$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: QuRAT39hs/a++k8fRr6V0ka+Nz+2OWeU9fRuqAKe220= Subject key identifier: CB:1D:E9:A0:4F:51:DE:AC:09:6E:CF:9B:0E:D4:1B:6A:EC:DE:24:CE Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: AC Signing time: Sat 23 Aug 2025 06:29:44 +0000 Manifest this update: Sat 23 Aug 2025 06:29:44 +0000 Manifest next update: Sat 30 Aug 2025 06:29:44 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: 1FIE4fG+UbRPwPhtKnvH1YtxHyPC0SYcZ35yTItEH3I=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: GUv+bR0jB5xe+4YguFwkCK8B685+o0kSH52XBLyO1zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Aug 23 06:29:44 2025 GMT Not After : Aug 30 06:29:44 2025 GMT Subject: CN=68a95fd8-54ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:eb:ac:e2:a5:44:91:cd:02:9f:5f:bd:ca: 00:c8:96:5d:8d:07:b2:b3:40:18:5d:c2:73:d9:90: 9f:25:2e:48:0c:77:0c:17:90:b0:c5:3a:ec:e5:7e: 8d:6c:4f:c0:49:e2:fb:4f:cb:b4:80:77:b9:da:5e: 14:5c:35:a1:6c:05:f2:66:39:52:22:61:71:9b:c1: d1:3e:b2:cb:c5:4e:95:ba:34:77:38:f3:a6:37:cd: d7:36:f8:ac:d9:fd:26:78:3f:c0:c8:00:65:d1:3d: 7f:1a:13:46:31:7d:9b:2b:a2:b8:60:f3:b1:90:c9: 66:91:90:8e:57:2d:83:58:91:c7:31:5f:85:b1:8d: c1:5a:3b:a3:36:8a:7c:28:89:0b:1f:22:22:81:a6: ed:1e:43:c3:0a:38:d6:66:3f:37:d8:b1:a2:0c:6f: 1d:85:24:34:45:be:fa:49:d1:7a:06:c2:c8:f3:6a: d9:89:37:06:46:c3:15:bb:ee:e0:f4:66:95:e5:a0: c6:61:04:e6:2c:89:c2:9c:e0:6d:38:e3:a9:eb:63: 35:db:f1:d4:0a:4a:9e:91:3c:6c:f5:75:71:b5:6c: 06:23:ee:77:17:3f:39:96:40:34:1f:57:4a:7a:79: a7:0f:f3:4f:67:cf:a3:dd:d4:32:8c:52:46:27:95: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1D:E9:A0:4F:51:DE:AC:09:6E:CF:9B:0E:D4:1B:6A:EC:DE:24:CE X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f0:f9:31:d7:6b:27:92:7b:5c:18:90:f1:64:c2:60:5b:ef: 66:7f:55:01:28:b2:d9:53:52:69:ed:da:8e:14:c7:84:e3:ff: f9:09:91:96:e5:bc:37:b7:46:0c:0a:bf:52:f8:10:32:da:9a: 34:55:0b:51:4f:1b:16:f4:4e:aa:13:f8:10:e7:2e:9d:75:53: 43:96:79:fe:56:4d:e1:71:33:e6:a1:8a:01:43:1a:e8:fb:45: bb:f9:25:da:e2:e3:30:9e:26:ac:44:80:30:f9:87:af:12:c8: a4:b8:ec:91:50:25:2c:34:3f:f9:3c:49:9b:1e:87:ec:33:42: 7a:2a:d4:23:a4:77:9e:c9:17:c2:6d:f2:5d:45:e6:0d:d0:29: b4:24:07:8e:80:4d:f0:a1:6b:02:a5:ef:a7:30:61:89:d7:8b: bf:e8:3e:7f:20:9f:c6:7a:e1:e9:37:c0:a8:ea:1e:ce:6a:9c: 30:23:40:ff:e6:1d:a2:45:5a:e1:88:2b:60:5d:7e:90:39:71: 6f:81:9f:49:03:40:81:f3:20:cd:29:83:97:d2:53:c2:11:43: 13:4a:1e:86:72:45:3a:f4:9a:0d:92:36:a4:a3:3f:12:81:27: 01:43:de:78:1f:63:e2:d9:5e:e6:4f:52:b4:05:57:cd:a3:c7: c4:3c:e7:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKDEwMEQ5QUVFOTFEMjI3RkU0NzU5MzRGMjk3OEMzNjE3 RDhDRkE4RUUwHhcNMjUwODIzMDYyOTQ0WhcNMjUwODMwMDYyOTQ0WjAYMRYwFAYD VQQDEw02OGE5NWZkOC01NGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKfrrOKlRJHNAp9fvcoAyJZdjQeys0AYXcJz2ZCfJS5IDHcMF5CwxTrs5X6N bE/ASeL7T8u0gHe52l4UXDWhbAXyZjlSImFxm8HRPrLLxU6VujR3OPOmN83XNvis 2f0meD/AyABl0T1/GhNGMX2bK6K4YPOxkMlmkZCOVy2DWJHHMV+FsY3BWjujNop8 KIkLHyIigabtHkPDCjjWZj832LGiDG8dhSQ0Rb76SdF6BsLI82rZiTcGRsMVu+7g 9GaV5aDGYQTmLInCnOBtOOOp62M12/HUCkqekTxs9XVxtWwGI+53Fz85lkA0H1dK enmnD/NPZ8+j3dQyjFJGJ5Xe8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsd6aBP Ud6sCW7Pmw7UG2rs3iTOMB8GA1UdIwQYMBaAFBANmu6R0if+R1k08peMNhfYz6ju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS81N0ZGNEJDQThC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pfNUhXVFR5bDR3MkY5alBx TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS81N0ZGNEJDQThCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pf NUhXVFR5bDR3MkY5alBxTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA58Pkx12snkntcGJDxZMJgW+9mf1UBKLLZU1Jp7dqOFMeE4//5CZGW 5bw3t0YMCr9S+BAy2po0VQtRTxsW9E6qE/gQ5y6ddVNDlnn+Vk3hcTPmoYoBQxro +0W7+SXa4uMwniasRIAw+YevEsikuOyRUCUsND/5PEmbHofsM0J6KtQjpHeeyRfC bfJdReYN0Cm0JAeOgE3woWsCpe+nMGGJ14u/6D5/IJ/GeuHpN8Co6h7OapwwI0D/ 5h2iRVrhiCtgXX6QOXFvgZ9JA0CB8yDNKYOX0lPCEUMTSh6GckU69JoNkjakoz8S gScBQ954H2Pi2V7mT1K0BVfNo8fEPOdV -----END CERTIFICATE-----Generated at Sat Aug 23 18:36:01 2025 by rpki-client