$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json) Hash identifier: 0tcjenc/kdDSaXv+0LdXMuoX/GCoC2+4RNE6YYLZ7iA= Subject key identifier: 5B:D8:C1:E6:4B:16:A3:28:6E:49:5C:20:C7:3F:1A:5B:E7:24:78:DC Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft Manifest number: B8 Signing time: Sat 09 Aug 2025 06:20:43 +0000 Manifest this update: Sat 09 Aug 2025 06:20:42 +0000 Manifest next update: Sat 16 Aug 2025 06:20:42 +0000 Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: zBnA3e6impkNr6RCsUhZdfNgIDfknm1U+BpANqTBoA8=) 2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: iVgLpNzw9WvLZDCrNCeZKcdKAVuHQLIqgkettJkRmpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Validity Not Before: Aug 9 06:20:42 2025 GMT Not After : Aug 16 06:20:42 2025 GMT Subject: CN=6896e8ba-df0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:5c:16:fe:61:42:d7:38:fb:89:c9:09:ae: 4e:ba:e1:0f:44:99:4a:6f:bd:66:08:01:8e:de:c2: 1d:76:e5:60:38:cd:5d:b7:2b:80:ff:28:89:a8:0f: 2d:bc:d1:f9:62:8f:c9:df:b5:4e:a8:ce:09:7b:ce: cb:d2:b0:f0:05:a2:72:7e:cb:c8:de:2d:f0:08:da: 66:30:e1:0e:cf:0f:93:60:d1:e4:9f:fa:67:29:1d: c6:28:47:a3:a5:12:2e:cb:b9:e4:1e:66:75:cb:04: 77:6f:e4:69:c8:cc:69:55:07:31:59:d1:7c:50:84: 01:f1:05:13:00:85:a2:79:58:fd:c4:89:34:53:7a: a0:29:e6:ca:18:25:66:76:ba:ea:2c:ef:86:40:f6: d2:b4:f8:8c:aa:f0:41:59:f9:4b:6c:55:b3:2a:ae: b0:96:9e:e7:5e:06:92:e6:c0:25:72:ab:1b:cb:c1: fb:1c:f9:85:46:2d:ca:d7:dd:6a:94:a3:f8:4d:6d: 29:ef:9a:a0:7c:48:0f:c8:2e:bb:65:cb:1d:65:1e: 05:e4:1b:75:eb:a9:9c:57:f3:e4:63:38:bc:b5:b3: 9d:46:5a:b1:1c:91:78:ca:a7:f7:c1:4f:33:69:ed: 50:97:03:79:25:c4:c4:fd:21:ba:62:94:ba:58:53: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D8:C1:E6:4B:16:A3:28:6E:49:5C:20:C7:3F:1A:5B:E7:24:78:DC X509v3 Authority Key Identifier: keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:fb:1a:a1:fc:7c:f9:ff:26:04:65:7c:bd:06:38:30:f8:12: 33:a6:f7:72:5d:38:f5:55:c3:ca:4d:68:4f:3f:d7:b6:56:4e: e5:58:58:5f:45:56:eb:1a:d2:d9:0c:10:92:13:d9:4b:16:14: b6:a6:fc:ca:d3:29:68:ef:a6:af:d2:2a:b0:94:8b:70:ea:e5: d9:55:c0:28:ae:5d:6d:69:63:9c:b4:b6:dd:74:7a:d7:91:3b: 8d:ed:1f:11:b8:7a:b7:0f:41:aa:29:36:31:0e:10:4a:00:4a: 4d:01:77:86:bf:e3:8c:c4:b2:02:ac:24:cf:ce:c8:94:df:a8: c5:0f:60:fd:e0:10:e2:e6:0c:bd:2b:6e:0c:c2:26:21:37:46: d3:fd:e7:01:7e:aa:61:6e:95:f6:9c:fc:5f:7a:92:84:fb:e1: b2:b8:38:5a:a2:29:8e:23:b3:6a:c3:3d:3d:e2:fd:53:61:22: 79:6c:8e:05:dd:8c:7d:54:b1:9f:f5:fb:b8:db:5b:a0:e1:dc: 69:6f:75:d1:f6:e9:52:90:2a:b4:65:06:55:6b:74:14:cc:24: c8:0a:1e:57:9f:3b:c1:a3:ae:d1:85:46:e1:50:0d:b3:6c:47: 4e:08:1a:3a:dd:0a:ff:40:33:ce:ba:c7:d7:8d:27:87:ed:79: 56:9e:11:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5NjQxMTAvBgNVBAUTKDExNkYwQTJBNkE0QjkyNDJENzdBMjUwQjcxNzAwODE1 RDI5OEREQjkwHhcNMjUwODA5MDYyMDQyWhcNMjUwODE2MDYyMDQyWjAYMRYwFAYD VQQDEw02ODk2ZThiYS1kZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4hcFv5hQtc4+4nJCa5OuuEPRJlKb71mCAGO3sIdduVgOM1dtyuA/yiJqA8t vNH5Yo/J37VOqM4Je87L0rDwBaJyfsvI3i3wCNpmMOEOzw+TYNHkn/pnKR3GKEej pRIuy7nkHmZ1ywR3b+RpyMxpVQcxWdF8UIQB8QUTAIWieVj9xIk0U3qgKebKGCVm drrqLO+GQPbStPiMqvBBWflLbFWzKq6wlp7nXgaS5sAlcqsby8H7HPmFRi3K191q lKP4TW0p75qgfEgPyC67ZcsdZR4F5Bt166mcV/PkYzi8tbOdRlqxHJF4yqf3wU8z ae1QlwN5JcTE/SG6YpS6WFNL6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvYweZL FqMobklcIMc/GlvnJHjcMB8GA1UdIwQYMBaAFBFvCipqS5JC13olC3FwCBXSmN25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GNTMxRURFNDVC MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtrTFhlaVVMY1hBSUZkS1kz YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VXOEtLbXBMa2tMWGVpVUxjWEFJRmRLWTNiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTk2NC9GNTMxRURFNDVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtr TFhlaVVMY1hBSUZkS1kzYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi+xqh/Hz5/yYEZXy9Bjgw+BIzpvdyXTj1VcPKTWhPP9e2Vk7lWFhf RVbrGtLZDBCSE9lLFhS2pvzK0ylo76av0iqwlItw6uXZVcAorl1taWOctLbddHrX kTuN7R8RuHq3D0GqKTYxDhBKAEpNAXeGv+OMxLICrCTPzsiU36jFD2D94BDi5gy9 K24MwiYhN0bT/ecBfqphbpX2nPxfepKE++GyuDhaoimOI7Nqwz094v1TYSJ5bI4F 3Yx9VLGf9fu421ug4dxpb3XR9ulSkCq0ZQZVa3QUzCTICh5XnzvBo67RhUbhUA2z bEdOCBo63Qr/QDPOusfXjSeH7XlWnhGu -----END CERTIFICATE-----Generated at Sun Aug 10 04:20:12 2025 by rpki-client