$ rpki-client -vvf rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft File: Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft (raw, json) Hash identifier: O/xzYA3YHy0l96QPwkYD29CbIGWcoTwv2r3rrljvtWk= Subject key identifier: 86:E8:71:2F:92:80:31:C7:AC:8D:92:DC:B4:EE:94:84:FC:23:8F:CE Authority key identifier: 12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76 Certificate issuer: /CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft Manifest number: 0186 Signing time: Sat 23 Aug 2025 03:40:52 +0000 Manifest this update: Sat 23 Aug 2025 03:40:52 +0000 Manifest next update: Sat 30 Aug 2025 03:40:52 +0000 Files and hashes: 1: Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl (hash: s1RVmoZUP/wLzi8TNk1Oz+J0G3XZvkBCql7lx7MMwhE=) 2: A60B75F62B7B11EEA4D0FA24C4F9AE02.roa (hash: QlGjMXDN4esCEiynluo/msiy33cpphW/TtlNsWHyAK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B778A, serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876 Validity Not Before: Aug 23 03:40:52 2025 GMT Not After : Aug 30 03:40:52 2025 GMT Subject: CN=68a93844-68f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:93:2b:69:6a:7d:ef:26:3f:a7:bd:e2:11:b7: a8:98:ed:35:58:81:01:79:56:3f:3d:fd:36:82:8f: b1:15:92:9d:c1:d8:11:db:77:0b:9f:39:18:3e:f4: bb:89:13:66:f4:b2:d1:01:d0:e7:3a:77:c3:7a:bc: 13:e6:c4:ae:6c:7a:48:86:75:1a:06:78:ce:f5:ef: ce:af:58:05:3d:25:0b:a5:07:8c:75:0e:a2:78:7d: 12:79:0b:9e:e1:d6:62:25:5e:81:d4:6f:b5:79:76: 48:9e:b7:1f:1d:f6:45:5f:7a:e3:bb:61:b5:f6:99: 41:35:1b:60:9e:bf:bf:de:b3:75:2e:67:34:de:93: 50:af:0b:af:c7:c8:aa:3c:c7:c9:47:e1:0a:9e:68: 9b:b1:ae:24:66:39:79:7b:96:14:96:c3:33:f9:12: ea:60:6e:9a:e5:0d:ce:1e:b7:80:ea:4c:b6:13:3c: ec:f9:c5:1b:1f:48:4f:50:bb:f8:9b:2c:e6:5d:2d: 7f:50:67:55:ef:31:33:66:24:34:3e:93:ac:7d:e4: e4:ce:68:ca:db:d4:95:99:1b:cb:d4:09:a8:cb:53: fb:0c:4e:45:13:ba:b2:7e:0d:11:e1:fd:c3:95:e5: 44:5d:33:39:f6:0a:2c:f8:02:6b:1f:ff:a6:8a:6b: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E8:71:2F:92:80:31:C7:AC:8D:92:DC:B4:EE:94:84:FC:23:8F:CE X509v3 Authority Key Identifier: keyid:12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f4:a0:d4:c6:a9:9b:d5:ea:e9:38:83:79:08:71:e4:33:8d: c1:c0:c1:a5:b2:5c:5d:a8:45:ed:bf:c4:25:b7:48:fa:4b:28: 45:4e:c5:ee:e3:7e:35:a2:72:01:1a:0d:70:d1:50:6e:1f:1c: 75:1a:84:c9:22:5a:d5:a4:16:12:90:70:59:65:7a:a9:46:cc: 79:68:60:40:85:87:9c:8b:0e:dc:c9:45:5b:db:24:f0:53:f8: 82:2f:af:1f:e4:33:44:1c:f4:39:08:17:21:f6:3d:75:92:6a: 88:f0:77:b4:f7:9f:76:8c:b1:7d:eb:7a:36:22:c8:8b:39:40: cb:b9:4f:71:57:4d:2a:4f:1d:f3:7f:54:cb:78:a8:d6:a2:3d: 02:d8:5d:1c:6f:23:2d:76:4b:77:eb:ef:92:4b:a7:01:1b:13: 50:45:94:28:19:09:b5:ed:ed:48:21:1e:eb:6a:c1:26:b8:d8: 51:8f:81:fd:f2:c2:ab:bd:e9:5b:e9:66:d3:a4:34:49:29:0c: e9:b2:5e:82:26:91:5c:89:20:1a:11:63:08:87:52:35:22:66: ec:eb:d4:ed:ff:dc:40:33:56:5f:32:0c:ee:c6:6c:26:9e:76: e6:03:d4:01:49:5b:85:8b:0e:b9:43:d0:b7:86:dc:49:4c:17: 38:84:9c:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3OEExMTAvBgNVBAUTKDEyQUJCRTlENEU1OTk4NTg1OTgxMzQ5QTVGQTlCNzVG REFCQzU4NzYwHhcNMjUwODIzMDM0MDUyWhcNMjUwODMwMDM0MDUyWjAYMRYwFAYD VQQDEw02OGE5Mzg0NC02OGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ZMraWp97yY/p73iEbeomO01WIEBeVY/Pf02go+xFZKdwdgR23cLnzkYPvS7 iRNm9LLRAdDnOnfDerwT5sSubHpIhnUaBnjO9e/Or1gFPSULpQeMdQ6ieH0SeQue 4dZiJV6B1G+1eXZInrcfHfZFX3rju2G19plBNRtgnr+/3rN1Lmc03pNQrwuvx8iq PMfJR+EKnmibsa4kZjl5e5YUlsMz+RLqYG6a5Q3OHreA6ky2Ezzs+cUbH0hPULv4 myzmXS1/UGdV7zEzZiQ0PpOsfeTkzmjK29SVmRvL1Amoy1P7DE5FE7qyfg0R4f3D leVEXTM59gos+AJrH/+mims4ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbocS+S gDHHrI2S3LTulIT8I4/OMB8GA1UdIwQYMBaAFBKrvp1OWZhYWYE0ml+pt1/avFh2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc4QS85MDJBQUU5ODJC NkYxMUVFQTRCQThGN0NDNEY5QUUwMi9FcXUtblU1Wm1GaFpnVFNhWDZtM1g5cThX SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxdS1uVTVabUZoWmdUU2FYNm0zWDlxOFdIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc4QS85MDJBQUU5ODJCNkYxMUVFQTRCQThGN0NDNEY5QUUwMi9FcXUtblU1Wm1G aFpnVFNhWDZtM1g5cThXSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE9KDUxqmb1erpOIN5CHHkM43BwMGlslxdqEXtv8Qlt0j6SyhFTsXu 4341onIBGg1w0VBuHxx1GoTJIlrVpBYSkHBZZXqpRsx5aGBAhYeciw7cyUVb2yTw U/iCL68f5DNEHPQ5CBch9j11kmqI8He09592jLF963o2IsiLOUDLuU9xV00qTx3z f1TLeKjWoj0C2F0cbyMtdkt36++SS6cBGxNQRZQoGQm17e1IIR7rasEmuNhRj4H9 8sKrvelb6WbTpDRJKQzpsl6CJpFciSAaEWMIh1I1Imbs69Tt/9xAM1ZfMgzuxmwm nnbmA9QBSVuFiw65Q9C3htxJTBc4hJxm -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:07 2025 by rpki-client