$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: mCMhvOjJdKr2CSNkPQ3QJEa1p9rIo5mTdkmdPof7bWM= Subject key identifier: 4D:F9:A9:48:0B:68:DF:A1:B0:30:25:49:11:DE:07:AF:13:FF:2C:42 Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: 0149 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: 0146 Signing time: Tue 01 Jul 2025 04:46:57 +0000 Manifest this update: Tue 01 Jul 2025 04:46:56 +0000 Manifest next update: Tue 08 Jul 2025 04:46:56 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: BADbS9UDE1awJoDpVzbtQReNVfHslEWzBJOambGzGdQ=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: 8KY8F5aAbZQBF/Qe5iecqKDmzqJcSSXnzASxQlPbo4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 329 (0x149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: Jul 1 04:46:56 2025 GMT Not After : Jul 8 04:46:56 2025 GMT Subject: CN=68636841-4a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:ac:62:02:5f:1b:a1:e9:0d:eb:f2:b8:25: db:9b:8d:c8:83:94:b7:d2:c6:8b:87:ac:cd:95:f6: 46:be:73:84:16:53:10:f8:01:47:6a:54:b4:0a:4d: fc:e8:16:bd:16:9b:35:2c:e1:dc:00:77:12:ae:d7: e5:89:a3:60:9d:38:d8:ef:a6:e9:5b:e0:6c:3a:6a: 75:08:b1:14:26:3e:d2:02:f8:de:3d:b4:36:e1:d2: c8:68:cb:31:d5:73:ef:30:cf:01:94:bc:e5:87:fd: 10:23:01:4f:4e:f0:2b:ea:25:22:25:f6:d3:8b:8d: b5:7c:ec:f6:31:43:ea:f7:10:5a:9a:40:47:32:55: 90:f8:f8:26:6e:dc:8d:f5:1e:41:fd:a2:90:76:70: 9e:bc:38:59:56:4e:b3:cf:8d:87:22:5b:6c:32:d2: e1:ff:a3:62:89:0e:1c:fb:fd:f0:d5:a3:de:f4:62: 01:83:e4:0f:e5:0c:16:56:4f:40:de:2c:21:49:a9: ab:70:07:f9:ca:bc:aa:26:4e:15:2f:ac:0d:c5:43: c0:6d:67:67:50:5c:84:6d:ec:05:9b:a2:f6:9b:f8: 38:ff:7f:2c:3d:d5:79:46:5e:f0:17:77:96:fa:c3: 9c:23:cb:b3:05:c3:3c:c7:fc:55:36:da:b5:6a:7e: d7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F9:A9:48:0B:68:DF:A1:B0:30:25:49:11:DE:07:AF:13:FF:2C:42 X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c3:99:5e:53:1c:b3:50:c9:0a:8b:0e:c8:49:d9:36:92:7e: c2:05:59:27:85:c9:fc:9f:a2:6a:e7:26:44:61:52:5b:db:98: 15:aa:d3:5c:79:9f:f5:a8:08:3e:1e:ef:db:41:6d:a8:26:30: b5:85:d1:f6:d3:21:8f:c2:07:ff:75:14:1e:c7:52:71:ae:d4: b4:d9:94:6f:c8:00:66:3a:91:de:b8:92:4c:5e:c6:9d:3c:8c: 30:7a:d6:e0:9a:59:5d:78:b3:22:87:e2:5d:49:1c:94:0a:54: 4a:6c:0c:42:e3:f3:bc:08:b5:47:f1:94:46:ba:b0:0d:c2:9d: 82:a3:12:b5:50:c8:27:95:df:30:bf:96:b6:05:57:80:36:f1: 72:2a:60:57:39:f3:86:28:cd:d2:66:dc:c3:7c:36:de:60:12: dd:89:5a:db:56:06:a6:38:54:28:42:7b:d9:c0:1c:a9:bd:58: 03:1f:1e:5d:6f:c9:43:57:52:61:bc:38:01:77:24:67:9c:d3: e1:e0:bb:87:7c:9b:5b:8e:6b:07:38:fe:74:a0:80:28:5a:38: 99:f8:00:22:b9:c7:33:49:28:b2:eb:57:88:2c:b9:34:a9:0c: c4:7f:51:9e:41:6a:83:8a:1d:95:87:ac:fe:ce:20:64:ee:b5: d1:cc:f1:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3 QUNGMjgwMkQwHhcNMjUwNzAxMDQ0NjU2WhcNMjUwNzA4MDQ0NjU2WjAYMRYwFAYD VQQDEw02ODYzNjg0MS00YTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1WsYgJfG6HpDevyuCXbm43Ig5S30saLh6zNlfZGvnOEFlMQ+AFHalS0Ck38 6Ba9Fps1LOHcAHcSrtfliaNgnTjY76bpW+BsOmp1CLEUJj7SAvjePbQ24dLIaMsx 1XPvMM8BlLzlh/0QIwFPTvAr6iUiJfbTi421fOz2MUPq9xBamkBHMlWQ+PgmbtyN 9R5B/aKQdnCevDhZVk6zz42HIltsMtLh/6NiiQ4c+/3w1aPe9GIBg+QP5QwWVk9A 3iwhSamrcAf5yryqJk4VL6wNxUPAbWdnUFyEbewFm6L2m/g4/38sPdV5Rl7wF3eW +sOcI8uzBcM8x/xVNtq1an7XsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE35qUgL aN+hsDAlSRHeB68T/yxCMB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2 OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS UjEtNnF5T1FFVnQ2enlnQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0w5leUxyzUMkKiw7ISdk2kn7CBVknhcn8n6Jq5yZEYVJb25gVqtNc eZ/1qAg+Hu/bQW2oJjC1hdH20yGPwgf/dRQex1JxrtS02ZRvyABmOpHeuJJMXsad PIwwetbgmlldeLMih+JdSRyUClRKbAxC4/O8CLVH8ZRGurANwp2CoxK1UMgnld8w v5a2BVeANvFyKmBXOfOGKM3SZtzDfDbeYBLdiVrbVgamOFQoQnvZwBypvVgDHx5d b8lDV1JhvDgBdyRnnNPh4LuHfJtbjmsHOP50oIAoWjiZ+AAiucczSSiy61eILLk0 qQzEf1GeQWqDih2Vh6z+ziBk7rXRzPFg -----END CERTIFICATE-----Generated at Wed Jul 2 05:48:18 2025 by rpki-client