$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft File: EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json) Hash identifier: uB2ElcQrGTA2OQgt1hqucfMI0GFJNPYHLcaGLdiRzdk= Subject key identifier: 29:43:1E:29:8B:0A:EC:2E:D6:3A:30:33:51:5C:F2:FD:D2:FE:49:45 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 03D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft Manifest number: 036A Signing time: Sun 03 Aug 2025 01:46:49 +0000 Manifest this update: Sun 03 Aug 2025 01:46:49 +0000 Manifest next update: Sun 10 Aug 2025 01:46:49 +0000 Files and hashes: 1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: BcRXuIf0S165mtKK2OqO7DAZZSHdN2sh79OjgoqWMOM=) 2: 90D0D0C4932111EE9C797C3DC4F9AE02.roa (hash: O+w5tLUYY2vDAPyyihGdNaVeLcPrzrretQfcUAVViMY=) 3: 010342748FE911EDA6F5922AC4F9AE02.roa (hash: 5w2gwK/+zmYTYrBGcuIv1emp3tFDL4QjnfqeQ2tORBo=) 4: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: w55707A6oGZPVJb5dLEvH7DmAsCJ21ZtMMUXzrwNCRM=) 5: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: KY39ZDloooDTLSWdSYEfYOluFdXRey3d+9IwjJV7kvw=) 6: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: PO28TqT7JFAgsJS4OG8H4ivCR2vG+AQUGdE3hSyf+fM=) 7: 7CCE329266F711EF86880681C4F9AE02.roa (hash: 6anx6+tUYpCyea4W0BqwQSGkyUCAr4k+8K9NAhmwsJE=) 8: 21B7F8F2932111EEA205F93BC4F9AE02.roa (hash: BC1XUzBkjyQzlz4GvtxH81hMdlkimJB+lU8F+PmiFVI=) 9: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: ABW3By8YU2W6olwHz1/qOoSOHNFidR8eMB8CQ1rCUFk=) 10: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: q0o0blyQ81NictXAsmCb5KMZ0BzFrp/mj7hc480MWyw=) 11: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: R17w/Fkdvp/1oePeXfLYVtvseH7RLcT+pcv0SXzugK4=) 12: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: QdBFtLVQnvTC0U8ce4xfWA4Knfofq/bGhnYdWQPREvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 977 (0x3d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Aug 3 01:46:49 2025 GMT Not After : Aug 10 01:46:49 2025 GMT Subject: CN=688ebf89-fb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:64:1d:26:28:7f:e0:eb:61:f6:7b:8f:54: 3d:bb:fd:1e:ab:1b:73:33:94:88:cd:e1:8a:51:fa: b4:d1:17:ad:51:58:e7:f8:ce:41:fc:bf:06:38:e2: bc:90:49:8a:1c:eb:d6:8f:6c:1c:5e:59:33:57:9b: 48:4c:24:8f:36:00:b2:05:41:13:f3:21:85:46:6d: ea:1b:e7:93:c2:ca:1c:cb:77:90:e7:ad:f0:9d:1a: b8:a0:42:55:d3:26:25:3b:b9:72:36:ae:c1:8f:c0: 84:b9:72:9b:64:1a:22:87:ef:f1:c2:69:cc:b1:6e: c4:84:8d:34:ce:b4:09:03:c5:a7:01:b1:0b:e2:ab: 45:58:18:d1:0b:25:6f:f9:9a:b0:ae:73:af:c1:9f: cd:6e:39:cb:0b:93:ae:c8:2f:a3:14:2f:72:d0:3f: c6:5d:05:f5:50:10:77:ff:5c:2c:d7:9d:df:42:e7: 2d:b4:6b:5c:d2:e4:1f:95:28:a6:94:86:88:39:94: 27:75:fe:07:d6:cc:10:a4:48:b8:54:c0:f1:19:6e: d7:1b:0e:0e:9b:d7:47:82:c7:65:8d:f1:65:24:a4: 12:78:91:ca:81:89:29:29:47:f5:54:3a:83:25:e0: 15:ba:0f:3b:69:f5:bc:72:03:a4:23:86:0a:89:5e: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:43:1E:29:8B:0A:EC:2E:D6:3A:30:33:51:5C:F2:FD:D2:FE:49:45 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:44:6d:49:95:62:14:d2:9d:b6:4b:4c:43:5e:f7:63:ec:1d: 52:5a:9a:b9:92:62:6a:bd:d8:fd:6e:d7:44:2d:ce:6a:38:2a: 47:30:5f:1d:b6:ab:5c:3b:6b:01:60:5c:2c:26:15:38:4e:e3: cd:01:f7:9e:26:ac:22:1b:bf:6c:14:30:41:65:08:f9:df:dd: 82:a3:97:d3:33:4d:bc:1c:9e:bf:af:9f:5e:51:15:83:10:65: 58:79:83:7c:19:28:84:88:2c:db:38:2e:db:2b:ed:7d:86:30: e0:ba:47:5a:3e:62:4f:af:60:97:48:64:e2:f4:4b:a1:e0:d4: 0e:c8:9e:25:bf:7b:96:90:25:97:8d:c0:99:a9:3b:b9:1a:36: f6:21:af:8d:f4:87:de:a1:cb:c7:ab:6b:ab:ba:c8:58:ad:e3: 87:e5:97:db:d5:52:23:2a:a3:8a:2e:d0:cb:01:34:e3:6c:b4: 9a:72:04:9d:97:44:a0:67:b5:65:1c:02:73:23:4a:07:bd:d0: 41:12:8d:08:6b:4c:13:34:6a:21:01:45:05:66:12:74:a2:58: 5e:d4:a6:e5:1f:4c:b7:14:6c:f7:dd:eb:d6:70:9c:26:b0:8b: 02:26:bc:07:7b:61:ab:76:65:a7:e3:27:3f:72:27:0b:52:2b: 35:35:e2:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwODAzMDE0NjQ5WhcNMjUwODEwMDE0NjQ5WjAYMRYwFAYD VQQDEw02ODhlYmY4OS1mYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eVkHSYof+DrYfZ7j1Q9u/0eqxtzM5SIzeGKUfq00RetUVjn+M5B/L8GOOK8 kEmKHOvWj2wcXlkzV5tITCSPNgCyBUET8yGFRm3qG+eTwsocy3eQ563wnRq4oEJV 0yYlO7lyNq7Bj8CEuXKbZBoih+/xwmnMsW7EhI00zrQJA8WnAbEL4qtFWBjRCyVv +ZqwrnOvwZ/NbjnLC5OuyC+jFC9y0D/GXQX1UBB3/1ws153fQucttGtc0uQflSim lIaIOZQndf4H1swQpEi4VMDxGW7XGw4Om9dHgsdljfFlJKQSeJHKgYkpKUf1VDqD JeAVug87afW8cgOkI4YKiV4MIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClDHimL Cuwu1jowM1Fc8v3S/klFMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEFGMi83M0M4ODc5MkUwNjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01Q dXByZFBTZjRYYU9QRS1RWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDORG1JlWIU0p22S0xDXvdj7B1SWpq5kmJqvdj9btdELc5qOCpHMF8d tqtcO2sBYFwsJhU4TuPNAfeeJqwiG79sFDBBZQj5392Co5fTM028HJ6/r59eURWD EGVYeYN8GSiEiCzbOC7bK+19hjDgukdaPmJPr2CXSGTi9Euh4NQOyJ4lv3uWkCWX jcCZqTu5Gjb2Ia+N9IfeocvHq2urushYreOH5Zfb1VIjKqOKLtDLATTjbLSacgSd l0SgZ7VlHAJzI0oHvdBBEo0Ia0wTNGohAUUFZhJ0olhe1KblH0y3FGz33evWcJwm sIsCJrwHe2GrdmWn4yc/cicLUis1NeIH -----END CERTIFICATE-----Generated at Mon Aug 4 16:12:08 2025 by rpki-client