$ rpki-client -vvf rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft File: eERZpLZsg1_PXW5aVoctkkfUZYo.mft (raw, json) Hash identifier: Kpr7UkoWckufj6T6gbZ+T2WBA1TFEwk+ECj7TlYOUbI= Subject key identifier: EE:96:A4:61:54:D0:58:6E:0E:16:3D:2A:4D:71:99:C1:8B:06:1C:E3 Authority key identifier: 78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A Certificate issuer: /CN=A9145258/serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft Manifest number: 69 Signing time: Sat 09 Aug 2025 07:33:31 +0000 Manifest this update: Sat 09 Aug 2025 07:33:31 +0000 Manifest next update: Sat 16 Aug 2025 07:33:31 +0000 Files and hashes: 1: eERZpLZsg1_PXW5aVoctkkfUZYo.crl (hash: Jcz8pp8JFqlRR898bFB01PIXqhav3hCheU5fCyDdFf8=) 2: 2C7AE786042711F0BCEB4A75C4F9AE02.roa (hash: ugBH0sY3xsy9vZ2jc2RKWYdBc6yrBC0CxRNIPq7VafI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145258, serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Validity Not Before: Aug 9 07:33:31 2025 GMT Not After : Aug 16 07:33:31 2025 GMT Subject: CN=6896f9cb-55f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:67:d0:50:90:d9:99:49:7a:4d:ab:39:df:4d: f4:39:f4:eb:8d:6a:71:5f:77:58:69:f2:cd:13:f1: 67:3a:47:35:98:4f:18:bb:d6:64:cb:11:3f:4a:8a: 57:ba:8f:40:e6:78:4b:e2:9c:33:7a:c2:c8:8a:92: 49:c2:97:ba:97:1c:de:47:de:44:5b:69:b4:0e:3f: cb:36:95:6e:27:33:f9:bc:e2:f4:a4:45:0e:3c:7b: 7d:bd:64:74:b6:fc:41:57:ac:5b:05:a7:e4:49:aa: ce:c6:13:98:ef:b3:ec:9a:1f:f5:37:b5:5d:9a:e2: 69:bd:46:58:35:c1:7c:bb:95:fa:44:09:e1:94:c8: 18:81:7b:f9:ca:f2:63:82:ef:db:04:75:4d:00:a7: 43:36:15:85:1e:c2:46:7d:b4:c8:49:7a:20:cc:85: cb:84:78:a0:c5:09:9f:da:e9:68:97:8a:4f:10:e2: ed:9d:bc:18:96:c2:59:65:77:7a:94:ba:40:c1:16: b2:1a:5b:b1:56:3d:74:90:5e:f2:e2:eb:15:91:33: d2:aa:e6:6f:a3:d7:74:c6:ed:26:96:4a:8b:80:ff: ff:a4:7d:31:6b:47:36:f4:f9:8c:f5:51:cd:03:80: d7:a9:cf:f1:bf:ce:a2:ba:12:a5:ad:b6:80:5e:31: e6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:96:A4:61:54:D0:58:6E:0E:16:3D:2A:4D:71:99:C1:8B:06:1C:E3 X509v3 Authority Key Identifier: keyid:78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:74:fa:55:cf:c2:7d:d7:f3:de:62:90:89:8a:6e:ca:da:2b: 89:b4:39:96:8f:01:b4:41:d1:b6:f0:f3:ff:e2:43:b4:00:6f: 53:b4:f4:f9:4d:52:1f:cc:ac:9f:a8:5a:6c:c9:65:ae:71:dd: 2d:3a:cc:20:8d:60:63:6b:9e:0a:8a:ac:92:00:d2:4c:4e:6e: d6:21:e6:45:c3:7f:3b:fd:45:a9:41:0b:8c:49:a5:00:0f:ac: 6b:30:24:96:49:5f:30:43:00:d3:30:a7:18:dc:04:0f:de:fb: 5f:b3:3c:09:d1:3a:1f:80:99:2c:04:71:03:d0:78:72:98:0d: 22:77:89:e6:ca:7d:7b:a7:25:f4:1e:2b:1d:a5:42:f5:19:46: 80:97:33:62:d8:97:1a:95:47:05:ba:fb:b6:2d:4c:03:cd:dd: 8d:2a:3a:a5:aa:7d:ad:7a:6e:c5:c6:8b:31:68:82:d9:80:06: 59:ed:19:7b:b1:d3:4c:ae:c6:8b:9f:24:7c:c3:e6:ed:3c:cb: 07:43:ba:57:85:a0:ab:d2:08:9f:83:50:63:dd:a0:83:79:f8: 2f:8d:59:85:3f:bf:c7:53:44:01:4e:63:c9:60:51:a3:2e:6c: 6c:aa:10:34:8d:78:11:b4:91:23:b3:39:6e:90:ad:1c:52:28: 47:4a:b1:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTI1ODExMC8GA1UEBRMoNzg0NDU5QTRCNjZDODM1RkNGNUQ2RTVBNTY4NzJEOTI0 N0Q0NjU4QTAeFw0yNTA4MDkwNzMzMzFaFw0yNTA4MTYwNzMzMzFaMBgxFjAUBgNV BAMTDTY4OTZmOWNiLTU1ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRZ9BQkNmZSXpNqznfTfQ59OuNanFfd1hp8s0T8Wc6RzWYTxi71mTLET9Kile6 j0DmeEvinDN6wsiKkknCl7qXHN5H3kRbabQOP8s2lW4nM/m84vSkRQ48e329ZHS2 /EFXrFsFp+RJqs7GE5jvs+yaH/U3tV2a4mm9Rlg1wXy7lfpECeGUyBiBe/nK8mOC 79sEdU0Ap0M2FYUewkZ9tMhJeiDMhcuEeKDFCZ/a6WiXik8Q4u2dvBiWwllld3qU ukDBFrIaW7FWPXSQXvLi6xWRM9Kq5m+j13TG7SaWSouA//+kfTFrRzb0+Yz1Uc0D gNepz/G/zqK6EqWttoBeMeatAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7pakYVTQ WG4OFj0qTXGZwYsGHOMwHwYDVR0jBBgwFoAUeERZpLZsg1/PXW5aVoctkkfUZYow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1MjU4L0FDMDlDNkVFRTMw NjExRUZBODA3QjA1M0M0RjlBRTAyL2VFUlpwTFpzZzFfUFhXNWFWb2N0a2tmVVpZ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUVSWnBMWnNnMV9QWFc1YVZvY3Rra2ZVWllvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 MjU4L0FDMDlDNkVFRTMwNjExRUZBODA3QjA1M0M0RjlBRTAyL2VFUlpwTFpzZzFf UFhXNWFWb2N0a2tmVVpZby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKp0+lXPwn3X895ikImKbsraK4m0OZaPAbRB0bbw8//iQ7QAb1O09PlN Uh/MrJ+oWmzJZa5x3S06zCCNYGNrngqKrJIA0kxObtYh5kXDfzv9RalBC4xJpQAP rGswJJZJXzBDANMwpxjcBA/e+1+zPAnROh+AmSwEcQPQeHKYDSJ3iebKfXunJfQe Kx2lQvUZRoCXM2LYlxqVRwW6+7YtTAPN3Y0qOqWqfa16bsXGizFogtmABlntGXux 00yuxoufJHzD5u08ywdDuleFoKvSCJ+DUGPdoIN5+C+NWYU/v8dTRAFOY8lgUaMu bGyqEDSNeBG0kSOzOW6QrRxSKEdKsUU= -----END CERTIFICATE-----Generated at Sat Aug 9 14:18:36 2025 by rpki-client