$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft File: eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json) Hash identifier: eDejO0OFDVkyVQ7i/EglfG888PlunJA1e/mn54vTMIY= Subject key identifier: 2C:01:CA:A7:F9:B8:21:A4:DE:2E:EF:6F:23:1B:D5:33:43:C9:55:25 Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft Manifest number: 53 Signing time: Sat 23 Aug 2025 07:30:00 +0000 Manifest this update: Sat 23 Aug 2025 07:30:00 +0000 Manifest next update: Sat 30 Aug 2025 07:30:00 +0000 Files and hashes: 1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: i3HAnY5IBg1yeFyrRooMSrZaPDwxUMpqOKgkE0RB8nk=) 2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: vF2hPrjWnGE1wVLs/Ml1OeBVYR8W6IECJw4qVwfrJO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Validity Not Before: Aug 23 07:30:00 2025 GMT Not After : Aug 30 07:30:00 2025 GMT Subject: CN=68a96df8-c29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:43:64:ca:0a:8f:10:df:d3:0f:69:25:9b: 4d:59:d7:43:a7:65:25:20:f9:f0:47:af:e1:34:bb: 92:76:bc:1f:96:1c:8c:a7:a8:f5:c9:13:54:b5:db: 15:04:87:f0:17:17:18:10:ee:e7:c0:62:e0:a2:cf: f4:bf:07:b1:90:98:46:da:4d:c1:0a:7a:fa:59:7b: b6:45:40:1f:2f:04:26:28:57:53:59:54:23:a1:57: 04:32:ac:db:1c:59:38:d1:3d:9c:75:90:51:83:7a: 74:79:11:b3:e7:bd:6c:f4:5f:f6:8c:a3:90:2a:5f: c6:3c:12:27:c6:1a:4e:56:39:3a:56:4a:84:7b:4b: fa:90:3f:aa:92:bc:c6:33:a4:d0:bb:2d:6d:c5:40: 74:38:15:7d:ff:99:e5:94:a4:df:c6:fc:1a:02:1d: 8c:2c:e1:a0:74:9d:f5:fd:02:84:3b:f5:f1:f1:a5: 6c:3e:05:c7:6d:5b:b1:87:2f:f2:9a:37:eb:2c:14: 53:0a:0e:b5:e0:86:ef:ea:04:07:a8:e0:88:f7:b6: d4:83:cc:55:9e:f9:1c:44:9b:8f:2f:5b:20:d6:cd: 35:66:77:1a:e1:9c:9f:00:f2:14:21:69:a9:8f:a7: 95:ab:f9:60:2d:09:70:bf:5e:95:8a:ef:00:49:7c: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:01:CA:A7:F9:B8:21:A4:DE:2E:EF:6F:23:1B:D5:33:43:C9:55:25 X509v3 Authority Key Identifier: keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4f:98:be:34:50:5d:1a:1b:be:a9:64:87:82:3f:ee:5f:f3: 8c:c4:66:5a:56:91:27:e7:d6:3e:1e:1a:91:90:29:02:53:9a: 4f:9d:a0:f4:9d:e5:d4:15:65:6a:fa:c9:20:ec:7a:ac:1f:e7: f5:f8:eb:dd:2c:68:ee:a0:45:d7:19:69:1a:dc:35:58:82:33: c7:af:0b:21:69:de:a8:92:e1:b8:c7:58:e4:09:89:80:86:88: f4:fb:1d:0a:23:24:23:17:94:a0:ea:b2:eb:df:48:97:65:b9: 6d:6e:c0:c7:d5:68:0c:ed:23:16:14:db:f1:4f:10:e9:91:72: 04:73:c6:6f:97:97:1f:74:54:0a:97:9f:d5:99:03:18:6d:e1: 70:71:18:e2:3a:21:a8:3e:7c:18:c3:62:00:48:c2:8e:ec:f0: be:58:02:53:59:41:6c:44:b7:4f:51:87:c6:1c:ab:3b:9f:18: a3:fe:89:3d:23:36:8b:90:b1:77:87:89:94:75:58:71:16:0f: 8d:c6:ba:ee:35:bf:5d:99:36:43:98:0e:10:c0:55:d3:f7:ff: 60:aa:01:80:23:c3:e2:e4:b0:cf:33:89:5f:27:16:d7:31:5c: ed:f1:88:c6:72:f3:af:5a:d5:2e:65:f7:83:26:91:ae:75:29: 48:8c:e3:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzhGNTExMC8GA1UEBRMoNzk1NjhBMzhFQ0RCNjE3RTY3OEMwOEE2Q0M0M0M0RDY1 MDJDRUM2MjAeFw0yNTA4MjMwNzMwMDBaFw0yNTA4MzAwNzMwMDBaMBgxFjAUBgNV BAMTDTY4YTk2ZGY4LWMyOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZxENkygqPEN/TD2klm01Z10OnZSUg+fBHr+E0u5J2vB+WHIynqPXJE1S12xUE h/AXFxgQ7ufAYuCiz/S/B7GQmEbaTcEKevpZe7ZFQB8vBCYoV1NZVCOhVwQyrNsc WTjRPZx1kFGDenR5EbPnvWz0X/aMo5AqX8Y8EifGGk5WOTpWSoR7S/qQP6qSvMYz pNC7LW3FQHQ4FX3/meWUpN/G/BoCHYws4aB0nfX9AoQ79fHxpWw+BcdtW7GHL/Ka N+ssFFMKDrXghu/qBAeo4Ij3ttSDzFWe+RxEm48vWyDWzTVmdxrhnJ8A8hQhaamP p5Wr+WAtCXC/XpWK7wBJfFkJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULAHKp/m4 IaTeLu9vIxvVM0PJVSUwHwYDVR0jBBgwFoAUeVaKOOzbYX5njAimzEPE1lAs7GIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0U4MDI4MTlFMDI1 QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1bmpBaW16RVBFMWxBczdH SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVZhS09PemJZWDVuakFpbXpFUEUxbEFzN0dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OEY1L0U4MDI4MTlFMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1 bmpBaW16RVBFMWxBczdHSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI5PmL40UF0aG76pZIeCP+5f84zEZlpWkSfn1j4eGpGQKQJTmk+doPSd 5dQVZWr6ySDseqwf5/X4690saO6gRdcZaRrcNViCM8evCyFp3qiS4bjHWOQJiYCG iPT7HQojJCMXlKDqsuvfSJdluW1uwMfVaAztIxYU2/FPEOmRcgRzxm+Xlx90VAqX n9WZAxht4XBxGOI6Iag+fBjDYgBIwo7s8L5YAlNZQWxEt09Rh8YcqzufGKP+iT0j NouQsXeHiZR1WHEWD43Guu41v12ZNkOYDhDAVdP3/2CqAYAjw+LksM8ziV8nFtcx XO3xiMZy869a1S5l94Mmka51KUiM420= -----END CERTIFICATE-----Generated at Sat Aug 23 10:42:34 2025 by rpki-client