$ rpki-client -vvf rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft File: hEIqhfpOTNTW7plGMaPQ8OboLTo.mft (raw, json) Hash identifier: CBMKjEFLINigR4DDFODq1vlCvzlICYutVO5p7xDGNLA= Subject key identifier: C0:3E:C8:71:65:7C:42:1C:BC:10:DE:77:A4:15:94:82:59:0E:FE:38 Authority key identifier: 84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A Certificate issuer: /CN=A911C61C/serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft Manifest number: 037D Signing time: Sat 09 Aug 2025 01:23:29 +0000 Manifest this update: Sat 09 Aug 2025 01:23:29 +0000 Manifest next update: Sat 16 Aug 2025 01:23:29 +0000 Files and hashes: 1: hEIqhfpOTNTW7plGMaPQ8OboLTo.crl (hash: R8hKuo/q5BDuHugNK4BTM9U+CnaeHTIFneIF0YeQgWU=) 2: 214E0454B58A11ECAF32FE29C4F9AE02.roa (hash: m/bIsnc72f+GKlsPAyrWqEs82wNRpWBNpwKZDStdnM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C61C, serialNumber=84422A85FA4E4CD4D6EE994631A3D0F0E6E82D3A Validity Not Before: Aug 9 01:23:29 2025 GMT Not After : Aug 16 01:23:29 2025 GMT Subject: CN=6896a311-3485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:92:c3:53:3b:db:c6:79:b9:ae:dc:53:a0: f6:67:44:05:c0:38:d8:2b:ba:c6:d3:ed:94:7a:94: 09:7e:f1:3b:b6:c7:f4:68:9f:62:96:6c:f9:d3:03: 3d:94:55:1e:2a:77:71:1c:90:a8:4e:fc:81:90:8b: 6c:b1:a9:a4:28:cf:35:b4:96:da:9f:21:a9:72:12: 4c:68:85:3d:ab:a9:f8:a2:21:5b:cc:c7:3f:59:6f: ad:6d:02:8f:81:54:95:99:3d:f3:a4:8b:34:c1:50: da:3b:36:9e:f2:bc:8f:bd:4f:c1:3f:61:03:89:f1: 79:d7:7e:fb:d4:b8:f8:69:a5:12:6d:64:0d:b2:b2: 82:d5:8a:ff:89:c4:47:45:24:c9:74:23:cf:f7:7c: 95:a4:95:36:b7:f4:56:ab:8a:35:64:98:91:57:72: 90:8a:4b:bd:4e:41:b3:ca:36:fc:58:d5:ed:26:89: f2:76:17:71:c0:77:ff:82:12:b4:5e:5c:c3:e7:79: 33:6c:31:e2:33:c6:7a:3e:20:59:71:86:f3:6a:58: d2:db:b7:97:e1:d7:f8:77:22:f6:20:59:f4:68:6a: c2:5d:cc:0f:41:2c:91:ca:ef:8d:6f:e5:71:fb:b7: 4b:08:71:45:a6:b0:a5:5f:a7:c8:23:ae:01:0b:a2: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3E:C8:71:65:7C:42:1C:BC:10:DE:77:A4:15:94:82:59:0E:FE:38 X509v3 Authority Key Identifier: keyid:84:42:2A:85:FA:4E:4C:D4:D6:EE:99:46:31:A3:D0:F0:E6:E8:2D:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEIqhfpOTNTW7plGMaPQ8OboLTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C61C/2A7090FAB58611ECAE81ED22C4F9AE02/hEIqhfpOTNTW7plGMaPQ8OboLTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:de:9b:16:9b:ef:8d:ad:c1:be:d3:db:12:ba:db:0a:7f:9e: eb:8e:78:74:18:b2:2f:50:c3:e6:ca:5c:4c:d7:a0:68:99:95: 0e:a2:24:22:20:2d:9d:01:70:2c:c0:0e:20:ae:1d:2f:59:f7: d6:d5:11:dd:27:5d:42:4e:ca:d8:d3:46:cb:c5:8f:41:c7:79: c0:45:d4:57:b5:08:06:9e:bb:9d:b3:67:4d:f6:e8:d7:5f:34: 37:06:c6:db:b9:15:70:d8:fa:2d:fc:13:91:a9:4e:39:a3:c1: 0b:4b:7d:51:93:e3:06:83:52:11:8b:7c:e2:71:dd:d9:16:e3: 8d:c4:94:be:ec:a1:de:bc:f6:1a:e2:2a:86:4f:18:29:af:35: 14:c9:cb:fc:ed:64:bc:6e:0f:cf:01:de:db:b8:0a:cb:39:3b: 1c:f8:d5:05:91:11:0d:0a:c9:02:1f:0e:59:c6:fe:7c:67:95: 6b:f6:ab:70:72:f4:0d:f1:b5:ea:5b:1f:ff:6c:4f:1d:02:1e: c7:90:e3:bd:11:87:f8:01:c2:d2:dd:12:f9:7c:c1:88:fb:a3: 0e:63:40:20:ce:ae:7b:9b:e7:52:9e:60:05:b1:f0:97:f0:4f: 4a:a6:1e:8b:86:f0:c8:64:d9:8d:b8:71:52:95:f3:ee:03:1c: da:11:cd:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MUMxMTAvBgNVBAUTKDg0NDIyQTg1RkE0RTRDRDRENkVFOTk0NjMxQTNEMEYw RTZFODJEM0EwHhcNMjUwODA5MDEyMzI5WhcNMjUwODE2MDEyMzI5WjAYMRYwFAYD VQQDEw02ODk2YTMxMS0zNDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZuSw1M728Z5ua7cU6D2Z0QFwDjYK7rG0+2UepQJfvE7tsf0aJ9ilmz50wM9 lFUeKndxHJCoTvyBkItssamkKM81tJbanyGpchJMaIU9q6n4oiFbzMc/WW+tbQKP gVSVmT3zpIs0wVDaOzae8ryPvU/BP2EDifF513771Lj4aaUSbWQNsrKC1Yr/icRH RSTJdCPP93yVpJU2t/RWq4o1ZJiRV3KQiku9TkGzyjb8WNXtJonydhdxwHf/ghK0 XlzD53kzbDHiM8Z6PiBZcYbzaljS27eX4df4dyL2IFn0aGrCXcwPQSyRyu+Nb+Vx +7dLCHFFprClX6fII64BC6Ie7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMA+yHFl fEIcvBDed6QVlIJZDv44MB8GA1UdIwQYMBaAFIRCKoX6TkzU1u6ZRjGj0PDm6C06 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYxQy8yQTcwOTBGQUI1 ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1ROVFc3cGxHTWFQUThPYm9M VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hFSXFoZnBPVE5UVzdwbEdNYVBROE9ib0xUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYxQy8yQTcwOTBGQUI1ODYxMUVDQUU4MUVEMjJDNEY5QUUwMi9oRUlxaGZwT1RO VFc3cGxHTWFQUThPYm9MVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY3psWm++NrcG+09sSutsKf57rjnh0GLIvUMPmylxM16BomZUOoiQi IC2dAXAswA4grh0vWffW1RHdJ11CTsrY00bLxY9Bx3nARdRXtQgGnruds2dN9ujX XzQ3BsbbuRVw2Pot/BORqU45o8ELS31Rk+MGg1IRi3zicd3ZFuONxJS+7KHevPYa 4iqGTxgprzUUycv87WS8bg/PAd7buArLOTsc+NUFkRENCskCHw5Zxv58Z5Vr9qtw cvQN8bXqWx//bE8dAh7HkOO9EYf4AcLS3RL5fMGI+6MOY0Agzq57m+dSnmAFsfCX 8E9Kph6LhvDIZNmNuHFSlfPuAxzaEc1h -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:15 2025 by rpki-client