$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: LL56SN/I62hoSCgbjW8vd6MQ9n/eVzgb459OSEZS1tU= Subject key identifier: 4C:38:54:02:E8:CD:3E:54:20:9A:26:A3:72:BE:E6:42:C0:4A:12:6E Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 03B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 03B6 Signing time: Sat 23 Aug 2025 00:57:04 +0000 Manifest this update: Sat 23 Aug 2025 00:57:04 +0000 Manifest next update: Sat 30 Aug 2025 00:57:04 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: XlJ9hQtzKoB0GPP63kFm0s07yPPAUjmV+Yol8TkAPyA=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:57:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 952 (0x3b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: Aug 23 00:57:04 2025 GMT Not After : Aug 30 00:57:04 2025 GMT Subject: CN=68a911e0-5a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:24:60:ed:02:e9:97:d9:a4:af:4c:20:fa: 73:84:53:64:7c:80:75:4a:92:8c:51:5f:54:f3:a5: f0:8b:4e:8b:5a:54:c9:a1:29:c8:15:db:e6:c7:10: 23:35:a7:dc:e1:1b:d9:97:66:8f:1a:88:87:69:a4: 2f:36:69:1d:ef:12:05:c2:0b:55:2d:ba:90:bf:2f: bd:90:cd:75:cb:53:a5:7b:8e:de:73:c6:c9:f4:1b: 92:23:ff:dc:9c:c7:ac:fc:66:a2:d6:13:8a:19:58: cf:d3:eb:b9:c3:54:8d:87:41:0c:37:01:14:f2:9c: 9c:25:4e:83:b3:da:3e:2f:c9:9a:90:51:25:51:c6: a2:83:13:38:5d:8d:b1:fb:ca:47:50:84:8d:aa:4d: 68:85:6e:ed:6d:e1:e1:32:f2:91:34:6a:ee:c7:f2: c6:d4:7d:6d:71:df:a3:ae:fa:0e:82:bc:96:71:53: d7:05:08:9d:d7:80:fd:a2:f8:23:d4:b6:59:17:ba: 7f:96:67:ce:e8:da:86:63:3f:60:23:a0:9f:65:77: a8:4c:46:68:e3:04:2e:bc:f4:c2:9b:10:e8:c7:68: 92:c2:54:7f:90:fe:cc:7e:c3:d0:06:65:c6:43:fd: b1:de:21:cd:d7:55:f5:6c:b9:28:e7:2b:16:a3:87: 05:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:38:54:02:E8:CD:3E:54:20:9A:26:A3:72:BE:E6:42:C0:4A:12:6E X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a6:5b:2b:0f:32:37:68:9a:c0:3c:22:e5:98:83:62:f5:80: 22:4a:37:48:80:e3:11:6d:48:63:eb:13:74:13:14:59:c7:30: bb:46:db:05:a0:73:cd:fb:60:78:be:59:f7:2b:f6:f9:4b:16: 13:91:10:c2:bb:a7:bf:8d:07:86:a4:f4:7e:89:98:72:6a:02: 42:3a:3f:bf:b9:b0:1e:f9:a1:ee:74:ab:36:15:9c:63:aa:7c: 37:6a:c1:45:71:d3:a0:c0:3b:e3:2d:ac:a8:e1:61:4f:7f:26: 54:13:3f:4b:7f:9e:74:35:c6:9e:5f:07:3c:7a:4e:04:35:35: 47:a1:fa:68:c5:e3:96:ed:ad:e4:e8:b5:f1:cb:2a:3c:31:39: fd:b3:48:17:c3:c6:3d:5a:9f:e1:3a:a2:5c:17:71:9c:5f:3b: a7:fa:ca:aa:27:0c:8c:bf:84:d5:2b:95:bf:77:fe:a3:86:3c: 0d:7a:54:fb:a3:8d:a5:84:3f:c4:7e:ac:d0:cd:c3:71:88:69: 1a:57:60:d4:44:e9:73:d7:b2:a7:b9:86:ef:1c:38:6d:a1:a2: 50:db:52:e9:0b:f6:36:e0:5e:8d:2e:71:4b:a8:8d:eb:c8:44: ca:c9:cf:27:34:25:d1:1c:8a:54:90:c5:4d:8f:d4:b2:8f:d7: 0e:b5:3b:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjUwODIzMDA1NzA0WhcNMjUwODMwMDA1NzA0WjAYMRYwFAYD VQQDEw02OGE5MTFlMC01YTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusQkYO0C6ZfZpK9MIPpzhFNkfIB1SpKMUV9U86Xwi06LWlTJoSnIFdvmxxAj Nafc4RvZl2aPGoiHaaQvNmkd7xIFwgtVLbqQvy+9kM11y1Ole47ec8bJ9BuSI//c nMes/Gai1hOKGVjP0+u5w1SNh0EMNwEU8pycJU6Ds9o+L8makFElUcaigxM4XY2x +8pHUISNqk1ohW7tbeHhMvKRNGrux/LG1H1tcd+jrvoOgryWcVPXBQid14D9ovgj 1LZZF7p/lmfO6NqGYz9gI6CfZXeoTEZo4wQuvPTCmxDox2iSwlR/kP7MfsPQBmXG Q/2x3iHN11X1bLko5ysWo4cFkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEw4VALo zT5UIJomo3K+5kLAShJuMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbplsrDzI3aJrAPCLlmINi9YAiSjdIgOMRbUhj6xN0ExRZxzC7RtsF oHPN+2B4vln3K/b5SxYTkRDCu6e/jQeGpPR+iZhyagJCOj+/ubAe+aHudKs2FZxj qnw3asFFcdOgwDvjLayo4WFPfyZUEz9Lf550NcaeXwc8ek4ENTVHofpoxeOW7a3k 6LXxyyo8MTn9s0gXw8Y9Wp/hOqJcF3GcXzun+sqqJwyMv4TVK5W/d/6jhjwNelT7 o42lhD/EfqzQzcNxiGkaV2DUROlz17KnuYbvHDhtoaJQ21LpC/Y24F6NLnFLqI3r yETKyc8nNCXRHIpUkMVNj9Syj9cOtTt1 -----END CERTIFICATE-----Generated at Sat Aug 23 21:00:15 2025 by rpki-client