$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json) Hash identifier: Do/TpGz59Sf+Y8xoP12sO58sS4SRGXYOS6A+HBtSs9U= Subject key identifier: 24:CE:10:83:0A:06:38:40:F1:46:FA:87:73:09:00:80:C0:B0:54:8E Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft Manifest number: 01A3 Signing time: Wed 13 Aug 2025 03:50:09 +0000 Manifest this update: Wed 13 Aug 2025 03:50:09 +0000 Manifest next update: Wed 20 Aug 2025 03:50:09 +0000 Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: kNrkZS9e6nh40Trn33ks8E36OCEeSQGsEJJ3LdAknz4=) 2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: cgIQr0GieCik6XIQ9DuWPAAcXd8eAWq6OJRsIDCYebA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 03:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Validity Not Before: Aug 13 03:50:09 2025 GMT Not After : Aug 20 03:50:09 2025 GMT Subject: CN=689c0b71-9688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:01:2f:b8:1d:9e:33:af:d7:22:e7:4b:cb: 3e:44:cd:a2:bf:62:f1:1f:e1:79:d1:29:cc:0b:0d: dd:ca:dd:d0:2d:6c:6c:f9:68:fc:ab:99:1b:0b:54: f0:14:3a:71:b4:cb:47:40:58:66:35:62:4d:2e:0b: be:6d:ec:4a:2c:0c:33:28:ea:c4:fe:6f:fe:e7:5f: c4:05:ab:08:07:3d:b8:9e:18:dd:75:66:94:48:cf: e5:bd:2c:b7:f0:00:1e:06:b8:e5:44:2e:5f:4c:8d: 6e:fb:67:c2:88:ec:88:8c:6d:ab:39:ec:55:aa:99: aa:c7:27:77:c7:b3:92:f8:91:7a:b5:65:f4:23:3b: 85:55:81:4e:02:c4:75:9c:8a:d6:ec:24:d8:99:78: 94:10:cf:a4:83:05:fc:05:03:28:d2:44:6f:29:e0: e9:4a:81:9d:82:00:16:10:e9:ab:47:a9:b2:cc:18: e9:81:e0:bf:24:9a:c1:2c:36:38:bd:2d:6f:8f:22: 20:da:ee:a0:53:d5:21:f5:96:dc:d5:f9:71:2a:a9: 70:09:4b:91:81:86:57:40:b2:c3:79:7e:c2:5a:c0: 5c:da:d4:57:0b:5d:4a:d2:af:07:fe:f0:3f:7d:fb: 51:ee:6c:79:f9:74:59:e5:e1:49:3c:e1:70:18:28: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CE:10:83:0A:06:38:40:F1:46:FA:87:73:09:00:80:C0:B0:54:8E X509v3 Authority Key Identifier: keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:53:a0:8b:93:55:84:88:2a:df:6d:63:46:b5:8d:d3:1c:37: e7:96:ca:e8:43:c7:fa:a2:e1:d3:4a:5b:30:1b:c0:cc:21:f9: 3b:83:4b:d9:6c:44:29:6a:37:a3:32:e1:64:e7:2d:31:a0:88: e2:27:c5:5a:70:0b:76:b7:c6:7f:0d:39:86:eb:c1:1a:15:4a: b7:bf:73:f9:7b:cc:29:50:1b:98:17:50:c6:fc:bd:0e:48:c9: 38:09:fd:fa:1f:ae:fa:02:30:06:cf:d7:30:bf:8a:d5:28:dc: b9:1b:36:c6:71:20:54:25:4f:b7:ed:35:04:c0:e9:aa:8e:47: e5:f1:00:64:ae:5b:2f:43:ed:38:4b:b8:14:90:fb:96:4c:14: 5c:65:9d:b0:58:3e:e3:cd:39:76:95:08:7a:e3:1b:a0:c8:e6: 57:5f:60:b1:4d:5b:99:a6:3c:35:d2:d5:73:da:bc:d5:9b:7a: c8:cb:2a:31:27:45:b6:fb:ab:23:95:57:2a:3a:cf:cd:a8:71: 0d:37:d1:f3:d7:12:ce:ec:ed:1a:c3:5d:6c:0b:f8:cd:ec:a8: d3:aa:03:1f:97:51:62:f9:82:65:c9:57:7d:01:87:3f:b9:20: 24:c0:83:04:6f:14:1d:8d:88:8f:d5:16:45:a1:7d:e5:bb:ae: 3c:b7:df:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0 MzI4NzIzQTAwHhcNMjUwODEzMDM1MDA5WhcNMjUwODIwMDM1MDA5WjAYMRYwFAYD VQQDEw02ODljMGI3MS05Njg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAEBL7gdnjOv1yLnS8s+RM2iv2LxH+F50SnMCw3dyt3QLWxs+Wj8q5kbC1Tw FDpxtMtHQFhmNWJNLgu+bexKLAwzKOrE/m/+51/EBasIBz24nhjddWaUSM/lvSy3 8AAeBrjlRC5fTI1u+2fCiOyIjG2rOexVqpmqxyd3x7OS+JF6tWX0IzuFVYFOAsR1 nIrW7CTYmXiUEM+kgwX8BQMo0kRvKeDpSoGdggAWEOmrR6myzBjpgeC/JJrBLDY4 vS1vjyIg2u6gU9Uh9Zbc1flxKqlwCUuRgYZXQLLDeX7CWsBc2tRXC11K0q8H/vA/ fftR7mx5+XRZ5eFJPOFwGCjUbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTOEIMK BjhA8Ub6h3MJAIDAsFSOMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0 OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN QllSV2pBWkt1QU5ES0hJNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5U6CLk1WEiCrfbWNGtY3THDfnlsroQ8f6ouHTSlswG8DMIfk7g0vZ bEQpajejMuFk5y0xoIjiJ8VacAt2t8Z/DTmG68EaFUq3v3P5e8wpUBuYF1DG/L0O SMk4Cf36H676AjAGz9cwv4rVKNy5GzbGcSBUJU+37TUEwOmqjkfl8QBkrlsvQ+04 S7gUkPuWTBRcZZ2wWD7jzTl2lQh64xugyOZXX2CxTVuZpjw10tVz2rzVm3rIyyox J0W2+6sjlVcqOs/NqHENN9Hz1xLO7O0aw11sC/jN7KjTqgMfl1Fi+YJlyVd9AYc/ uSAkwIMEbxQdjYiP1RZFoX3lu648t9/u -----END CERTIFICATE-----Generated at Wed Aug 13 05:35:53 2025 by rpki-client