$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft File: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json) Hash identifier: 3pS1xfUrNjNbGOQBkpAD5CNbDM4B9eSlm9laNJT6PXA= Subject key identifier: 7A:B8:99:4B:F6:11:97:71:2A:75:B6:38:4B:59:7A:61:61:21:DB:F6 Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 Certificate issuer: /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Certificate serial: 0620 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft Manifest number: 061B Signing time: Fri 22 Aug 2025 22:58:37 +0000 Manifest this update: Fri 22 Aug 2025 22:58:36 +0000 Manifest next update: Fri 29 Aug 2025 22:58:36 +0000 Files and hashes: 1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: +cxZz8Sa/18t8T4jOKXz2MoUqgaeq4PCYAcm72BYxWY=) 2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: KeDjzKypgQHXzMMCw525U76eYPfXZKl/2OFa/SSqsKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798 Validity Not Before: Aug 22 22:58:36 2025 GMT Not After : Aug 29 22:58:36 2025 GMT Subject: CN=68a8f61c-e493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:59:a6:90:3f:28:29:7b:8f:b6:f9:ea:8e: f1:53:cb:44:18:f5:2a:d4:32:fd:76:5a:30:10:07: 90:7e:e7:08:43:8e:e2:ad:48:9e:50:5a:88:35:96: b6:10:6a:17:83:08:d4:75:98:05:78:70:e6:7f:03: 7f:2d:ac:d8:59:c6:4e:db:75:a8:55:af:79:9a:7d: 44:dd:c0:d7:de:97:d1:46:99:df:56:a7:bb:17:72: 54:dc:13:bd:44:61:2e:50:19:a8:25:52:7e:40:8d: a3:76:1b:04:77:b3:c2:d6:3b:c6:c5:54:3a:40:b1: 44:63:80:2c:3c:58:47:a4:8f:56:f5:ed:02:3f:ad: 5a:ce:47:e3:97:46:9e:98:08:50:fa:56:58:83:0e: 5d:75:af:c1:94:50:fc:70:2f:bd:3f:44:11:0a:38: 83:46:06:ce:73:1d:ba:d0:56:e1:60:f2:07:8d:52: 46:7e:6c:48:43:fd:1c:e7:ef:9b:98:73:33:a9:55: 99:fb:91:d4:45:a6:f3:b0:19:e9:b2:3d:7f:00:20: e2:72:96:d4:6c:38:8f:d7:64:e0:61:84:0e:d5:00: bb:4a:b1:01:ee:cc:93:3e:db:5b:94:e7:dc:79:37: 01:b2:87:bc:2c:cf:41:4d:fe:78:1d:db:a8:85:17: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B8:99:4B:F6:11:97:71:2A:75:B6:38:4B:59:7A:61:61:21:DB:F6 X509v3 Authority Key Identifier: keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:89:a1:34:e7:4b:2d:9a:2e:0b:2b:2a:9a:1f:0b:5e:d3:f3: e0:a0:d6:b6:06:8c:75:dc:0d:18:c6:e0:69:ab:ab:29:9f:f6: d6:a6:56:59:3f:fc:79:20:52:46:fb:48:b0:8d:4f:73:96:b1: 16:9f:7c:33:0c:ed:49:4b:1d:c4:cf:c7:08:35:57:c2:18:36: 69:81:67:05:68:29:84:c2:19:81:f0:0d:f9:27:bd:53:3b:74: ce:58:16:96:51:fd:d0:2a:7a:c0:2b:d5:24:2a:2c:38:97:26: 00:e5:bd:c8:7d:32:38:89:05:2a:05:8a:ff:db:4d:d3:29:5e: a0:76:38:de:6e:24:80:08:aa:e3:b7:8b:50:b1:54:eb:99:64: 96:99:16:5a:e2:8d:5f:82:da:b2:38:c2:ab:81:b9:be:c9:a7: bd:f3:31:ae:52:bf:8c:fa:29:68:bb:3b:fd:c2:ad:03:b2:9d: 64:5e:59:b1:1d:4f:43:d7:e4:37:ee:2a:e3:91:dd:54:4f:13: 37:3a:55:49:25:06:51:74:7b:24:7e:a4:07:51:df:c2:f7:d0: b0:bb:eb:7c:4b:7f:a6:a1:bb:31:3a:58:ef:50:3d:9a:07:eb: 96:be:5f:91:b4:8f:dc:e9:2e:21:8a:03:4c:f6:7d:d8:07:94: 82:d1:35:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDEwOUNCNzFCNEY2NDE2NkYxRERBNDIyQ0VCNzIxRUUz RUQxOTY3OTgwHhcNMjUwODIyMjI1ODM2WhcNMjUwODI5MjI1ODM2WjAYMRYwFAYD VQQDEw02OGE4ZjYxYy1lNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9NZppA/KCl7j7b56o7xU8tEGPUq1DL9dlowEAeQfucIQ47irUieUFqINZa2 EGoXgwjUdZgFeHDmfwN/LazYWcZO23WoVa95mn1E3cDX3pfRRpnfVqe7F3JU3BO9 RGEuUBmoJVJ+QI2jdhsEd7PC1jvGxVQ6QLFEY4AsPFhHpI9W9e0CP61azkfjl0ae mAhQ+lZYgw5dda/BlFD8cC+9P0QRCjiDRgbOcx260FbhYPIHjVJGfmxIQ/0c5++b mHMzqVWZ+5HURabzsBnpsj1/ACDicpbUbDiP12TgYYQO1QC7SrEB7syTPttblOfc eTcBsoe8LM9BTf54HduohReFQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHq4mUv2 EZdxKnW2OEtZemFhIdv2MB8GA1UdIwQYMBaAFBCctxtPZBZvHdpCLOtyHuPtGWeY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83MjMxQzNEQUFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0ZtOGQya0lzNjNJZTQtMFpa NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VKeTNHMDlrRm04ZDJrSXM2M0llNC0wWlo1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83MjMxQzNEQUFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9FSnkzRzA5a0Zt OGQya0lzNjNJZTQtMFpaNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+iaE050stmi4LKyqaHwte0/PgoNa2Box13A0YxuBpq6spn/bWplZZ P/x5IFJG+0iwjU9zlrEWn3wzDO1JSx3Ez8cINVfCGDZpgWcFaCmEwhmB8A35J71T O3TOWBaWUf3QKnrAK9UkKiw4lyYA5b3IfTI4iQUqBYr/203TKV6gdjjebiSACKrj t4tQsVTrmWSWmRZa4o1fgtqyOMKrgbm+yae98zGuUr+M+ilouzv9wq0Dsp1kXlmx HU9D1+Q37irjkd1UTxM3OlVJJQZRdHskfqQHUd/C99Cwu+t8S3+mobsxOljvUD2a B+uWvl+RtI/c6S4higNM9n3YB5SC0TW7 -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:02 2025 by rpki-client