$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft File: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json) Hash identifier: ArprVvKhWGPWaTVUivMJpvjG6YwKprYDjmLwBXUFIO8= Subject key identifier: A1:2A:48:AF:C6:BB:2D:17:4D:7C:6E:ED:27:AA:54:01:F4:E1:9E:6F Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft Manifest number: 011E Signing time: Tue 05 Aug 2025 05:14:13 +0000 Manifest this update: Tue 05 Aug 2025 05:14:12 +0000 Manifest next update: Tue 12 Aug 2025 05:14:12 +0000 Files and hashes: 1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: yUWCwFiqorcEJZ9ehxFugsRSmjdsctoBdNVfQfjMFFg=) 2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: 97zPU/AWi/C0nV9VIKmemXWGwZXv9hj/Vz3ExXILCII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:14:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0 Validity Not Before: Aug 5 05:14:12 2025 GMT Not After : Aug 12 05:14:12 2025 GMT Subject: CN=68919324-338b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:ee:d9:36:a2:5a:7c:86:d1:9c:7f:1b:25: 01:f9:b0:18:16:96:20:28:f8:8d:6a:a7:a4:1d:90: e6:c3:aa:9e:c9:27:82:cc:89:a3:a7:bb:bf:90:7f: 4e:e3:fb:b4:8c:a8:d4:5b:64:92:c7:77:47:09:01: b2:f8:a1:3f:c4:f3:46:5e:33:31:22:b2:f6:61:8d: 2c:81:b9:68:56:ad:89:b8:da:ae:05:5e:b1:0b:02: 07:9f:41:19:36:b0:00:b1:d4:06:2a:74:a4:dd:88: ca:39:57:a1:ff:d5:d5:2e:86:26:c5:5e:22:ae:cd: 9a:6a:6a:a4:11:4b:8a:42:04:5d:34:02:72:e4:39: 3c:91:ce:23:ed:5a:c0:56:6a:b5:e4:c6:c5:10:31: 16:fc:23:a8:75:d1:d0:42:a5:a5:17:84:90:61:2c: 4c:e2:35:aa:94:5a:0b:d0:b2:b4:a7:ec:e7:c2:ee: 94:98:47:17:ac:45:da:de:b6:59:21:56:d8:9d:c1: 84:57:a0:41:19:8b:a8:44:fe:b6:2e:6f:a5:d6:95: 07:59:45:cd:e7:05:8c:65:f0:6a:ac:e4:fd:0c:32: 0e:d6:c9:6a:48:43:f4:df:96:06:43:7d:d1:9f:f1: 70:75:42:0b:49:af:75:24:37:7b:79:ce:1b:f4:51: 36:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2A:48:AF:C6:BB:2D:17:4D:7C:6E:ED:27:AA:54:01:F4:E1:9E:6F X509v3 Authority Key Identifier: keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:95:a4:ea:58:01:a7:39:94:3e:7c:54:8a:cd:8f:05:d7:14: 31:b7:bc:05:4e:f5:25:a3:06:09:fd:a7:d9:a3:aa:eb:5f:bd: 50:dc:1d:9a:96:e5:05:6b:86:7a:2f:64:9a:23:6a:a1:e6:b2: e8:95:09:c5:22:95:56:40:8c:b9:76:61:9f:26:38:57:f6:50: ce:bf:59:aa:18:b4:29:2b:9d:20:f2:da:dc:5e:bd:23:54:5c: 8a:4f:c1:13:1b:4b:f4:9b:4e:db:b5:90:fd:81:e7:23:6e:e2: ae:ad:a8:8f:a9:0a:2c:46:47:cc:db:29:c0:0a:84:7f:bf:6d: 8d:55:3f:65:17:fe:a5:38:79:40:d8:ee:ad:e0:f5:02:3c:17: 1a:2d:a1:16:68:be:e2:a3:67:f4:b8:5d:5e:6c:ed:b6:8a:5f: b4:2a:3e:89:77:85:1a:da:20:54:e1:36:79:7c:39:89:8d:51: f5:ea:06:bd:af:26:54:4e:d9:1f:32:1d:a3:f4:65:ba:fd:98: 2f:5c:15:a1:55:f9:12:a1:c2:eb:07:5b:7f:09:1a:c0:04:ea: d8:c0:3f:0d:d9:18:00:a3:0d:39:14:b4:a4:ab:f2:83:cb:2a: 8e:9b:61:85:88:fb:db:c0:20:be:61:8b:a9:6f:54:ad:50:5f: ba:48:ab:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwN0ExMTAvBgNVBAUTKDEyMThERTc1QjI1ODhCNjYzM0E2QkY4OENEMzg4RjMx QzQzQUM5QzAwHhcNMjUwODA1MDUxNDEyWhcNMjUwODEyMDUxNDEyWjAYMRYwFAYD VQQDEw02ODkxOTMyNC0zMzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqG/u2TaiWnyG0Zx/GyUB+bAYFpYgKPiNaqekHZDmw6qeySeCzImjp7u/kH9O 4/u0jKjUW2SSx3dHCQGy+KE/xPNGXjMxIrL2YY0sgbloVq2JuNquBV6xCwIHn0EZ NrAAsdQGKnSk3YjKOVeh/9XVLoYmxV4irs2aamqkEUuKQgRdNAJy5Dk8kc4j7VrA Vmq15MbFEDEW/COoddHQQqWlF4SQYSxM4jWqlFoL0LK0p+znwu6UmEcXrEXa3rZZ IVbYncGEV6BBGYuoRP62Lm+l1pUHWUXN5wWMZfBqrOT9DDIO1slqSEP035YGQ33R n/FwdUILSa91JDd7ec4b9FE20QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEqSK/G uy0XTXxu7SeqVAH04Z5vMB8GA1UdIwQYMBaAFBIY3nWyWItmM6a/iM04jzHEOsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GMTQyNjE0QUJF NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWkyWXpwci1JelRpUE1jUTZ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VoamVkYkpZaTJZenByLUl6VGlQTWNRNnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA3QS9GMTQyNjE0QUJFNjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWky WXpwci1JelRpUE1jUTZ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdlaTqWAGnOZQ+fFSKzY8F1xQxt7wFTvUlowYJ/afZo6rrX71Q3B2a luUFa4Z6L2SaI2qh5rLolQnFIpVWQIy5dmGfJjhX9lDOv1mqGLQpK50g8trcXr0j VFyKT8ETG0v0m07btZD9gecjbuKuraiPqQosRkfM2ynACoR/v22NVT9lF/6lOHlA 2O6t4PUCPBcaLaEWaL7io2f0uF1ebO22il+0Kj6Jd4Ua2iBU4TZ5fDmJjVH16ga9 ryZUTtkfMh2j9GW6/ZgvXBWhVfkSocLrB1t/CRrABOrYwD8N2RgAow05FLSkq/KD yyqOm2GFiPvbwCC+YYupb1StUF+6SKtR -----END CERTIFICATE-----Generated at Wed Aug 6 14:09:03 2025 by rpki-client