$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: e0I2IznGpFiEABMPAkTspQpODnspOOyzG8oq6nqvhFw= Subject key identifier: B4:93:4B:B4:A3:52:62:37:13:A0:CC:B1:6F:1B:19:65:DF:BD:D1:D6 Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: 96 Signing time: Tue 05 Aug 2025 06:58:51 +0000 Manifest this update: Tue 05 Aug 2025 06:58:51 +0000 Manifest next update: Tue 12 Aug 2025 06:58:51 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: XEvaIQs/ony9zpk9/WPFTFAUS1iLTyDPDL/RHs7dFuU=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: 5nFCTmC5xU4JIe+ocqPzYmN20Z681T2Mb6LU4xxafNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Aug 5 06:58:51 2025 GMT Not After : Aug 12 06:58:51 2025 GMT Subject: CN=6891abab-113f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:85:71:b6:23:a1:3d:db:1c:43:ae:54:41:6b: 9c:64:f5:7d:c6:44:e6:3d:eb:0c:ce:20:e7:c1:73: 95:d7:69:f5:93:50:9f:cb:8c:b1:11:50:12:d7:6a: d1:28:16:0c:cc:d2:1e:8e:4a:f1:4c:21:f9:f3:b3: db:03:a0:94:1b:83:fc:90:82:ec:5a:5e:58:36:75: 4f:28:83:d3:da:32:9d:ba:de:52:c4:0d:f7:75:81: 31:05:ce:ee:91:8f:33:51:07:9b:5c:bf:b2:0d:45: ab:88:6c:07:7f:df:54:39:19:39:3c:5c:70:2e:f3: 52:c5:3c:ad:59:b3:aa:2c:ea:b6:1b:05:ea:70:1f: 3d:65:bb:e8:ec:6a:e5:e0:ee:b6:aa:92:26:90:06: 14:3b:f8:71:08:13:7e:fe:80:19:2e:c5:bd:96:d8: 7a:7a:2c:af:f7:ec:04:66:2d:cb:f1:ad:11:d3:14: 35:dc:e9:c3:a2:4c:66:66:d2:68:13:99:d8:e9:94: f2:82:ad:c9:e5:78:d4:b4:55:4b:a9:a3:26:ec:39: 05:0f:44:2e:ff:24:3a:93:85:45:2c:9b:ca:a7:46: 46:9a:53:10:49:36:ac:e6:00:fa:78:65:87:19:de: 3c:80:66:88:6f:08:63:02:17:89:54:9a:a0:ec:39: 16:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:93:4B:B4:A3:52:62:37:13:A0:CC:B1:6F:1B:19:65:DF:BD:D1:D6 X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:96:ee:39:a7:00:f3:c1:af:a5:7f:fd:60:e7:33:c9:73:b5: 52:77:cd:39:20:6e:e1:91:69:16:b4:0f:41:4e:0e:9a:6b:d5: a3:fd:75:f8:0e:6f:ec:f7:43:35:64:99:c2:bc:56:6a:00:1b: bd:08:3d:b1:7f:a6:9c:10:40:71:33:64:3e:ed:85:16:86:86: e6:5c:87:69:c5:a3:fa:5f:bb:a2:27:83:6d:5b:1e:4a:2a:fc: 10:95:b1:b2:dc:9c:81:99:a8:d7:8b:ea:62:dc:85:6d:1b:b8: 3d:10:98:2f:31:e8:ba:93:99:d2:bb:7c:54:ea:9c:9d:06:de: 6e:3e:2b:33:51:36:47:47:dd:65:d0:d8:dc:ef:0a:81:ce:8c: 89:48:ea:81:39:47:5d:e7:25:07:25:5b:1c:c8:bc:84:64:75: ef:9e:08:9c:6d:e6:c4:c0:ef:a9:c7:35:71:3f:7d:d1:0a:e7: b9:71:7c:ad:d8:81:97:0f:c7:58:ac:c7:ba:6d:a9:19:9c:d9: be:47:23:1a:88:1e:e0:97:57:2a:f4:cf:0f:f3:7d:e9:2a:48: 8e:6f:9f:13:65:ed:bb:f4:b3:34:a1:12:de:9e:ac:4d:96:cd: 64:6f:45:71:71:94:bc:23:3f:aa:2c:77:92:50:2c:9b:22:ed: 45:45:21:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2RTcxMTAvBgNVBAUTKDEyNDcwODFFOUJBOTdDMTNDN0REM0Q2OEU0NDNEMUY1 NDc5QjJBRkYwHhcNMjUwODA1MDY1ODUxWhcNMjUwODEyMDY1ODUxWjAYMRYwFAYD VQQDEw02ODkxYWJhYi0xMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlIVxtiOhPdscQ65UQWucZPV9xkTmPesMziDnwXOV12n1k1Cfy4yxEVAS12rR KBYMzNIejkrxTCH587PbA6CUG4P8kILsWl5YNnVPKIPT2jKdut5SxA33dYExBc7u kY8zUQebXL+yDUWriGwHf99UORk5PFxwLvNSxTytWbOqLOq2GwXqcB89Zbvo7Grl 4O62qpImkAYUO/hxCBN+/oAZLsW9lth6eiyv9+wEZi3L8a0R0xQ13OnDokxmZtJo E5nY6ZTygq3J5XjUtFVLqaMm7DkFD0Qu/yQ6k4VFLJvKp0ZGmlMQSTas5gD6eGWH Gd48gGaIbwhjAheJVJqg7DkWQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSTS7Sj UmI3E6DMsW8bGWXfvdHWMB8GA1UdIwQYMBaAFBJHCB6bqXwTx909aORD0fVHmyr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTZFNy8wNjc5QUNGNDkx MjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZCUEgzVDFvNUVQUjlVZWJL djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTZFNy8wNjc5QUNGNDkxMjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZC UEgzVDFvNUVQUjlVZWJLdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBblu45pwDzwa+lf/1g5zPJc7VSd805IG7hkWkWtA9BTg6aa9Wj/XX4 Dm/s90M1ZJnCvFZqABu9CD2xf6acEEBxM2Q+7YUWhobmXIdpxaP6X7uiJ4NtWx5K KvwQlbGy3JyBmajXi+pi3IVtG7g9EJgvMei6k5nSu3xU6pydBt5uPiszUTZHR91l 0Njc7wqBzoyJSOqBOUdd5yUHJVscyLyEZHXvngicbebEwO+pxzVxP33RCue5cXyt 2IGXD8dYrMe6bakZnNm+RyMaiB7gl1cq9M8P833pKkiOb58TZe279LM0oRLenqxN ls1kb0VxcZS8Iz+qLHeSUCybIu1FRSEo -----END CERTIFICATE-----Generated at Wed Aug 6 13:04:03 2025 by rpki-client