$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json) Hash identifier: +hMNALWnVc+al7csfeMoQgnOQ+cRVToEHR3H7eXCBbU= Subject key identifier: EF:9A:D0:46:BD:B0:BE:67:EC:D1:AD:60:5C:FF:6D:08:8A:CA:A9:F5 Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0B76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft Manifest number: 0B68 Signing time: Sun 10 Aug 2025 19:05:08 +0000 Manifest this update: Sun 10 Aug 2025 19:05:08 +0000 Manifest next update: Sun 17 Aug 2025 19:05:08 +0000 Files and hashes: 1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: 77klQbr1fz/+K5ZgkpxqgzNPGNOYfAQ7y0FevuvyI+8=) 2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: I91qaFQgep6EuuEEdqbhO4Prklw7ndmFH38wo16kLVk=) 3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: /cS7IVALMe9B/AtpjJXVY/jO3FykqwmgPTZQLz+GjqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2934 (0xb76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Aug 10 19:05:08 2025 GMT Not After : Aug 17 19:05:08 2025 GMT Subject: CN=6898ed64-587e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:73:62:68:96:4f:fc:d8:3e:3e:cc:0c:8b:43: 2c:64:f8:f2:21:ae:d0:e6:29:a2:63:46:4f:42:37: 3a:fa:8d:1a:20:fa:7c:05:a7:e4:d8:14:41:61:30: 61:ee:64:ae:da:fc:1c:97:9c:79:f4:84:b7:f2:7f: 04:58:fd:58:b5:cb:ab:82:6f:ff:cd:04:3f:7f:db: 34:a1:f7:85:47:0a:98:8e:e1:df:cd:b7:08:b0:74: 5e:00:76:62:55:ca:a1:e7:f1:8a:25:a6:88:91:10: 21:1f:70:57:d8:30:5e:e5:67:8d:26:5f:b5:e7:f0: 6d:0f:7b:03:d1:7b:6a:fc:05:9f:86:ce:7d:8d:be: 9b:2e:09:dd:15:88:44:78:21:d1:8f:d5:74:fb:41: 8d:dd:dc:08:d8:04:c9:c8:57:03:e3:38:cb:8c:ef: c6:f9:c5:54:d6:bc:09:38:4d:94:90:dc:90:b6:01: e9:87:18:09:e0:fd:7e:0f:8d:76:33:0a:9d:f2:61: 4a:88:7a:fb:9d:d9:df:61:91:54:2d:f2:55:35:24: 57:5e:7e:19:e5:34:ba:15:cc:af:de:7d:67:ea:b7: fc:5b:de:d7:17:23:10:9d:42:2c:ff:82:da:16:76: 31:7b:5f:d5:f7:8a:ea:8a:f0:38:53:e6:c6:4a:a6: 02:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9A:D0:46:BD:B0:BE:67:EC:D1:AD:60:5C:FF:6D:08:8A:CA:A9:F5 X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b1:04:75:3b:d1:b9:07:f0:78:eb:07:37:eb:cb:ef:a4:c6: e4:8a:b2:ec:de:fa:79:aa:0a:ca:70:cb:a7:ab:db:70:a5:c1: 6b:fa:e7:f4:fe:f2:ff:18:ad:53:32:a2:ac:9b:ff:5d:2f:6d: c0:59:ce:e1:4b:61:95:6a:fa:05:ae:06:78:00:75:18:f3:ce: 93:c1:7a:8e:3c:5a:6f:61:b6:a8:a5:9e:ea:87:e7:7f:77:6e: 5f:19:db:57:b2:ec:fc:ac:c9:79:54:00:d2:17:a7:36:b9:85: 73:99:ac:b5:20:7e:1a:3d:01:07:0f:11:38:64:37:ae:69:11: 08:fd:f3:1e:fd:5c:3b:04:12:8f:b2:82:6f:b5:bf:ba:43:b6: c9:b6:bd:bf:2d:c1:6e:1a:8c:63:23:9a:0a:f5:43:83:8b:c7: 40:98:85:ed:d2:d3:e5:a6:40:5e:fc:c7:08:5e:0b:5a:d1:88: e3:d8:23:78:8c:f5:13:7d:9a:33:75:a8:36:38:21:8e:74:8f: 90:52:54:40:ad:12:30:50:f3:0c:bd:4d:55:99:9f:ed:55:cf: 9d:9f:72:a0:48:c8:95:73:e0:57:81:11:4f:a3:07:69:6a:55: 92:b8:4a:ca:89:56:49:60:b5:ce:f4:ba:68:3d:23:04:b2:b5: 6a:e3:7c:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjUwODEwMTkwNTA4WhcNMjUwODE3MTkwNTA4WjAYMRYwFAYD VQQDEw02ODk4ZWQ2NC01ODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73NiaJZP/Ng+PswMi0MsZPjyIa7Q5imiY0ZPQjc6+o0aIPp8Bafk2BRBYTBh 7mSu2vwcl5x59IS38n8EWP1Ytcurgm//zQQ/f9s0ofeFRwqYjuHfzbcIsHReAHZi Vcqh5/GKJaaIkRAhH3BX2DBe5WeNJl+15/BtD3sD0Xtq/AWfhs59jb6bLgndFYhE eCHRj9V0+0GN3dwI2ATJyFcD4zjLjO/G+cVU1rwJOE2UkNyQtgHphxgJ4P1+D412 Mwqd8mFKiHr7ndnfYZFULfJVNSRXXn4Z5TS6Fcyv3n1n6rf8W97XFyMQnUIs/4La FnYxe1/V94rqivA4U+bGSqYCUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+a0Ea9 sL5n7NGtYFz/bQiKyqn1MB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTBGQS9BQUEwRUJFMDM2OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVY QnNadUY3OGIwLW1XSjZHQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzsQR1O9G5B/B46wc368vvpMbkirLs3vp5qgrKcMunq9twpcFr+uf0 /vL/GK1TMqKsm/9dL23AWc7hS2GVavoFrgZ4AHUY886TwXqOPFpvYbaopZ7qh+d/ d25fGdtXsuz8rMl5VADSF6c2uYVzmay1IH4aPQEHDxE4ZDeuaREI/fMe/Vw7BBKP soJvtb+6Q7bJtr2/LcFuGoxjI5oK9UODi8dAmIXt0tPlpkBe/McIXgta0Yjj2CN4 jPUTfZozdag2OCGOdI+QUlRArRIwUPMMvU1VmZ/tVc+dn3KgSMiVc+BXgRFPowdp alWSuErKiVZJYLXO9LpoPSMEsrVq43zA -----END CERTIFICATE-----Generated at Mon Aug 11 04:20:16 2025 by rpki-client