$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft File: eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json) Hash identifier: cCOPnZXOFzkM4LB/Fg1ie2dQqExsl1ER6/MGxcj/kBA= Subject key identifier: A6:FB:8A:E8:10:E1:ED:B2:C7:08:E8:6E:2A:F6:93:07:6B:4A:4D:75 Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Certificate serial: 0970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft Manifest number: 0969 Signing time: Wed 02 Jul 2025 20:24:54 +0000 Manifest this update: Wed 02 Jul 2025 20:24:54 +0000 Manifest next update: Wed 09 Jul 2025 20:24:54 +0000 Files and hashes: 1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: G0vFGMKJLHZHMZdfQaCbNS7aqF5+2j9Zch1ENP8BSoU=) 2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: IM9yFzmqS+Is/NhhSreqHJdhDGFnp0WA0QJtpqV2ULo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2416 (0x970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Validity Not Before: Jul 2 20:24:54 2025 GMT Not After : Jul 9 20:24:54 2025 GMT Subject: CN=68659596-673a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:9d:ee:26:44:ea:0f:76:ff:ce:da:3e:39: f8:67:41:98:7c:73:9f:d9:ba:cc:b6:c4:0b:1c:5d: 5d:f5:70:01:47:76:e0:72:d5:6b:9b:25:96:e9:d8: f8:48:58:07:fa:76:48:39:98:e1:ff:c6:56:9c:e8: 7f:82:79:63:e3:5f:7b:6c:0d:a3:8e:34:f2:36:55: 6e:ab:3f:a2:84:b8:86:74:45:f7:c2:c8:96:ee:34: 43:da:59:0a:ec:a6:67:10:26:e7:00:af:bc:5e:85: ae:21:bf:9b:19:b9:79:ca:83:ec:81:00:3f:9b:36: 38:b5:c6:05:b4:2f:0e:91:f8:1d:ce:65:99:72:aa: af:86:a2:2f:90:a4:56:42:1d:7d:b0:17:a4:6d:2c: 02:8f:4f:5f:9a:3f:09:20:e6:bb:b1:19:87:24:6c: 74:f9:ba:1e:ed:fc:1f:22:66:e9:c9:69:f0:a2:d1: ae:67:1f:2d:18:c6:98:18:a6:c6:d6:ec:d9:47:88: 1b:1f:b6:8d:49:ed:89:89:a1:18:8b:79:6e:43:86: c1:99:0c:33:8e:e7:6f:72:cc:cf:c3:5e:73:dd:f2: 13:b6:27:30:2b:cb:89:dd:33:50:ed:08:88:d5:69: 9b:31:7e:d0:99:00:6e:ae:8a:9b:91:46:21:d4:85: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FB:8A:E8:10:E1:ED:B2:C7:08:E8:6E:2A:F6:93:07:6B:4A:4D:75 X509v3 Authority Key Identifier: keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:7e:80:35:50:c3:13:9e:6e:86:a0:4a:4b:3c:d1:f9:45:9c: 1d:7b:39:ea:ef:9b:29:d3:f1:8a:4c:a0:e1:4e:45:8e:2e:52: 17:7f:99:50:8c:3a:74:d8:1f:82:58:c3:49:ea:b3:9f:95:3e: 5c:99:49:35:53:72:7d:54:4d:14:cf:59:68:21:e7:4a:af:a8: 6e:ee:07:7d:3a:53:5e:6c:73:a2:c0:ac:d4:b3:0f:f0:75:e0: df:7d:ae:f3:e7:37:c5:f4:20:10:5b:33:45:93:ab:89:41:df: e7:c9:a1:6c:11:27:3d:70:8c:66:0f:91:45:3e:a6:09:59:c8: 6d:bf:ce:04:b4:0f:80:16:b6:7b:28:03:e8:65:83:a4:99:5e: aa:7b:2b:98:e6:e1:d1:3a:4f:bd:3e:c3:32:a0:40:07:02:55: 6a:2b:5b:97:f8:89:5d:a4:39:4f:b8:84:d5:36:3a:2e:3e:f3: aa:43:f5:2f:14:82:77:30:18:da:0d:a0:2a:4e:9b:39:30:f4: 40:69:1f:e5:ac:6a:24:83:82:3b:ef:57:18:a6:af:2f:fd:8d: 0b:12:cb:ac:8f:7f:ef:99:f4:9d:02:0c:2b:4b:58:0e:c6:13: 29:7c:a7:de:05:24:13:dd:71:4c:24:70:21:34:80:0c:58:03: ff:2b:11:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF MjEzMjIzNDkwHhcNMjUwNzAyMjAyNDU0WhcNMjUwNzA5MjAyNDU0WjAYMRYwFAYD VQQDEw02ODY1OTU5Ni02NzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUGd7iZE6g92/87aPjn4Z0GYfHOf2brMtsQLHF1d9XABR3bgctVrmyWW6dj4 SFgH+nZIOZjh/8ZWnOh/gnlj4197bA2jjjTyNlVuqz+ihLiGdEX3wsiW7jRD2lkK 7KZnECbnAK+8XoWuIb+bGbl5yoPsgQA/mzY4tcYFtC8OkfgdzmWZcqqvhqIvkKRW Qh19sBekbSwCj09fmj8JIOa7sRmHJGx0+boe7fwfImbpyWnwotGuZx8tGMaYGKbG 1uzZR4gbH7aNSe2JiaEYi3luQ4bBmQwzjudvcszPw15z3fITticwK8uJ3TNQ7QiI 1WmbMX7QmQBuroqbkUYh1IW5lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKb7iugQ 4e2yxwjobir2kwdrSk11MB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3 NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk2Ni8zRUYyMjQwMjk3NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRw Tng1TXdZVkluX3JpRXlJMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjfoA1UMMTnm6GoEpLPNH5RZwdeznq75sp0/GKTKDhTkWOLlIXf5lQ jDp02B+CWMNJ6rOflT5cmUk1U3J9VE0Uz1loIedKr6hu7gd9OlNebHOiwKzUsw/w deDffa7z5zfF9CAQWzNFk6uJQd/nyaFsESc9cIxmD5FFPqYJWchtv84EtA+AFrZ7 KAPoZYOkmV6qeyuY5uHROk+9PsMyoEAHAlVqK1uX+IldpDlPuITVNjouPvOqQ/Uv FIJ3MBjaDaAqTps5MPRAaR/lrGokg4I771cYpq8v/Y0LEsusj3/vmfSdAgwrS1gO xhMpfKfeBSQT3XFMJHAhNIAMWAP/KxFm -----END CERTIFICATE-----Generated at Thu Jul 3 17:40:23 2025 by rpki-client