$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft File: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json) Hash identifier: RJOYmOqunkjnZ7FBfpo1ugkoTJnbp7uSmCBiiag6k7A= Subject key identifier: A8:5D:D9:D4:F3:48:B9:C0:5F:5B:A0:4F:5A:4C:ED:8C:D2:74:22:41 Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 Certificate issuer: /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft Manifest number: CB Signing time: Sat 23 Aug 2025 05:53:44 +0000 Manifest this update: Sat 23 Aug 2025 05:53:44 +0000 Manifest next update: Sat 30 Aug 2025 05:53:44 +0000 Files and hashes: 1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: 71lS9/D0QppEcrsdOgCtp+wWIBHszheA1ZKZi3dFVzk=) 2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: tG+xEb4Bj22fmRv5Ap5El7N6H/BamXJAvudixhV4S5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE814, serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Validity Not Before: Aug 23 05:53:44 2025 GMT Not After : Aug 30 05:53:44 2025 GMT Subject: CN=68a95768-4cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:42:24:48:fa:7d:5c:80:8b:1a:d4:6e:b8: 2b:3a:2e:df:c6:8f:ff:ac:79:7f:e0:83:d7:23:3c: 7c:2f:73:68:0d:9d:f7:92:43:eb:f7:6a:69:3a:b7: 13:5c:70:d0:3d:9c:89:ef:56:33:2a:a6:1c:31:ab: f5:92:34:e6:f8:00:cc:2d:d6:07:f9:94:a2:bf:61: 84:90:86:d6:cf:48:62:7b:52:08:75:6d:7f:fe:c7: 2e:3f:e1:88:8d:75:01:36:8b:cc:f6:b8:8b:79:bf: d8:0b:2a:3a:b3:56:61:5c:ea:2c:f5:5d:5e:5b:24: be:eb:37:60:fd:e9:37:ee:96:1e:ea:1a:b8:6a:90: a2:27:50:38:50:f7:eb:b9:9b:05:78:7b:25:25:bd: d8:8b:eb:bc:b9:4c:1d:9f:03:3b:ec:39:c1:ec:a7: 24:73:2a:06:44:31:51:16:37:3a:37:48:27:3b:e8: bc:c3:58:76:44:27:db:c2:ea:25:9a:d3:6f:94:86: 20:f2:a8:8c:91:af:c6:1f:d0:1e:73:a6:44:bb:99: 1a:50:0a:1a:f5:8a:b2:38:41:a1:30:cf:3a:ea:25: 52:5b:74:17:b9:45:61:6b:e9:34:7d:cf:79:7f:21: 0b:54:71:5c:19:cd:98:f6:04:ca:00:54:d4:a6:fb: 8f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5D:D9:D4:F3:48:B9:C0:5F:5B:A0:4F:5A:4C:ED:8C:D2:74:22:41 X509v3 Authority Key Identifier: keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ee:13:74:be:0e:57:fe:7e:ba:6b:af:b3:ff:ef:e9:66:4d: cd:c9:39:a1:26:38:90:71:7d:55:96:30:86:95:4e:aa:18:0f: ba:ce:ff:e5:c0:a2:64:70:58:da:4f:05:c8:6c:0c:45:88:ba: 07:29:21:2d:39:82:db:fd:1f:21:4c:17:16:90:38:11:9e:3f: cf:c4:7e:c9:54:e7:f9:3e:da:95:1d:30:00:0a:79:4f:0b:9c: d4:5a:b7:4c:76:8e:4d:03:bd:68:e0:3c:28:cb:84:f1:9c:35: c9:ea:3e:10:41:7b:2b:5c:a0:6b:6c:6d:40:31:9d:2f:07:a3: c0:54:0e:cf:c1:67:fc:b2:a3:04:ef:1b:6e:db:53:21:64:f7: 68:0e:c5:39:2e:bb:12:1c:01:c6:74:10:a1:9c:db:28:0c:3c: 47:f3:af:e6:34:f3:51:65:3a:cd:0f:46:a7:c4:89:18:f4:f2: 06:52:8b:1a:7b:1f:8c:9c:a1:86:2c:8a:8e:87:63:9d:ba:b9: b4:e8:80:31:29:5a:28:cd:9b:01:3a:6b:44:57:5e:93:a5:f5: 0f:65:31:59:01:14:a4:22:c2:f8:b5:c3:37:aa:8d:e8:f9:45: c6:70:1e:9b:fa:80:0c:db:1d:fa:c9:e6:24:83:32:70:27:5a: a4:aa:c3:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MTQxMTAvBgNVBAUTKDExOEQ5QkRFMzE3NTRGOTg1NENCNTU0NzQwQTI5OUYx MzdFMjQxRTIwHhcNMjUwODIzMDU1MzQ0WhcNMjUwODMwMDU1MzQ0WjAYMRYwFAYD VQQDEw02OGE5NTc2OC00Y2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoedCJEj6fVyAixrUbrgrOi7fxo//rHl/4IPXIzx8L3NoDZ33kkPr92ppOrcT XHDQPZyJ71YzKqYcMav1kjTm+ADMLdYH+ZSiv2GEkIbWz0hie1IIdW1//scuP+GI jXUBNovM9riLeb/YCyo6s1ZhXOos9V1eWyS+6zdg/ek37pYe6hq4apCiJ1A4UPfr uZsFeHslJb3Yi+u8uUwdnwM77DnB7KckcyoGRDFRFjc6N0gnO+i8w1h2RCfbwuol mtNvlIYg8qiMka/GH9Aec6ZEu5kaUAoa9YqyOEGhMM866iVSW3QXuUVha+k0fc95 fyELVHFcGc2Y9gTKAFTUpvuPIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhd2dTz SLnAX1ugT1pM7YzSdCJBMB8GA1UdIwQYMBaAFBGNm94xdU+YVMtVR0CimfE34kHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxNC84QzU3RjE1QTRB MzAxMUVGQTgzMDc3MTlDNEY5QUUwMi9FWTJiM2pGMVQ1aFV5MVZIUUtLWjhUZmlR ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZMmIzakYxVDVoVXkxVkhRS0taOFRmaVFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgxNC84QzU3RjE1QTRBMzAxMUVGQTgzMDc3MTlDNEY5QUUwMi9FWTJiM2pGMVQ1 aFV5MVZIUUtLWjhUZmlRZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH7hN0vg5X/n66a6+z/+/pZk3NyTmhJjiQcX1VljCGlU6qGA+6zv/l wKJkcFjaTwXIbAxFiLoHKSEtOYLb/R8hTBcWkDgRnj/PxH7JVOf5PtqVHTAACnlP C5zUWrdMdo5NA71o4Dwoy4TxnDXJ6j4QQXsrXKBrbG1AMZ0vB6PAVA7PwWf8sqME 7xtu21MhZPdoDsU5LrsSHAHGdBChnNsoDDxH86/mNPNRZTrND0anxIkY9PIGUosa ex+MnKGGLIqOh2Odurm06IAxKVoozZsBOmtEV16TpfUPZTFZARSkIsL4tcM3qo3o +UXGcB6b+oAM2x36yeYkgzJwJ1qkqsNC -----END CERTIFICATE-----Generated at Sun Aug 24 08:51:52 2025 by rpki-client