$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft File: EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json) Hash identifier: jnF/qQXXPhaVSHryo5JELjbgM6Njn5LOE5BBDMRFvBE= Subject key identifier: CD:24:86:FA:24:7A:5E:79:2C:C4:DA:9A:13:5A:7B:FB:0D:B9:D3:B0 Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Certificate serial: 124B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft Manifest number: 123F Signing time: Fri 22 Aug 2025 17:15:19 +0000 Manifest this update: Fri 22 Aug 2025 17:15:18 +0000 Manifest next update: Fri 29 Aug 2025 17:15:18 +0000 Files and hashes: 1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: uTcuz5uMPZ+j8IxN/phTDrIKWP7s/uWi9+RhVLE7tAQ=) 2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: NX0Uu06g9kaFwSmmKkUW0sgMJpCNI4RFhei0HlK1wt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4683 (0x124b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833FF, serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Validity Not Before: Aug 22 17:15:18 2025 GMT Not After : Aug 29 17:15:18 2025 GMT Subject: CN=68a8a5a6-00e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:29:a8:55:b6:ad:bc:bf:ad:71:75:7f:95: 90:8b:19:5d:65:15:c7:bd:5c:54:43:1a:27:12:97: f5:91:7f:db:dd:7d:60:9b:3b:fb:d6:19:ff:dd:74: be:0d:a8:25:9e:9f:d9:ae:ff:75:4d:2f:d4:22:ed: 5d:45:dc:ce:61:ca:3a:83:3b:33:dd:c7:e9:69:4c: 1e:43:47:ec:6a:cb:0f:66:59:c1:09:24:ca:b0:d8: 5f:c1:0a:a1:bd:71:06:e9:1e:10:93:f1:a8:0a:ee: 6b:df:e1:0e:07:e7:5c:23:8f:9f:08:41:ca:d9:99: 9d:1b:a2:6c:81:36:cb:6d:5b:80:04:fe:c7:72:ac: 9b:f4:3e:14:2c:3d:09:c4:68:4e:47:24:5a:7d:db: 6e:8b:e1:80:63:32:a6:34:f3:9c:c0:0b:4d:57:8c: 48:83:d8:85:09:f7:71:aa:6b:d8:da:a8:42:03:c1: 7e:b6:1b:2b:bf:14:de:df:f4:b0:bf:73:31:1c:0d: e5:77:7f:30:9c:ab:13:58:85:40:80:22:19:15:a0: e2:43:4e:84:70:58:1d:0c:3d:98:a8:89:8e:2c:6b: e4:18:dd:50:6b:e2:2f:61:43:e1:75:7a:fd:91:3d: f4:9c:2a:4d:04:3a:af:9f:fb:b0:53:d8:7e:f9:9b: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:24:86:FA:24:7A:5E:79:2C:C4:DA:9A:13:5A:7B:FB:0D:B9:D3:B0 X509v3 Authority Key Identifier: keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:75:81:a5:ab:ba:d5:60:a0:9d:53:10:a3:6d:a0:bb:ba:fb: 1f:54:15:88:b9:07:f9:d0:a3:ea:52:dc:2a:3a:d0:80:cd:cf: b8:90:ff:c8:e3:e2:db:15:78:a7:e4:c5:2b:71:4a:81:98:07: f3:a6:c5:fd:06:74:ba:8b:4e:d6:8f:56:b4:51:e0:6e:e7:2c: 48:27:20:52:72:44:69:5e:56:7e:7a:7f:33:9c:bd:f3:7c:56: 2c:dc:11:15:2e:a7:63:62:ce:4c:ee:1a:14:22:e1:35:bc:1e: b6:17:05:73:e1:02:56:74:ba:36:7f:0f:31:2e:b8:4f:37:40: 29:c5:8f:9c:6e:86:c6:4d:2a:9d:56:e7:b1:51:f8:13:b1:af: 28:3b:c3:dc:0b:dd:1d:e2:cf:2c:8d:93:d0:36:99:15:b7:40: 68:d2:cc:77:b8:c0:38:7e:1a:b6:62:48:34:63:a6:9d:e8:3b: 2f:a4:28:16:fc:83:7b:26:2e:26:6c:7d:a6:29:43:7d:61:a0: 54:3f:63:65:ab:b2:6c:ee:0e:42:67:aa:00:aa:24:8b:91:64: 39:fc:12:85:98:32:c9:e5:b1:7c:bb:f1:fb:61:bc:4b:42:11: ae:6d:1b:04:a6:a8:39:20:30:68:da:2a:6f:ce:19:82:c9:6d: ef:c9:77:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzRkYxMTAvBgNVBAUTKDEyMzI3REZDOUU4ODgzQ0RCQjZDNkVFRUIzOTI1RjJD OEMwRjdFNUUwHhcNMjUwODIyMTcxNTE4WhcNMjUwODI5MTcxNTE4WjAYMRYwFAYD VQQDEw02OGE4YTVhNi0wMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApegpqFW2rby/rXF1f5WQixldZRXHvVxUQxonEpf1kX/b3X1gmzv71hn/3XS+ Daglnp/Zrv91TS/UIu1dRdzOYco6gzsz3cfpaUweQ0fsassPZlnBCSTKsNhfwQqh vXEG6R4Qk/GoCu5r3+EOB+dcI4+fCEHK2ZmdG6JsgTbLbVuABP7Hcqyb9D4ULD0J xGhORyRafdtui+GAYzKmNPOcwAtNV4xIg9iFCfdxqmvY2qhCA8F+thsrvxTe3/Sw v3MxHA3ld38wnKsTWIVAgCIZFaDiQ06EcFgdDD2YqImOLGvkGN1Qa+IvYUPhdXr9 kT30nCpNBDqvn/uwU9h++ZsapwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0khvok el55LMTamhNae/sNudOwMB8GA1UdIwQYMBaAFBIyffyeiIPNu2xu7rOSXyyMD35e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNGRi8xNEVGRTdFNEUw N0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4MjdiRzd1czVKZkxJd1Bm bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VqSjlfSjZJZzgyN2JHN3VzNUpmTEl3UGZsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzNGRi8xNEVGRTdFNEUwN0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4 MjdiRzd1czVKZkxJd1BmbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACdYGlq7rVYKCdUxCjbaC7uvsfVBWIuQf50KPqUtwqOtCAzc+4kP/I 4+LbFXin5MUrcUqBmAfzpsX9BnS6i07Wj1a0UeBu5yxIJyBSckRpXlZ+en8znL3z fFYs3BEVLqdjYs5M7hoUIuE1vB62FwVz4QJWdLo2fw8xLrhPN0ApxY+cbobGTSqd VuexUfgTsa8oO8PcC90d4s8sjZPQNpkVt0Bo0sx3uMA4fhq2Ykg0Y6ad6DsvpCgW /IN7Ji4mbH2mKUN9YaBUP2Nlq7Js7g5CZ6oAqiSLkWQ5/BKFmDLJ5bF8u/H7YbxL QhGubRsEpqg5IDBo2ipvzhmCyW3vyXdR -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:25 2025 by rpki-client