$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json) Hash identifier: pHbnn1UT59XPxWWlVKLfY6P3/srTx4TRq4C1YMdOsVg= Subject key identifier: E9:32:92:BA:6B:FB:09:A5:30:79:F3:A0:83:FD:8F:90:6B:11:99:23 Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft Manifest number: 0C95 Signing time: Fri 22 Aug 2025 18:22:23 +0000 Manifest this update: Fri 22 Aug 2025 18:22:23 +0000 Manifest next update: Fri 29 Aug 2025 18:22:23 +0000 Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: +GSC9rz8fO8BbQz4+WrWHdWKfkvXbsAgO7VRIdEOlgg=) 2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: IFWas/rgHa7uSrgJAOPof+Srn7iqSkG+8jyeDB/7tHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Validity Not Before: Aug 22 18:22:23 2025 GMT Not After : Aug 29 18:22:23 2025 GMT Subject: CN=68a8b55f-6efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:4b:ef:a8:f5:76:a8:dd:c1:8c:34:c6:fc: 94:fb:8a:1d:a2:e0:ed:65:e2:42:43:40:8d:af:68: 10:12:26:2a:04:73:73:6e:ff:3c:78:1f:94:52:20: d7:b0:ae:27:50:d3:f5:11:72:47:ba:cc:ba:ad:46: c4:9e:35:1c:ce:ec:b9:45:80:7d:0b:aa:fa:aa:73: 92:1e:a7:a7:0a:ae:51:45:83:e0:46:2d:03:e4:2a: 7f:f2:8c:d5:45:79:79:7d:6c:e0:96:50:d9:74:78: de:a4:7b:03:1b:0b:fc:03:ba:f7:9b:f3:18:e2:20: 26:2d:50:44:ce:67:c9:f2:79:96:bf:04:f8:33:a5: a7:d5:f5:3d:21:d8:88:fe:90:44:52:2d:09:6c:09: 35:65:4d:d6:ab:70:6d:50:30:5d:f6:ed:37:42:c6: c0:11:24:f7:d9:5b:6a:49:ea:65:1e:1a:27:be:b5: c2:c2:d1:11:cd:4f:22:89:c0:3d:34:75:86:53:0f: b0:22:8c:b4:3b:6f:50:60:c3:df:9b:4e:86:ba:4b: 2a:20:1d:f3:4a:86:c3:f2:8c:29:5b:3b:23:af:b8: d9:b7:03:cd:6b:81:cb:7f:29:08:3f:00:58:d9:8d: f4:fe:15:78:d1:ac:bc:48:c0:55:22:37:f1:10:66: fa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:32:92:BA:6B:FB:09:A5:30:79:F3:A0:83:FD:8F:90:6B:11:99:23 X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:62:a6:5c:93:1c:67:30:e5:ce:dd:5f:4e:39:a3:3d:28:e4: ba:fd:f7:96:6e:4a:99:14:f3:18:65:8d:fc:67:98:50:fa:cf: 97:55:c6:66:cc:07:38:de:0a:4c:fd:89:82:f3:c4:93:bf:2c: 33:20:4a:bd:a2:3f:07:dd:5c:c0:95:98:fe:f9:7b:b5:82:e1: a0:49:38:2f:82:72:07:ca:3a:02:ee:c6:d9:61:08:cd:04:b3: 46:4c:27:a3:a9:a0:80:9d:10:01:6b:14:d7:7b:91:14:dc:50: 28:1b:96:09:35:f4:db:8b:b5:4d:7b:88:1f:1f:b3:9f:08:82: b8:4c:17:eb:61:42:17:2c:fa:5a:46:ff:cf:69:bc:09:8e:19: f1:5d:1c:43:90:92:33:77:62:3a:a8:c5:d7:43:1c:c6:46:8d: 70:41:fd:14:b4:48:c5:76:f4:74:5a:df:3b:50:17:6c:6f:b2: 5b:5c:fd:f9:1e:84:8b:14:7b:48:2b:4a:18:b4:39:2d:12:6a: cb:f0:94:42:f1:62:5f:5a:d4:bb:39:36:94:a1:c8:71:e3:f0: 58:4f:e0:3d:df:8d:03:c6:c1:c8:bb:70:18:3b:f6:03:06:b6: 0f:74:95:ea:52:1a:30:a2:ed:62:91:b6:0b:3e:7e:27:db:f8: ca:6b:81:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjUwODIyMTgyMjIzWhcNMjUwODI5MTgyMjIzWjAYMRYwFAYD VQQDEw02OGE4YjU1Zi02ZWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqtL76j1dqjdwYw0xvyU+4odouDtZeJCQ0CNr2gQEiYqBHNzbv88eB+UUiDX sK4nUNP1EXJHusy6rUbEnjUczuy5RYB9C6r6qnOSHqenCq5RRYPgRi0D5Cp/8ozV RXl5fWzgllDZdHjepHsDGwv8A7r3m/MY4iAmLVBEzmfJ8nmWvwT4M6Wn1fU9IdiI /pBEUi0JbAk1ZU3Wq3BtUDBd9u03QsbAEST32VtqSeplHhonvrXCwtERzU8iicA9 NHWGUw+wIoy0O29QYMPfm06GuksqIB3zSobD8owpWzsjr7jZtwPNa4HLfykIPwBY 2Y30/hV40ay8SMBVIjfxEGb65QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkykrpr +wmlMHnzoIP9j5BrEZkjMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2 OWN4Tk83dldXTjZqa3l5NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuYqZckxxnMOXO3V9OOaM9KOS6/feWbkqZFPMYZY38Z5hQ+s+XVcZm zAc43gpM/YmC88STvywzIEq9oj8H3VzAlZj++Xu1guGgSTgvgnIHyjoC7sbZYQjN BLNGTCejqaCAnRABaxTXe5EU3FAoG5YJNfTbi7VNe4gfH7OfCIK4TBfrYUIXLPpa Rv/PabwJjhnxXRxDkJIzd2I6qMXXQxzGRo1wQf0UtEjFdvR0Wt87UBdsb7JbXP35 HoSLFHtIK0oYtDktEmrL8JRC8WJfWtS7OTaUochx4/BYT+A9340DxsHIu3AYO/YD BrYPdJXqUhowou1ikbYLPn4n2/jKa4GL -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:22 2025 by rpki-client