$ rpki-client -vvf rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft File: EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft (raw, json) Hash identifier: AJnROI3soNrWSjOstVDYN427RENYl4EITUH8G1jprJ0= Subject key identifier: 26:82:B0:1B:53:40:BE:88:65:AE:E3:E5:30:9D:F4:0B:37:EA:AA:A3 Authority key identifier: 10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B Certificate issuer: /CN=A918DFCE/serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft Manifest number: 012D Signing time: Sat 23 Aug 2025 04:50:14 +0000 Manifest this update: Sat 23 Aug 2025 04:50:13 +0000 Manifest next update: Sat 30 Aug 2025 04:50:13 +0000 Files and hashes: 1: EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl (hash: YKZM9wgW1UTyqK7Qsle7A5ts/qzb/g94bVwFHoZqlWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DFCE, serialNumber=1044029FF83174C6F1D66C8AD0D3FA1664EFE53B Validity Not Before: Aug 23 04:50:13 2025 GMT Not After : Aug 30 04:50:13 2025 GMT Subject: CN=68a94885-7988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:4b:89:ef:79:c8:29:23:53:96:d2:a2:f8: 92:d7:98:21:c8:bb:14:c6:42:1c:a2:95:e2:ba:08: e7:24:14:e4:10:f1:a1:5e:aa:bd:c8:d7:f0:ac:e2: 01:04:a1:50:43:9f:16:f7:82:64:22:dc:d9:53:f8: 46:8a:16:c0:4f:f5:f4:06:0c:48:bf:22:9b:63:8f: 0c:d5:9b:6f:86:7c:a9:e2:31:b1:98:1d:a3:47:c6: fe:bf:b6:e0:2f:9f:07:ed:c4:aa:28:a7:3a:48:70: de:d4:c7:76:4d:dc:71:0d:91:c0:8f:86:43:7a:e1: 24:0a:53:04:f3:0f:4d:b2:d3:b0:3d:db:18:78:b9: ed:dd:5c:ef:5a:54:bb:3b:f8:7e:2c:4b:49:f2:b8: f6:45:55:62:97:de:9d:8a:d3:1e:6e:7f:cc:26:46: 3b:fb:25:56:8e:2d:b5:c0:b2:fe:4b:e2:69:b7:ab: 73:50:05:f4:19:55:cc:51:95:25:7d:7e:0a:65:17: 22:13:21:0c:bb:99:fb:5e:e3:fa:e7:35:f3:2a:22: 06:3f:a0:18:d3:76:c9:14:59:60:ff:fc:5e:c0:18: b4:88:73:8f:f5:18:25:cf:02:fc:06:43:2a:74:a8: 0d:b0:ee:98:8c:50:d5:c9:67:04:30:b5:92:e1:a3: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:82:B0:1B:53:40:BE:88:65:AE:E3:E5:30:9D:F4:0B:37:EA:AA:A3 X509v3 Authority Key Identifier: keyid:10:44:02:9F:F8:31:74:C6:F1:D6:6C:8A:D0:D3:FA:16:64:EF:E5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEQCn_gxdMbx1myK0NP6FmTv5Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DFCE/80AC54CABF1D11EE875AE27FC4F9AE02/EEQCn_gxdMbx1myK0NP6FmTv5Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:2e:7e:d8:08:79:10:5d:7a:cd:ea:bf:11:b8:7b:63:7a:44: f2:3a:18:3c:cd:3c:9d:b8:13:ce:29:47:70:e1:f7:f5:3f:aa: f2:34:3d:65:62:f8:c5:13:06:08:2e:54:f7:43:86:2f:2e:49: 5c:4a:ae:40:f1:17:4a:3c:05:b0:fe:68:07:83:16:d4:a4:95: 91:8b:68:24:71:75:91:3a:51:f2:dc:5b:02:c3:96:28:eb:a6: ac:71:72:29:a2:c8:02:66:b7:93:fa:f3:47:fc:ed:f5:92:7e: 6f:a9:e9:f7:91:30:5a:11:bf:5d:54:3a:ea:27:21:f8:e0:88: 3b:00:c9:0f:c4:8e:9d:c2:20:87:90:50:9e:12:73:3a:de:27: c6:55:37:1e:dc:86:57:d9:30:17:16:77:36:16:51:be:d3:0e: ac:9f:a3:9a:b8:a8:ce:47:ff:2b:8b:c3:16:e5:80:76:96:23: 8b:dd:c3:21:c6:fb:46:89:37:dd:b3:e3:ef:ec:c3:27:4e:7f: ec:d0:8f:5e:c8:fb:3f:f2:84:c8:e3:6f:e2:53:1a:b1:43:63: 09:f3:7c:57:0a:b2:ee:f9:c6:3f:9d:6d:cc:9e:f9:ec:83:8f: 27:c8:4f:26:20:46:2d:82:90:e1:ef:61:77:e9:d1:f2:34:b4: a1:79:14:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERGQ0UxMTAvBgNVBAUTKDEwNDQwMjlGRjgzMTc0QzZGMUQ2NkM4QUQwRDNGQTE2 NjRFRkU1M0IwHhcNMjUwODIzMDQ1MDEzWhcNMjUwODMwMDQ1MDEzWjAYMRYwFAYD VQQDEw02OGE5NDg4NS03OTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl2lLie95yCkjU5bSoviS15ghyLsUxkIcopXiugjnJBTkEPGhXqq9yNfwrOIB BKFQQ58W94JkItzZU/hGihbAT/X0BgxIvyKbY48M1Ztvhnyp4jGxmB2jR8b+v7bg L58H7cSqKKc6SHDe1Md2TdxxDZHAj4ZDeuEkClME8w9NstOwPdsYeLnt3VzvWlS7 O/h+LEtJ8rj2RVVil96ditMebn/MJkY7+yVWji21wLL+S+Jpt6tzUAX0GVXMUZUl fX4KZRciEyEMu5n7XuP65zXzKiIGP6AY03bJFFlg//xewBi0iHOP9RglzwL8BkMq dKgNsO6YjFDVyWcEMLWS4aNRBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaCsBtT QL6IZa7j5TCd9As36qqjMB8GA1UdIwQYMBaAFBBEAp/4MXTG8dZsitDT+hZk7+U7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REZDRS84MEFDNTRDQUJG MUQxMUVFODc1QUUyN0ZDNEY5QUUwMi9FRVFDbl9neGRNYngxbXlLME5QNkZtVHY1 VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFUUNuX2d4ZE1ieDFteUswTlA2Rm1UdjVUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REZDRS84MEFDNTRDQUJGMUQxMUVFODc1QUUyN0ZDNEY5QUUwMi9FRVFDbl9neGRN YngxbXlLME5QNkZtVHY1VHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgLn7YCHkQXXrN6r8RuHtjekTyOhg8zTyduBPOKUdw4ff1P6ryND1l YvjFEwYILlT3Q4YvLklcSq5A8RdKPAWw/mgHgxbUpJWRi2gkcXWROlHy3FsCw5Yo 66ascXIposgCZreT+vNH/O31kn5vqen3kTBaEb9dVDrqJyH44Ig7AMkPxI6dwiCH kFCeEnM63ifGVTce3IZX2TAXFnc2FlG+0w6sn6OauKjOR/8ri8MW5YB2liOL3cMh xvtGiTfds+Pv7MMnTn/s0I9eyPs/8oTI42/iUxqxQ2MJ83xXCrLu+cY/nW3Mnvns g48nyE8mIEYtgpDh72F36dHyNLSheRQE -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:15 2025 by rpki-client