$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: s0Q/EeV7Yp0lyfUrV8cfe3mIeooMzkn7h6Dx6jSzJq4= Subject key identifier: 7D:11:14:EC:6A:F8:C0:9D:AF:74:B8:19:51:E7:52:6C:2C:30:78:B5 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 0397 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 0392 Signing time: Sat 23 Aug 2025 01:03:08 +0000 Manifest this update: Sat 23 Aug 2025 01:03:08 +0000 Manifest next update: Sat 30 Aug 2025 01:03:08 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: 5mJvGhZm/zbDjAxeEN/s6VTeRiHBdn3zYJ236CdAPDs=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Aug 23 01:03:08 2025 GMT Not After : Aug 30 01:03:08 2025 GMT Subject: CN=68a9134c-6cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:f6:d9:b3:9c:f0:96:6f:65:22:78:2e:99: 94:e1:32:67:55:02:7c:59:14:fd:d3:75:f6:81:42: 0f:ef:7b:37:e3:70:42:4a:de:9e:bf:28:6a:cd:51: 95:e9:18:3c:5c:e7:3c:05:93:a5:ec:83:b0:79:b7: bb:2a:f0:82:a8:05:c7:3d:68:07:0d:89:67:3c:6a: cd:2b:ce:87:0d:e8:be:28:5c:69:53:08:f4:30:d9: 85:13:79:25:7f:d6:ae:a7:20:a2:e2:7e:2a:94:9a: 79:05:42:e7:2d:18:87:c6:29:2a:58:bb:45:a9:8b: a0:fb:ee:25:66:eb:8e:1e:4a:76:6d:6f:7c:2d:c8: 26:1d:67:c3:07:d7:69:0d:a5:58:86:bb:56:15:55: 82:eb:dc:95:a5:ca:26:e9:6b:8e:52:ff:54:ef:89: 90:ac:d2:aa:9e:8c:da:7b:5c:d3:08:f5:e8:05:47: 26:d0:d2:9d:4b:13:66:cc:96:92:10:f5:1f:65:17: bb:50:83:ae:ba:55:38:0e:77:9b:e4:6a:48:3a:33: 4a:33:62:36:17:8c:4c:43:10:7b:66:a9:83:30:f3: 81:b2:01:e6:43:8b:f4:e6:03:af:c2:1c:fe:23:f6: 86:72:0f:81:a6:45:12:77:3c:58:91:03:53:d8:99: ad:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:11:14:EC:6A:F8:C0:9D:AF:74:B8:19:51:E7:52:6C:2C:30:78:B5 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:26:1d:24:74:75:f6:ba:e0:d8:f4:4a:3d:fb:95:36:c6:f9: 5f:0e:a5:19:ff:09:f7:2b:42:f5:e4:42:08:03:35:1b:5e:92: 50:84:a0:07:1d:63:6f:c7:92:27:26:d6:93:60:ff:61:29:7c: 32:ac:44:87:de:8a:e2:b2:31:29:ac:f5:8e:1c:ed:e4:13:82: b5:77:42:0a:85:9f:79:a6:39:b0:a0:5a:62:4c:31:80:e3:98: 47:86:56:55:a4:dd:c7:cc:41:83:28:b0:90:ee:31:2b:fd:d3: 7e:ef:17:e6:7e:9f:1f:bb:02:ec:49:54:0c:ad:64:cd:fc:be: 24:d5:d7:4f:da:69:3b:a5:4f:fe:4f:10:d7:63:15:1d:fd:be: 5e:85:7f:e1:4e:00:5e:21:f9:84:c8:1d:c3:bd:86:2b:86:3d: 5f:f7:fe:89:96:0a:a4:f0:e0:84:d0:67:ba:6e:af:5f:04:c8: 63:ac:b4:2c:f4:fb:98:a1:4f:ad:68:2b:ea:ff:2b:0b:2e:a2: 7d:07:1c:88:de:de:70:a8:81:da:6c:0a:ca:f3:1a:3c:58:27: d0:03:cf:53:2f:2b:09:02:04:8e:cd:b5:38:bd:95:b5:92:a1: b1:58:ec:24:82:b1:f8:66:50:c1:25:ae:31:7a:2b:25:bc:5d: 5d:53:86:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjUwODIzMDEwMzA4WhcNMjUwODMwMDEwMzA4WjAYMRYwFAYD VQQDEw02OGE5MTM0Yy02Y2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXn22bOc8JZvZSJ4LpmU4TJnVQJ8WRT903X2gUIP73s343BCSt6evyhqzVGV 6Rg8XOc8BZOl7IOwebe7KvCCqAXHPWgHDYlnPGrNK86HDei+KFxpUwj0MNmFE3kl f9aupyCi4n4qlJp5BULnLRiHxikqWLtFqYug++4lZuuOHkp2bW98LcgmHWfDB9dp DaVYhrtWFVWC69yVpcom6WuOUv9U74mQrNKqnozae1zTCPXoBUcm0NKdSxNmzJaS EPUfZRe7UIOuulU4Dneb5GpIOjNKM2I2F4xMQxB7ZqmDMPOBsgHmQ4v05gOvwhz+ I/aGcg+BpkUSdzxYkQNT2JmtDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0RFOxq +MCdr3S4GVHnUmwsMHi1MB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACJh0kdHX2uuDY9Eo9+5U2xvlfDqUZ/wn3K0L15EIIAzUbXpJQhKAH HWNvx5InJtaTYP9hKXwyrESH3orisjEprPWOHO3kE4K1d0IKhZ95pjmwoFpiTDGA 45hHhlZVpN3HzEGDKLCQ7jEr/dN+7xfmfp8fuwLsSVQMrWTN/L4k1ddP2mk7pU/+ TxDXYxUd/b5ehX/hTgBeIfmEyB3DvYYrhj1f9/6Jlgqk8OCE0Ge6bq9fBMhjrLQs 9PuYoU+taCvq/ysLLqJ9BxyI3t5wqIHabArK8xo8WCfQA89TLysJAgSOzbU4vZW1 kqGxWOwkgrH4ZlDBJa4xeislvF1dU4ak -----END CERTIFICATE-----Generated at Sun Aug 24 03:10:01 2025 by rpki-client