$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: Aja4ysiPjSiakk5j7CDCG0Re96c8HTzHGx3+CuJlOhw= Subject key identifier: 47:C7:97:C5:9B:98:65:D1:10:50:2E:BB:84:A5:18:5E:4B:E6:8E:F1 Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0B23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0B14 Signing time: Fri 22 Aug 2025 19:28:30 +0000 Manifest this update: Fri 22 Aug 2025 19:28:29 +0000 Manifest next update: Fri 29 Aug 2025 19:28:29 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: dQp7qW27M/KQOIQ9gz51NHUKhjQtMHr623C3yKJJQKU=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: x6v+AqgjPFRVX68ne0JC+xRgXtO5WMJX4uQIZ5czHsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2851 (0xb23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Validity Not Before: Aug 22 19:28:29 2025 GMT Not After : Aug 29 19:28:29 2025 GMT Subject: CN=68a8c4de-caf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:a9:41:32:6f:f3:94:58:8e:9d:ae:35:21: 5e:56:55:62:fc:49:b2:fc:fd:26:4c:13:43:49:72: c2:b1:ed:ac:44:e3:a5:5b:47:06:59:89:85:61:f9: b2:46:1e:e2:ea:86:f2:b5:ba:4a:ef:33:18:03:d5: a3:c8:41:3b:40:d0:1c:2d:c6:d0:33:6c:7e:d2:a7: 20:e4:da:81:a6:80:aa:06:a5:7d:13:92:8e:fb:13: 5c:b1:ac:49:bd:06:e8:c0:32:f5:74:24:00:6f:76: 75:b0:62:74:ab:17:0e:0f:ff:0e:0e:36:d9:04:6a: 76:b9:dc:16:2d:6f:7d:b8:fe:c4:1a:f9:a8:aa:06: e8:9d:de:47:17:b8:6b:1c:ac:18:c6:dc:b4:a0:3c: 1d:cd:4f:b5:c5:87:6f:20:36:f1:a4:5b:3b:c2:87: 02:89:fa:59:8e:5d:09:d7:8b:85:9f:81:cf:6d:94: 70:2b:81:36:17:b8:e9:e3:f0:c3:2c:b1:6a:53:94: 8c:84:1c:d0:81:bc:41:2c:12:b2:48:50:e2:00:b5: f4:ce:9e:a2:e7:a4:72:d6:55:11:2e:21:d8:8f:6a: 7d:a6:96:59:05:59:7c:c6:84:b9:5d:15:ca:d7:a4: 6f:5c:b2:9e:55:d0:e9:9f:d6:0a:6f:b9:d6:9d:50: 89:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C7:97:C5:9B:98:65:D1:10:50:2E:BB:84:A5:18:5E:4B:E6:8E:F1 X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:32:b0:ce:e4:6d:15:7f:2e:4d:83:a9:63:bf:bd:f0:47:b4: 2a:69:f0:44:f0:7f:40:f2:b4:a8:79:56:dc:66:43:77:de:bb: 66:64:4e:8e:e6:22:c8:9d:54:f9:96:d6:6d:a5:55:c1:eb:35: 4f:bc:82:79:a7:99:09:ee:a5:20:18:cb:f7:bb:a3:cc:26:99: f4:1e:a1:fa:cb:8d:aa:f3:0f:a3:c3:76:60:64:6b:ef:82:04: 46:b2:ef:73:7e:f3:7b:d9:0b:21:62:bd:5a:63:94:03:e8:46: 02:4b:83:ec:08:15:1c:5a:05:99:95:18:2e:5b:6d:89:5d:71: 51:2b:90:22:30:46:a6:59:db:1b:50:9d:85:71:d7:98:fe:5a: 8b:02:d6:67:2d:5d:34:e4:41:c2:6d:16:bd:21:1a:f8:fc:a4: f3:66:ce:dd:10:ac:50:9c:0b:92:93:c7:1e:b6:62:14:7f:7f: 90:78:87:7c:dc:3c:8b:30:1b:f0:1a:58:42:d8:90:33:4d:4b: 77:64:05:17:8e:fa:ba:88:15:43:b1:a4:d3:dc:a5:1c:d9:9a: 44:45:f5:e2:38:72:38:4a:5e:c4:68:fd:d0:e5:f8:1d:8c:02: 4b:f4:85:e8:d6:22:b3:43:6b:82:d5:15:09:72:af:bb:ed:d7: e1:1d:48:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjUwODIyMTkyODI5WhcNMjUwODI5MTkyODI5WjAYMRYwFAYD VQQDEw02OGE4YzRkZS1jYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHCpQTJv85RYjp2uNSFeVlVi/Emy/P0mTBNDSXLCse2sROOlW0cGWYmFYfmy Rh7i6obytbpK7zMYA9WjyEE7QNAcLcbQM2x+0qcg5NqBpoCqBqV9E5KO+xNcsaxJ vQbowDL1dCQAb3Z1sGJ0qxcOD/8ODjbZBGp2udwWLW99uP7EGvmoqgbond5HF7hr HKwYxty0oDwdzU+1xYdvIDbxpFs7wocCifpZjl0J14uFn4HPbZRwK4E2F7jp4/DD LLFqU5SMhBzQgbxBLBKySFDiALX0zp6i56Ry1lURLiHYj2p9ppZZBVl8xoS5XRXK 16RvXLKeVdDpn9YKb7nWnVCJ0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfHl8Wb mGXREFAuu4SlGF5L5o7xMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACMrDO5G0Vfy5Ng6ljv73wR7QqafBE8H9A8rSoeVbcZkN33rtmZE6O 5iLInVT5ltZtpVXB6zVPvIJ5p5kJ7qUgGMv3u6PMJpn0HqH6y42q8w+jw3ZgZGvv ggRGsu9zfvN72QshYr1aY5QD6EYCS4PsCBUcWgWZlRguW22JXXFRK5AiMEamWdsb UJ2FcdeY/lqLAtZnLV005EHCbRa9IRr4/KTzZs7dEKxQnAuSk8cetmIUf3+QeId8 3DyLMBvwGlhC2JAzTUt3ZAUXjvq6iBVDsaTT3KUc2ZpERfXiOHI4Sl7EaP3Q5fgd jAJL9IXo1iKzQ2uC1RUJcq+77dfhHUj/ -----END CERTIFICATE-----Generated at Sun Aug 24 00:19:47 2025 by rpki-client