$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: qHLgO4dQqj+lGqhlAIo70SyCWAYOYN1M2mRyVTUwdB8= Subject key identifier: 1C:48:87:8F:90:28:C7:76:EE:DD:84:C0:34:A1:3E:90:CF:B9:4F:38 Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 020E Signing time: Mon 11 Aug 2025 02:16:44 +0000 Manifest this update: Mon 11 Aug 2025 02:16:44 +0000 Manifest next update: Mon 18 Aug 2025 02:16:44 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: MEixMzFCJfjPEf6F5KJGGFIY1vrxSjOw0nHTz3WIXho=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: y8u3ZZNWwXMV6EsCoReGtHsNbMX1mb+g+HfYKyQ+Y/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: Aug 11 02:16:44 2025 GMT Not After : Aug 18 02:16:44 2025 GMT Subject: CN=6899528c-a5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:43:bb:2f:3d:65:68:f3:87:e6:e3:5b:bd: a3:ed:4a:cd:c7:47:aa:76:c4:ef:84:83:e3:ff:5c: 21:e7:e4:a8:99:20:29:5c:55:97:89:05:40:4b:46: 29:fe:c2:e6:20:4f:e3:ce:45:f8:a5:77:c0:4e:cf: fd:bd:3c:b8:cb:c6:6a:1e:02:79:5a:c2:24:f0:65: 81:38:66:0f:7f:f8:8f:ed:81:43:66:31:38:bb:34: 83:e1:0e:e5:b1:7b:67:0b:58:a6:49:77:4e:2d:78: 66:0f:98:e9:27:26:11:4c:57:ee:35:d6:71:3a:71: 70:0b:83:4d:a2:1d:d8:6a:ba:21:4c:ce:55:61:dc: 54:2d:03:dc:2d:d9:d8:91:cf:a6:9c:8a:c2:45:b2: 04:62:2e:5a:69:eb:b2:45:78:b4:6d:45:7d:18:58: 74:d9:01:04:d7:95:d9:5e:96:71:ab:c0:ea:36:4e: 61:9a:b8:78:6f:17:75:fa:bf:07:c4:35:3f:0f:e3: 04:e8:0a:da:ef:56:58:41:33:29:48:a9:18:6b:3e: af:17:99:42:4c:d4:3a:64:27:eb:b0:a0:bc:af:05: 73:b1:a7:de:18:67:e4:fc:a4:b1:bb:37:f9:90:76: 62:81:15:05:ec:69:82:73:03:d2:03:b1:d3:ee:53: 0c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:48:87:8F:90:28:C7:76:EE:DD:84:C0:34:A1:3E:90:CF:B9:4F:38 X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5e:89:46:06:56:31:0c:3d:59:3c:2a:95:39:d7:fb:f6:ea: 31:86:cd:86:c3:5e:a4:c4:2b:5b:ef:e7:29:b4:6c:08:4b:88: 3e:3b:b0:76:f8:47:26:01:0a:08:e6:c2:4b:ee:32:22:30:39: d7:24:8b:bd:dc:b7:14:2b:25:09:fa:f6:6d:8d:51:67:a3:75: 21:f5:ec:0f:c1:e2:84:b0:ea:80:12:f6:49:53:77:5c:dd:41: 03:3f:6c:05:6d:31:fb:53:e4:74:80:05:ce:7c:b8:21:22:a7: b8:0b:26:fd:60:e8:ab:69:f7:0a:e6:5a:29:4b:7d:3c:20:05: 57:26:cc:08:25:1e:c8:30:94:0e:1a:9c:9a:c1:87:8c:8f:e5: 5c:48:aa:aa:df:cc:5d:fc:e9:24:a3:45:44:83:48:97:59:09: 21:0b:cf:0a:a0:ef:fe:3e:cb:7a:82:b3:61:9d:31:30:b8:1f: f4:04:a5:ba:16:d7:0c:49:84:d5:81:89:d8:13:db:06:2f:e8: 03:27:dc:c4:04:1b:16:32:bc:24:15:29:8a:9a:5c:1d:d4:bf: 37:e1:9d:b9:ef:95:56:39:df:7b:b7:71:31:f8:bd:73:95:20: 71:03:f9:07:e8:91:20:16:24:30:21:9f:1c:4d:1a:22:a3:fa: d7:e6:fa:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjUwODExMDIxNjQ0WhcNMjUwODE4MDIxNjQ0WjAYMRYwFAYD VQQDEw02ODk5NTI4Yy1hNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8dDuy89ZWjzh+bjW72j7UrNx0eqdsTvhIPj/1wh5+SomSApXFWXiQVAS0Yp /sLmIE/jzkX4pXfATs/9vTy4y8ZqHgJ5WsIk8GWBOGYPf/iP7YFDZjE4uzSD4Q7l sXtnC1imSXdOLXhmD5jpJyYRTFfuNdZxOnFwC4NNoh3YarohTM5VYdxULQPcLdnY kc+mnIrCRbIEYi5aaeuyRXi0bUV9GFh02QEE15XZXpZxq8DqNk5hmrh4bxd1+r8H xDU/D+ME6Ara71ZYQTMpSKkYaz6vF5lCTNQ6ZCfrsKC8rwVzsafeGGfk/KSxuzf5 kHZigRUF7GmCcwPSA7HT7lMMdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxIh4+Q KMd27t2EwDShPpDPuU84MB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbXolGBlYxDD1ZPCqVOdf79uoxhs2Gw16kxCtb7+cptGwIS4g+O7B2 +EcmAQoI5sJL7jIiMDnXJIu93LcUKyUJ+vZtjVFno3Uh9ewPweKEsOqAEvZJU3dc 3UEDP2wFbTH7U+R0gAXOfLghIqe4Cyb9YOirafcK5lopS308IAVXJswIJR7IMJQO GpyawYeMj+VcSKqq38xd/Okko0VEg0iXWQkhC88KoO/+Pst6grNhnTEwuB/0BKW6 FtcMSYTVgYnYE9sGL+gDJ9zEBBsWMrwkFSmKmlwd1L834Z2575VWOd97t3Ex+L1z lSBxA/kH6JEgFiQwIZ8cTRoio/rX5vpz -----END CERTIFICATE-----Generated at Mon Aug 11 10:43:13 2025 by rpki-client