$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json) Hash identifier: xT2pjq9hbISxS96Wbdj/0A4bWsO7fgLxoUcDI4CCVG4= Subject key identifier: 77:B4:D0:94:76:26:3A:08:2F:62:22:FE:3C:F7:91:26:CF:61:DA:9D Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft Manifest number: 06A0 Signing time: Sun 10 Aug 2025 23:23:37 +0000 Manifest this update: Sun 10 Aug 2025 23:23:36 +0000 Manifest next update: Sun 17 Aug 2025 23:23:36 +0000 Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: VnjnXpH26PTWfh3NeQtZktf+FKVPelDDr4dn2y9Bmi4=) 2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: HpV9alDLFaENoEQRBDM1U8HrLENNv7Hd/Jy118wd7FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 23:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: Aug 10 23:23:36 2025 GMT Not After : Aug 17 23:23:36 2025 GMT Subject: CN=689929f9-6591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:47:2d:28:23:2b:4d:22:0c:57:98:03:07: ec:d7:67:44:d8:7e:50:c4:bc:ff:a4:17:01:b2:7a: 94:f7:ee:fc:d4:7a:12:bf:0c:e1:4b:26:62:32:dc: 04:cc:7c:69:9c:d3:03:60:5b:a2:71:0f:39:0a:ae: 4c:9c:41:d0:18:98:79:3e:e4:1e:22:47:68:31:86: 94:b8:60:44:ac:e6:61:84:2c:a7:7f:94:5f:56:f5: e9:7b:55:cb:cd:d1:85:7d:e3:d5:36:1e:5d:6b:ec: 58:6a:16:e5:4c:65:bc:ba:4c:e4:c9:60:7b:b0:ca: ba:00:e2:b3:32:a5:e7:f3:52:be:99:d5:a4:7f:b0: 2b:41:15:ee:45:b2:e0:07:99:73:76:8e:00:54:a4: b4:f5:70:65:b3:9e:cd:f1:6b:1d:a2:cb:a8:c0:5d: 0b:eb:00:e4:ad:10:50:07:98:a6:50:7b:c6:61:65: eb:bb:39:17:93:6a:92:93:77:c9:36:07:07:c1:a2: 1a:ea:3e:62:d2:2e:b4:97:2e:e2:6c:1f:e2:61:a7: 5c:28:cd:5a:6c:b8:af:58:da:d6:86:03:3d:d8:38: 0d:1f:0b:04:c5:cb:87:b1:93:28:c5:36:8d:aa:91: f1:24:85:14:fc:44:f0:b2:f4:64:af:b8:a7:b2:de: f4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B4:D0:94:76:26:3A:08:2F:62:22:FE:3C:F7:91:26:CF:61:DA:9D X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:22:76:49:20:46:00:44:31:4c:ab:2f:83:0f:10:fd:e5:54: 01:24:57:0c:1d:c4:63:71:56:78:5f:59:2c:98:f4:a5:28:55: 58:9c:7f:53:0c:85:0f:b4:fa:33:50:3c:ca:5b:9c:51:ec:cd: 10:63:64:bb:11:0f:36:0b:0c:39:c7:d6:79:30:31:b5:7e:a0: c4:90:42:f5:5a:7a:b8:1b:51:57:54:77:21:60:a7:de:ce:0b: 19:ed:54:ff:65:49:1e:04:cc:ca:d1:c1:57:c9:ae:38:ba:96: 42:36:29:2a:0c:74:10:3c:96:a4:21:1b:65:72:a4:ce:92:33: 1f:4f:79:b5:9d:2a:ee:53:de:bd:1e:cd:f4:8d:07:a6:f1:67: 21:4c:1d:1b:c3:1d:5d:44:86:b4:f6:a1:18:c4:53:7c:95:31: 2d:b1:e9:c2:0b:cb:1e:8f:bd:97:32:e6:12:ef:5c:69:c0:0c: de:bb:5b:17:95:db:36:ca:72:c4:9b:de:13:8c:9c:11:b2:69: e2:ad:33:8d:a6:e3:19:72:a5:a3:78:1c:0d:23:a8:30:28:8e: a0:93:54:86:7b:b6:50:2f:39:57:f1:52:e2:39:a4:1f:33:4e: 61:a0:c0:d1:b0:4f:e2:f7:ce:35:63:28:8b:4e:ec:62:29:98: d1:c5:b9:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz M0UwMkMwMTkwHhcNMjUwODEwMjMyMzM2WhcNMjUwODE3MjMyMzM2WjAYMRYwFAYD VQQDEw02ODk5MjlmOS02NTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0L5HLSgjK00iDFeYAwfs12dE2H5QxLz/pBcBsnqU9+781HoSvwzhSyZiMtwE zHxpnNMDYFuicQ85Cq5MnEHQGJh5PuQeIkdoMYaUuGBErOZhhCynf5RfVvXpe1XL zdGFfePVNh5da+xYahblTGW8ukzkyWB7sMq6AOKzMqXn81K+mdWkf7ArQRXuRbLg B5lzdo4AVKS09XBls57N8WsdosuowF0L6wDkrRBQB5imUHvGYWXruzkXk2qSk3fJ NgcHwaIa6j5i0i60ly7ibB/iYadcKM1abLivWNrWhgM92DgNHwsExcuHsZMoxTaN qpHxJIUU/ETwsvRkr7inst70BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHe00JR2 JjoIL2Ii/jz3kSbPYdqdMB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3 QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu cWZJYlRFLWd5R1l6NEN3QmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwInZJIEYARDFMqy+DDxD95VQBJFcMHcRjcVZ4X1ksmPSlKFVYnH9T DIUPtPozUDzKW5xR7M0QY2S7EQ82Cww5x9Z5MDG1fqDEkEL1Wnq4G1FXVHchYKfe zgsZ7VT/ZUkeBMzK0cFXya44upZCNikqDHQQPJakIRtlcqTOkjMfT3m1nSruU969 Hs30jQem8WchTB0bwx1dRIa09qEYxFN8lTEtsenCC8sej72XMuYS71xpwAzeu1sX lds2ynLEm94TjJwRsmnirTONpuMZcqWjeBwNI6gwKI6gk1SGe7ZQLzlX8VLiOaQf M05hoMDRsE/i9841YyiLTuxiKZjRxbkW -----END CERTIFICATE-----Generated at Tue Aug 12 06:35:56 2025 by rpki-client