$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json) Hash identifier: Plb6ouTMezv3nkAE1fnz7e7Bg3vWWCj9k6O/bfOZNDk= Subject key identifier: E8:2B:A4:13:08:B1:D6:85:2C:91:46:92:5D:0A:57:E2:40:1B:C5:C7 Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0E42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft Manifest number: 0E2F Signing time: Fri 22 Aug 2025 17:55:23 +0000 Manifest this update: Fri 22 Aug 2025 17:55:22 +0000 Manifest next update: Fri 29 Aug 2025 17:55:22 +0000 Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: QR9apCe/o/X5LPtD3DApIqfvZHAAdkDtHzXZnlRXd8c=) 2: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: dyHXMPsWXIi28t7W1U3CSitpoKF85Llotwpf4kiO82E=) 3: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: wmh/Lv/hljTYcluPdVifRdxIbnQ3ag/j+c2X6L3JX5o=) 4: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: 0ehGM9KvqQVlyysL0bR6r4knV2UFgPR8E2jylMcTv9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3650 (0xe42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Aug 22 17:55:22 2025 GMT Not After : Aug 29 17:55:22 2025 GMT Subject: CN=68a8af0a-b1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:41:94:e5:cc:5e:a7:18:b6:61:ad:f6:fb: 65:ac:bb:2d:e2:e9:f3:57:50:9c:5c:a1:49:6c:12: fc:3c:ce:73:df:e5:8f:af:29:f7:5a:cc:a5:6a:c2: f7:4a:25:f7:bb:94:e6:a4:05:8b:5c:a4:5e:3f:9f: 4a:48:e7:1e:0e:34:92:50:b6:ce:82:29:b3:c1:b6: 65:00:0f:d0:21:83:ca:69:19:fe:77:ab:1d:fd:cb: 15:5c:e3:81:68:68:59:83:9f:39:f3:3b:15:9b:91: da:84:87:e0:7d:98:48:5e:fe:a5:f7:25:5c:cc:4f: c2:9d:fe:6f:18:07:77:4b:06:7b:4f:65:9c:33:75: a0:8c:d7:51:21:1a:ee:fa:8a:0c:34:4b:c1:76:78: d5:7a:33:db:1a:70:df:21:7d:83:3a:ba:e1:0c:29: 42:ff:a3:ef:47:9a:f5:9b:f6:eb:2f:da:d5:08:96: 96:2e:95:e0:14:99:b6:e0:0a:9e:72:96:64:70:e9: 63:5d:c2:3b:17:7e:67:40:af:3d:38:ef:d9:4f:0c: ad:27:bd:f4:41:71:cd:d6:77:d8:14:45:85:89:21: 07:5d:e0:45:47:f7:51:8e:f4:3a:4e:70:79:47:30: 32:63:60:80:e3:8c:4e:b3:b5:ae:76:81:1e:cf:03: 13:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2B:A4:13:08:B1:D6:85:2C:91:46:92:5D:0A:57:E2:40:1B:C5:C7 X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e1:70:8b:5d:40:ab:9c:42:d1:f4:b3:ca:00:97:d3:1c:e1: 0c:29:c2:0e:98:25:41:03:46:1d:45:9a:c0:8f:75:64:58:52: 60:b2:d8:89:f8:0d:3e:73:8f:87:16:68:cd:7e:af:c1:51:01: 11:5d:11:62:83:0c:82:21:7c:28:b5:29:36:75:46:6d:13:7f: 00:f3:1e:c4:ac:e7:72:c6:8c:21:83:6b:f8:cb:d8:d5:d8:b9: 1d:60:c8:ff:1f:58:6a:cf:7a:8a:37:90:27:6a:62:f1:8b:26: 29:9b:01:7f:40:8a:44:3a:2f:18:df:16:3d:e9:8e:64:ab:a1: f0:e7:83:60:c5:d4:54:e7:30:a9:93:6d:35:61:30:aa:fb:75: a5:0d:47:7e:cc:1b:4d:29:1f:cc:d7:69:f1:1a:e0:24:60:56: 72:69:69:05:ac:d6:be:6b:9f:78:68:68:69:2e:e5:dc:69:ff: 3b:6d:8d:c2:30:31:b4:f2:71:cf:46:42:ec:2c:0b:32:41:c2: 70:2f:d7:22:4f:f3:b7:00:6e:be:ed:d2:61:86:e8:71:ce:91: 21:67:30:79:0b:a7:7e:33:4d:48:6f:77:85:d1:e0:3f:53:8a: 7a:ab:29:76:89:7a:50:1e:17:f5:cd:5c:4d:84:5d:51:db:a8: 05:fa:d4:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjUwODIyMTc1NTIyWhcNMjUwODI5MTc1NTIyWjAYMRYwFAYD VQQDEw02OGE4YWYwYS1iMWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrxBlOXMXqcYtmGt9vtlrLst4unzV1CcXKFJbBL8PM5z3+WPryn3WsylasL3 SiX3u5TmpAWLXKReP59KSOceDjSSULbOgimzwbZlAA/QIYPKaRn+d6sd/csVXOOB aGhZg5858zsVm5HahIfgfZhIXv6l9yVczE/Cnf5vGAd3SwZ7T2WcM3WgjNdRIRru +ooMNEvBdnjVejPbGnDfIX2DOrrhDClC/6PvR5r1m/brL9rVCJaWLpXgFJm24Aqe cpZkcOljXcI7F35nQK89OO/ZTwytJ730QXHN1nfYFEWFiSEHXeBFR/dRjvQ6TnB5 RzAyY2CA44xOs7WudoEezwMTEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgrpBMI sdaFLJFGkl0KV+JAG8XHMB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTdCMi8zRUUzMjM1QUFFOTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENn RHhEelFRRVUwRUExZndEX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK4XCLXUCrnELR9LPKAJfTHOEMKcIOmCVBA0YdRZrAj3VkWFJgstiJ +A0+c4+HFmjNfq/BUQERXRFigwyCIXwotSk2dUZtE38A8x7ErOdyxowhg2v4y9jV 2LkdYMj/H1hqz3qKN5AnamLxiyYpmwF/QIpEOi8Y3xY96Y5kq6Hw54NgxdRU5zCp k201YTCq+3WlDUd+zBtNKR/M12nxGuAkYFZyaWkFrNa+a594aGhpLuXcaf87bY3C MDG08nHPRkLsLAsyQcJwL9ciT/O3AG6+7dJhhuhxzpEhZzB5C6d+M01Ib3eF0eA/ U4p6qyl2iXpQHhf1zVxNhF1R26gF+tQc -----END CERTIFICATE-----Generated at Sun Aug 24 03:37:26 2025 by rpki-client