$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: YA0i+IUzoXFNeStVF4ZT1MhfaWQjgJl8UUwzhPg6tY4= Subject key identifier: 60:77:07:FC:DB:44:4E:A4:C2:D8:61:A7:46:DB:13:31:D3:08:A8:D5 Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 061F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 061A Signing time: Fri 08 Aug 2025 23:12:58 +0000 Manifest this update: Fri 08 Aug 2025 23:12:57 +0000 Manifest next update: Fri 15 Aug 2025 23:12:57 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: SZfRD6dEs4uvJr5eIBkUYPQgBxGiNI5ftn7uENKoecQ=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: 6T0bGam9Fz3MuC3/hi4HGnadBCMddUZ6zt+H3AVBHfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1567 (0x61f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: Aug 8 23:12:57 2025 GMT Not After : Aug 15 23:12:57 2025 GMT Subject: CN=6896847a-7456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3d:01:11:0a:a4:09:76:90:92:7c:a6:5d:e3: 28:a5:4a:69:99:4c:88:fb:86:1e:c6:75:2a:ae:fb: dd:55:bb:ba:ff:8c:61:d0:62:3f:05:24:db:c8:df: 84:5d:03:21:f4:a6:c9:ae:df:69:09:f2:7e:db:c9: 19:3b:06:bb:1e:db:49:49:17:ea:43:40:fc:16:c0: d0:f9:5a:1e:fb:6a:38:92:7d:c5:00:51:d1:84:57: 2e:d1:b9:f2:c9:e4:ca:85:73:33:39:0e:cf:f0:5e: 08:e8:5c:b4:d6:9d:c6:f1:c5:f0:99:14:5e:6a:bb: 29:00:e1:2b:89:c2:d2:4c:6d:68:40:28:42:99:e3: ca:9e:46:b4:bf:f4:1f:7e:bb:1b:7b:b8:03:37:87: 1c:26:88:04:57:cc:0b:31:1d:54:ce:01:d4:58:29: 6b:30:9c:a9:55:fd:80:7b:59:0b:1d:e2:11:11:fc: 13:37:44:30:35:47:90:e9:61:72:54:7d:9c:70:04: 6b:fc:34:6b:91:e3:cb:50:17:b5:36:b5:e4:6b:5c: 9b:b9:ee:47:91:74:d3:29:c2:c2:1f:ab:d0:f8:75: 34:da:6b:74:59:de:14:d2:ac:26:ff:fe:a3:36:4d: 27:80:24:7e:bc:57:2d:f8:0a:fe:b9:28:e5:20:93: 2c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:77:07:FC:DB:44:4E:A4:C2:D8:61:A7:46:DB:13:31:D3:08:A8:D5 X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:74:4d:51:71:3b:03:1e:5b:18:82:47:df:ce:f1:b7:9d:da: de:b6:3f:25:15:11:e1:50:46:a1:67:2a:c4:8a:25:d7:b3:34: 1f:1b:c3:e7:70:4b:2b:56:d4:c3:9c:45:85:1e:21:c0:f9:fc: 18:cf:ea:8f:27:05:d1:37:6f:b4:2f:94:6a:ea:ba:c2:da:c4: 34:fa:69:37:ab:bb:a3:f6:3e:40:90:ef:98:c0:78:1a:73:c5: 38:fe:c3:07:39:8f:17:2b:c8:66:b8:d5:5a:2b:26:fb:6f:ab: 8c:11:33:c9:40:6e:06:c5:cb:5b:b8:12:03:2c:85:69:77:b5: f1:57:f5:60:0f:95:6b:e5:1b:b2:d9:19:57:3b:14:91:2b:84: d3:02:76:e5:8c:07:3c:61:2d:01:61:35:77:c8:7a:3a:55:b5: d4:de:50:34:cb:9d:cd:c1:3b:8b:dc:b0:2c:41:29:3d:94:98: a8:53:0e:0d:0d:5f:2c:89:72:94:87:eb:32:6d:e2:f4:fe:0e: 68:b4:ce:40:d2:58:aa:1d:e8:19:ce:ea:e2:de:b2:39:be:4d: 05:90:aa:d9:38:0a:11:65:e1:d7:1e:8c:f9:58:cd:9d:fc:0e: c2:cb:8b:53:c1:b6:bc:09:9e:4a:9a:9b:20:9e:e4:42:14:f9: 43:4c:06:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjUwODA4MjMxMjU3WhcNMjUwODE1MjMxMjU3WjAYMRYwFAYD VQQDEw02ODk2ODQ3YS03NDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5j0BEQqkCXaQknymXeMopUppmUyI+4YexnUqrvvdVbu6/4xh0GI/BSTbyN+E XQMh9KbJrt9pCfJ+28kZOwa7HttJSRfqQ0D8FsDQ+Voe+2o4kn3FAFHRhFcu0bny yeTKhXMzOQ7P8F4I6Fy01p3G8cXwmRRearspAOEricLSTG1oQChCmePKnka0v/Qf frsbe7gDN4ccJogEV8wLMR1UzgHUWClrMJypVf2Ae1kLHeIREfwTN0QwNUeQ6WFy VH2ccARr/DRrkePLUBe1NrXka1ybue5HkXTTKcLCH6vQ+HU02mt0Wd4U0qwm//6j Nk0ngCR+vFct+Ar+uSjlIJMsfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGB3B/zb RE6kwthhp0bbEzHTCKjVMB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBedE1RcTsDHlsYgkffzvG3ndretj8lFRHhUEahZyrEiiXXszQfG8Pn cEsrVtTDnEWFHiHA+fwYz+qPJwXRN2+0L5Rq6rrC2sQ0+mk3q7uj9j5AkO+YwHga c8U4/sMHOY8XK8hmuNVaKyb7b6uMETPJQG4GxctbuBIDLIVpd7XxV/VgD5Vr5Ruy 2RlXOxSRK4TTAnbljAc8YS0BYTV3yHo6VbXU3lA0y53NwTuL3LAsQSk9lJioUw4N DV8siXKUh+sybeL0/g5otM5A0liqHegZzuri3rI5vk0FkKrZOAoRZeHXHoz5WM2d /A7Cy4tTwba8CZ5KmpsgnuRCFPlDTAat -----END CERTIFICATE-----Generated at Sun Aug 10 16:11:45 2025 by rpki-client