$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft File: emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json) Hash identifier: d9WyiUjq9AxpEWam7aZCZsokEqP5oDtO8QBxgnccNTs= Subject key identifier: AF:7E:A3:33:F1:5A:A4:AE:0A:08:6A:C2:E8:0B:9B:77:8C:3E:2C:2C Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E Certificate issuer: /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E Certificate serial: 34B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft Manifest number: 34B4 Signing time: Fri 22 Aug 2025 15:02:08 +0000 Manifest this update: Fri 22 Aug 2025 15:02:07 +0000 Manifest next update: Fri 29 Aug 2025 15:02:07 +0000 Files and hashes: 1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: 90NpGsYA7BmP8in596OL/Wy+n35K+HvG0TjUQnV4bPA=) 2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: wwzdt+29bN5sRkpJd/eidoVjChYLuUnZj02CyiHrUiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13497 (0x34b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E Validity Not Before: Aug 22 15:02:07 2025 GMT Not After : Aug 29 15:02:07 2025 GMT Subject: CN=68a88670-c016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:0e:d8:46:dc:96:e5:18:81:41:68:66:eb: 4b:ff:aa:e5:55:b9:b8:c7:10:7d:84:6d:f9:32:43: d7:1d:96:01:3f:31:10:9f:66:6f:d3:32:01:a0:e6: 30:de:6f:ef:f4:1e:76:50:b2:30:61:8f:99:c8:7f: 96:42:f3:0d:d4:d4:4f:a5:b0:b8:20:ed:1f:12:71: d6:eb:17:f2:b5:d6:ec:45:5c:87:0b:28:f2:a6:29: 0d:9d:b7:ea:cd:f8:98:f7:f6:9c:f8:8b:1d:cb:b4: 9c:39:5e:77:4c:81:bc:66:40:10:8d:5e:bb:9d:67: e9:70:ea:dc:72:0d:02:54:db:fc:49:c9:4e:2c:ae: 9c:4b:a8:9c:84:97:32:14:fe:a1:5f:20:d4:04:94: 18:73:82:44:b2:0f:e7:da:01:df:86:37:74:11:f8: 9e:af:f9:32:a2:c6:37:fd:6f:c6:99:b1:f0:b5:41: 45:54:9c:f2:5a:88:21:d9:8a:5c:5a:69:2e:0a:ae: 64:4c:a2:57:26:4e:68:8a:60:39:28:22:bd:06:d7: 0a:b0:78:c5:75:e6:d6:ea:42:e4:27:2e:bb:88:e8: 17:16:6b:05:67:90:fc:31:45:b7:bc:48:bd:de:c3: ee:9e:89:0b:79:de:7a:6d:f9:8d:09:d1:26:a9:9d: 82:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7E:A3:33:F1:5A:A4:AE:0A:08:6A:C2:E8:0B:9B:77:8C:3E:2C:2C X509v3 Authority Key Identifier: keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ad:b9:42:84:9f:55:42:82:81:57:17:66:c4:08:d2:b5:4b: 31:54:f4:cf:9f:91:e9:87:98:ca:77:de:60:12:da:77:9d:20: bd:d8:4c:22:d4:b4:e9:07:e6:17:72:54:71:cd:6f:b9:6a:c5: 9f:bc:25:e6:89:91:31:f5:b1:38:7e:8a:1d:fc:5d:35:ab:7f: b7:98:c8:53:7c:81:aa:c9:f1:1c:ba:ea:fd:a5:49:39:8a:ae: 3a:38:a6:fd:54:16:9d:c3:8f:0f:2c:04:aa:4e:74:b7:6f:1b: 4c:7d:df:8e:6e:bf:20:96:84:7c:f4:33:30:fe:97:38:10:86: bc:68:17:7b:2c:b2:27:bf:ba:3f:2c:ef:42:1c:ae:5f:41:98: bb:3e:0b:8a:cf:9f:55:fd:25:e9:4a:b8:28:20:d3:d5:8e:b8: 10:3c:d0:35:f3:98:c2:e7:28:26:26:cf:2e:9d:50:ff:15:f9: 10:87:d1:1f:9d:02:64:da:b7:56:f4:3e:ed:45:4a:78:f9:b1: da:31:58:1a:20:a9:a3:bb:41:5b:fa:4d:e2:fd:31:65:13:01: b7:0e:09:0d:be:1a:54:cb:c3:01:67:0d:3c:b5:2f:e7:c7:6f: e0:10:f3:8c:e1:b6:49:71:2a:89:55:bf:b1:fa:44:1d:91:6d: ea:69:13:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGRjMxMTAvBgNVBAUTKDdBNjYxMDUxOTQ1Q0UyRThGQjRBRTZERTYzQjI4NDc4 QjBDRUQzNUUwHhcNMjUwODIyMTUwMjA3WhcNMjUwODI5MTUwMjA3WjAYMRYwFAYD VQQDEw02OGE4ODY3MC1jMDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoK8O2EbcluUYgUFoZutL/6rlVbm4xxB9hG35MkPXHZYBPzEQn2Zv0zIBoOYw 3m/v9B52ULIwYY+ZyH+WQvMN1NRPpbC4IO0fEnHW6xfytdbsRVyHCyjypikNnbfq zfiY9/ac+Isdy7ScOV53TIG8ZkAQjV67nWfpcOrccg0CVNv8SclOLK6cS6ichJcy FP6hXyDUBJQYc4JEsg/n2gHfhjd0Efier/kyosY3/W/GmbHwtUFFVJzyWogh2Ypc WmkuCq5kTKJXJk5oimA5KCK9BtcKsHjFdebW6kLkJy67iOgXFmsFZ5D8MUW3vEi9 3sPunokLed56bfmNCdEmqZ2CXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9+ozPx WqSuCghqwugLm3eMPiwsMB8GA1UdIwQYMBaAFHpmEFGUXOLo+0rm3mOyhHiwztNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZGMy9DRUFCQjRFNjFE OUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1ajdTdWJlWTdLRWVMRE8w MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtWVFVWlJjNHVqN1N1YmVZN0tFZUxETzAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZGMy9DRUFCQjRFNjFEOUQxMUUyOEVBRjREOEQwOEIwMkNEMi9lbVlRVVpSYzR1 ajdTdWJlWTdLRWVMRE8wMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxrblChJ9VQoKBVxdmxAjStUsxVPTPn5Hph5jKd95gEtp3nSC92Ewi 1LTpB+YXclRxzW+5asWfvCXmiZEx9bE4food/F01q3+3mMhTfIGqyfEcuur9pUk5 iq46OKb9VBadw48PLASqTnS3bxtMfd+Obr8gloR89DMw/pc4EIa8aBd7LLInv7o/ LO9CHK5fQZi7PguKz59V/SXpSrgoINPVjrgQPNA185jC5ygmJs8unVD/FfkQh9Ef nQJk2rdW9D7tRUp4+bHaMVgaIKmju0Fb+k3i/TFlEwG3DgkNvhpUy8MBZw08tS/n x2/gEPOM4bZJcSqJVb+x+kQdkW3qaRO9 -----END CERTIFICATE-----Generated at Sat Aug 23 16:41:59 2025 by rpki-client