$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft File: EPSBzyjc51gajMuOUN4Jj3yLyRU.mft (raw, json) Hash identifier: RCi3iFm9vLRyKyMJB2azGI9DG6XDgwU4lxkKJuLUNv8= Subject key identifier: 18:8E:D7:6F:2D:0B:9B:15:5C:D4:C7:8E:54:BE:0C:35:C4:E2:74:16 Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 Certificate issuer: /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft Manifest number: 012F Signing time: Sat 09 Aug 2025 04:58:14 +0000 Manifest this update: Sat 09 Aug 2025 04:58:13 +0000 Manifest next update: Sat 16 Aug 2025 04:58:13 +0000 Files and hashes: 1: EPSBzyjc51gajMuOUN4Jj3yLyRU.crl (hash: wd6lcdfW15F57izGsxux81zidHfgKwjQULhLQZqHPV0=) 2: E070CA0CAA2E11EEA404D421C4F9AE02.roa (hash: iZU8zdfl9m+d7mdN1RiWPOsL2RUjP7KC4vEHrZwKmZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122134, serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Validity Not Before: Aug 9 04:58:13 2025 GMT Not After : Aug 16 04:58:13 2025 GMT Subject: CN=6896d566-4241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:74:d9:c5:44:8e:ac:e5:25:33:26:50:37: 0a:4e:34:20:42:1c:2d:8b:0a:58:f1:9e:75:ea:c9: 9c:06:c6:bb:6c:2b:56:30:fd:59:30:e8:79:28:4a: c5:5b:cb:d8:5f:fe:c1:36:32:72:2c:91:7a:6f:e3: bc:82:f9:74:f9:0f:fa:64:d9:59:ef:c8:a6:ec:a1: fd:96:03:e3:6c:83:64:e7:07:1a:a3:0d:53:12:24: 71:c7:51:13:09:e3:62:66:5f:43:f8:3e:2f:8d:d1: 39:c4:4a:5e:9b:b6:bb:f4:c5:19:8b:d1:4c:42:21: ec:18:6e:ef:00:f8:40:ea:19:45:1b:b8:28:3e:c0: 43:11:82:9f:5c:fe:77:ba:5c:8c:40:6d:fe:58:53: 94:ca:70:7c:38:46:11:77:05:b2:43:53:ec:ab:31: 84:af:8b:0e:3d:c0:59:d7:95:9c:b7:1b:f0:d9:cb: 0d:67:5f:e1:d4:f2:df:03:ff:b3:19:4f:c2:a6:76: e1:cc:6f:0c:cc:05:44:05:45:56:a2:5e:a5:b9:34: f5:07:8d:d9:dc:35:73:71:8b:a2:b0:ef:7b:f4:a5: 99:99:62:a4:b5:46:e3:0e:ff:ac:d9:2f:2c:3b:62: a8:6c:c0:13:3a:c1:cd:c2:01:3d:db:ed:e0:a8:db: b6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8E:D7:6F:2D:0B:9B:15:5C:D4:C7:8E:54:BE:0C:35:C4:E2:74:16 X509v3 Authority Key Identifier: keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0f:fa:4d:15:51:20:18:b3:5f:4e:10:48:da:91:56:d0:10: b2:8b:7c:f9:db:67:00:4a:4f:eb:d7:e9:a6:f9:68:7e:78:b5: c0:d7:0b:b8:8f:ed:c8:15:70:fb:df:8e:b3:d3:1e:1b:45:99: 60:b9:9c:88:d6:df:36:4a:7c:fa:b9:6d:c8:0b:ca:47:ec:ae: a9:4a:3d:35:26:a4:b1:70:7f:e5:c5:8d:7f:30:2f:ca:bb:9a: 51:cb:dc:d0:ab:33:52:43:91:b3:9b:86:00:0b:5f:78:2b:67: ee:dc:49:36:4c:ee:a7:d0:37:df:fd:8e:7b:ab:0c:eb:29:48: b7:ab:82:8b:db:f6:6e:d9:06:b3:d0:ba:cf:77:56:a2:c8:54: 74:2b:eb:fa:e9:01:54:67:46:60:27:6f:26:8f:8d:df:48:ea: 9a:de:85:aa:6f:d5:9a:87:a6:de:2a:3a:d3:1f:70:26:7b:73: f8:47:1c:59:a6:85:66:4a:63:0a:16:82:86:a0:73:1e:d9:53: cb:c6:7d:73:93:f9:24:6b:50:df:64:5a:f9:ad:62:28:bf:55: ec:74:84:e3:27:cd:04:c2:0b:1b:5c:51:18:30:67:2d:5f:81: 48:1c:cb:a2:b6:63:a8:bf:85:41:53:d8:14:ff:90:e0:6f:ba: 4e:cf:93:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxMzQxMTAvBgNVBAUTKDEwRjQ4MUNGMjhEQ0U3NTgxQThDQ0I4RTUwREUwOThG N0M4QkM5MTUwHhcNMjUwODA5MDQ1ODEzWhcNMjUwODE2MDQ1ODEzWjAYMRYwFAYD VQQDEw02ODk2ZDU2Ni00MjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXt02cVEjqzlJTMmUDcKTjQgQhwtiwpY8Z516smcBsa7bCtWMP1ZMOh5KErF W8vYX/7BNjJyLJF6b+O8gvl0+Q/6ZNlZ78im7KH9lgPjbINk5wcaow1TEiRxx1ET CeNiZl9D+D4vjdE5xEpem7a79MUZi9FMQiHsGG7vAPhA6hlFG7goPsBDEYKfXP53 ulyMQG3+WFOUynB8OEYRdwWyQ1PsqzGEr4sOPcBZ15Wctxvw2csNZ1/h1PLfA/+z GU/CpnbhzG8MzAVEBUVWol6luTT1B43Z3DVzcYuisO979KWZmWKktUbjDv+s2S8s O2KobMATOsHNwgE92+3gqNu26QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiO128t C5sVXNTHjlS+DDXE4nQWMB8GA1UdIwQYMBaAFBD0gc8o3OdYGozLjlDeCY98i8kV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjEzNC83OUEzMzU3NkFB MkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUxZ2FqTXVPVU40SmozeUx5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQU0J6eWpjNTFnYWpNdU9VTjRKajN5THlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjEzNC83OUEzMzU3NkFBMkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUx Z2FqTXVPVU40SmozeUx5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/D/pNFVEgGLNfThBI2pFW0BCyi3z522cASk/r1+mm+Wh+eLXA1wu4 j+3IFXD7346z0x4bRZlguZyI1t82Snz6uW3IC8pH7K6pSj01JqSxcH/lxY1/MC/K u5pRy9zQqzNSQ5Gzm4YAC194K2fu3Ek2TO6n0Dff/Y57qwzrKUi3q4KL2/Zu2Qaz 0LrPd1aiyFR0K+v66QFUZ0ZgJ28mj43fSOqa3oWqb9Wah6beKjrTH3Ame3P4RxxZ poVmSmMKFoKGoHMe2VPLxn1zk/kka1DfZFr5rWIov1XsdITjJ80EwgsbXFEYMGct X4FIHMuitmOov4VBU9gU/5Dgb7pOz5OI -----END CERTIFICATE-----Generated at Mon Aug 11 01:47:48 2025 by rpki-client