$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: eh/oPvG62YEdEDOnueNGCiIH6vDIGLriDwru082M7L4= Subject key identifier: 5B:9B:86:6D:19:AC:36:01:19:47:B9:60:FD:6F:9C:E1:D3:39:69:E0 Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 7A Signing time: Sat 23 Aug 2025 07:01:15 +0000 Manifest this update: Sat 23 Aug 2025 07:01:14 +0000 Manifest next update: Sat 30 Aug 2025 07:01:14 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: kuM2Nidy1+HqPzfJP3FwL5SaYgBIQsOdWd4ilENz8IQ=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: D8sGSIRpeb4KU8twC3M5LxWoSrBlM5fxXQEFrUY0ChI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Aug 23 07:01:14 2025 GMT Not After : Aug 30 07:01:14 2025 GMT Subject: CN=68a9673b-3900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:21:b9:5b:df:6a:1c:4a:25:26:44:19:6c:61: ce:01:6b:b6:8b:ac:1a:0e:52:63:46:7b:78:98:00: b9:d6:93:66:ed:7f:02:f2:ec:33:23:53:15:6c:f8: 3e:e6:59:a4:40:a1:b2:d0:74:ae:3b:ba:ec:d1:3f: 60:b4:64:c7:54:b4:ac:ea:9b:c7:0b:29:93:a1:37: ba:d8:ec:75:1a:dd:9e:17:58:b0:3e:4d:66:5e:54: fa:85:0e:3d:e3:9b:1a:81:c2:5f:1d:3e:bc:71:d3: 24:91:55:d6:c3:7f:ac:12:22:8b:02:87:1a:0e:02: a1:45:aa:67:13:7d:3b:35:24:7f:1f:4c:a6:b7:c6: 30:e0:b2:98:72:86:7a:1c:28:bc:14:9f:60:46:5d: 16:29:ca:99:6b:20:4c:a7:87:f2:fb:62:76:80:3e: 52:d8:ac:b2:ed:0f:44:16:e5:bc:4e:01:7e:5a:36: 23:ce:b6:54:f5:de:94:11:17:4c:13:47:a9:47:1d: d8:92:7a:86:5d:d5:c4:02:24:68:ad:39:1b:1e:03: b5:03:14:ba:ad:61:77:38:40:ab:4e:9b:ac:2e:d0: e8:ef:1c:aa:50:d1:df:74:0e:81:e1:80:04:bf:ff: e8:df:4b:34:5e:ea:f3:12:66:37:69:14:13:00:a3: 3d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9B:86:6D:19:AC:36:01:19:47:B9:60:FD:6F:9C:E1:D3:39:69:E0 X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:30:80:91:ac:e3:57:10:27:5d:4b:90:f8:18:c2:3c:68:0c: 9a:6c:84:83:77:c7:2c:11:64:06:d3:52:24:99:14:fa:6a:04: fb:fe:69:8d:81:e9:da:b8:0a:c6:59:ea:22:84:c0:68:01:bb: 3e:51:9e:73:54:b5:89:fe:a5:2c:cb:2d:57:77:6f:4a:d2:a8: 66:d6:41:a6:d6:05:d7:47:3b:af:31:de:8a:b3:79:cc:a2:91: df:e5:d0:8e:a4:71:be:0b:92:03:3b:ae:08:ac:90:ca:7d:7e: e9:df:fb:d0:e2:28:10:6d:3d:23:ed:81:38:43:f6:98:97:ff: eb:f3:a0:57:1b:5e:3c:39:4b:d0:20:de:e1:44:13:53:a9:5a: 90:cd:14:ed:b1:a3:22:35:00:01:c8:dd:1c:c7:81:5b:57:2d: 01:ee:c9:9f:d8:c5:4e:35:a7:69:fb:ff:92:5e:ef:41:5b:f9: 42:9d:af:bd:68:3e:b2:24:99:35:01:75:c5:90:2a:9e:05:9a: e6:64:da:b9:e3:a0:e3:6b:df:bd:79:87:23:26:f3:68:49:c9: 69:78:77:ce:f3:4b:e9:e3:de:95:95:ec:66:2e:87:d5:a1:10: 9e:2e:3f:db:94:82:38:46:99:94:c2:de:b8:f0:7e:d5:45:a6: 05:35:7f:4c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzIzODExMC8GA1UEBRMoMTJBMTAyRjA4RUQxNEY2MjNGQTZFMzFEQkFCNDlBMjRE MUI5QTE1MTAeFw0yNTA4MjMwNzAxMTRaFw0yNTA4MzAwNzAxMTRaMBgxFjAUBgNV BAMTDTY4YTk2NzNiLTM5MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMIblb32ocSiUmRBlsYc4Ba7aLrBoOUmNGe3iYALnWk2btfwLy7DMjUxVs+D7m WaRAobLQdK47uuzRP2C0ZMdUtKzqm8cLKZOhN7rY7HUa3Z4XWLA+TWZeVPqFDj3j mxqBwl8dPrxx0ySRVdbDf6wSIosChxoOAqFFqmcTfTs1JH8fTKa3xjDgsphyhnoc KLwUn2BGXRYpyplrIEynh/L7YnaAPlLYrLLtD0QW5bxOAX5aNiPOtlT13pQRF0wT R6lHHdiSeoZd1cQCJGitORseA7UDFLqtYXc4QKtOm6wu0OjvHKpQ0d90DoHhgAS/ /+jfSzRe6vMSZjdpFBMAoz2zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUW5uGbRms NgEZR7lg/W+c4dM5aeAwHwYDVR0jBBgwFoAUEqEC8I7RT2I/puMdurSaJNG5oVEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDMjM4L0NENzE3RDlDQ0JG MzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9W RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXFFQzhJN1JUMklfcHVNZHVyU2FKTkc1b1ZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD MjM4L0NENzE3RDlDQ0JGMzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJ X3B1TWR1clNhSk5HNW9WRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABMwgJGs41cQJ11LkPgYwjxoDJpshIN3xywRZAbTUiSZFPpqBPv+aY2B 6dq4CsZZ6iKEwGgBuz5RnnNUtYn+pSzLLVd3b0rSqGbWQabWBddHO68x3oqzecyi kd/l0I6kcb4LkgM7rgiskMp9funf+9DiKBBtPSPtgThD9piX/+vzoFcbXjw5S9Ag 3uFEE1OpWpDNFO2xoyI1AAHI3RzHgVtXLQHuyZ/YxU41p2n7/5Je70Fb+UKdr71o PrIkmTUBdcWQKp4FmuZk2rnjoONr3715hyMm82hJyWl4d87zS+nj3pWV7GYuh9Wh EJ4uP9uUgjhGmZTC3rjwftVFpgU1f0w= -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:56 2025 by rpki-client