$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft File: Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json) Hash identifier: ZPYIAQsciu+8sxmMLAp4FA7umT+GwDiJJvmO6MxMIwg= Subject key identifier: 30:67:1F:83:5C:D9:DC:F8:F9:67:47:AE:FF:C5:22:5D:DB:B6:79:8F Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft Manifest number: 0151 Signing time: Sat 09 Aug 2025 04:34:28 +0000 Manifest this update: Sat 09 Aug 2025 04:34:28 +0000 Manifest next update: Sat 16 Aug 2025 04:34:28 +0000 Files and hashes: 1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: tmuLIl/QhzJoz3Dht5m8cUxKUylZ8AYBQwCBxizfbIM=) 2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: NDSD+KkV1yB3rzPC/NhFv9JI1zaXTY8fuhw8gPA8DhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Validity Not Before: Aug 9 04:34:28 2025 GMT Not After : Aug 16 04:34:28 2025 GMT Subject: CN=6896cfd4-eece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:79:49:10:72:9d:8b:7f:0a:30:34:dd:bf: 79:b7:9b:7a:aa:f1:04:e5:3e:2e:17:b9:46:49:65: af:84:09:ab:4a:08:ea:c5:10:9d:75:30:5b:0a:33: 07:cd:bf:74:49:a6:8c:ee:17:c2:c7:55:bd:c9:70: 56:8a:24:2b:44:a3:4f:a6:39:9e:35:0c:d2:f6:27: f2:f3:db:90:62:dc:af:92:e3:1f:04:21:d2:fe:ae: c5:64:b1:8c:46:4a:5f:ef:24:9f:df:24:49:b2:13: ae:79:29:0f:62:2e:78:1e:ea:b1:10:91:a5:16:39: fb:fb:4d:ac:12:b8:44:be:85:72:85:ec:16:04:58: 08:81:29:03:5b:9d:59:45:99:f6:c0:db:1f:a9:e2: 87:75:be:b7:c6:8b:9f:57:dd:af:b4:85:5e:09:98: c2:09:7a:33:a0:82:62:3f:03:eb:c0:08:2c:0e:b9: 4e:45:23:f6:d3:ce:0b:79:ae:39:2a:9b:0b:ac:d6: 7e:79:a3:82:6b:ba:1d:30:14:4d:67:f2:a6:3b:bd: 3b:6d:94:45:54:f3:73:f7:7b:90:20:a8:92:0e:67: f9:0d:8c:ed:08:2e:17:19:30:fe:8b:67:fc:27:74: f1:90:3c:eb:0c:ee:07:c1:06:50:40:1c:3a:15:71: 26:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:67:1F:83:5C:D9:DC:F8:F9:67:47:AE:FF:C5:22:5D:DB:B6:79:8F X509v3 Authority Key Identifier: keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:25:78:07:99:c5:b8:59:d7:49:e4:78:3a:e7:a8:85:73:bf: 62:7f:4d:a8:d6:b9:ad:58:3e:b8:93:52:41:f3:c9:2e:5a:c1: be:77:bd:55:00:2e:f3:a7:d9:75:f7:ce:a0:fe:37:87:7b:01: 83:56:1d:6a:fc:81:24:37:f6:5b:0c:c9:f2:59:d7:4b:6f:ca: 55:90:58:45:d8:45:13:7e:5a:ac:39:3f:18:b3:af:e4:7a:e3: 72:bd:44:3b:74:33:06:45:5a:79:8e:8d:79:77:a6:2c:1f:b0: 3c:fe:6e:14:c3:0a:ca:40:67:61:2e:3a:2a:bf:f2:5a:b6:98: e7:2c:63:92:20:d3:15:1b:07:a0:4f:91:8e:20:e2:47:d7:6c: 86:6a:b9:2a:ac:68:88:46:67:fa:02:0f:d1:36:ff:3d:57:5b: 29:e0:cc:61:98:76:51:6b:64:59:99:5d:ba:3d:44:16:ab:cc: 0e:0a:d1:f0:6f:bc:2c:39:7b:8b:f8:a1:3b:c4:c8:99:05:66: 03:11:cf:f2:16:38:e9:fa:2b:99:6a:9b:ad:2a:a1:1b:65:0e: 6f:e1:e9:d1:c4:26:a2:39:ec:8c:53:a4:96:c2:3a:da:3e:22: 07:7d:67:c3:89:6f:4b:77:20:b9:17:f2:c4:81:09:68:f3:fa: c7:a2:db:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERUIxMTAvBgNVBAUTKDEyOTZFN0VCQkUzMDExM0ZFMUQzRjI5NzMwMzNBNENC MzExNDQ4MUQwHhcNMjUwODA5MDQzNDI4WhcNMjUwODE2MDQzNDI4WjAYMRYwFAYD VQQDEw02ODk2Y2ZkNC1lZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtaR5SRBynYt/CjA03b95t5t6qvEE5T4uF7lGSWWvhAmrSgjqxRCddTBbCjMH zb90SaaM7hfCx1W9yXBWiiQrRKNPpjmeNQzS9ify89uQYtyvkuMfBCHS/q7FZLGM Rkpf7ySf3yRJshOueSkPYi54HuqxEJGlFjn7+02sErhEvoVyhewWBFgIgSkDW51Z RZn2wNsfqeKHdb63xoufV92vtIVeCZjCCXozoIJiPwPrwAgsDrlORSP2084Lea45 KpsLrNZ+eaOCa7odMBRNZ/KmO707bZRFVPNz93uQIKiSDmf5DYztCC4XGTD+i2f8 J3TxkDzrDO4HwQZQQBw6FXEmgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBnH4Nc 2dz4+WdHrv/FIl3btnmPMB8GA1UdIwQYMBaAFBKW5+u+MBE/4dPylzAzpMsxFEgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERFQi9BMzMxRjQ3NDcy NjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VUX2gwX0tYTURPa3l6RVVT QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VwYm42NzR3RVRfaDBfS1hNRE9reXpFVVNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERFQi9BMzMxRjQ3NDcyNjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9FcGJuNjc0d0VU X2gwX0tYTURPa3l6RVVTQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAJXgHmcW4WddJ5Hg656iFc79if02o1rmtWD64k1JB88kuWsG+d71V AC7zp9l1986g/jeHewGDVh1q/IEkN/ZbDMnyWddLb8pVkFhF2EUTflqsOT8Ys6/k euNyvUQ7dDMGRVp5jo15d6YsH7A8/m4UwwrKQGdhLjoqv/JatpjnLGOSINMVGweg T5GOIOJH12yGarkqrGiIRmf6Ag/RNv89V1sp4MxhmHZRa2RZmV26PUQWq8wOCtHw b7wsOXuL+KE7xMiZBWYDEc/yFjjp+iuZaputKqEbZQ5v4enRxCaiOeyMU6SWwjra PiIHfWfDiW9LdyC5F/LEgQlo8/rHotsG -----END CERTIFICATE-----Generated at Sun Aug 10 19:59:24 2025 by rpki-client