$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: zHwjAmQMgce2zUpsJThJTqDSdbA5/vhqZejY/L+it7U= Subject key identifier: 37:91:24:75:EB:88:18:49:DD:96:F5:AC:C6:FA:68:B2:75:4F:84:01 Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 0730 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 0730 Signing time: Fri 22 Aug 2025 20:42:57 +0000 Manifest this update: Fri 22 Aug 2025 20:42:57 +0000 Manifest next update: Fri 29 Aug 2025 20:42:57 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: LwNCG1nHiJ7l4ocXhBPkCwf+VceDsnlRZJXe9TEn3o8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:42:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1840 (0x730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: Aug 22 20:42:57 2025 GMT Not After : Aug 29 20:42:57 2025 GMT Subject: CN=68a8d651-483a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d3:43:ae:27:32:11:73:60:63:08:3e:1b:59: 83:5b:07:0c:db:4c:fe:36:c2:14:12:bd:f7:ba:11: ab:45:ee:78:48:bc:67:f6:35:79:a7:6e:6d:e9:cf: f8:20:4c:79:bd:90:62:f1:1d:bf:50:d3:c6:49:ea: eb:14:1a:7d:70:e8:f5:f6:b4:2b:d5:f0:75:d2:bb: b2:b1:e6:0f:26:69:2e:9c:49:6d:0d:6c:24:d1:18: 27:11:d1:66:ce:e3:18:a5:21:ce:7a:dc:d8:11:9d: ac:22:71:d5:65:89:d8:21:89:6d:8b:fb:96:7d:c5: 8a:db:db:81:8c:4f:aa:a2:8e:cc:9b:9e:08:48:c7: e0:b5:8b:37:a1:98:49:df:25:09:b9:85:ac:a8:01: f0:d3:6b:18:4f:8e:74:72:12:7c:c2:4a:c6:17:21: 0d:dd:e0:5d:9b:d5:19:2f:ed:e0:07:d4:a4:d9:68: b3:91:ab:37:4e:45:b6:99:ee:79:cb:8a:20:ce:51: ce:a3:66:a8:ea:20:86:0d:7c:af:70:02:39:e3:08: 96:7a:bf:68:e6:7f:fd:d5:d3:09:b3:5c:57:83:b4: 20:dd:88:27:e7:9c:0e:f6:f1:18:bc:a9:f8:4e:b0: 45:42:6e:14:9b:24:92:a2:2a:ae:d1:c7:c8:83:2e: ba:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:91:24:75:EB:88:18:49:DD:96:F5:AC:C6:FA:68:B2:75:4F:84:01 X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ac:0f:b0:14:71:04:0c:9d:5b:0c:06:b4:42:cb:51:a0:0f: 58:51:fd:f5:36:fd:75:28:07:0c:09:eb:31:03:c7:a0:cb:3f: e8:40:f3:2b:9f:f0:07:ec:b0:72:94:ce:88:1d:19:8e:f7:a4: da:1a:39:1f:1d:32:80:44:15:01:ec:09:1a:85:f6:46:99:d0: 39:51:59:9e:5c:c8:8d:78:6c:81:c1:28:28:d3:89:8e:26:f6: 91:e2:78:88:ce:3d:f0:40:7f:06:d7:19:86:0c:e8:91:52:84: 48:e3:98:8c:04:78:5b:71:6a:11:98:83:9f:58:c5:11:7f:fa: be:e0:33:34:da:cc:a7:3d:7a:2d:81:91:34:98:41:67:ec:61: 7b:91:f1:3e:d1:51:e1:88:53:10:3f:0d:2b:33:b7:da:7c:4f: 57:cb:d0:42:af:31:1a:ae:83:d4:0f:a6:74:f9:dc:b7:e2:e0: b2:89:6a:d8:a5:19:0d:3d:05:29:c3:65:31:c7:71:74:ad:82: b8:37:f5:86:1d:4e:77:6d:e7:6b:46:f0:6d:c0:4d:88:71:9a: c6:f9:ab:dc:bf:55:5a:f3:7a:85:0a:8e:39:24:3e:43:70:09: ce:b9:8d:96:dd:44:8a:86:32:b5:da:ce:e1:3a:fd:8e:03:9d: 23:3d:26:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjUwODIyMjA0MjU3WhcNMjUwODI5MjA0MjU3WjAYMRYwFAYD VQQDEw02OGE4ZDY1MS00ODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tNDricyEXNgYwg+G1mDWwcM20z+NsIUEr33uhGrRe54SLxn9jV5p25t6c/4 IEx5vZBi8R2/UNPGSerrFBp9cOj19rQr1fB10ruyseYPJmkunEltDWwk0RgnEdFm zuMYpSHOetzYEZ2sInHVZYnYIYlti/uWfcWK29uBjE+qoo7Mm54ISMfgtYs3oZhJ 3yUJuYWsqAHw02sYT450chJ8wkrGFyEN3eBdm9UZL+3gB9Sk2Wizkas3TkW2me55 y4ogzlHOo2ao6iCGDXyvcAI54wiWer9o5n/91dMJs1xXg7Qg3Ygn55wO9vEYvKn4 TrBFQm4UmySSoiqu0cfIgy66jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeRJHXr iBhJ3Zb1rMb6aLJ1T4QBMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlrA+wFHEEDJ1bDAa0QstRoA9YUf31Nv11KAcMCesxA8egyz/oQPMr n/AH7LBylM6IHRmO96TaGjkfHTKARBUB7AkahfZGmdA5UVmeXMiNeGyBwSgo04mO JvaR4niIzj3wQH8G1xmGDOiRUoRI45iMBHhbcWoRmIOfWMURf/q+4DM02synPXot gZE0mEFn7GF7kfE+0VHhiFMQPw0rM7fafE9Xy9BCrzEaroPUD6Z0+dy34uCyiWrY pRkNPQUpw2Uxx3F0rYK4N/WGHU53bedrRvBtwE2IcZrG+avcv1Va83qFCo45JD5D cAnOuY2W3USKhjK12s7hOv2OA50jPSYM -----END CERTIFICATE-----Generated at Sat Aug 23 20:37:21 2025 by rpki-client