$ rpki-client -vvf rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft File: EiOAOGQwr9Y_NklEdk4bNBhj0No.mft (raw, json) Hash identifier: EkT8tZckZoO8BmFepRQruklezoI2v4xYMIs+1o6F1Vg= Subject key identifier: 6A:F7:A5:A0:87:7D:42:D7:C0:FC:B9:C8:47:FC:E0:F3:52:47:3A:46 Authority key identifier: 12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA Certificate issuer: /CN=A9156AFF/serialNumber=122380386430AFD63F364944764E1B341863D0DA Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft Manifest number: 3E Signing time: Sat 09 Aug 2025 08:00:09 +0000 Manifest this update: Sat 09 Aug 2025 08:00:09 +0000 Manifest next update: Sat 16 Aug 2025 08:00:09 +0000 Files and hashes: 1: EiOAOGQwr9Y_NklEdk4bNBhj0No.crl (hash: KpSw8P3NsPk1ssHK86GDb5CYlrp8/7lkxMMxqogc7i8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156AFF, serialNumber=122380386430AFD63F364944764E1B341863D0DA Validity Not Before: Aug 9 08:00:09 2025 GMT Not After : Aug 16 08:00:09 2025 GMT Subject: CN=68970009-c198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fb:a7:e2:3f:01:30:2f:15:a1:e2:88:36:2b: 3f:fe:1e:4b:dc:7c:4b:0e:57:a6:91:94:83:9d:ef: cc:e3:0d:eb:01:8d:32:0e:51:8a:bf:32:e7:5f:28: f8:15:64:71:83:a5:b6:f3:f0:87:69:c0:4d:3f:ba: 6a:58:f9:4d:e6:8d:03:a1:a7:53:b7:1a:5a:90:ee: 4a:a5:e8:ea:17:5f:c9:d8:f1:99:ab:11:97:71:9b: 45:2c:b3:5d:4d:4f:5a:59:e3:f2:fa:c9:13:9e:ab: c6:ae:c3:67:3a:15:2a:c1:3e:64:c3:18:bb:ef:dc: 13:dd:21:1e:5e:c1:93:03:22:f6:62:78:44:5c:31: bb:0f:c7:f2:59:2d:1e:b4:49:db:6d:c0:80:44:f4: c9:39:ee:d7:78:17:0a:69:8b:68:48:19:cb:57:e3: 61:a8:b3:a6:c0:1b:b0:c6:cf:20:8e:51:eb:a0:c9: ae:f0:c8:b1:68:0b:b8:5e:d4:19:40:2e:8b:4e:fe: 1f:c1:86:3e:e0:25:b6:f3:31:6a:53:46:96:30:e7: da:74:ab:2c:b2:00:de:e1:e9:40:2c:16:75:5a:78: 80:2d:05:20:d3:09:7f:ac:38:83:2a:7a:00:21:5d: 90:37:45:9b:ad:37:2c:0c:b6:80:4f:ec:0d:21:62: 07:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F7:A5:A0:87:7D:42:D7:C0:FC:B9:C8:47:FC:E0:F3:52:47:3A:46 X509v3 Authority Key Identifier: keyid:12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:98:fe:15:a9:c3:81:d5:21:44:54:35:17:cb:16:84:7e:47: dd:b0:e5:05:79:01:7c:72:cc:5c:bc:a9:bb:83:6f:9b:89:4e: ba:1f:24:51:8a:04:0c:aa:a0:5e:24:25:77:b9:2f:c5:46:be: 16:b4:62:c7:56:7b:78:28:99:31:c7:b7:c2:63:04:39:85:7a: c9:51:3f:ce:09:d2:95:82:40:bf:84:fa:94:a0:62:d2:4b:36: 44:49:2f:37:f5:d3:f0:ce:21:a5:a9:4d:bb:38:d1:68:b7:db: 1c:d2:24:48:76:50:fa:0b:a5:15:21:46:df:a2:b6:6c:d1:a0: 9c:2a:78:e3:b7:7b:67:e7:42:97:59:57:00:e1:4f:fc:0c:3f: bb:1c:55:f5:cf:0c:b2:97:c9:68:2d:41:58:91:b3:88:7f:e4: 5f:c8:34:97:c5:41:b8:bc:bd:c0:52:b8:44:31:49:b7:d3:ca: 9a:12:a6:38:c2:7f:7f:14:5d:ed:4c:a0:32:d4:37:d1:d8:53: bf:0e:0f:c1:5e:4f:9b:ce:99:24:d8:4c:6a:73:ab:b1:b1:18: 1f:f9:9d:47:1f:e5:d9:e9:1e:7b:09:75:c7:e7:13:45:af:71: 85:73:fd:87:bf:44:72:c5:da:34:ba:d7:ed:16:ff:3a:0f:f6: 29:d6:fb:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkFGRjExMC8GA1UEBRMoMTIyMzgwMzg2NDMwQUZENjNGMzY0OTQ0NzY0RTFCMzQx ODYzRDBEQTAeFw0yNTA4MDkwODAwMDlaFw0yNTA4MTYwODAwMDlaMBgxFjAUBgNV BAMTDTY4OTcwMDA5LWMxOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDy+6fiPwEwLxWh4og2Kz/+HkvcfEsOV6aRlIOd78zjDesBjTIOUYq/MudfKPgV ZHGDpbbz8IdpwE0/umpY+U3mjQOhp1O3GlqQ7kql6OoXX8nY8ZmrEZdxm0Uss11N T1pZ4/L6yROeq8auw2c6FSrBPmTDGLvv3BPdIR5ewZMDIvZieERcMbsPx/JZLR60 SdttwIBE9Mk57td4Fwppi2hIGctX42Gos6bAG7DGzyCOUeugya7wyLFoC7he1BlA LotO/h/Bhj7gJbbzMWpTRpYw59p0qyyyAN7h6UAsFnVaeIAtBSDTCX+sOIMqegAh XZA3RZutNywMtoBP7A0hYgc3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaveloId9 QtfA/LnIR/zg81JHOkYwHwYDVR0jBBgwFoAUEiOAOGQwr9Y/NklEdk4bNBhj0Now DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QUZGLzNCN0IzMUI2MTRE ODExRjBBMzdFQzA0RUM0RjlBRTAyL0VpT0FPR1F3cjlZX05rbEVkazRiTkJoajBO by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWlPQU9HUXdyOVlfTmtsRWRrNGJOQmhqME5vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QUZGLzNCN0IzMUI2MTREODExRjBBMzdFQzA0RUM0RjlBRTAyL0VpT0FPR1F3cjlZ X05rbEVkazRiTkJoajBOby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABqY/hWpw4HVIURUNRfLFoR+R92w5QV5AXxyzFy8qbuDb5uJTrofJFGK BAyqoF4kJXe5L8VGvha0YsdWe3gomTHHt8JjBDmFeslRP84J0pWCQL+E+pSgYtJL NkRJLzf10/DOIaWpTbs40Wi32xzSJEh2UPoLpRUhRt+itmzRoJwqeOO3e2fnQpdZ VwDhT/wMP7scVfXPDLKXyWgtQViRs4h/5F/INJfFQbi8vcBSuEQxSbfTypoSpjjC f38UXe1MoDLUN9HYU78OD8FeT5vOmSTYTGpzq7GxGB/5nUcf5dnpHnsJdcfnE0Wv cYVz/Ye/RHLF2jS61+0W/zoP9inW+5c= -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:32 2025 by rpki-client