$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json) Hash identifier: O+UjiLpqnpYh1SdJVrF7SKNb+0iruDFi9l1r7CZ2dBU= Subject key identifier: 7B:63:21:83:30:A5:6F:2B:17:DA:E0:B0:D7:88:DD:E8:34:46:E8:61 Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft Manifest number: D1 Signing time: Sat 23 Aug 2025 05:49:25 +0000 Manifest this update: Sat 23 Aug 2025 05:49:24 +0000 Manifest next update: Sat 30 Aug 2025 05:49:24 +0000 Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: P3G6M1iBZin+BKr6ywc4BnbUU9PsnGWp8n9sALqcDfk=) 2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: GLbMFy1JbyAVM7u4jQAEv8xQTj/rbFbdkkf2ZQWfsOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:49:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Validity Not Before: Aug 23 05:49:24 2025 GMT Not After : Aug 30 05:49:24 2025 GMT Subject: CN=68a95664-51e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:69:28:77:3a:54:40:e0:24:6e:cf:80:8f:1c: 1c:0d:d2:ed:d6:2d:53:3c:ab:d8:e8:44:17:fd:fb: c9:c2:56:28:7b:01:3d:94:02:47:5e:44:0e:32:91: 41:1c:d6:e3:82:e0:88:ed:07:70:e0:49:c8:26:60: 0f:06:b8:e8:4a:f4:22:e0:96:fd:ef:4a:de:a4:eb: fe:07:d6:77:99:33:d2:0e:49:f1:7a:bf:d8:db:4f: 3f:c1:ea:8a:2d:bb:cb:d8:2f:ac:9e:8c:b7:c8:1f: bf:ae:c9:0b:1a:b7:19:17:a0:77:d2:16:03:39:8a: 21:86:d8:85:e9:4f:7c:9a:cd:f4:e5:b1:33:18:20: 8b:dc:64:98:3e:52:f3:52:39:81:df:13:9c:cf:fd: 2f:5c:95:96:e4:c8:6e:de:65:26:3b:90:c6:ff:26: 19:1d:ae:c1:9f:9a:46:80:17:bb:0c:5e:56:75:31: 87:84:94:69:c9:15:cd:3e:f3:fb:af:3a:26:8f:34: 40:1f:e7:e2:0d:2c:bf:c1:77:75:21:98:6e:65:9e: ec:1f:fe:b2:22:cf:a4:e2:dc:a4:0d:aa:b8:d1:68: bf:c5:cc:e2:c5:01:25:ac:37:c5:42:16:c6:74:d6: 24:9f:55:9b:3a:f8:2b:70:41:18:61:2d:0c:3e:f8: a5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:63:21:83:30:A5:6F:2B:17:DA:E0:B0:D7:88:DD:E8:34:46:E8:61 X509v3 Authority Key Identifier: keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:fa:bf:4b:58:10:10:a7:8e:a3:11:d9:af:de:20:9f:79:cc: 73:f8:07:dc:52:de:46:a9:10:f1:fb:12:47:de:13:d8:8d:c4: 3f:43:dc:ba:22:93:e1:1e:1f:48:02:34:2c:34:3b:46:20:94: c4:0f:1b:54:0c:74:fb:5f:09:3e:52:08:2e:f7:13:21:d2:d6: a3:44:9b:75:1c:32:73:69:74:cb:55:a2:59:b4:54:fd:d6:9b: 3b:1e:cb:6e:44:f9:8c:cb:bf:e5:e9:74:e7:81:ac:7c:95:eb: 46:5a:72:1f:00:73:d2:7a:19:22:4e:97:6a:2a:d5:f9:2b:aa: a7:23:36:cb:2b:21:54:f9:35:37:d5:bb:15:16:71:9d:bd:ba: 9d:bf:48:18:70:e4:15:b8:7e:cc:83:da:5d:fa:d1:3b:a0:4e: 13:a1:3e:3d:65:63:68:19:88:ee:83:cc:2b:d0:0c:c8:61:15: c4:8a:56:e0:92:70:b7:9b:63:0f:db:47:33:6e:d0:a1:8a:fb: b8:8e:4b:42:29:8c:cd:15:17:c0:a2:05:65:73:a0:03:8a:10: 8f:83:f5:0a:56:fa:af:e7:3b:3b:0a:4b:e2:ee:e3:25:a5:04: 3b:17:d0:42:ac:40:f5:64:5e:fc:2c:44:4d:5a:b9:99:59:97: dd:a2:1b:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5 M0RFQTIzNzUwHhcNMjUwODIzMDU0OTI0WhcNMjUwODMwMDU0OTI0WjAYMRYwFAYD VQQDEw02OGE5NTY2NC01MWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmkodzpUQOAkbs+AjxwcDdLt1i1TPKvY6EQX/fvJwlYoewE9lAJHXkQOMpFB HNbjguCI7Qdw4EnIJmAPBrjoSvQi4Jb970repOv+B9Z3mTPSDknxer/Y208/weqK LbvL2C+snoy3yB+/rskLGrcZF6B30hYDOYohhtiF6U98ms305bEzGCCL3GSYPlLz UjmB3xOcz/0vXJWW5Mhu3mUmO5DG/yYZHa7Bn5pGgBe7DF5WdTGHhJRpyRXNPvP7 rzomjzRAH+fiDSy/wXd1IZhuZZ7sH/6yIs+k4tykDaq40Wi/xczixQElrDfFQhbG dNYkn1WbOvgrcEEYYS0MPvil8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtjIYMw pW8rF9rgsNeI3eg0RuhhMB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG amZ4S01vVkE4Yk9UM3FJM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCC+r9LWBAQp46jEdmv3iCfecxz+AfcUt5GqRDx+xJH3hPYjcQ/Q9y6 IpPhHh9IAjQsNDtGIJTEDxtUDHT7Xwk+Uggu9xMh0tajRJt1HDJzaXTLVaJZtFT9 1ps7HstuRPmMy7/l6XTngax8letGWnIfAHPSehkiTpdqKtX5K6qnIzbLKyFU+TU3 1bsVFnGdvbqdv0gYcOQVuH7Mg9pd+tE7oE4ToT49ZWNoGYjug8wr0AzIYRXEilbg knC3m2MP20czbtChivu4jktCKYzNFRfAogVlc6ADihCPg/UKVvqv5zs7Ckvi7uMl pQQ7F9BCrED1ZF78LERNWrmZWZfdohv7 -----END CERTIFICATE-----Generated at Sat Aug 23 17:51:07 2025 by rpki-client