$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: CEqF7xXRjaJPtJGU7YFgekTigStLKkaM06+0HAurbr8= Subject key identifier: 33:E0:95:05:31:D2:3C:58:A5:90:F5:F1:4B:C7:A0:7C:E6:D7:BF:F6 Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 0183 Signing time: Sat 23 Aug 2025 03:42:52 +0000 Manifest this update: Sat 23 Aug 2025 03:42:51 +0000 Manifest next update: Sat 30 Aug 2025 03:42:51 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: eKYxh9iF+lhPRIgque+Tq6/Vj4HzNBLxktuhsgpcEMk=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: UzoADIDRcmbkR0v1b40VKhU4NXIbJvMsYpFVM0H3D88=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: Aug 23 03:42:51 2025 GMT Not After : Aug 30 03:42:51 2025 GMT Subject: CN=68a938bc-6acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:24:3d:70:19:36:f2:db:ff:5e:42:90:91: 7e:da:27:e4:f7:a9:d9:ae:96:25:0c:44:3e:a2:91: 00:84:43:72:45:82:13:ff:29:f9:be:3f:6e:f9:64: 4c:28:7b:90:17:22:3e:fe:27:7b:35:2e:6f:b2:ef: aa:aa:eb:33:51:70:0c:98:80:66:3d:02:e0:9f:9f: 23:ef:95:50:bd:53:21:a3:ab:6b:79:bd:0d:60:d4: 88:a2:9f:3c:cc:d6:17:81:12:5c:4e:55:15:36:3b: 2c:d0:2a:21:bc:4e:de:50:f2:a1:a0:07:50:ae:d5: 8d:e7:5a:00:56:8d:19:37:03:9f:5e:af:55:b0:b6: b8:4c:a0:0e:d2:81:64:d7:62:17:44:5f:f6:95:b8: 41:ce:f6:02:e5:e6:11:11:89:69:ba:e1:ad:51:cd: 9b:bb:78:9a:0d:81:c0:aa:e2:d9:ad:86:38:09:04: a1:66:74:ec:4e:52:5d:31:34:0b:2b:b2:0f:7d:9f: 69:77:87:c2:93:86:c8:68:1c:b4:55:e8:16:5c:f2: 47:fb:a2:5a:6e:b4:dc:e7:cb:b6:11:9b:2a:49:7e: 65:f1:71:7e:00:d6:f2:e5:45:34:9c:8c:b9:35:55: c1:18:b1:6b:ad:30:ef:f5:9d:86:1c:2b:e3:6d:63: 84:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E0:95:05:31:D2:3C:58:A5:90:F5:F1:4B:C7:A0:7C:E6:D7:BF:F6 X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a7:45:6d:2e:a7:ed:a7:d9:7c:9a:2b:bf:24:8d:af:48:82: 7c:42:68:94:a7:75:c9:c8:ab:89:ba:45:8a:48:83:b8:ab:b9: f5:6b:b5:b9:47:e3:88:00:f9:a4:a8:9c:65:9b:17:83:23:98: ca:74:ff:89:30:b2:ad:37:e5:a5:03:b4:3e:b1:b3:a9:6f:5b: 10:f4:0e:f8:d8:7b:04:3f:5f:b2:2d:e0:d8:ab:1b:d1:02:ab: f9:1f:5c:85:27:e2:2e:30:de:18:b6:3e:c0:b8:5b:04:29:bd: 1f:87:a8:52:6c:4c:a5:cd:ce:57:a2:a5:2d:55:76:d2:4f:a8: 95:c7:ad:35:7f:5b:f8:9a:7a:03:2e:e4:1d:ef:a3:68:9c:85: 34:c0:0c:e4:92:ca:4f:11:4d:1b:d3:33:07:9d:70:de:1f:82: 17:a4:a9:e4:84:b0:50:19:21:ca:06:58:62:13:ce:fd:05:50: 46:2e:31:86:e0:a3:63:af:d4:a0:23:32:66:b2:a4:72:21:7c: df:d2:53:81:7f:5e:4b:44:1e:97:2e:32:98:ae:15:2f:72:f7: e0:fa:e2:2b:19:d1:3d:c0:3a:a8:b7:79:b6:72:66:64:df:b3: 3e:10:b0:6e:d2:81:4a:d0:6b:ca:28:79:d0:43:fe:30:86:90: fa:c6:e6:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjUwODIzMDM0MjUxWhcNMjUwODMwMDM0MjUxWjAYMRYwFAYD VQQDEw02OGE5MzhiYy02YWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt8kPXAZNvLb/15CkJF+2ifk96nZrpYlDEQ+opEAhENyRYIT/yn5vj9u+WRM KHuQFyI+/id7NS5vsu+qquszUXAMmIBmPQLgn58j75VQvVMho6treb0NYNSIop88 zNYXgRJcTlUVNjss0CohvE7eUPKhoAdQrtWN51oAVo0ZNwOfXq9VsLa4TKAO0oFk 12IXRF/2lbhBzvYC5eYREYlpuuGtUc2bu3iaDYHAquLZrYY4CQShZnTsTlJdMTQL K7IPfZ9pd4fCk4bIaBy0VegWXPJH+6JabrTc58u2EZsqSX5l8XF+ANby5UU0nIy5 NVXBGLFrrTDv9Z2GHCvjbWOE8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPglQUx 0jxYpZD18UvHoHzm17/2MB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6p0VtLqftp9l8miu/JI2vSIJ8QmiUp3XJyKuJukWKSIO4q7n1a7W5 R+OIAPmkqJxlmxeDI5jKdP+JMLKtN+WlA7Q+sbOpb1sQ9A742HsEP1+yLeDYqxvR Aqv5H1yFJ+IuMN4Ytj7AuFsEKb0fh6hSbEylzc5XoqUtVXbST6iVx601f1v4mnoD LuQd76NonIU0wAzkkspPEU0b0zMHnXDeH4IXpKnkhLBQGSHKBlhiE879BVBGLjGG 4KNjr9SgIzJmsqRyIXzf0lOBf15LRB6XLjKYrhUvcvfg+uIrGdE9wDqot3m2cmZk 37M+ELBu0oFK0GvKKHnQQ/4whpD6xuZo -----END CERTIFICATE-----Generated at Sat Aug 23 17:16:14 2025 by rpki-client