$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json) Hash identifier: oUvnUb+cD/tMi5ne/MqiVrrVwZG22GVifXhcpvG1J0Q= Subject key identifier: 33:5D:75:52:DA:48:83:4A:9B:7E:7D:1E:16:A5:30:40:67:80:F7:C8 Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft Manifest number: 0987 Signing time: Fri 22 Aug 2025 22:57:53 +0000 Manifest this update: Fri 22 Aug 2025 22:57:53 +0000 Manifest next update: Fri 29 Aug 2025 22:57:53 +0000 Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: MqcTg2yM1XqwaaW7bjX/obIvVcgNGOePvF2dWwbmo2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Validity Not Before: Aug 22 22:57:53 2025 GMT Not After : Aug 29 22:57:53 2025 GMT Subject: CN=68a8f5f1-620d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:11:64:3c:07:e7:e6:5b:7f:ac:60:ae:f2: 15:fc:4a:c7:50:9e:4f:ed:51:e4:52:08:cb:84:84: 66:0b:73:09:fa:b5:e0:aa:97:12:b6:3b:af:56:ca: 2d:d3:90:86:f2:db:a6:d9:6a:db:b8:24:6e:d0:46: 21:c8:d0:ef:b7:75:cd:1a:33:c5:4a:59:4e:b4:47: 49:74:1b:3f:17:19:d9:7e:cc:04:34:c2:60:4a:97: b0:a6:6a:35:0d:23:99:10:e5:be:09:18:99:13:ae: 67:10:8f:d8:aa:b4:55:8e:19:6d:12:7b:8f:70:bb: 9c:aa:c1:80:0c:a0:a2:e4:2f:55:3d:38:bf:27:cc: 70:1d:c0:73:a1:59:69:8c:82:4e:5f:40:9e:68:c8: fc:ad:0d:07:34:6e:98:fa:40:f3:fc:ac:e0:fd:cc: 01:1c:a8:8a:ed:ff:c7:5e:f6:62:1f:d4:c9:cf:58: 05:56:23:2c:ef:73:85:77:6f:e4:b8:52:ec:3b:3c: 79:32:56:03:d6:a2:4b:09:a8:69:cc:27:5a:15:3e: b8:2b:3f:84:75:39:e0:6f:78:44:3b:3b:56:d8:79: 63:7e:19:9f:e0:63:29:2d:68:42:96:36:9a:64:23: 6b:9e:0f:6e:4e:79:26:e3:ac:be:00:38:f9:d6:f4: 5b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5D:75:52:DA:48:83:4A:9B:7E:7D:1E:16:A5:30:40:67:80:F7:C8 X509v3 Authority Key Identifier: keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e7:7c:6f:7a:2e:ce:5f:8a:8c:d2:20:d4:1f:cf:59:3b:ec: 99:1a:a3:64:1f:97:c8:11:05:ad:94:c4:e2:34:b3:4b:84:34: 1f:25:3c:b7:7d:f0:1f:f4:bd:56:6b:c3:01:07:51:ed:3c:09: a2:6a:bc:1a:04:6e:8e:d4:9e:7b:2c:61:bb:fa:6b:fd:91:c3: 4a:20:f4:6a:78:a4:d9:88:c2:33:b0:ab:03:91:c5:c2:9d:6a: bf:7f:e9:91:f2:bc:ca:e9:6b:8b:af:c1:21:47:63:1f:1e:e9: 8f:40:1f:75:eb:00:2b:88:25:eb:e9:41:c1:fa:61:4f:6a:8b: 03:b1:0e:b9:2a:74:71:d1:4b:77:ee:72:39:95:0f:86:da:c1: 38:04:29:2b:ef:5e:86:3c:1d:80:b6:6a:c8:01:0a:82:9b:fe: 24:02:34:2c:bc:30:72:c9:65:50:cf:67:d5:c5:5e:bd:38:1d: 9c:12:50:84:05:e9:8f:43:30:d5:6f:6f:60:df:f6:18:96:4e: 38:66:77:a9:5c:1d:86:09:41:34:99:1d:39:a0:63:ee:c4:a3: 6d:2a:ec:51:77:0d:58:80:62:9c:04:83:8a:0f:d1:84:69:86: ab:67:7c:13:54:47:80:6a:81:0a:15:86:a0:65:01:fb:01:bc: 0f:ee:2b:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz NjlDQkEwQjAwHhcNMjUwODIyMjI1NzUzWhcNMjUwODI5MjI1NzUzWjAYMRYwFAYD VQQDEw02OGE4ZjVmMS02MjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz34RZDwH5+Zbf6xgrvIV/ErHUJ5P7VHkUgjLhIRmC3MJ+rXgqpcStjuvVsot 05CG8tum2WrbuCRu0EYhyNDvt3XNGjPFSllOtEdJdBs/FxnZfswENMJgSpewpmo1 DSOZEOW+CRiZE65nEI/YqrRVjhltEnuPcLucqsGADKCi5C9VPTi/J8xwHcBzoVlp jIJOX0CeaMj8rQ0HNG6Y+kDz/Kzg/cwBHKiK7f/HXvZiH9TJz1gFViMs73OFd2/k uFLsOzx5MlYD1qJLCahpzCdaFT64Kz+EdTngb3hEOztW2Hljfhmf4GMpLWhCljaa ZCNrng9uTnkm46y+ADj51vRbRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNddVLa SINKm359HhalMEBngPfIMB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY Vl92TkFOM1IxMHcybkxvTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB353xvei7OX4qM0iDUH89ZO+yZGqNkH5fIEQWtlMTiNLNLhDQfJTy3 ffAf9L1Wa8MBB1HtPAmiarwaBG6O1J57LGG7+mv9kcNKIPRqeKTZiMIzsKsDkcXC nWq/f+mR8rzK6WuLr8EhR2MfHumPQB916wAriCXr6UHB+mFPaosDsQ65KnRx0Ut3 7nI5lQ+G2sE4BCkr716GPB2AtmrIAQqCm/4kAjQsvDByyWVQz2fVxV69OB2cElCE BemPQzDVb29g3/YYlk44ZnepXB2GCUE0mR05oGPuxKNtKuxRdw1YgGKcBIOKD9GE aYarZ3wTVEeAaoEKFYagZQH7AbwP7ivn -----END CERTIFICATE-----Generated at Sat Aug 23 18:58:42 2025 by rpki-client