$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft File: EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json) Hash identifier: KzGSIrwT6W6fkp1NCJRwhPMNKI5pwxWy4aB18/rsi4o= Subject key identifier: BB:B3:8C:00:31:83:68:67:B7:A1:73:79:6C:55:C8:FA:5A:F3:0E:D2 Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32 Certificate issuer: /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432 Certificate serial: 0491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft Manifest number: 0489 Signing time: Thu 07 Aug 2025 00:34:16 +0000 Manifest this update: Thu 07 Aug 2025 00:34:15 +0000 Manifest next update: Thu 14 Aug 2025 00:34:15 +0000 Files and hashes: 1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: A+stCvjGJyokwjAZiWTqGNHO/vuPy0GJZEhBWGiO8oU=) 2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: d5/NJRnIjibSymNbNk/lOaJ1Q3nAQoqs/MS6HVTtaFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1169 (0x491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117817, serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432 Validity Not Before: Aug 7 00:34:15 2025 GMT Not After : Aug 14 00:34:15 2025 GMT Subject: CN=6893f488-df85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:62:c7:de:e2:d0:5a:bf:61:4f:41:b8:5d: e5:a4:51:c6:7a:6a:74:b1:37:2e:61:41:9f:e1:a3: 89:5a:7d:4c:12:a2:40:af:cf:8f:78:37:8b:f9:4a: 09:71:13:99:22:7c:42:bf:cc:3e:30:77:de:f5:84: be:d3:ae:75:e0:e3:2c:d1:d9:cc:af:a9:ce:e2:2e: 48:41:e0:6b:a5:f8:a5:ff:40:2f:91:38:09:49:50: bf:88:21:10:18:00:54:ab:da:28:b2:74:bd:66:de: 39:50:95:8e:44:a6:71:1f:d1:41:30:bf:53:76:bf: c3:be:85:65:81:0d:e7:4d:c3:05:a7:cb:b1:cf:d8: 00:3d:57:1f:1f:2b:8b:4e:fb:69:93:25:49:71:b9: be:aa:d8:18:c0:a7:d2:ed:c0:cb:11:e9:21:ab:9e: fb:13:92:35:ee:ac:70:8b:75:85:76:b6:86:b3:6a: 00:5b:73:15:40:37:1a:69:47:d2:d8:b1:4b:00:ef: 1d:7b:f1:3d:af:ed:57:49:91:cf:cd:bf:31:76:a8: 19:2e:59:48:c6:52:7a:6e:3c:c5:90:e2:31:4f:9a: 7e:fd:c8:e9:7b:96:ba:d0:d1:ed:cc:52:2e:8b:aa: 95:1a:72:b8:26:0d:bb:78:b1:5f:f1:5c:a8:cc:6e: bf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B3:8C:00:31:83:68:67:B7:A1:73:79:6C:55:C8:FA:5A:F3:0E:D2 X509v3 Authority Key Identifier: keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:34:ef:42:2b:78:b9:38:70:88:1a:9a:24:5e:79:29:44:e1: e0:b1:19:3b:99:f1:8a:ad:34:7c:0f:df:09:76:46:0a:04:40: be:3d:bb:6c:00:43:bf:b5:9b:65:e4:3f:4f:e3:e3:ed:61:5f: 0b:7c:8e:61:50:24:2f:c6:51:6b:1a:82:87:21:bf:49:9b:5b: 27:84:cd:6f:12:d2:f8:b3:55:88:d5:45:ec:ae:81:cd:4f:86: 09:4d:43:24:05:61:ee:56:6e:9d:56:22:2f:ee:49:4e:84:6a: 5b:88:e1:61:da:fc:a8:d1:fa:9f:95:25:a6:b0:19:52:c5:9a: 78:7c:6e:39:0d:b5:dc:1c:ca:03:ab:ba:15:ff:44:32:21:e8: 2d:18:2d:d6:58:6e:b9:8c:3f:ca:68:1b:dd:ce:38:b2:86:fd: f6:17:78:c9:d3:97:e5:3e:7d:1a:0d:6e:92:0a:b9:32:e2:79: 7b:e7:9d:97:a0:af:1a:08:75:0b:f1:b4:ce:e0:0a:85:85:cd: f0:fa:33:47:42:85:d7:41:8c:15:c3:87:63:7d:52:29:c1:15: 41:29:92:f7:63:bf:f7:73:31:53:8c:f3:66:e9:88:7d:92:11: 9c:c4:6f:d4:c2:31:ac:ca:68:e0:0f:73:bf:d2:ad:1d:c2:e0: 78:48:00:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4MTcxMTAvBgNVBAUTKDEyOTRDNDhCQzY5NkFGRTgyMEJEMTU4MkYzNDM2N0JB REFCMDI0MzIwHhcNMjUwODA3MDAzNDE1WhcNMjUwODE0MDAzNDE1WjAYMRYwFAYD VQQDEw02ODkzZjQ4OC1kZjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgRix97i0Fq/YU9BuF3lpFHGemp0sTcuYUGf4aOJWn1MEqJAr8+PeDeL+UoJ cROZInxCv8w+MHfe9YS+06514OMs0dnMr6nO4i5IQeBrpfil/0AvkTgJSVC/iCEQ GABUq9oosnS9Zt45UJWORKZxH9FBML9Tdr/DvoVlgQ3nTcMFp8uxz9gAPVcfHyuL TvtpkyVJcbm+qtgYwKfS7cDLEekhq577E5I17qxwi3WFdraGs2oAW3MVQDcaaUfS 2LFLAO8de/E9r+1XSZHPzb8xdqgZLllIxlJ6bjzFkOIxT5p+/cjpe5a60NHtzFIu i6qVGnK4Jg27eLFf8VyozG6/ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuzjAAx g2hnt6FzeWxVyPpa8w7SMB8GA1UdIwQYMBaAFBKUxIvGlq/oIL0VgvNDZ7rasCQy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgxNy8wNjgzRUI3MDRE QUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3ItZ2d2UldDODBObnV0cXdK REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VwVEVpOGFXci1nZ3ZSV0M4ME5udXRxd0pESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzgxNy8wNjgzRUI3MDREQUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3It Z2d2UldDODBObnV0cXdKREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCNO9CK3i5OHCIGpokXnkpROHgsRk7mfGKrTR8D98JdkYKBEC+Pbts AEO/tZtl5D9P4+PtYV8LfI5hUCQvxlFrGoKHIb9Jm1snhM1vEtL4s1WI1UXsroHN T4YJTUMkBWHuVm6dViIv7klOhGpbiOFh2vyo0fqflSWmsBlSxZp4fG45DbXcHMoD q7oV/0QyIegtGC3WWG65jD/KaBvdzjiyhv32F3jJ05flPn0aDW6SCrky4nl7552X oK8aCHUL8bTO4AqFhc3w+jNHQoXXQYwVw4djfVIpwRVBKZL3Y7/3czFTjPNm6Yh9 khGcxG/UwjGsymjgD3O/0q0dwuB4SADU -----END CERTIFICATE-----Generated at Fri Aug 8 19:22:57 2025 by rpki-client