$ rpki-client -vvf rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft File: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft (raw, json) Hash identifier: Pqtnxs7tDHhfCq240HYKCF51CU86RJ6vorYFe1DQCgY= Subject key identifier: 6A:B0:51:D4:46:F7:6A:C4:42:2A:7A:72:9F:CF:C9:F4:73:5D:5D:DF Authority key identifier: 79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2 Certificate issuer: /CN=A918A1E7/serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft Manifest number: 12 Signing time: Sat 23 Aug 2025 08:17:29 +0000 Manifest this update: Sat 23 Aug 2025 08:17:28 +0000 Manifest next update: Sat 30 Aug 2025 08:17:28 +0000 Files and hashes: 1: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl (hash: j6zwNEdQSQrTp1UO9VXGJbwMPkIA4ytsEwlZpDLoimE=) 2: 06239BF2677111F0BB789073C4F9AE02.roa (hash: 75vTSE08rNUq4HiUVLq5ZXr6WX1vmudvT/BKb5VXT9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A1E7, serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2 Validity Not Before: Aug 23 08:17:28 2025 GMT Not After : Aug 30 08:17:28 2025 GMT Subject: CN=68a97918-b1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:51:65:61:7c:b2:b6:fe:5e:9f:81:46:a4: 08:4b:77:35:6a:ed:e0:bb:ae:ed:05:1f:3e:e0:b0: 69:18:e4:24:27:4c:5d:b6:52:a1:0f:cd:24:8a:a1: e1:5d:bf:0e:b2:3c:aa:21:32:cd:bd:ff:f1:2e:fb: 79:23:6e:ce:7d:9e:b6:1a:29:10:43:8a:0b:0f:ad: d2:81:fd:71:6b:41:98:02:00:d0:78:40:91:6b:83: 4e:d0:2d:d4:b3:c8:d0:0d:4c:d6:a4:5a:79:bc:2a: 33:0c:8a:de:2b:b9:d7:65:74:9e:0d:58:21:f5:97: 52:4f:fd:ad:5d:9d:bc:e0:30:7c:8c:90:5e:9c:88: 99:f3:4f:6b:39:d5:68:cf:84:2a:be:e2:19:b0:7f: ee:60:34:fb:1a:ac:73:85:45:4b:d6:40:42:10:4c: 51:e2:a2:be:69:55:13:c2:85:b2:e3:1f:e3:0c:88: bc:90:b4:99:7c:db:32:b3:e8:01:6d:91:44:cf:2e: c9:b4:eb:b6:5c:02:df:72:71:21:64:6e:bb:a8:65: 07:e8:36:3e:32:f9:be:13:ec:f0:64:b0:82:47:1b: ea:58:5c:69:86:bc:cb:2c:68:ff:ff:d7:73:a6:bf: 56:33:ea:db:78:e2:9e:84:06:3f:4c:7c:4a:02:3f: 7c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B0:51:D4:46:F7:6A:C4:42:2A:7A:72:9F:CF:C9:F4:73:5D:5D:DF X509v3 Authority Key Identifier: keyid:79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:81:81:c5:79:9f:ed:00:bf:17:0f:00:c0:67:47:dc:5d:d4: 51:52:af:55:e0:3c:8a:5d:aa:a6:46:2d:2f:d4:ff:d9:c7:70: 0b:d1:93:d1:3f:9c:54:d1:e7:e3:48:a7:58:31:4c:d0:dd:74: 06:01:a0:04:a8:5a:ae:a5:52:28:f1:d1:a3:a3:2b:23:7a:66: 2d:02:2a:61:20:b0:ed:65:98:b8:6f:4d:ca:59:40:6e:0c:09: 5f:ed:18:2d:44:c1:f8:11:60:87:78:c8:d4:7a:4e:f3:d9:97: 80:b8:aa:59:a0:3f:c7:ff:66:4c:51:bf:64:58:e2:1d:ac:03: d5:98:35:b4:11:fb:2d:69:40:96:4f:9d:8d:5e:2e:ab:b9:5d: 74:7d:09:64:09:ee:ae:74:0d:42:f3:ef:b0:13:b2:63:cc:82: 44:a7:14:0c:fe:77:0e:b4:a4:15:b6:72:07:ac:8b:ec:d3:d3: 99:3c:30:2f:c6:31:00:85:5f:39:f7:44:5f:17:68:e6:fa:2c: 66:16:0d:48:3e:e7:a9:29:71:c3:c5:3e:df:87:b3:5d:73:ed: dc:60:f6:bc:d1:de:66:28:d7:1f:ba:ef:29:b1:78:3e:e2:4d: 22:d4:48:56:41:68:c9:13:e3:8b:a0:06:b2:60:ac:2c:b1:44: 1b:1b:da:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTFFNzExMC8GA1UEBRMoNzlCQTUxRDk2QkZEQzMxM0M3ODhBRUMzMzA3M0M5Njk4 RTVEMDFDMjAeFw0yNTA4MjMwODE3MjhaFw0yNTA4MzAwODE3MjhaMBgxFjAUBgNV BAMTDTY4YTk3OTE4LWIxZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBFFFlYXyytv5en4FGpAhLdzVq7eC7ru0FHz7gsGkY5CQnTF22UqEPzSSKoeFd vw6yPKohMs29//Eu+3kjbs59nrYaKRBDigsPrdKB/XFrQZgCANB4QJFrg07QLdSz yNANTNakWnm8KjMMit4ruddldJ4NWCH1l1JP/a1dnbzgMHyMkF6ciJnzT2s51WjP hCq+4hmwf+5gNPsarHOFRUvWQEIQTFHior5pVRPChbLjH+MMiLyQtJl82zKz6AFt kUTPLsm067ZcAt9ycSFkbruoZQfoNj4y+b4T7PBksIJHG+pYXGmGvMssaP//13Om v1Yz6tt44p6EBj9MfEoCP3yXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUarBR1Eb3 asRCKnpyn8/J9HNdXd8wHwYDVR0jBBgwFoAUebpR2Wv9wxPHiK7DMHPJaY5dAcIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMUU3LzlBNjY3NTdFNjc3 MDExRjA5M0QxNzQ3MkM0RjlBRTAyL2VicFIyV3Y5d3hQSGlLN0RNSFBKYVk1ZEFj SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWJwUjJXdjl3eFBIaUs3RE1IUEphWTVkQWNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB MUU3LzlBNjY3NTdFNjc3MDExRjA5M0QxNzQ3MkM0RjlBRTAyL2VicFIyV3Y5d3hQ SGlLN0RNSFBKYVk1ZEFjSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA6BgcV5n+0AvxcPAMBnR9xd1FFSr1XgPIpdqqZGLS/U/9nHcAvRk9E/ nFTR5+NIp1gxTNDddAYBoASoWq6lUijx0aOjKyN6Zi0CKmEgsO1lmLhvTcpZQG4M CV/tGC1EwfgRYId4yNR6TvPZl4C4qlmgP8f/ZkxRv2RY4h2sA9WYNbQR+y1pQJZP nY1eLqu5XXR9CWQJ7q50DULz77ATsmPMgkSnFAz+dw60pBW2cgesi+zT05k8MC/G MQCFXzn3RF8XaOb6LGYWDUg+56kpccPFPt+Hs11z7dxg9rzR3mYo1x+67ymxeD7i TSLUSFZBaMkT44ugBrJgrCyxRBsb2vw= -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:02 2025 by rpki-client