$ rpki-client -vvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft File: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft (raw, json) Hash identifier: +O0LgdVNTcHy26Q16kQJ4+0SnmBCMQEDyk+QDxIqYFw= Subject key identifier: 2D:C7:67:7B:03:36:DD:67:C4:B7:D9:00:14:79:2F:3B:3D:4B:08:32 Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A Certificate issuer: /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft Manifest number: 0190 Signing time: Sat 09 Aug 2025 03:49:51 +0000 Manifest this update: Sat 09 Aug 2025 03:49:51 +0000 Manifest next update: Sat 16 Aug 2025 03:49:51 +0000 Files and hashes: 1: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl (hash: cVxpgm1fsRa0urX8ukHNF7jFGQVlN4kom/fLx+amYjA=) 2: ACC372FE0F4211EE97A24686C4F9AE02.roa (hash: 0vwZnVq6+4c6D/8J1aiiHDqlou0UwAPkCDM39Wg9hHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A Validity Not Before: Aug 9 03:49:51 2025 GMT Not After : Aug 16 03:49:51 2025 GMT Subject: CN=6896c55f-16ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1c:14:f9:c1:0e:e6:36:3e:c1:63:e3:8f:13: 8e:6b:ee:5a:d2:c9:27:f6:5f:ac:82:c3:b5:cd:85: 1a:e4:44:20:b1:f0:75:ce:33:36:df:21:f8:03:c4: a5:1b:bf:2b:4d:83:d1:44:9f:9b:8a:9d:9b:ac:b2: fa:9f:33:8b:7b:33:50:fc:7d:0e:0b:a9:75:96:19: 20:fe:bb:aa:f3:89:c9:3c:be:3a:26:21:e8:e5:d9: 67:81:7b:ef:c0:cd:af:ab:d7:f4:7b:78:74:c6:33: bf:83:6c:61:31:f6:6c:f1:e5:f8:09:b2:99:09:6d: 2f:28:7f:56:c7:e2:f8:f6:44:e2:b9:8d:8e:b4:30: 68:e2:58:31:4a:2e:8f:40:4e:1d:d1:e1:78:0c:41: 24:49:fd:38:0a:9f:61:7b:94:7f:53:83:2a:d4:8e: 5b:15:71:4f:11:1f:a2:8d:63:14:30:8d:ab:b6:5a: f9:2e:bd:ac:ab:c3:d6:0b:5d:03:24:87:99:a4:c3: 5c:1e:5a:9d:31:22:3d:4a:d0:c2:6f:36:35:5f:86: 99:d7:28:43:90:5d:88:ac:f5:34:95:7e:88:2c:0d: b1:8b:5e:d9:5a:1c:5a:1d:6e:b2:e4:09:f5:70:f2: 98:96:29:da:a1:70:9e:e9:86:e2:24:e8:59:4a:39: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C7:67:7B:03:36:DD:67:C4:B7:D9:00:14:79:2F:3B:3D:4B:08:32 X509v3 Authority Key Identifier: keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:cd:d2:35:3c:38:1a:60:42:7c:1e:bb:42:1c:80:c0:e0:8b: 80:60:87:3c:fc:87:f5:57:84:45:cf:a8:85:e6:4c:b4:0d:8a: 2b:1c:9e:f3:ec:b3:a6:e3:0c:ca:f5:e9:b3:f9:24:2c:4f:e7: 25:ab:11:8b:27:6f:04:fc:4b:98:3f:37:84:ab:df:9d:6c:95: 72:8e:39:51:8b:fb:61:35:dc:ad:14:f4:88:49:97:d7:0d:19: e0:ac:9d:84:94:5a:ec:bb:e0:99:70:d3:81:7c:d7:1d:82:cb: ca:de:37:81:60:f6:a0:ca:2a:e9:b9:fa:b5:f6:8c:44:7a:e9: df:86:c4:ca:82:26:de:eb:e2:bc:4c:a1:fc:57:8a:35:07:33: e4:66:c2:ab:ad:36:69:14:cd:8e:a5:32:d1:77:f7:67:b8:25: 33:e7:e0:6d:dc:46:e6:9b:ac:9d:ae:75:fe:c7:98:a6:26:08: fc:96:4d:59:80:68:da:b3:00:b0:e6:9e:22:75:f4:26:f3:cd: c2:51:0d:29:8f:08:eb:be:0d:8c:6e:f6:e7:1d:04:23:d7:83: 5a:3a:9d:3a:74:46:d9:99:f1:7d:2b:e1:36:7e:51:a5:cf:c7: 6e:98:7a:be:0d:1d:11:14:1a:aa:07:6a:bf:f3:d6:77:96:90: 42:3e:cd:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGRjIxMTAvBgNVBAUTKDc5NTI4MjVEMkUxOEZGMDYxQjlCMzZCRDY2MzQyMTJE MkRGMUJGM0EwHhcNMjUwODA5MDM0OTUxWhcNMjUwODE2MDM0OTUxWjAYMRYwFAYD VQQDEw02ODk2YzU1Zi0xNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xwU+cEO5jY+wWPjjxOOa+5a0skn9l+sgsO1zYUa5EQgsfB1zjM23yH4A8Sl G78rTYPRRJ+bip2brLL6nzOLezNQ/H0OC6l1lhkg/ruq84nJPL46JiHo5dlngXvv wM2vq9f0e3h0xjO/g2xhMfZs8eX4CbKZCW0vKH9Wx+L49kTiuY2OtDBo4lgxSi6P QE4d0eF4DEEkSf04Cp9he5R/U4Mq1I5bFXFPER+ijWMUMI2rtlr5Lr2sq8PWC10D JIeZpMNcHlqdMSI9StDCbzY1X4aZ1yhDkF2IrPU0lX6ILA2xi17ZWhxaHW6y5An1 cPKYlinaoXCe6YbiJOhZSjn6KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3HZ3sD Nt1nxLfZABR5Lzs9SwgyMB8GA1UdIwQYMBaAFHlSgl0uGP8GG5s2vWY0IS0t8b86 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUZGMi85RTRCQTM0RTBG MzkxMUVFQUVDRjU2NjNDNEY5QUUwMi9lVktDWFM0WV93WWJtemE5WmpRaExTM3h2 em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VWS0NYUzRZX3dZYm16YTlaalFoTFMzeHZ6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUZGMi85RTRCQTM0RTBGMzkxMUVFQUVDRjU2NjNDNEY5QUUwMi9lVktDWFM0WV93 WWJtemE5WmpRaExTM3h2em8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRzdI1PDgaYEJ8HrtCHIDA4IuAYIc8/If1V4RFz6iF5ky0DYorHJ7z 7LOm4wzK9emz+SQsT+clqxGLJ28E/EuYPzeEq9+dbJVyjjlRi/thNdytFPSISZfX DRngrJ2ElFrsu+CZcNOBfNcdgsvK3jeBYPagyirpufq19oxEeunfhsTKgibe6+K8 TKH8V4o1BzPkZsKrrTZpFM2OpTLRd/dnuCUz5+Bt3Ebmm6ydrnX+x5imJgj8lk1Z gGjaswCw5p4idfQm883CUQ0pjwjrvg2MbvbnHQQj14NaOp06dEbZmfF9K+E2flGl z8dumHq+DR0RFBqqB2q/89Z3lpBCPs2n -----END CERTIFICATE-----Generated at Mon Aug 11 04:35:47 2025 by rpki-client