$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft File: EAiP7ctRWnPwDu3X7GDodfnfCvY.mft (raw, json) Hash identifier: JNZeDP/9zw+uYziZPlUjh/pCCEMmPaIUBitdoqMWbg0= Subject key identifier: 95:5C:99:A8:18:53:45:B6:44:E7:7F:6B:03:B8:CF:EF:44:82:9B:3C Authority key identifier: 10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6 Certificate issuer: /CN=A9163BFD/serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft Manifest number: 0155 Signing time: Sat 23 Aug 2025 04:15:27 +0000 Manifest this update: Sat 23 Aug 2025 04:15:26 +0000 Manifest next update: Sat 30 Aug 2025 04:15:26 +0000 Files and hashes: 1: EAiP7ctRWnPwDu3X7GDodfnfCvY.crl (hash: h6EQefoNG2YmjIPmCmaKqFnK08KkuaHCAcA88IWppHU=) 2: 29D7838672F611EEB309873EC4F9AE02.roa (hash: zu5oTBlWmiRJc0JKeXclVvx/PdtKlnfyN23W6szZl1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BFD, serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6 Validity Not Before: Aug 23 04:15:26 2025 GMT Not After : Aug 30 04:15:26 2025 GMT Subject: CN=68a9405f-a3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:99:22:2a:1e:00:73:eb:af:df:ee:ca:59: 6c:d8:8c:fd:69:4b:4d:20:81:7c:e6:a2:8d:6c:ae: e3:f4:66:61:98:0c:d2:2d:b6:29:e4:50:a8:cb:8f: 81:5b:74:76:19:3f:97:53:58:5b:e3:9c:8a:b8:d1: 13:7a:e2:f4:88:08:45:02:73:34:31:0c:ae:56:bd: ba:97:22:ba:12:b5:5a:85:36:af:fd:0b:93:59:c3: 5f:3f:c8:16:be:c9:64:60:59:41:4b:29:68:0f:f9: 6c:70:5c:1c:a4:db:92:1d:f2:12:24:5a:ec:21:1e: 8c:36:d2:f1:c5:e6:d0:3e:34:05:ba:29:80:f5:9a: 1f:27:71:dd:c1:70:0a:49:af:65:76:b4:e0:5a:c8: 5a:4a:89:80:c1:9c:64:96:4c:d8:47:3c:d5:fd:a6: 51:fa:59:33:fa:53:d9:bb:d1:83:3d:7d:e8:dc:47: 02:a6:aa:0f:4f:f9:0b:81:5e:a5:15:43:2a:a3:c5: 28:62:c5:c0:04:d9:4f:ba:28:2b:b8:84:94:c2:33: f1:48:f9:97:00:64:55:21:f6:c9:45:32:70:9c:10: 23:44:af:47:cd:cc:20:e5:2b:c7:9e:95:50:53:01: 11:d9:5d:d9:7b:4f:e9:aa:1a:70:04:1f:6d:8a:22: 38:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5C:99:A8:18:53:45:B6:44:E7:7F:6B:03:B8:CF:EF:44:82:9B:3C X509v3 Authority Key Identifier: keyid:10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2f:f3:0f:0c:d4:22:a6:eb:4f:9b:82:b1:63:de:c8:46:7d: 8d:cd:33:0f:83:95:19:c4:48:c2:9a:13:79:60:5e:d6:d1:56: d9:7c:9e:57:7f:d2:0a:fd:84:37:8b:98:27:a3:20:43:bf:d4: b7:70:21:b8:50:4e:b7:63:6b:02:15:13:1f:51:cd:0f:ae:ed: e8:a4:34:5e:e1:6e:1d:15:4e:6f:ab:fe:fe:44:ed:3c:3a:cf: 36:3e:93:be:9a:ac:96:cb:6e:a2:2e:43:c9:03:cb:04:53:b9: 4b:22:41:27:65:fd:6b:3e:98:37:2f:46:5a:b0:44:70:ce:c6: 2e:2f:f0:e1:cd:fd:bf:99:5b:41:b9:d8:52:c1:fe:e1:79:3a: 20:2d:f0:24:46:c8:f3:ba:a4:3e:99:d8:ad:81:10:8e:9f:c2: 7a:01:6f:f9:c1:b8:7b:fe:c6:53:e2:17:e0:7c:6e:f0:cc:c6: 57:3f:19:bb:3a:14:53:96:42:1e:86:58:8a:b5:f8:e4:19:9e: 4a:4e:56:94:2e:b8:5f:3e:75:88:02:ae:ea:51:8d:2f:41:ed: d0:59:a7:3d:46:d6:9f:f5:1b:2f:81:3e:6d:27:4b:b1:12:2e: 6e:9a:df:34:22:a8:a0:e4:a9:75:8b:5c:fc:ea:75:1e:6f:67: 52:54:29:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRkQxMTAvBgNVBAUTKDEwMDg4RkVEQ0I1MTVBNzNGMDBFRUREN0VDNjBFODc1 RjlERjBBRjYwHhcNMjUwODIzMDQxNTI2WhcNMjUwODMwMDQxNTI2WjAYMRYwFAYD VQQDEw02OGE5NDA1Zi1hM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2SZIioeAHPrr9/uylls2Iz9aUtNIIF85qKNbK7j9GZhmAzSLbYp5FCoy4+B W3R2GT+XU1hb45yKuNETeuL0iAhFAnM0MQyuVr26lyK6ErVahTav/QuTWcNfP8gW vslkYFlBSyloD/lscFwcpNuSHfISJFrsIR6MNtLxxebQPjQFuimA9ZofJ3HdwXAK Sa9ldrTgWshaSomAwZxklkzYRzzV/aZR+lkz+lPZu9GDPX3o3EcCpqoPT/kLgV6l FUMqo8UoYsXABNlPuigruISUwjPxSPmXAGRVIfbJRTJwnBAjRK9Hzcwg5SvHnpVQ UwER2V3Ze0/pqhpwBB9tiiI4aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVcmagY U0W2ROd/awO4z+9Egps8MB8GA1UdIwQYMBaAFBAIj+3LUVpz8A7t1+xg6HX53wr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JGRC84NThGOUFBQzcy RjUxMUVFODAxQ0M4M0NDNEY5QUUwMi9FQWlQN2N0UlduUHdEdTNYN0dEb2RmbmZD dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBaVA3Y3RSV25Qd0R1M1g3R0RvZGZuZkN2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JGRC84NThGOUFBQzcyRjUxMUVFODAxQ0M4M0NDNEY5QUUwMi9FQWlQN2N0Uldu UHdEdTNYN0dEb2RmbmZDdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvL/MPDNQiputPm4KxY97IRn2NzTMPg5UZxEjCmhN5YF7W0VbZfJ5X f9IK/YQ3i5gnoyBDv9S3cCG4UE63Y2sCFRMfUc0Pru3opDRe4W4dFU5vq/7+RO08 Os82PpO+mqyWy26iLkPJA8sEU7lLIkEnZf1rPpg3L0ZasERwzsYuL/Dhzf2/mVtB udhSwf7heTogLfAkRsjzuqQ+mditgRCOn8J6AW/5wbh7/sZT4hfgfG7wzMZXPxm7 OhRTlkIehliKtfjkGZ5KTlaULrhfPnWIAq7qUY0vQe3QWac9Rtaf9RsvgT5tJ0ux Ei5umt80Iqig5Kl1i1z86nUeb2dSVCll -----END CERTIFICATE-----Generated at Sun Aug 24 03:04:07 2025 by rpki-client