$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: JaGCwMwk/2RwsKsOYGUaYuQ7H6I/QxuPqSPe5TE2QSA= Subject key identifier: 83:20:10:4E:AE:01:C7:4B:58:17:3B:10:29:D8:20:29:25:98:7B:00 Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 01B7 Signing time: Sat 23 Aug 2025 03:14:11 +0000 Manifest this update: Sat 23 Aug 2025 03:14:10 +0000 Manifest next update: Sat 30 Aug 2025 03:14:10 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: 05/0R8XKM+O2WQu0UtN3MgsgWTh2TMjdnYgx7q0nBL4=) 2: 71F97AC0560E11EEA8088470C4F9AE02.roa (hash: M1Z0vPN0xRUeI7aXSO+zgJ15zwwVDL1Npd3KMXS/ZDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Aug 23 03:14:10 2025 GMT Not After : Aug 30 03:14:10 2025 GMT Subject: CN=68a93203-384c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:b8:a5:f2:7b:b9:58:dc:5a:44:0a:d5:79: f3:dc:b4:b0:a3:c1:e9:ce:cd:0b:3e:d1:99:e6:f5: 90:3c:b9:7c:d5:07:b8:56:81:d8:05:c3:49:ae:fb: 70:42:2a:32:19:e7:aa:5a:e7:88:53:0b:ea:7c:fc: 50:83:48:cd:b6:0f:39:db:5d:f6:1b:52:6c:fc:eb: d2:40:3a:9a:8c:75:f7:43:e0:2f:ea:e3:11:60:57: c3:bd:67:7c:32:7f:a5:7d:dc:4c:95:38:60:ba:86: 51:ec:d9:fe:02:6a:db:b7:15:3a:c0:9f:1c:01:60: 1c:85:67:3b:a7:07:fd:ca:88:71:10:24:d1:ee:a0: f9:99:4e:97:5d:25:b7:26:18:2f:8a:4c:e5:14:fd: d5:a0:aa:29:05:1c:48:af:81:30:fa:a3:e6:cd:c1: bc:e6:c7:d4:40:71:89:97:e8:9c:45:11:97:f3:bb: 7a:8e:a9:39:27:2c:cc:02:0c:c7:04:53:ed:75:75: c1:4d:d8:11:12:de:cc:09:76:b5:5f:c2:64:0c:fd: d4:7c:da:03:90:5c:ec:96:ac:9e:15:0f:a5:0d:31: 97:ad:cd:56:a4:5d:bc:1e:e7:f7:9a:69:c6:e2:a1: 45:06:83:db:1e:d8:83:fc:8c:3c:20:8d:25:0d:65: 1d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:20:10:4E:AE:01:C7:4B:58:17:3B:10:29:D8:20:29:25:98:7B:00 X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a3:bb:33:e0:aa:f8:5f:5e:83:61:00:19:bd:6e:74:62:99: 5f:89:27:4f:96:aa:78:11:34:d8:cc:d6:a6:18:83:f3:28:94: e5:2b:2b:b6:88:c2:a6:eb:0f:af:c0:9f:b0:df:e2:2e:f2:20: e6:78:d6:ec:c6:1a:e9:dc:c8:e0:c3:39:73:90:09:1e:41:2f: 11:83:41:f0:58:f8:d9:f4:da:2e:0c:41:81:80:7d:49:0e:22: 42:5a:07:ba:21:80:73:77:ce:19:c3:88:4e:73:80:70:43:d8: 84:6d:ae:4d:d5:8d:2a:05:e1:e0:fd:12:3d:c7:83:ce:96:bf: f1:4b:c3:9e:6f:f4:ec:4c:00:ac:5f:2c:a5:ec:a3:aa:21:72: b0:31:db:e0:ff:fb:3b:b5:f0:f1:a3:be:ab:49:06:b6:ef:4a: a8:e2:ad:ba:8f:ae:43:e4:d9:a9:12:ff:44:4e:e2:ba:d8:58: bb:34:38:b7:ca:dd:15:56:a8:d4:fb:f9:71:cb:cf:14:41:d5: 7d:a1:a7:6c:61:e6:fc:70:53:f6:f8:dd:1d:8e:ff:ad:7f:38: 67:36:03:11:67:9c:3c:94:d8:56:f9:20:d0:fb:06:5b:1a:c3: 5f:66:0f:d4:7f:58:cb:b0:c6:9c:b0:eb:f0:c4:1d:08:88:4d: 29:c4:48:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjUwODIzMDMxNDEwWhcNMjUwODMwMDMxNDEwWjAYMRYwFAYD VQQDEw02OGE5MzIwMy0zODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmW4pfJ7uVjcWkQK1Xnz3LSwo8Hpzs0LPtGZ5vWQPLl81Qe4VoHYBcNJrvtw QioyGeeqWueIUwvqfPxQg0jNtg852132G1Js/OvSQDqajHX3Q+Av6uMRYFfDvWd8 Mn+lfdxMlThguoZR7Nn+AmrbtxU6wJ8cAWAchWc7pwf9yohxECTR7qD5mU6XXSW3 JhgvikzlFP3VoKopBRxIr4Ew+qPmzcG85sfUQHGJl+icRRGX87t6jqk5JyzMAgzH BFPtdXXBTdgREt7MCXa1X8JkDP3UfNoDkFzslqyeFQ+lDTGXrc1WpF28Huf3mmnG 4qFFBoPbHtiD/Iw8II0lDWUddwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMgEE6u AcdLWBc7ECnYICklmHsAMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAco7sz4Kr4X16DYQAZvW50YplfiSdPlqp4ETTYzNamGIPzKJTlKyu2 iMKm6w+vwJ+w3+Iu8iDmeNbsxhrp3MjgwzlzkAkeQS8Rg0HwWPjZ9NouDEGBgH1J DiJCWge6IYBzd84Zw4hOc4BwQ9iEba5N1Y0qBeHg/RI9x4POlr/xS8Oeb/TsTACs Xyyl7KOqIXKwMdvg//s7tfDxo76rSQa270qo4q26j65D5NmpEv9ETuK62Fi7NDi3 yt0VVqjU+/lxy88UQdV9oadsYeb8cFP2+N0djv+tfzhnNgMRZ5w8lNhW+SDQ+wZb GsNfZg/Uf1jLsMacsOvwxB0IiE0pxEga -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:16 2025 by rpki-client