$ rpki-client -vvf rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft File: Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft (raw, json) Hash identifier: NR6cig7X8EgCnEURa14tiet5X4v3WxDVusJx8W5nGZ4= Subject key identifier: 05:CC:D9:07:05:99:10:AA:F5:BE:59:9B:00:6F:55:D0:AD:D6:F6:BE Authority key identifier: 11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 Certificate issuer: /CN=A916E39F/serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft Manifest number: EF Signing time: Sat 09 Aug 2025 05:43:33 +0000 Manifest this update: Sat 09 Aug 2025 05:43:32 +0000 Manifest next update: Sat 16 Aug 2025 05:43:32 +0000 Files and hashes: 1: Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl (hash: Aq4GZXe8CLRupSd2qqTVDXaVbxruFzmEpJOxt1R93t0=) 2: 66387A6C087211EF9EDFC673C4F9AE02.roa (hash: HS/fldQZ4RrI6nmzaLMIdIrXDhqFavfV6tsG7wDJ0JM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E39F, serialNumber=11E73F52BF0F586F2B9FA69EE2CA15F2185F66C2 Validity Not Before: Aug 9 05:43:32 2025 GMT Not After : Aug 16 05:43:32 2025 GMT Subject: CN=6896e004-4373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a0:45:0d:54:64:32:65:93:ba:ec:cd:8c:90: 40:b2:92:29:cd:1d:4d:8e:e1:a5:b6:12:ad:44:f7: c0:45:76:bc:59:3a:6e:1f:c2:e0:91:c6:bc:fa:35: 10:03:09:58:95:97:55:c1:de:2f:cf:1d:e2:61:ed: a8:72:e6:6b:da:f9:47:a2:8c:06:94:ed:70:bd:41: 07:3a:d4:28:6f:5b:70:ae:52:a6:d7:2f:3f:41:94: 28:33:eb:91:7a:db:71:be:97:b4:12:6e:cd:b8:1e: 0a:14:90:5f:af:a4:fc:05:8e:5d:1a:63:af:ed:e1: 2e:fb:bd:8c:86:14:62:ee:99:9e:50:97:91:b2:89: 44:7a:eb:e9:15:27:af:4a:44:be:b9:68:52:23:d9: a2:ee:4b:18:54:8f:ad:01:e7:d3:ea:34:c4:b7:22: da:72:e6:9f:03:e6:f8:e5:11:34:b2:23:63:c2:05: f1:35:3b:33:e9:05:0e:47:1e:24:2e:7d:db:65:f7: 9e:96:8e:1d:ef:7d:56:10:e2:ad:51:98:5e:49:31: 7a:09:7a:52:a6:52:ba:c1:81:2e:97:5e:1f:40:ca: 24:d6:44:67:04:e4:c0:c2:e5:04:25:d8:90:70:c6: 35:1e:38:50:16:9c:f6:77:4f:d9:94:30:81:6c:c6: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CC:D9:07:05:99:10:AA:F5:BE:59:9B:00:6F:55:D0:AD:D6:F6:BE X509v3 Authority Key Identifier: keyid:11:E7:3F:52:BF:0F:58:6F:2B:9F:A6:9E:E2:CA:15:F2:18:5F:66:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eec_Ur8PWG8rn6ae4soV8hhfZsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E39F/B5095A22086C11EFA0852E16C4F9AE02/Eec_Ur8PWG8rn6ae4soV8hhfZsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e7:8c:46:44:5c:95:08:bc:eb:3a:eb:c8:b2:31:7a:32:15: 59:a4:ef:7d:f9:ee:20:13:29:48:98:ce:d2:3a:99:aa:51:75: 48:3d:a8:9d:eb:8f:72:09:5e:4a:29:d5:d4:70:f0:15:86:b8: 9d:3e:7a:fc:37:33:1c:ed:4f:10:7f:fd:3a:26:fc:b0:d8:bf: c6:aa:b8:cd:4b:ad:bc:6e:51:84:f0:ca:59:dc:a9:52:43:79: de:8d:00:46:66:a9:80:e2:ed:a6:cf:d9:40:50:45:af:f0:d9: 6f:f8:70:06:e5:c5:93:73:b4:0c:c7:b6:5c:10:f1:84:3e:59: 71:7d:37:7c:41:43:7c:2e:7c:37:36:09:a8:83:eb:49:d0:59: aa:92:7b:ab:85:1c:c6:a4:c7:18:fa:80:9d:40:12:b3:69:b4: 0f:63:72:cc:31:20:88:1e:f8:9e:ac:b5:89:fb:80:9e:d8:05: 78:1f:25:b9:dc:eb:07:0d:46:43:61:f1:01:a1:53:a5:5b:69: 9e:3c:0a:74:c6:83:19:24:e0:63:48:6e:01:d2:29:90:b8:82: 52:3f:00:b4:4b:5c:69:33:80:39:5a:e5:fe:85:66:3c:ae:5e: 56:5b:b9:cd:eb:ae:e5:1b:f8:c2:46:27:45:78:2a:af:0b:60: c0:1b:8a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUzOUYxMTAvBgNVBAUTKDExRTczRjUyQkYwRjU4NkYyQjlGQTY5RUUyQ0ExNUYy MTg1RjY2QzIwHhcNMjUwODA5MDU0MzMyWhcNMjUwODE2MDU0MzMyWjAYMRYwFAYD VQQDEw02ODk2ZTAwNC00MzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aBFDVRkMmWTuuzNjJBAspIpzR1NjuGlthKtRPfARXa8WTpuH8Lgkca8+jUQ AwlYlZdVwd4vzx3iYe2ocuZr2vlHoowGlO1wvUEHOtQob1twrlKm1y8/QZQoM+uR ettxvpe0Em7NuB4KFJBfr6T8BY5dGmOv7eEu+72MhhRi7pmeUJeRsolEeuvpFSev SkS+uWhSI9mi7ksYVI+tAefT6jTEtyLacuafA+b45RE0siNjwgXxNTsz6QUORx4k Ln3bZfeelo4d731WEOKtUZheSTF6CXpSplK6wYEul14fQMok1kRnBOTAwuUEJdiQ cMY1HjhQFpz2d0/ZlDCBbMYpkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXM2QcF mRCq9b5ZmwBvVdCt1va+MB8GA1UdIwQYMBaAFBHnP1K/D1hvK5+mnuLKFfIYX2bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTM5Ri9CNTA5NUEyMjA4 NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdHOHJuNmFlNHNvVjhoaGZa c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VlY19VcjhQV0c4cm42YWU0c29WOGhoZlpzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTM5Ri9CNTA5NUEyMjA4NkMxMUVGQTA4NTJFMTZDNEY5QUUwMi9FZWNfVXI4UFdH OHJuNmFlNHNvVjhoaGZac0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE54xGRFyVCLzrOuvIsjF6MhVZpO99+e4gEylImM7SOpmqUXVIPaid 649yCV5KKdXUcPAVhridPnr8NzMc7U8Qf/06Jvyw2L/GqrjNS628blGE8MpZ3KlS Q3nejQBGZqmA4u2mz9lAUEWv8Nlv+HAG5cWTc7QMx7ZcEPGEPllxfTd8QUN8Lnw3 Ngmog+tJ0FmqknurhRzGpMcY+oCdQBKzabQPY3LMMSCIHvierLWJ+4Ce2AV4HyW5 3OsHDUZDYfEBoVOlW2mePAp0xoMZJOBjSG4B0imQuIJSPwC0S1xpM4A5WuX+hWY8 rl5WW7nN667lG/jCRidFeCqvC2DAG4oT -----END CERTIFICATE-----Generated at Sat Aug 9 22:44:28 2025 by rpki-client