$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft File: EE3r2037i5__46TvfbFlevst9-I.mft (raw, json) Hash identifier: Nq9A8OO1txBBvGTfDu6sSpyR+fGm2EKkDWStfd4oCgc= Subject key identifier: 61:8C:C8:D5:EE:E7:54:4D:60:1B:CC:6A:C9:EF:5B:87:EE:E6:04:BF Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2 Certificate issuer: /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft Manifest number: 01C7 Signing time: Sat 23 Aug 2025 03:03:29 +0000 Manifest this update: Sat 23 Aug 2025 03:03:29 +0000 Manifest next update: Sat 30 Aug 2025 03:03:29 +0000 Files and hashes: 1: EE3r2037i5__46TvfbFlevst9-I.crl (hash: ypuC9llw3nqlf/m3Mjm09dNHSIlTGArATP+03rRiV6Q=) 2: 01003962C9DC11ED8D68375EC4F9AE02.roa (hash: KSfw6IBecAIXXXtQTk/28sHhzeNjJPQPF3dORiab4B8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F10DC, serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2 Validity Not Before: Aug 23 03:03:29 2025 GMT Not After : Aug 30 03:03:29 2025 GMT Subject: CN=68a92f81-4bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:a8:df:4e:9c:07:21:6e:d7:09:7b:73:b1: ae:50:45:17:14:b0:13:e5:14:76:d8:28:c2:92:43: c0:cb:ca:40:61:67:b4:4b:de:13:31:f5:22:bd:2f: 73:15:2f:ec:a8:dc:09:54:e4:82:4c:b6:f1:0c:c7: ab:74:d4:b6:f1:91:58:82:98:ee:f3:24:5b:54:ec: b2:5e:99:e5:46:68:b3:eb:e6:33:e9:5b:b3:36:f3: 82:61:a5:50:df:23:d5:d3:96:dd:bd:66:7d:59:78: 44:8b:68:86:b8:3b:d5:1a:9d:a1:64:9a:54:60:47: 51:5f:9f:20:5c:92:38:8c:67:50:b6:0c:8f:f1:c3: 45:fc:84:90:62:70:14:e2:dc:34:ac:37:8d:f7:a5: 2f:91:fe:7e:41:23:50:de:79:4c:11:8d:35:b7:b5: c0:a4:06:7f:2e:e8:67:d2:87:98:ab:f1:35:c9:c6: 0b:bd:3f:f6:23:35:94:c5:6c:9c:28:f3:b6:47:a1: 26:59:49:f6:ea:7c:36:e6:50:1e:85:47:d5:25:85: 64:6f:76:6a:8c:60:1f:75:5b:e4:af:14:09:a1:c2: 2a:b6:04:f2:52:2b:b9:02:4c:8c:ec:bc:76:57:64: 60:15:52:e8:4c:a8:4f:fa:50:89:af:00:b7:f4:23: 2b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8C:C8:D5:EE:E7:54:4D:60:1B:CC:6A:C9:EF:5B:87:EE:E6:04:BF X509v3 Authority Key Identifier: keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d3:ef:ad:29:0c:9e:d1:ed:33:1b:08:73:b6:17:94:37:eb: ba:ba:48:2d:ad:b6:24:99:4d:df:2c:a1:3b:32:04:5a:18:d5: 10:da:35:1a:9b:85:0e:b9:a6:b3:4a:dc:c7:b8:29:64:f9:96: c3:1a:ed:3f:0b:26:f5:3f:0d:69:e6:36:ec:7f:ed:3f:e2:75: ca:63:52:b7:80:d3:ee:89:52:69:cd:36:4a:a0:85:25:b5:02: 2e:77:05:be:fa:ae:7d:78:25:b5:c3:9d:f7:e7:b5:94:1d:6f: f9:05:e7:9f:e1:23:64:94:80:38:c8:ac:9a:68:21:02:b5:d3: c9:de:59:ff:2b:c9:37:1f:5e:81:ad:d1:ba:99:c8:3e:1c:1c: ba:3a:40:7f:b0:f0:0e:47:4a:50:4e:00:1e:75:b0:c8:58:ed: 41:cf:39:e6:26:61:11:5a:40:68:c3:70:01:b9:5e:0d:cb:52: 93:eb:63:36:c4:1c:b0:45:da:82:50:bb:93:3e:f9:20:b1:8f: fd:30:1b:5b:f1:77:0b:3c:32:05:c2:41:2e:b9:fd:f9:8e:48: 1d:3a:b6:03:cc:8a:f2:76:66:87:3f:d8:aa:ea:a1:23:80:d3: 53:23:4e:76:99:ff:ad:43:44:06:3a:38:2a:a3:01:91:8a:ad: 5a:7e:e2:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEwREMxMTAvBgNVBAUTKDEwNERFQkRCNERGQjhCOUZGRkUzQTRFRjdEQjE2NTdB RkIyREY3RTIwHhcNMjUwODIzMDMwMzI5WhcNMjUwODMwMDMwMzI5WjAYMRYwFAYD VQQDEw02OGE5MmY4MS00YmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sWo306cByFu1wl7c7GuUEUXFLAT5RR22CjCkkPAy8pAYWe0S94TMfUivS9z FS/sqNwJVOSCTLbxDMerdNS28ZFYgpju8yRbVOyyXpnlRmiz6+Yz6VuzNvOCYaVQ 3yPV05bdvWZ9WXhEi2iGuDvVGp2hZJpUYEdRX58gXJI4jGdQtgyP8cNF/ISQYnAU 4tw0rDeN96Uvkf5+QSNQ3nlMEY01t7XApAZ/Luhn0oeYq/E1ycYLvT/2IzWUxWyc KPO2R6EmWUn26nw25lAehUfVJYVkb3ZqjGAfdVvkrxQJocIqtgTyUiu5AkyM7Lx2 V2RgFVLoTKhP+lCJrwC39CMrrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGMyNXu 51RNYBvMasnvW4fu5gS/MB8GA1UdIwQYMBaAFBBN69tN+4uf/+Ok732xZXr7Lffi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTBEQy84NUI4RTRBQUM5 RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1X180NlR2ZmJGbGV2c3Q5 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFM3IyMDM3aTVfXzQ2VHZmYkZsZXZzdDktSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTBEQy84NUI4RTRBQUM5RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1 X180NlR2ZmJGbGV2c3Q5LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc0++tKQye0e0zGwhztheUN+u6ukgtrbYkmU3fLKE7MgRaGNUQ2jUa m4UOuaazStzHuClk+ZbDGu0/Cyb1Pw1p5jbsf+0/4nXKY1K3gNPuiVJpzTZKoIUl tQIudwW++q59eCW1w53357WUHW/5Beef4SNklIA4yKyaaCECtdPJ3ln/K8k3H16B rdG6mcg+HBy6OkB/sPAOR0pQTgAedbDIWO1BzznmJmERWkBow3ABuV4Ny1KT62M2 xBywRdqCULuTPvkgsY/9MBtb8XcLPDIFwkEuuf35jkgdOrYDzIrydmaHP9iq6qEj gNNTI052mf+tQ0QGOjgqowGRiq1afuIX -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:26 2025 by rpki-client