$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft File: EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft (raw, json) Hash identifier: xZDKoCeJUZgXkVkbJDjXN+JC/XJkdiASpjXNL9oZLlk= Subject key identifier: 73:A7:19:F8:AD:72:3A:44:2A:4D:88:B5:BB:63:76:6D:BE:3A:BA:50 Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F Certificate issuer: /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Certificate serial: 1564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft Manifest number: 1527 Signing time: Fri 22 Aug 2025 16:57:14 +0000 Manifest this update: Fri 22 Aug 2025 16:57:13 +0000 Manifest next update: Fri 29 Aug 2025 16:57:13 +0000 Files and hashes: 1: EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl (hash: F1l2m4H1XdaBkR0+dcKTvXm4NsijD3gzhzz3hfVfRek=) 2: F99707CEBAC511E9A77CDE7BC4F9AE02.roa (hash: 5uUW31UVlhS1EMeW8SdNyNqfE7foPIsbvKPSkNYxTTw=) 3: E7084A18E1FF11ED8291C918C4F9AE02.roa (hash: 825LdLpPgTmUB6Z/jlNKQqUyb06kFuccOU7CVvrtwj4=) 4: E80E94F8E1FF11ED8291C918C4F9AE02.roa (hash: sEzbj9zVcGYfQVtymkbJCAL7nuZefcCGjL2IRtqWF/o=) 5: 065737305C9511EDABB9FA49C4F9AE02.roa (hash: A9mSeJtqPQ5OLPMu8OwuZB0s+QUpXaZBGlbtc6BBl4M=) 6: E5E5AB76E1FF11ED8291C918C4F9AE02.roa (hash: uZ4XGMAryuNiLEYH4OkW1daYwrGTX1yw6VXfeQKddWo=) 7: E4C72AB2E1FF11ED8291C918C4F9AE02.roa (hash: evUrAmQOOHS6gFCNS5NNu+gRFX265k9Xi2+XGDvOjys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5476 (0x1564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Validity Not Before: Aug 22 16:57:13 2025 GMT Not After : Aug 29 16:57:13 2025 GMT Subject: CN=68a8a169-4577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:19:c8:5d:32:58:88:6a:1e:b6:34:3d:aa:cd: dd:24:55:ce:a1:14:c1:86:d3:03:f5:d2:65:89:a8: 6b:e9:eb:b3:9c:c2:2e:d3:1a:10:00:6b:4a:06:a3: 9a:8e:02:53:dd:a6:2a:86:58:ee:d6:85:f2:96:2c: ed:4a:35:64:4d:da:35:b1:54:50:43:4a:0b:a9:5e: 22:1e:51:85:ce:83:1c:c1:af:07:40:06:31:ad:75: cf:f6:2e:d9:8b:44:79:c5:92:7b:42:a3:ef:1f:37: bf:8a:2d:48:bc:48:1d:25:bd:fd:09:fb:fb:ae:2b: 8d:94:75:39:91:34:14:a5:c6:c4:71:3d:f8:41:95: 7a:3c:b5:4f:49:b4:9d:17:d4:1e:46:c9:19:d4:1b: 95:73:e6:4c:61:eb:56:e5:ad:27:55:ef:b2:01:07: 34:dc:7b:1e:cf:c5:9d:9f:a7:9b:1e:6b:5f:c3:35: 75:2f:a1:4d:9a:7c:1b:da:60:9b:d2:72:12:c3:a1: 4d:b8:56:17:7b:50:2f:60:f7:7f:f6:80:bf:10:c6: c7:9c:11:10:55:61:13:77:90:9b:92:e0:70:a2:82: 65:4b:94:33:08:57:cb:08:16:65:69:7f:40:8a:93: 81:07:7e:a4:ac:e0:cb:c4:6d:3c:7f:7a:60:54:c7: f6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A7:19:F8:AD:72:3A:44:2A:4D:88:B5:BB:63:76:6D:BE:3A:BA:50 X509v3 Authority Key Identifier: keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7a:ed:28:8a:2d:6e:90:13:d5:31:52:6a:a6:ba:e8:7e:1a: bd:1f:e9:2d:98:b6:c1:d4:de:5f:57:53:54:27:ef:96:3a:36: 1f:92:85:ab:d0:e8:e4:76:22:38:24:64:16:43:fb:ff:bf:7b: 22:37:5e:14:7d:17:19:b1:e8:54:f1:e6:1f:a7:ed:bb:02:cc: bd:7a:25:93:17:fe:96:9c:5c:c9:4d:9e:41:38:dc:98:5e:f9: e3:56:38:74:cb:c8:83:1e:0e:d3:5a:e4:7b:66:9f:77:ed:73: 8e:54:7a:3e:11:65:cc:8a:e5:93:7e:e7:aa:d2:e5:8c:1b:2d: 77:e7:c1:47:f5:ce:44:e0:94:1a:35:ea:f3:de:46:0a:6f:86: 1b:5e:6f:0d:7c:82:02:1c:b9:49:72:cf:92:5d:7c:e8:0a:98: f4:2b:27:7c:c3:a2:b3:5d:fb:f3:4d:57:bc:74:cc:70:05:ca: 02:bf:1e:72:38:b3:16:fc:f8:89:58:5c:f9:a1:55:aa:b9:88: 4b:e5:1f:31:61:24:6a:c8:ad:1e:45:cd:4c:94:95:63:70:97: 3f:40:1f:f2:43:94:ca:84:af:85:31:80:f3:90:b2:bf:2b:84: 94:a1:8a:4c:76:18:d8:1f:04:b2:79:39:2a:c7:48:5a:f6:1b: 60:c8:4a:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE NEM2RDU3MUYwHhcNMjUwODIyMTY1NzEzWhcNMjUwODI5MTY1NzEzWjAYMRYwFAYD VQQDEw02OGE4YTE2OS00NTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlxnIXTJYiGoetjQ9qs3dJFXOoRTBhtMD9dJliahr6euznMIu0xoQAGtKBqOa jgJT3aYqhlju1oXyliztSjVkTdo1sVRQQ0oLqV4iHlGFzoMcwa8HQAYxrXXP9i7Z i0R5xZJ7QqPvHze/ii1IvEgdJb39Cfv7riuNlHU5kTQUpcbEcT34QZV6PLVPSbSd F9QeRskZ1BuVc+ZMYetW5a0nVe+yAQc03Hsez8Wdn6ebHmtfwzV1L6FNmnwb2mCb 0nISw6FNuFYXe1AvYPd/9oC/EMbHnBEQVWETd5CbkuBwooJlS5QzCFfLCBZlaX9A ipOBB36krODLxG08f3pgVMf21wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOnGfit cjpEKk2Itbtjdm2+OrpQMB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2 NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlGQy84MTA0NUUzQTU2NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1R bXg5UE5KaE9uRGJVeHRWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdeu0oii1ukBPVMVJqprrofhq9H+ktmLbB1N5fV1NUJ++WOjYfkoWr 0OjkdiI4JGQWQ/v/v3siN14UfRcZsehU8eYfp+27Asy9eiWTF/6WnFzJTZ5BONyY XvnjVjh0y8iDHg7TWuR7Zp937XOOVHo+EWXMiuWTfueq0uWMGy1358FH9c5E4JQa Nerz3kYKb4YbXm8NfIICHLlJcs+SXXzoCpj0Kyd8w6KzXfvzTVe8dMxwBcoCvx5y OLMW/PiJWFz5oVWquYhL5R8xYSRqyK0eRc1MlJVjcJc/QB/yQ5TKhK+FMYDzkLK/ K4SUoYpMdhjYHwSyeTkqx0ha9htgyEpa -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:55 2025 by rpki-client