$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft File: eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft (raw, json) Hash identifier: b7F2Xf6tn/EKH7Lq+zbJCq1cauaJvxeL8b3ymFdd+zw= Subject key identifier: DF:12:DB:DF:AF:9F:E7:36:5A:82:8A:B5:E4:5D:16:A0:B6:75:E3:78 Authority key identifier: 7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98 Certificate issuer: /CN=A91D0C18/serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft Manifest number: BB Signing time: Sat 23 Aug 2025 06:08:20 +0000 Manifest this update: Sat 23 Aug 2025 06:08:20 +0000 Manifest next update: Sat 30 Aug 2025 06:08:20 +0000 Files and hashes: 1: eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl (hash: JjwK9IE/TnAd5QssJg7DaD3RduQONwngLiC8E5xsa/I=) 2: EF57F4D0646611EFA25D167EC4F9AE02.roa (hash: pbJq9Hwzg+Y00ha9CPERhZ1eVVAlCN5RZnZHCakXlK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C18, serialNumber=7A2816E9697975CAD9349B26B20F14C81A914C98 Validity Not Before: Aug 23 06:08:20 2025 GMT Not After : Aug 30 06:08:20 2025 GMT Subject: CN=68a95ad4-083a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:88:a0:e9:51:c3:27:19:98:6c:32:9b:64:22: 8d:87:7a:a3:8f:30:a3:98:49:20:86:21:6d:18:aa: e1:e5:fa:ac:2f:94:49:93:71:cd:e0:8c:a6:54:eb: e4:e8:e6:9e:aa:4a:2e:18:fc:35:b7:2e:72:1b:3d: 43:f8:7a:76:f2:29:3b:2d:6f:a3:da:15:45:5f:e8: 76:af:20:c2:cf:7e:6c:2f:62:b8:7c:c4:05:1a:11: 34:b0:19:42:9b:37:ea:2e:dd:56:db:5c:0c:de:59: 2d:5d:73:61:3f:a5:61:dd:e2:cf:0a:80:39:ef:6a: 65:be:2b:a2:0e:15:3a:4f:dc:d1:79:d4:0d:8c:f5: 78:f3:39:e2:6d:13:87:6a:6a:aa:19:10:08:04:2c: 77:05:52:a0:78:d8:b3:6b:e5:f7:e4:a7:7f:21:fe: 9b:53:93:c4:32:21:c6:94:31:e1:74:52:da:b7:87: 1d:7a:b7:34:49:ba:b4:dd:9e:e6:d0:54:50:e5:b1: 08:4a:4d:fb:ca:80:d4:c7:06:05:be:5a:6d:ba:68: 54:e1:98:0a:18:31:11:22:b1:1a:f5:95:8b:88:25: 23:e8:76:a1:df:f6:1f:3b:aa:8f:79:3f:ae:17:a2: 27:e6:ee:53:19:dd:84:76:21:e5:b5:98:a6:82:83: a6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:12:DB:DF:AF:9F:E7:36:5A:82:8A:B5:E4:5D:16:A0:B6:75:E3:78 X509v3 Authority Key Identifier: keyid:7A:28:16:E9:69:79:75:CA:D9:34:9B:26:B2:0F:14:C8:1A:91:4C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eigW6Wl5dcrZNJsmsg8UyBqRTJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/712CF0D8646611EF8E18F87AC4F9AE02/eigW6Wl5dcrZNJsmsg8UyBqRTJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8e:30:be:69:5a:0b:cf:c6:b1:69:23:38:08:1d:cc:bb:c0: 4d:9b:10:37:3b:ab:8a:38:86:07:05:50:17:fa:8e:11:ef:28: f2:a4:03:f4:5d:b4:12:7f:01:cc:e2:e9:60:bd:69:1b:7c:a7: fb:75:d0:22:67:5d:c3:4d:f9:05:8a:f2:33:9a:7d:ca:17:25: 67:bb:c9:61:c6:9b:0c:1c:db:76:f8:cf:f1:80:fe:c2:aa:5a: ac:9b:30:f2:d1:57:2e:2f:c6:67:44:36:89:9a:ec:70:6b:80: 18:64:48:21:fd:e5:3e:4c:d9:29:0f:a2:e7:5a:cd:f3:ce:ac: c2:54:50:82:80:5d:bf:fc:f3:9a:19:f5:61:fa:39:44:61:31: 27:e7:f4:51:69:ae:b2:e4:21:20:85:97:3c:63:83:33:26:74: ce:fd:4d:17:9e:91:a2:0e:45:06:08:35:eb:0f:6b:f5:80:c7: 2b:a1:13:65:e2:1c:17:43:ab:2c:68:e7:8a:07:db:c2:e6:76: 48:bf:0f:e9:59:12:c2:f5:df:fb:0d:0a:c2:b4:28:8f:e1:61: f1:98:95:10:d5:bc:2e:c6:cb:39:23:5f:3f:3b:65:7e:15:65: 56:3b:9b:46:c8:3c:b1:cb:bd:bd:8f:14:20:2e:ba:f4:d6:c9: 09:a4:b5:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDMTgxMTAvBgNVBAUTKDdBMjgxNkU5Njk3OTc1Q0FEOTM0OUIyNkIyMEYxNEM4 MUE5MTRDOTgwHhcNMjUwODIzMDYwODIwWhcNMjUwODMwMDYwODIwWjAYMRYwFAYD VQQDEw02OGE5NWFkNC0wODNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Yig6VHDJxmYbDKbZCKNh3qjjzCjmEkghiFtGKrh5fqsL5RJk3HN4IymVOvk 6OaeqkouGPw1ty5yGz1D+Hp28ik7LW+j2hVFX+h2ryDCz35sL2K4fMQFGhE0sBlC mzfqLt1W21wM3lktXXNhP6Vh3eLPCoA572plviuiDhU6T9zRedQNjPV48znibROH amqqGRAIBCx3BVKgeNiza+X35Kd/If6bU5PEMiHGlDHhdFLat4cderc0Sbq03Z7m 0FRQ5bEISk37yoDUxwYFvlptumhU4ZgKGDERIrEa9ZWLiCUj6Hah3/YfO6qPeT+u F6In5u5TGd2EdiHltZimgoOmgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8S29+v n+c2WoKKteRdFqC2deN4MB8GA1UdIwQYMBaAFHooFulpeXXK2TSbJrIPFMgakUyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEMxOC83MTJDRjBEODY0 NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9laWdXNldsNWRjclpOSnNtc2c4VXlCcVJU SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VpZ1c2V2w1ZGNyWk5Kc21zZzhVeUJxUlRKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEMxOC83MTJDRjBEODY0NjYxMUVGOEUxOEY4N0FDNEY5QUUwMi9laWdXNldsNWRj clpOSnNtc2c4VXlCcVJUSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNjjC+aVoLz8axaSM4CB3Mu8BNmxA3O6uKOIYHBVAX+o4R7yjypAP0 XbQSfwHM4ulgvWkbfKf7ddAiZ13DTfkFivIzmn3KFyVnu8lhxpsMHNt2+M/xgP7C qlqsmzDy0VcuL8ZnRDaJmuxwa4AYZEgh/eU+TNkpD6LnWs3zzqzCVFCCgF2//POa GfVh+jlEYTEn5/RRaa6y5CEghZc8Y4MzJnTO/U0XnpGiDkUGCDXrD2v1gMcroRNl 4hwXQ6ssaOeKB9vC5nZIvw/pWRLC9d/7DQrCtCiP4WHxmJUQ1bwuxss5I18/O2V+ FWVWO5tGyDyxy729jxQgLrr01skJpLW+ -----END CERTIFICATE-----Generated at Sat Aug 23 18:58:41 2025 by rpki-client