$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft File: evqYcujQ_5IpleWJO1nDIUdnsfw.mft (raw, json) Hash identifier: U22UyTGgQSdWEIp7Dg9keB+dwKik6szrL6MkVkHot8s= Subject key identifier: 96:B7:17:83:4E:F1:24:EA:78:3E:A3:4C:B2:68:3D:B3:15:E4:6E:B0 Authority key identifier: 7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC Certificate issuer: /CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC Certificate serial: 095B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft Manifest number: 0953 Signing time: Fri 22 Aug 2025 20:19:07 +0000 Manifest this update: Fri 22 Aug 2025 20:19:07 +0000 Manifest next update: Fri 29 Aug 2025 20:19:07 +0000 Files and hashes: 1: evqYcujQ_5IpleWJO1nDIUdnsfw.crl (hash: yCNmxo9KlqEMefi/MPlwTY4YDZbhO1fl2qA+2uKZxmI=) 2: 8F1FBA54B0AA11EA9603E729C4F9AE02.roa (hash: +iwTzs5m/T4DUW8LNJ7XuCxYejcTHo86TwNrQogD1C4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2395 (0x95b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154AA5, serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC Validity Not Before: Aug 22 20:19:07 2025 GMT Not After : Aug 29 20:19:07 2025 GMT Subject: CN=68a8d0bb-b045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:40:10:99:d1:b9:1f:19:31:32:c8:90:59:c8: f1:af:99:b4:f7:d3:47:16:0f:fc:7c:82:df:a4:5b: 64:a1:7f:43:a0:11:e1:3e:eb:97:7a:2b:ca:d2:c6: 91:4f:90:5e:0c:7d:2d:5e:3d:d1:26:08:68:58:b3: 53:80:bf:03:e9:7b:de:21:db:28:74:7e:b2:ab:41: d9:b3:e2:d1:ac:da:47:fc:8a:29:81:b4:be:b7:14: 4e:f9:c7:6b:94:09:35:07:0f:25:3f:3c:c6:3c:51: be:f2:54:c9:07:dc:e1:5c:cf:6b:2a:03:6f:0f:42: de:cc:2b:55:24:ca:11:62:ce:44:d0:81:d5:af:74: 8d:59:09:b8:5c:a9:a6:d4:f6:d7:3b:35:fa:ab:f3: 97:17:7d:57:6e:c8:c2:53:31:61:6a:2a:52:85:a8: 99:7f:90:86:ce:32:a0:e7:07:59:6a:d7:aa:42:0c: 89:79:07:40:33:05:83:bb:1f:32:ee:cc:08:45:1d: c3:02:8a:cb:90:37:66:37:d7:81:d8:f7:e3:9a:fe: be:c9:1e:e3:4b:a5:0c:4a:f9:7f:31:8d:dd:74:1d: 88:54:d4:72:5b:9f:5e:b6:ea:61:78:26:a8:8c:90: 9f:20:b8:a9:98:4d:df:12:9d:9a:47:1a:69:b0:31: 47:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B7:17:83:4E:F1:24:EA:78:3E:A3:4C:B2:68:3D:B3:15:E4:6E:B0 X509v3 Authority Key Identifier: keyid:7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:be:db:9c:18:ed:91:3f:19:b0:88:44:b3:6a:e3:0e:4f:19: bf:86:82:e2:21:06:ec:6a:1b:f3:e3:9c:93:0d:4b:cb:65:7f: bb:63:c7:25:17:00:92:8f:a3:07:7e:4a:1b:02:c1:48:de:c5: d6:53:98:ca:e6:e0:88:9b:f8:5f:db:a2:d8:d6:7a:9e:da:41: 4e:f6:5f:73:ac:1c:50:63:ce:2c:0c:de:e4:c5:ee:78:d7:f6: 75:78:c5:b8:0e:df:cd:28:f4:d9:36:87:d9:fa:14:63:64:4e: 85:ea:a8:bf:c8:0d:7c:37:ce:fb:b9:f9:f5:af:fb:97:cf:7d: c0:9e:1e:12:7a:a5:ac:64:58:79:5d:79:4a:19:bd:ce:27:46: 7f:e5:56:53:f3:ff:1d:c1:22:d9:1d:5e:66:76:07:d1:d3:a8: 39:67:0e:4b:7a:44:87:0c:52:aa:2f:46:0a:94:9f:db:55:fc: 65:9a:35:c9:06:8c:e6:d3:96:2f:09:85:46:2f:2b:48:aa:52: 05:76:3e:68:3b:ec:5e:0b:78:76:0a:28:22:5d:45:56:da:27: 9e:f6:9e:f1:0b:71:01:75:ac:b9:fc:d1:96:46:54:df:63:38: cc:bb:8c:9a:58:7c:8e:d1:03:6a:63:e3:0f:e8:e3:c6:6f:25: 0a:1a:9a:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRBQTUxMTAvBgNVBAUTKDdBRkE5ODcyRThEMEZGOTIyOTk1RTU4OTNCNTlDMzIx NDc2N0IxRkMwHhcNMjUwODIyMjAxOTA3WhcNMjUwODI5MjAxOTA3WjAYMRYwFAYD VQQDEw02OGE4ZDBiYi1iMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UAQmdG5HxkxMsiQWcjxr5m099NHFg/8fILfpFtkoX9DoBHhPuuXeivK0saR T5BeDH0tXj3RJghoWLNTgL8D6XveIdsodH6yq0HZs+LRrNpH/IopgbS+txRO+cdr lAk1Bw8lPzzGPFG+8lTJB9zhXM9rKgNvD0LezCtVJMoRYs5E0IHVr3SNWQm4XKmm 1PbXOzX6q/OXF31XbsjCUzFhaipShaiZf5CGzjKg5wdZateqQgyJeQdAMwWDux8y 7swIRR3DAorLkDdmN9eB2Pfjmv6+yR7jS6UMSvl/MY3ddB2IVNRyW59etupheCao jJCfILipmE3fEp2aRxppsDFHfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJa3F4NO 8STqeD6jTLJoPbMV5G6wMB8GA1UdIwQYMBaAFHr6mHLo0P+SKZXliTtZwyFHZ7H8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEFBNS84MzBFMjY5NEEw QTkxMUVBQUYyRUYyMTFDNEY5QUUwMi9ldnFZY3VqUV81SXBsZVdKTzFuRElVZG5z ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2cVljdWpRXzVJcGxlV0pPMW5ESVVkbnNmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEFBNS84MzBFMjY5NEEwQTkxMUVBQUYyRUYyMTFDNEY5QUUwMi9ldnFZY3VqUV81 SXBsZVdKTzFuRElVZG5zZncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/vtucGO2RPxmwiESzauMOTxm/hoLiIQbsahvz45yTDUvLZX+7Y8cl FwCSj6MHfkobAsFI3sXWU5jK5uCIm/hf26LY1nqe2kFO9l9zrBxQY84sDN7kxe54 1/Z1eMW4Dt/NKPTZNofZ+hRjZE6F6qi/yA18N877ufn1r/uXz33Anh4SeqWsZFh5 XXlKGb3OJ0Z/5VZT8/8dwSLZHV5mdgfR06g5Zw5LekSHDFKqL0YKlJ/bVfxlmjXJ Bozm05YvCYVGLytIqlIFdj5oO+xeC3h2CigiXUVW2iee9p7xC3EBday5/NGWRlTf YzjMu4yaWHyO0QNqY+MP6OPGbyUKGpo1 -----END CERTIFICATE-----Generated at Sun Aug 24 09:16:25 2025 by rpki-client