$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft File: eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json) Hash identifier: CdMweKr30S5SGbhoC2rAMIPLtJynOJHFaozydBuFMc8= Subject key identifier: 85:8A:C5:8B:47:FA:4D:F9:18:1E:65:3F:93:33:A7:6C:2A:4F:E6:3C Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 Certificate issuer: /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft Manifest number: 8B Signing time: Sat 09 Aug 2025 07:00:39 +0000 Manifest this update: Sat 09 Aug 2025 07:00:38 +0000 Manifest next update: Sat 16 Aug 2025 07:00:38 +0000 Files and hashes: 1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: IxFafrhBbFFzraofIhFt514mCqY0yntV4kxd/KMLvKI=) 2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: FNLMkJsV83Bt0X7SmIILDAhrnYAAJNH2tKMHd6lYZGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956 Validity Not Before: Aug 9 07:00:38 2025 GMT Not After : Aug 16 07:00:38 2025 GMT Subject: CN=6896f217-79d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2a:8d:e0:e5:23:db:53:d0:84:0f:47:ae:b2: 30:11:c7:aa:a6:95:d5:1e:1e:e0:84:2a:da:ac:84: 47:50:7c:b2:b4:74:ed:26:ec:61:28:5f:ae:5a:29: 5a:f2:35:63:39:1b:00:87:ce:d4:68:81:b4:9c:8d: f5:66:a1:52:b0:6a:28:ce:81:3c:1c:bb:a7:7e:d2: b0:ca:bd:f8:47:3e:4a:3a:67:3c:47:09:85:b2:4a: ee:97:82:10:1e:58:15:49:be:58:52:ed:cd:43:79: 57:6e:d7:35:2b:24:69:9e:b4:4c:89:b9:a2:79:ad: 63:07:2d:f6:0d:cc:e4:e3:a4:cc:a8:3d:b3:4a:ba: 92:94:d9:cd:65:f2:e8:0e:b2:e6:30:78:b6:e0:5f: fe:fc:34:39:9e:fa:c4:db:d8:2f:e0:4b:af:dd:de: 42:f7:9c:3b:0f:1a:ba:7e:22:0a:59:d1:db:df:68: 85:57:11:c8:eb:46:6c:93:41:33:7b:68:65:81:f7: f0:7e:65:cb:c5:e4:04:1e:26:8e:cb:b7:75:d4:ec: 96:5f:10:2b:45:17:2e:42:66:0f:43:6e:2d:3e:68: 7d:02:20:fb:70:28:8f:7e:a1:06:12:a1:8d:c2:05: fc:2e:16:61:90:83:36:e7:a7:08:27:46:e6:b1:75: df:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8A:C5:8B:47:FA:4D:F9:18:1E:65:3F:93:33:A7:6C:2A:4F:E6:3C X509v3 Authority Key Identifier: keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1e:e3:1b:8f:fa:1d:c1:bd:a4:ab:91:88:c3:1c:c1:46:8c: 35:3f:de:0f:44:73:1a:04:47:af:a5:95:35:2d:6d:ff:a1:12: 5a:15:c8:51:e9:20:d2:9f:aa:e9:a3:6d:7d:68:36:8a:d3:40: e1:b8:14:7f:b5:87:0e:d4:3c:46:21:28:21:17:bd:49:10:0f: 17:31:cf:62:b2:a0:e5:d4:de:03:01:31:55:dc:bd:14:6a:d4: 58:43:cd:d5:dd:7a:5d:6f:56:d7:22:6d:8c:dd:f1:2c:0a:4e: 82:cb:fa:98:63:28:1d:4b:a1:27:51:0e:f1:db:be:10:29:09: 1f:5e:1e:cf:b5:e3:ea:a5:35:bb:86:a5:65:eb:47:a8:09:f6: dd:24:19:75:b2:f6:ec:97:87:a1:6e:4c:8c:95:c5:6b:08:f5: 18:9f:ec:a7:c9:54:08:66:92:83:98:94:d5:9e:7c:5a:14:36: 9f:82:39:38:d6:be:8d:35:e7:9f:33:04:ea:6e:55:52:c8:44: b1:96:ac:ff:c5:32:1d:83:1c:d0:5f:a7:bd:4b:7c:3f:8b:98: b4:78:a4:19:51:6e:3d:70:f4:bd:a0:ac:40:1e:c9:89:4d:43: 62:ba:d9:9e:83:9f:2d:94:c1:84:bd:ba:ee:af:82:73:fc:0c: 7d:a2:c8:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKDc5RTkyM0Q1MDY5NTdGRDMwREQyNkQ2Mjc5M0I5QjQw RjhGRTg5NTYwHhcNMjUwODA5MDcwMDM4WhcNMjUwODE2MDcwMDM4WjAYMRYwFAYD VQQDEw02ODk2ZjIxNy03OWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CqN4OUj21PQhA9HrrIwEceqppXVHh7ghCrarIRHUHyytHTtJuxhKF+uWila 8jVjORsAh87UaIG0nI31ZqFSsGoozoE8HLunftKwyr34Rz5KOmc8RwmFskrul4IQ HlgVSb5YUu3NQ3lXbtc1KyRpnrRMibmiea1jBy32Dczk46TMqD2zSrqSlNnNZfLo DrLmMHi24F/+/DQ5nvrE29gv4Euv3d5C95w7Dxq6fiIKWdHb32iFVxHI60Zsk0Ez e2hlgffwfmXLxeQEHiaOy7d11OyWXxArRRcuQmYPQ24tPmh9AiD7cCiPfqEGEqGN wgX8LhZhkIM256cIJ0bmsXXfrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWKxYtH +k35GB5lP5Mzp2wqT+Y8MB8GA1UdIwQYMBaAFHnpI9UGlX/TDdJtYnk7m0D4/olW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9DNzNBMzg5NEEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi9lZWtqMVFhVmY5TU4wbTFpZVR1YlFQai1p VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Vla2oxUWFWZjlNTjBtMWllVHViUVBqLWlWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9DNzNBMzg5NEEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi9lZWtqMVFhVmY5 TU4wbTFpZVR1YlFQai1pVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhHuMbj/odwb2kq5GIwxzBRow1P94PRHMaBEevpZU1LW3/oRJaFchR 6SDSn6rpo219aDaK00DhuBR/tYcO1DxGISghF71JEA8XMc9isqDl1N4DATFV3L0U atRYQ83V3Xpdb1bXIm2M3fEsCk6Cy/qYYygdS6EnUQ7x274QKQkfXh7PtePqpTW7 hqVl60eoCfbdJBl1svbsl4ehbkyMlcVrCPUYn+ynyVQIZpKDmJTVnnxaFDafgjk4 1r6NNeefMwTqblVSyESxlqz/xTIdgxzQX6e9S3w/i5i0eKQZUW49cPS9oKxAHsmJ TUNiutmeg58tlMGEvbrur4Jz/Ax9osi6 -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:26 2025 by rpki-client