:10:b2:93:10: d6:da:56:bc:86:b2:02:f3:75:3d:67:6b:fb:2e:26: ce:9f:41:ce:ab:89:cc:96:b3:14:7a:97:6e:61:90: 0a:97:4c:67:5d:1f:0b:ed:fb:8d:4d:bb:06:04:63: 76:fb:e0:19:ec:88:a9:42:fb:92:9c:fa:3b:9d:dc: 5c:45:bc:15:a6:06:cd:26:58:c3:ec:43:e8:a1:3d: 56:88:13:c8:af:df:c8:8e:f5:ab:c3:83:46:b3:78: 99:51:a4:f4:ff:da:e1:81:e6:5f:c2:fa:a4:7a:ff: 4d:2d:7c:02:8e:dd:a4:0b:be:9c:55:29:1e:f8:3e: 0c:fe:73:0c:4a:f3:49:88:d5:6b:63:30:67:a9:13: 93:9d:aa:71:c5:35:16:73:59:87:cd:3c:ae:77:75: 81:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0E:1D:C0:05:FA:F2:79:3D:6D:A3:75:91:B7:D4:3A:D7:9D:D5:6A X509v3 Authority Key Identifier: keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:c9:c1:62:f6:91:90:d5:d3:0a:7c:1c:00:52:09:37:cc:d8: 5c:70:e2:69:7a:04:2f:22:39:a9:da:78:e6:7f:fc:54:26:e3: 35:de:b4:0a:3d:51:4f:33:02:a5:a9:02:7a:1c:1c:e3:b7:07: 63:35:4b:7d:7d:47:3e:cf:17:b5:6c:4e:49:e6:cd:f7:f0:da: 83:2c:ea:0e:64:5b:fe:c5:03:8d:28:a9:da:2e:da:b4:51:b0: ff:d5:a7:1a:b5:e2:f2:9f:bb:9b:da:40:5d:6d:ef:f4:d8:5e: ea:af:62:cf:c9:cb:b0:8c:d5:d8:86:2d:1f:c5:b2:2c:66:a5: 32:72:ae:5c:95:da:b0:87:7a:e7:b0:c1:1b:e6:99:8a:16:34: ed:43:7b:e9:3a:95:ce:21:78:99:cf:58:57:03:e3:34:6c:ff: c6:d8:45:05:32:88:9d:a6:4d:5e:a0:ea:bd:b9:ae:1d:c3:08: 6e:c5:18:b6:4d:50:e7:88:fc:2c:af:53:3b:89:3c:d9:f6:d2: 31:7b:27:4b:5d:1b:c0:4f:5b:3c:74:37:df:6d:56:bf:44:cd: d8:41:88:51:f3:d5:15:69:8d:05:6b:d1:72:59:11:30:37:0d: 52:7c:07:b3:1d:8d:58:b5:1b:64:0f:4f:32:8a:57:42:77:8f: d4:c6:9f:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0 Mjc4N0FGODMwHhcNMjUwODIzMDQxMjI4WhcNMjUwODMwMDQxMjI4WjAYMRYwFAYD VQQDEw02OGE5M2ZhYy1mZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b/8p6kfCj7+f8GIBXqn9GTgAa0jKtJRVlxbX8Q6+s3QsP66knlgXSnKNKpp JBx3byPUNjf+dhA4QdkT78l6+sDXbaOb01//3v2fcMSfqkAPC6TSEf8TW/iJ5rMJ bKsgFFdzvxCykxDW2la8hrIC83U9Z2v7LibOn0HOq4nMlrMUepduYZAKl0xnXR8L 7fuNTbsGBGN2++AZ7IipQvuSnPo7ndxcRbwVpgbNJljD7EPooT1WiBPIr9/IjvWr w4NGs3iZUaT0/9rhgeZfwvqkev9NLXwCjt2kC76cVSke+D4M/nMMSvNJiNVrYzBn qROTnapxxTUWc1mHzTyud3WBTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUOHcAF +vJ5PW2jdZG31DrXndVqMB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjgxMy9BODUyNDM2QTZFMkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjIt ME1oMFVwWFFGSmhDZUhyNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVycFi9pGQ1dMKfBwAUgk3zNhccOJpegQvIjmp2njmf/xUJuM13rQK PVFPMwKlqQJ6HBzjtwdjNUt9fUc+zxe1bE5J5s338NqDLOoOZFv+xQONKKnaLtq0 UbD/1acateLyn7ub2kBdbe/02F7qr2LPycuwjNXYhi0fxbIsZqUycq5cldqwh3rn sMEb5pmKFjTtQ3vpOpXOIXiZz1hXA+M0bP/G2EUFMoidpk1eoOq9ua4dwwhuxRi2 TVDniPwsr1M7iTzZ9tIxeydLXRvAT1s8dDffbVa/RM3YQYhR89UVaY0Fa9FyWREw Nw1SfAezHY1YtRtkD08yildCd4/Uxp8Q -----END CERTIFICATE-----Generated at Sat Aug 23 21:21:44 2025 by rpki-client