$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft File: EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json) Hash identifier: kk/P/bfx3pD2ee1rO9SpJ7zKRm0wvfKiaf1bTuQZTCA= Subject key identifier: C9:76:78:CF:F0:F7:78:A8:F3:73:3B:A0:E4:B9:F3:A1:59:00:6B:79 Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A Certificate issuer: /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft Manifest number: 0128 Signing time: Sat 23 Aug 2025 04:50:01 +0000 Manifest this update: Sat 23 Aug 2025 04:50:00 +0000 Manifest next update: Sat 30 Aug 2025 04:50:00 +0000 Files and hashes: 1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: e+JhMbFSbcKlv9EkBBtJKKIi4yP/MrDhHQHAG4jCxcs=) 2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: YLouRJayszJ+YXIZjA0nYlRHirFmGMZNUS3tAUGchSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Validity Not Before: Aug 23 04:50:00 2025 GMT Not After : Aug 30 04:50:00 2025 GMT Subject: CN=68a94879-59ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:d4:e3:05:e3:4b:7c:df:30:b2:68:55:c1: be:e0:f9:9a:45:36:3a:10:58:1b:b1:fd:e2:0b:fd: 59:43:12:9a:15:d9:96:4a:98:db:18:09:b0:77:09: 76:d3:60:f7:f6:da:49:5e:1b:78:be:96:77:27:93: 24:a8:70:3c:44:b2:1c:2e:3a:5f:98:55:e8:7b:0a: 09:9c:3c:8d:f3:48:08:99:e2:08:ac:fe:56:aa:b6: 26:58:87:1b:ed:b4:51:2f:d3:23:8f:c4:0b:a2:02: 1c:7b:ce:ca:2f:92:9c:d1:73:87:3d:cb:56:57:83: 9f:8d:38:2e:9d:02:af:e3:10:8e:2e:e5:d7:39:6f: 95:ee:61:12:50:7d:04:c7:cf:4d:9f:09:66:5c:96: 7b:0b:0b:0e:70:3e:56:e9:c0:fd:d5:28:7a:18:da: 9d:94:9c:1f:c2:de:23:cb:4b:b9:29:a0:13:93:f0: 8a:c3:28:74:96:d9:5d:8c:76:1c:a7:54:3e:0b:93: 2c:e2:ce:4c:f9:52:b9:bd:6e:01:17:12:b5:c9:3c: f8:67:fe:41:57:5b:ff:c6:9b:43:6b:1d:75:a4:a7: 24:bf:d2:89:42:9e:bf:87:50:59:c9:44:17:c4:d7: e9:45:aa:9b:36:07:d1:c5:ca:1a:4e:48:ba:12:24: cd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:76:78:CF:F0:F7:78:A8:F3:73:3B:A0:E4:B9:F3:A1:59:00:6B:79 X509v3 Authority Key Identifier: keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:6d:7d:f9:4f:56:2a:a9:52:51:ef:52:72:9a:e2:92:7a:9c: 2f:44:a5:42:7b:50:6a:95:ea:c5:0f:d1:e3:3f:f4:be:cc:20: 04:f2:79:04:0d:83:6a:ff:7b:d8:a7:51:29:5d:92:b1:24:34: f7:4b:bc:fa:f2:e8:43:4d:55:ef:b6:6b:0a:cf:fd:68:e8:c3: d2:ff:c1:e4:dd:1f:31:03:35:7a:ad:7e:8e:53:6a:10:b6:6b: 75:23:bc:60:d0:6b:cd:74:d6:46:c8:ee:3b:9c:5d:c1:31:6c: 35:ef:5a:b2:1a:52:79:53:03:bd:78:7c:fa:57:18:81:4e:79: d8:9f:00:b6:e7:67:7e:eb:20:a6:4a:af:26:62:c5:45:7e:f2: 21:a8:06:8e:89:33:48:d3:1c:00:05:39:eb:fb:8d:a1:e2:60: 86:88:59:58:89:cd:8e:fc:bc:4f:1b:aa:ca:e1:ac:0f:2f:53: 80:cf:88:f9:57:c2:46:25:a4:cd:b2:bc:6c:a5:7d:6e:4e:82: 9c:7e:e5:ef:1a:ca:c6:98:0a:40:24:5b:21:61:5c:3f:9a:47: 8f:ea:6f:44:fd:4a:61:a0:c2:73:cd:c9:f6:ad:50:8d:7e:ec: 24:c9:0e:dd:92:52:b4:3d:1f:ff:06:bc:c4:7f:6f:28:f5:55: 92:86:51:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKDExNUE0MTYwQzg1NTU0N0Q5RTMxMEM2MEQzRDA4OENC QkM5QTk5MkEwHhcNMjUwODIzMDQ1MDAwWhcNMjUwODMwMDQ1MDAwWjAYMRYwFAYD VQQDEw02OGE5NDg3OS01OWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYDU4wXjS3zfMLJoVcG+4PmaRTY6EFgbsf3iC/1ZQxKaFdmWSpjbGAmwdwl2 02D39tpJXht4vpZ3J5MkqHA8RLIcLjpfmFXoewoJnDyN80gImeIIrP5WqrYmWIcb 7bRRL9Mjj8QLogIce87KL5Kc0XOHPctWV4OfjTgunQKv4xCOLuXXOW+V7mESUH0E x89NnwlmXJZ7CwsOcD5W6cD91Sh6GNqdlJwfwt4jy0u5KaATk/CKwyh0ltldjHYc p1Q+C5Ms4s5M+VK5vW4BFxK1yTz4Z/5BV1v/xptDax11pKckv9KJQp6/h1BZyUQX xNfpRaqbNgfRxcoaTki6EiTNPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMl2eM/w 93io83M7oOS586FZAGt5MB8GA1UdIwQYMBaAFBFaQWDIVVR9njEMYNPQiMu8mpkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC9GRUNBNzUwNkJF N0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZIMmVNUXhnMDlDSXk3eWFt U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VWcEJZTWhWVkgyZU1ReGcwOUNJeTd5YW1Tby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC9GRUNBNzUwNkJFN0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZI MmVNUXhnMDlDSXk3eWFtU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJbX35T1YqqVJR71JymuKSepwvRKVCe1BqlerFD9HjP/S+zCAE8nkE DYNq/3vYp1EpXZKxJDT3S7z68uhDTVXvtmsKz/1o6MPS/8Hk3R8xAzV6rX6OU2oQ tmt1I7xg0GvNdNZGyO47nF3BMWw171qyGlJ5UwO9eHz6VxiBTnnYnwC252d+6yCm Sq8mYsVFfvIhqAaOiTNI0xwABTnr+42h4mCGiFlYic2O/LxPG6rK4awPL1OAz4j5 V8JGJaTNsrxspX1uToKcfuXvGsrGmApAJFshYVw/mkeP6m9E/UphoMJzzcn2rVCN fuwkyQ7dklK0PR//BrzEf28o9VWShlFj -----END CERTIFICATE-----Generated at Sat Aug 23 14:19:33 2025 by rpki-client