$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft File: EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json) Hash identifier: Rp8O7vNGNOOc5DuVClD3yf/y+/6FModt4aOOkjOfqmc= Subject key identifier: 18:DE:8A:61:F4:6B:07:7E:D1:5C:B5:D5:B2:D7:8C:2A:FC:B3:4B:0E Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft Manifest number: 13 Signing time: Sat 23 Aug 2025 08:18:19 +0000 Manifest this update: Sat 23 Aug 2025 08:18:19 +0000 Manifest next update: Sat 30 Aug 2025 08:18:19 +0000 Files and hashes: 1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: HqPfg70tCWW+x/3oo9gG98oTNkVcY6nbBqE1E3DyZjM=) 2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: aA4NuSUsD5J7xDniHCGMsk40FqbunmjtgWh3zqGnLE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8 Validity Not Before: Aug 23 08:18:19 2025 GMT Not After : Aug 30 08:18:19 2025 GMT Subject: CN=68a9794b-458d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f3:84:6a:9f:77:fc:75:73:33:be:aa:90:9f: e4:d2:4d:bc:64:40:9e:76:72:5b:d9:ee:a2:0b:ae: a6:1e:29:88:ec:85:76:dd:ba:e0:d6:21:c6:32:27: 9a:ab:f5:3a:fa:8e:20:a7:2a:80:70:e8:a8:b3:d8: 21:eb:7b:ed:ae:02:f4:ba:00:7d:69:37:0f:01:d9: 2f:8a:9c:58:5f:b7:5b:7a:03:e8:c6:4e:d5:61:ca: 27:df:4b:7d:07:1b:91:15:a9:68:67:d7:41:05:b0: af:8d:73:65:b0:aa:fa:16:d2:6e:66:d8:e9:f9:e1: 16:84:4e:0e:27:df:58:3a:3b:03:9a:e6:48:77:89: 1a:16:01:f0:dd:97:fe:fd:33:31:1e:6d:c8:2c:bf: 40:c1:f6:2b:56:cb:ab:be:74:b7:28:3c:f5:e5:af: 0a:e7:31:4b:d7:dd:5f:48:25:ee:fa:36:b0:1c:93: 08:67:ba:c6:35:d3:74:56:f2:21:85:ca:8b:6a:92: 27:93:5b:45:19:4e:c8:86:0f:0a:f3:d2:e7:a0:30: 99:83:c9:b5:8a:ce:e8:2a:57:12:d3:ee:a8:2e:8b: cd:6a:27:88:cc:41:fb:e4:40:95:0b:45:47:b1:4d: ca:47:49:ff:77:1b:69:d3:8a:22:c5:34:09:b3:3b: 0c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DE:8A:61:F4:6B:07:7E:D1:5C:B5:D5:B2:D7:8C:2A:FC:B3:4B:0E X509v3 Authority Key Identifier: keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f1:1a:5e:af:0b:61:f4:8b:9a:ee:c8:c4:72:4c:87:d8:dc: 0a:9a:b5:79:ec:f8:bd:4f:71:dc:0c:98:aa:29:7c:9c:2b:bd: d4:39:76:4b:d4:98:61:0d:6e:0e:f3:55:a1:41:c1:c6:63:3b: 24:d3:e5:d7:4c:2c:fc:86:b8:7c:c5:c2:64:12:b8:34:f0:cc: a5:98:1d:a4:c8:13:5a:97:9d:7a:34:f3:74:64:d9:ec:a4:5e: 53:ff:23:af:00:c2:63:f9:4b:25:b9:b9:e5:d9:bc:61:e5:b3: d7:df:13:0a:0e:20:e7:25:e9:c1:0c:f8:da:b2:2e:1a:28:36: e7:7a:ca:00:de:d7:b4:ef:ea:7c:d6:d1:98:d2:b0:8b:08:ac: 6a:5d:ca:1a:fc:80:ba:5d:5f:eb:c4:df:73:bb:0c:fd:45:9e: e8:90:cd:f0:9e:02:d1:60:17:bd:ba:32:36:02:58:97:34:54: 38:ad:96:b3:24:16:dc:bc:1b:52:f1:be:89:4c:be:c7:79:d1: 78:0c:42:ca:c8:c7:f5:18:21:cc:bb:04:29:4c:d2:ac:bc:34: 76:a1:e2:27:23:84:b1:85:37:a6:10:50:ee:03:25:31:28:e8: 79:e1:ed:97:3a:1a:89:da:28:a9:3d:10:15:14:a0:d7:e9:7a: 2e:7a:b7:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0Q1QjExMC8GA1UEBRMoMTBBQzYzMDY2RTlBQkM0MjJBQzVGNDVBMjI3MTBENTAy RUJFNDJDODAeFw0yNTA4MjMwODE4MTlaFw0yNTA4MzAwODE4MTlaMBgxFjAUBgNV BAMTDTY4YTk3OTRiLTQ1OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK84Rqn3f8dXMzvqqQn+TSTbxkQJ52clvZ7qILrqYeKYjshXbduuDWIcYyJ5qr 9Tr6jiCnKoBw6Kiz2CHre+2uAvS6AH1pNw8B2S+KnFhft1t6A+jGTtVhyiffS30H G5EVqWhn10EFsK+Nc2WwqvoW0m5m2On54RaETg4n31g6OwOa5kh3iRoWAfDdl/79 MzEebcgsv0DB9itWy6u+dLcoPPXlrwrnMUvX3V9IJe76NrAckwhnusY103RW8iGF yotqkieTW0UZTsiGDwrz0uegMJmDybWKzugqVxLT7qgui81qJ4jMQfvkQJULRUex TcpHSf93G2nTiiLFNAmzOwzXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGN6KYfRr B37RXLXVsteMKvyzSw4wHwYDVR0jBBgwFoAUEKxjBm6avEIqxfRaInENUC6+Qsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3RDVCLzc5ODMzODVBNjky RTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZhdkVJcXhmUmFJbkVOVUM2LVFz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUt4akJtNmF2RUlxeGZSYUluRU5VQzYtUXNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 RDVCLzc5ODMzODVBNjkyRTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZhdkVJ cXhmUmFJbkVOVUM2LVFzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEvxGl6vC2H0i5ruyMRyTIfY3AqatXns+L1PcdwMmKopfJwrvdQ5dkvU mGENbg7zVaFBwcZjOyTT5ddMLPyGuHzFwmQSuDTwzKWYHaTIE1qXnXo083Rk2eyk XlP/I68AwmP5SyW5ueXZvGHls9ffEwoOIOcl6cEM+NqyLhooNud6ygDe17Tv6nzW 0ZjSsIsIrGpdyhr8gLpdX+vE33O7DP1FnuiQzfCeAtFgF726MjYCWJc0VDitlrMk Fty8G1LxvolMvsd50XgMQsrIx/UYIcy7BClM0qy8NHah4icjhLGFN6YQUO4DJTEo 6Hnh7Zc6GonaKKk9EBUUoNfpei56t8Y= -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:10 2025 by rpki-client