$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft File: eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json) Hash identifier: BIX7gWqeB6gwJRAsHJPXE7MSNE8rwQVo9H1Mg3iEss0= Subject key identifier: 72:34:F9:3F:CF:00:80:F5:37:D4:47:88:2C:3C:3D:F6:95:37:C8:EA Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Certificate serial: 10E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft Manifest number: 10DB Signing time: Fri 22 Aug 2025 17:25:41 +0000 Manifest this update: Fri 22 Aug 2025 17:25:41 +0000 Manifest next update: Fri 29 Aug 2025 17:25:41 +0000 Files and hashes: 1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: Xej6IJx2VfE/NveQg1RgElLuejZeEzw9EpB6JFitveo=) 2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4326 (0x10e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Validity Not Before: Aug 22 17:25:41 2025 GMT Not After : Aug 29 17:25:41 2025 GMT Subject: CN=68a8a815-daef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:37:c4:da:74:e8:29:0a:d5:03:20:c3:04: 56:20:f3:84:ef:99:1f:eb:d3:e7:aa:80:97:20:84: f8:40:24:b7:02:cb:19:74:2a:4f:2f:3e:7a:93:78: 07:e5:82:52:37:14:d2:6e:96:36:d5:62:bf:89:46: 50:84:cf:5e:56:78:f9:ae:95:e7:3e:bc:a9:db:f4: 3a:42:69:ca:55:71:0b:86:72:a3:2e:06:96:af:52: ec:ac:16:58:c8:aa:9e:dc:37:17:60:c8:62:5b:dd: 9e:c3:1a:90:4c:e7:43:bc:3a:64:53:27:41:ed:9e: ad:88:2c:18:3c:a3:b7:ee:aa:d7:d5:7a:9c:e2:28: f2:a2:54:8e:df:58:82:25:8d:9d:01:aa:61:dc:50: 90:e8:0c:f9:7d:24:17:03:52:79:86:52:5c:f6:e3: d7:fe:04:4b:74:a1:89:51:06:4f:fc:e4:cc:1c:51: b9:d4:7f:fe:00:30:fd:09:db:6f:e1:7d:68:1f:19: ef:9f:0f:62:f0:d6:da:ae:81:0a:be:40:99:0d:6a: b2:6e:6c:40:73:d1:c6:50:a5:93:b5:6b:a8:98:78: a6:0c:28:1f:65:3c:66:82:36:4f:60:49:67:ad:d4: 62:cb:25:86:91:ad:f6:78:60:7f:b1:7b:3f:5d:b2: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:34:F9:3F:CF:00:80:F5:37:D4:47:88:2C:3C:3D:F6:95:37:C8:EA X509v3 Authority Key Identifier: keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:13:80:0c:f5:4a:37:6d:0a:a2:19:92:a2:0b:a0:4f:7f:a6: fa:e1:68:35:62:28:8e:e3:8f:ce:f9:b7:37:15:0c:b4:e8:b2: 22:f0:ef:14:b5:cb:db:01:19:8f:84:27:6d:80:99:bd:a4:d9: ff:06:5c:aa:b6:39:36:aa:8c:a1:03:a6:c0:5a:34:47:e1:22: 64:3e:09:8d:05:11:a3:d2:3c:40:a0:93:dc:e0:95:c1:f6:f6: 0e:6d:4d:f7:b3:99:65:a1:28:b7:97:f5:a7:38:c0:ee:f6:91: a9:f5:28:fe:59:96:c3:60:96:62:5c:fe:9a:82:21:5a:20:a3: e1:75:31:fa:d8:73:74:0e:87:b1:f5:7b:1d:57:48:17:fd:5c: 22:1c:4d:0e:9a:0f:20:b0:d7:61:16:af:26:ff:05:bc:b6:7a: 93:dc:f0:ac:a8:34:fe:9d:b5:5b:bd:c9:55:71:5d:a5:79:d9: 40:5f:b9:b9:55:40:c5:93:54:2f:63:f7:d3:aa:4f:41:05:8c: 6c:02:87:00:95:e8:77:7c:a1:77:f5:b7:5a:7d:f8:1f:ab:13: 0b:41:a5:e9:96:4b:67:d3:94:bb:7e:fc:3a:a7:1d:96:15:2c: b4:92:bb:4b:aa:61:7c:2e:cf:71:35:83:9c:c4:db:2a:7c:df: 71:29:10:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDRTkxMTAvBgNVBAUTKDc4NUFCMEIyMkRDRTVBMTI2NjUwMEMxMDY2QjRGNkIw NUY3NUNBQzAwHhcNMjUwODIyMTcyNTQxWhcNMjUwODI5MTcyNTQxWjAYMRYwFAYD VQQDEw02OGE4YTgxNS1kYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwH83xNp06CkK1QMgwwRWIPOE75kf69PnqoCXIIT4QCS3AssZdCpPLz56k3gH 5YJSNxTSbpY21WK/iUZQhM9eVnj5rpXnPryp2/Q6QmnKVXELhnKjLgaWr1LsrBZY yKqe3DcXYMhiW92ewxqQTOdDvDpkUydB7Z6tiCwYPKO37qrX1Xqc4ijyolSO31iC JY2dAaph3FCQ6Az5fSQXA1J5hlJc9uPX/gRLdKGJUQZP/OTMHFG51H/+ADD9Cdtv 4X1oHxnvnw9i8NbaroEKvkCZDWqybmxAc9HGUKWTtWuomHimDCgfZTxmgjZPYEln rdRiyyWGka32eGB/sXs/XbLNwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHI0+T/P AID1N9RHiCw8PfaVN8jqMB8GA1UdIwQYMBaAFHhasLItzloSZlAMEGa09rBfdcrA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNFOS84NzEwNkQzRTI3 MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1doSm1VQXdRWnJUMnNGOTF5 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGcXdzaTNPV2hKbVVBd1FaclQyc0Y5MXlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNFOS84NzEwNkQzRTI3MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1do Sm1VQXdRWnJUMnNGOTF5c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgE4AM9Uo3bQqiGZKiC6BPf6b64Wg1YiiO44/O+bc3FQy06LIi8O8U tcvbARmPhCdtgJm9pNn/Blyqtjk2qoyhA6bAWjRH4SJkPgmNBRGj0jxAoJPc4JXB 9vYObU33s5lloSi3l/WnOMDu9pGp9Sj+WZbDYJZiXP6agiFaIKPhdTH62HN0Doex 9XsdV0gX/VwiHE0Omg8gsNdhFq8m/wW8tnqT3PCsqDT+nbVbvclVcV2ledlAX7m5 VUDFk1QvY/fTqk9BBYxsAocAleh3fKF39bdaffgfqxMLQaXplktn05S7fvw6px2W FSy0krtLqmF8Ls9xNYOcxNsqfN9xKRDJ -----END CERTIFICATE-----Generated at Sat Aug 23 18:13:15 2025 by rpki-client