$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: iqgmA5itzASKK6SbpazDPTBwpYNr+II9/ighKu612hg= Subject key identifier: 8D:D0:3D:1F:EA:AF:93:C7:FA:DF:97:98:4E:D7:FB:2B:2F:35:D4:F9 Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 0202 Signing time: Sat 23 Aug 2025 02:25:36 +0000 Manifest this update: Sat 23 Aug 2025 02:25:35 +0000 Manifest next update: Sat 30 Aug 2025 02:25:35 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: u+Q1ws0YpcNJSfGMuISwDp5RZNjlHznjdnSu4rZIVYU=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: Uh7B24TrfbcaCXXos+UCRzkq1ccagOkOy3EbQYTwo0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Aug 23 02:25:35 2025 GMT Not After : Aug 30 02:25:35 2025 GMT Subject: CN=68a926a0-b84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:93:4c:4e:bd:99:d2:e1:bf:bc:0d:21:d3: 0c:ed:e5:91:94:0e:b5:bb:a6:7c:46:04:1f:ab:81: e7:2c:57:8b:66:b9:56:23:10:81:97:33:e7:3f:1b: ba:f7:8e:b5:56:5a:20:a1:e9:7f:ab:2f:2f:9a:18: 2c:cd:c2:94:f3:e9:76:71:9c:fc:7a:09:fb:7d:1d: 77:5c:6b:5b:3d:cf:90:8d:a0:94:bb:4f:46:56:f2: 2f:e4:aa:76:31:d1:48:29:c0:c9:5a:de:7b:8d:ea: 69:4b:51:6b:78:e4:e4:10:8c:7a:61:b4:2b:bc:77: fb:36:17:7d:b8:ab:c1:dc:89:25:53:22:54:16:fa: 52:1c:cf:f2:f2:df:4b:fc:a6:1e:98:49:b2:ff:92: 67:50:cf:b9:63:3f:f9:61:26:12:ed:e6:e5:ad:ca: 52:bd:af:99:f6:70:82:4f:e2:2b:ef:dd:7b:61:aa: 11:a1:66:ed:fa:e8:90:28:5d:62:2b:6c:a7:9c:53: 29:6d:ae:2a:a8:68:8c:6c:71:4d:03:26:54:2d:ff: b1:ea:85:df:28:a8:c8:49:96:99:05:33:4b:30:57: ac:1d:49:0a:f8:63:d4:82:55:00:d1:a1:00:61:9b: ab:84:21:f0:2e:c3:80:96:a5:99:33:71:44:f1:72: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D0:3D:1F:EA:AF:93:C7:FA:DF:97:98:4E:D7:FB:2B:2F:35:D4:F9 X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b8:25:d5:cc:91:e0:59:be:3a:a9:47:2a:3c:71:60:5f:78: d5:7c:a6:fe:c2:d7:5d:c8:c7:10:31:28:ed:81:5f:e1:1c:d4: 04:85:59:fc:bd:94:32:de:e4:fa:b2:48:12:93:93:ec:b2:3b: 34:c7:ab:a7:5c:cf:66:f5:17:ad:12:6a:fa:3a:ee:83:6b:c0: c8:6c:ff:06:c5:c7:40:70:31:be:d9:f9:07:d1:e8:eb:de:94: d7:d2:16:1b:b0:17:79:92:12:f4:ff:b4:19:e5:4f:d3:2d:c3: 9e:d7:8a:51:2d:c6:16:3a:cd:22:60:f5:95:ba:37:03:80:a9: c7:ea:41:c0:5e:58:96:6c:24:68:0f:73:53:1f:98:50:cd:5d: dc:e2:6f:de:dc:46:04:9b:f2:64:4f:0d:26:24:30:44:ca:34: 5d:94:91:48:ec:da:c5:4b:5b:cc:9d:15:4c:6c:51:db:82:30: 73:4b:ea:0b:de:88:bd:5e:c7:cd:fe:04:22:27:98:37:8d:7c: 92:a3:fe:ef:bd:0f:58:d4:3d:7f:90:a7:a6:71:62:62:bf:f7: 4c:15:e1:6d:3a:99:c2:d9:79:8c:c3:b7:5e:c5:7c:36:1d:a6: 6e:96:38:e6:87:fb:c5:24:84:9d:b4:fe:cb:67:cc:0d:ad:14: 00:63:fc:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUwODIzMDIyNTM1WhcNMjUwODMwMDIyNTM1WjAYMRYwFAYD VQQDEw02OGE5MjZhMC1iODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAKTTE69mdLhv7wNIdMM7eWRlA61u6Z8RgQfq4HnLFeLZrlWIxCBlzPnPxu6 9461Vlogoel/qy8vmhgszcKU8+l2cZz8egn7fR13XGtbPc+QjaCUu09GVvIv5Kp2 MdFIKcDJWt57jeppS1FreOTkEIx6YbQrvHf7Nhd9uKvB3IklUyJUFvpSHM/y8t9L /KYemEmy/5JnUM+5Yz/5YSYS7eblrcpSva+Z9nCCT+Ir7917YaoRoWbt+uiQKF1i K2ynnFMpba4qqGiMbHFNAyZULf+x6oXfKKjISZaZBTNLMFesHUkK+GPUglUA0aEA YZurhCHwLsOAlqWZM3FE8XL3kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3QPR/q r5PH+t+XmE7X+ysvNdT5MB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+uCXVzJHgWb46qUcqPHFgX3jVfKb+wtddyMcQMSjtgV/hHNQEhVn8 vZQy3uT6skgSk5Pssjs0x6unXM9m9RetEmr6Ou6Da8DIbP8GxcdAcDG+2fkH0ejr 3pTX0hYbsBd5khL0/7QZ5U/TLcOe14pRLcYWOs0iYPWVujcDgKnH6kHAXliWbCRo D3NTH5hQzV3c4m/e3EYEm/JkTw0mJDBEyjRdlJFI7NrFS1vMnRVMbFHbgjBzS+oL 3oi9XsfN/gQiJ5g3jXySo/7vvQ9Y1D1/kKemcWJiv/dMFeFtOpnC2XmMw7dexXw2 HaZuljjmh/vFJISdtP7LZ8wNrRQAY/wV -----END CERTIFICATE-----Generated at Sun Aug 24 06:25:03 2025 by rpki-client