$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: fwt7zI4Kr2atJVdgfpOpVIAjdgszaUQriESVmKKteK4= Subject key identifier: 8E:44:63:78:38:DD:DF:17:5B:CD:3E:97:C8:F8:5E:A5:F4:2C:09:32 Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: 2E Signing time: Sat 23 Aug 2025 07:57:06 +0000 Manifest this update: Sat 23 Aug 2025 07:57:05 +0000 Manifest next update: Sat 30 Aug 2025 07:57:05 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: 74DmARjS21WB97tv6vsdyDTg9nl7iz3S8XC7asCUvM8=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Aug 23 07:57:05 2025 GMT Not After : Aug 30 07:57:05 2025 GMT Subject: CN=68a97451-7214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b4:74:1c:ca:fc:4a:d0:12:0c:45:b4:41:47: f6:17:16:28:36:c1:b7:53:3c:c7:fd:b5:ee:5e:d1: c5:ba:8d:98:fb:88:b4:d7:4c:6c:66:c5:a1:07:b0: 1a:fc:0c:d7:f9:3e:62:0a:60:d2:d1:be:16:c6:d9: 74:ad:a8:3c:ba:e0:55:a8:92:71:12:45:a4:0b:8d: 38:29:d3:0e:24:8e:d3:3c:05:db:93:16:30:9e:ee: ae:70:0f:ad:a5:07:a8:ee:3f:49:28:df:d2:bc:52: 61:cb:82:67:cf:a6:39:7e:19:13:b5:d7:ce:6a:bf: 93:cf:84:cb:76:57:a8:6c:a6:b3:31:a6:3f:26:02: a5:09:8c:07:2d:9c:58:ec:9d:c3:4f:e5:b7:f3:b4: 4c:06:b0:12:e5:23:86:45:fb:f5:d9:e0:2a:f8:36: a0:a7:62:01:93:ee:a1:0a:47:8e:7b:97:9e:13:a9: 09:74:26:07:c9:cd:b5:3d:7b:fe:19:93:c2:8a:a2: 70:50:54:50:b4:01:33:3c:ff:08:0e:db:5c:b1:cc: ee:4f:9b:5a:60:ab:08:44:b0:b3:c2:f6:ac:95:36: 37:a0:1d:5f:b7:14:37:6d:1b:5a:2a:70:f0:19:c0: 05:d5:36:4c:d5:9f:7e:75:98:47:f7:a2:7e:31:ac: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:44:63:78:38:DD:DF:17:5B:CD:3E:97:C8:F8:5E:A5:F4:2C:09:32 X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:34:ba:f2:26:a4:71:20:69:bf:d8:87:15:c9:62:73:3e:49: a2:1a:4d:56:39:71:be:6e:01:67:51:b4:c9:7b:2b:46:96:1f: b8:56:b9:08:77:ed:43:ec:db:d8:30:7d:07:9e:b1:36:0c:03: 6b:85:1a:d8:7d:fd:46:fc:71:1d:77:63:8c:f4:8f:40:c3:d8: 89:80:67:f8:0e:81:9a:fa:2b:27:cb:e1:21:c3:ba:b4:13:0c: 16:92:60:d0:63:50:b7:07:c1:96:17:43:bc:f9:7d:a2:ba:28: c6:24:75:ff:86:58:6d:17:e5:0a:90:78:7e:8f:ce:96:fb:07: 71:d4:05:0e:1f:0d:61:08:99:7d:39:b8:0d:2e:d8:2e:a8:9d: 18:ef:55:d4:9b:4e:52:b8:95:3d:d1:00:6d:f7:b1:88:81:3f: fd:ee:b2:cd:28:c2:77:ea:50:44:bf:67:6a:3e:d0:18:75:d2: d4:e6:7d:f7:8a:a0:80:26:dd:2a:14:35:16:2d:f9:42:c2:73: 39:00:c1:d5:57:dd:e2:63:1b:fe:90:72:19:1b:dc:45:5b:c7: 92:47:7c:0f:59:ff:c8:92:8a:82:8f:cc:a9:40:fc:dd:7e:a7: 57:d4:04:49:16:d8:d1:f5:e4:13:89:dd:fb:51:37:e0:03:0e: c0:a0:86:c1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC MTQ4MTEwRjAeFw0yNTA4MjMwNzU3MDVaFw0yNTA4MzAwNzU3MDVaMBgxFjAUBgNV BAMTDTY4YTk3NDUxLTcyMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCtHQcyvxK0BIMRbRBR/YXFig2wbdTPMf9te5e0cW6jZj7iLTXTGxmxaEHsBr8 DNf5PmIKYNLRvhbG2XStqDy64FWoknESRaQLjTgp0w4kjtM8BduTFjCe7q5wD62l B6juP0ko39K8UmHLgmfPpjl+GRO1185qv5PPhMt2V6hsprMxpj8mAqUJjActnFjs ncNP5bfztEwGsBLlI4ZF+/XZ4Cr4NqCnYgGT7qEKR457l54TqQl0JgfJzbU9e/4Z k8KKonBQVFC0ATM8/wgO21yxzO5Pm1pgqwhEsLPC9qyVNjegHV+3FDdtG1oqcPAZ wAXVNkzVn351mEf3on4xrOpFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjkRjeDjd 3xdbzT6XyPhepfQsCTIwHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHU0uvImpHEgab/YhxXJYnM+SaIaTVY5cb5uAWdRtMl7K0aWH7hWuQh3 7UPs29gwfQeesTYMA2uFGth9/Ub8cR13Y4z0j0DD2ImAZ/gOgZr6KyfL4SHDurQT DBaSYNBjULcHwZYXQ7z5faK6KMYkdf+GWG0X5QqQeH6Pzpb7B3HUBQ4fDWEImX05 uA0u2C6onRjvVdSbTlK4lT3RAG33sYiBP/3uss0ownfqUES/Z2o+0Bh10tTmffeK oIAm3SoUNRYt+ULCczkAwdVX3eJjG/6Qchkb3EVbx5JHfA9Z/8iSioKPzKlA/N1+ p1fUBEkW2NH15BOJ3ftRN+ADDsCghsE= -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:35 2025 by rpki-client