$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft File: EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json) Hash identifier: ZB5aGkf6EXcXTsDt2iBI7ZAiEeI98N8/zHP4GgMDx14= Subject key identifier: CD:ED:5B:36:20:4E:AA:A1:70:41:7E:9F:05:2C:39:0A:5A:CF:1F:4D Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D Certificate issuer: /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft Manifest number: 0161 Signing time: Sat 23 Aug 2025 04:08:29 +0000 Manifest this update: Sat 23 Aug 2025 04:08:29 +0000 Manifest next update: Sat 30 Aug 2025 04:08:29 +0000 Files and hashes: 1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: 5V8xmniQCjbJVhbXFKPkqqECs+cbM9CfpVdWTu/H8xI=) 2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: 8KY8F5aAbZQBF/Qe5iecqKDmzqJcSSXnzASxQlPbo4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D Validity Not Before: Aug 23 04:08:29 2025 GMT Not After : Aug 30 04:08:29 2025 GMT Subject: CN=68a93ebd-bbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:81:60:e1:54:36:c7:49:2b:32:c8:98:5f: 11:ce:52:c2:7c:97:75:88:9b:99:20:53:19:8b:6c: 59:e7:3d:71:ab:a6:0e:db:86:df:1b:79:85:d7:64: 34:9a:de:9c:a6:c7:f8:5b:66:46:d9:27:28:46:35: e3:90:d0:34:12:b7:55:f4:63:f2:50:d4:a1:2b:25: fa:bc:a5:79:f9:8c:56:a0:3d:48:6c:55:f0:58:dd: ad:a2:b1:a3:2c:0d:ac:39:67:c2:c7:d4:ce:de:d6: 14:d6:0d:15:b7:68:81:6f:4b:bc:98:7b:2c:34:c4: c8:de:b0:d3:a8:a2:af:fb:2a:3e:84:8b:6e:fc:17: 73:6d:c3:94:c6:f5:2a:64:cd:b8:6f:63:39:20:af: 92:1d:31:ba:3e:79:e9:02:17:5f:e3:b1:fe:79:7a: 52:15:15:75:4d:d1:13:19:aa:bd:db:61:85:0e:2d: 74:1f:50:19:f1:5d:ee:db:0a:97:73:7b:eb:6d:94: a9:3a:26:58:9f:d7:ba:fc:af:40:ba:f4:9b:e3:2f: 1b:65:d2:d0:22:e2:01:64:1b:e8:13:9d:c4:ec:2c: 91:64:f4:09:68:f0:af:74:bf:f8:3b:b4:72:d3:0c: 16:15:84:10:78:37:08:68:6b:cb:29:0c:c8:fe:51: ff:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:ED:5B:36:20:4E:AA:A1:70:41:7E:9F:05:2C:39:0A:5A:CF:1F:4D X509v3 Authority Key Identifier: keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:85:e3:00:dd:b7:56:69:f2:26:dc:ec:c3:ab:25:20:d6:73: cc:32:21:c4:8b:58:59:8f:eb:bd:aa:c6:46:1f:5c:5d:ab:3a: 80:46:8c:0c:ab:14:4c:97:5f:8d:9d:c6:b2:06:e5:84:96:3b: 92:e0:a8:28:b4:ce:7e:e4:84:32:12:35:4f:6d:96:e4:d6:15: a8:d3:b7:10:4a:f8:b6:49:b7:a5:36:e2:35:9b:c8:eb:92:69: 04:07:1a:fa:4f:f7:19:8e:f7:cb:86:1f:07:fd:4a:13:c9:10: 8e:6a:35:3a:05:c1:80:33:61:de:12:d3:a6:a3:ce:9d:e3:08: 22:dd:27:ef:74:c8:74:54:6f:bf:ff:31:ab:1e:04:75:3d:00: 45:0f:5b:5f:da:c6:86:b3:93:b7:a5:92:75:43:7f:2e:c8:89: b7:c8:a2:11:00:a9:27:8d:07:19:23:10:ca:52:ef:3d:2c:51: a6:56:d9:ad:c1:fb:91:a9:0a:45:3d:ba:84:24:c0:dc:5f:b5: c4:cf:f4:c1:0d:d9:d0:d4:cb:bf:67:22:e7:c5:51:88:9f:55: 68:4a:c4:5c:7a:f0:87:9d:c2:06:6d:8b:2e:14:fd:f3:ec:27: 5f:7b:e0:1f:a9:66:53:29:55:fb:b3:76:5e:e5:0e:11:45:6a: 1b:ed:f8:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3 QUNGMjgwMkQwHhcNMjUwODIzMDQwODI5WhcNMjUwODMwMDQwODI5WjAYMRYwFAYD VQQDEw02OGE5M2ViZC1iYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeeBYOFUNsdJKzLImF8RzlLCfJd1iJuZIFMZi2xZ5z1xq6YO24bfG3mF12Q0 mt6cpsf4W2ZG2ScoRjXjkNA0ErdV9GPyUNShKyX6vKV5+YxWoD1IbFXwWN2torGj LA2sOWfCx9TO3tYU1g0Vt2iBb0u8mHssNMTI3rDTqKKv+yo+hItu/BdzbcOUxvUq ZM24b2M5IK+SHTG6PnnpAhdf47H+eXpSFRV1TdETGaq922GFDi10H1AZ8V3u2wqX c3vrbZSpOiZYn9e6/K9AuvSb4y8bZdLQIuIBZBvoE53E7CyRZPQJaPCvdL/4O7Ry 0wwWFYQQeDcIaGvLKQzI/lH/9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM3tWzYg TqqhcEF+nwUsOQpazx9NMB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2 OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS UjEtNnF5T1FFVnQ2enlnQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYheMA3bdWafIm3OzDqyUg1nPMMiHEi1hZj+u9qsZGH1xdqzqARowM qxRMl1+NncayBuWEljuS4KgotM5+5IQyEjVPbZbk1hWo07cQSvi2SbelNuI1m8jr kmkEBxr6T/cZjvfLhh8H/UoTyRCOajU6BcGAM2HeEtOmo86d4wgi3SfvdMh0VG+/ /zGrHgR1PQBFD1tf2saGs5O3pZJ1Q38uyIm3yKIRAKknjQcZIxDKUu89LFGmVtmt wfuRqQpFPbqEJMDcX7XEz/TBDdnQ1Mu/ZyLnxVGIn1VoSsRcevCHncIGbYsuFP3z 7Cdfe+AfqWZTKVX7s3Ze5Q4RRWob7fjE -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:31 2025 by rpki-client