$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft File: 0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json) Hash identifier: HNEf4FQmKI9j3yx+zB4MNaRHJ/O82FKyiEP+h4RcMpw= Subject key identifier: C3:97:7C:7F:43:4C:32:DB:B6:DB:98:A5:F1:78:27:EF:7C:58:65:83 Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 Certificate issuer: /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft Manifest number: 01B0 Signing time: Sat 09 Aug 2025 03:33:24 +0000 Manifest this update: Sat 09 Aug 2025 03:33:24 +0000 Manifest next update: Sat 16 Aug 2025 03:33:24 +0000 Files and hashes: 1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: 8jIpgHKDqT60i3inbwVyFS4bkSZ0gUFZdhRgA4Q0K5Y=) 2: 71F97AC0560E11EEA8088470C4F9AE02.roa (hash: M1Z0vPN0xRUeI7aXSO+zgJ15zwwVDL1Npd3KMXS/ZDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5 Validity Not Before: Aug 9 03:33:24 2025 GMT Not After : Aug 16 03:33:24 2025 GMT Subject: CN=6896c184-79c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fe:dc:fc:e3:56:26:d1:f6:19:d2:b3:47:a6: 43:0d:f7:80:8d:5c:c6:57:65:0f:a1:7b:f2:cc:72: 70:90:10:ed:82:31:09:85:a5:69:ca:ba:dd:f3:19: 6b:4a:47:2f:4a:5a:54:86:57:d1:60:ca:25:be:db: fc:b0:2b:36:f7:ba:29:87:8e:c0:11:db:f4:07:0a: a6:13:e9:c9:b9:92:7d:46:0c:60:10:99:17:7f:51: 96:25:d5:32:b1:8f:5c:f3:07:16:ee:55:d4:d9:c1: 6d:58:df:af:84:77:25:d2:46:6e:0c:c8:05:24:45: a8:69:92:39:5f:2d:d5:d1:b2:78:b2:84:0b:67:b5: 0e:c9:1a:92:c4:05:c8:11:d6:bc:9b:6e:40:ba:bd: 0c:6c:f9:ca:86:9f:d3:9b:c5:51:6c:32:2e:ae:9b: d1:25:10:14:cb:0e:16:cf:34:81:58:8e:39:e8:8c: 30:20:6b:f3:80:17:6c:e1:93:ec:e0:98:ad:ac:99: 57:ae:2c:88:7b:9c:db:84:c7:90:04:b9:1e:3b:f0: bb:cc:29:f5:7e:e9:11:70:1f:f9:fd:1f:79:78:0b: f5:d8:c6:e9:8c:4f:89:ba:11:34:8b:74:26:d9:92: e0:b1:b8:0b:a3:56:9f:85:05:42:dc:89:55:46:e7: 1e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:97:7C:7F:43:4C:32:DB:B6:DB:98:A5:F1:78:27:EF:7C:58:65:83 X509v3 Authority Key Identifier: keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:21:f8:2f:f1:c5:a7:81:15:9d:df:b3:7a:21:31:cd:07:fb: b8:59:e3:5d:e5:41:e6:88:cc:ef:68:b1:2d:b8:26:96:f2:5b: 9b:dd:c6:f8:a1:2b:8e:da:b4:26:75:49:84:62:cf:d7:da:f1: 67:5e:09:86:d7:1c:14:ca:4f:59:79:e5:54:9c:1a:7f:8a:b1: 5b:97:06:4e:0c:70:6b:eb:93:b5:4e:54:da:60:b7:8e:78:a4: 2b:ea:87:db:d1:f4:ae:32:6b:0e:a5:dc:08:77:ee:6b:fa:c4: 40:67:9b:df:60:43:58:be:aa:59:e2:56:fa:c5:06:70:f1:62: ba:40:b2:71:8e:29:3f:0b:38:cb:5f:a0:67:d2:0f:f0:a7:fb: f4:73:09:0c:28:e2:29:95:99:9f:bb:17:c6:c4:30:31:87:42: e3:bd:1e:0a:21:35:8c:d5:6e:dd:ae:a8:10:bb:e6:cf:7f:77: 6f:c2:28:58:e9:97:49:74:19:86:c4:06:a7:cd:c9:58:1c:74: ef:2e:3b:e6:b9:3a:72:5e:3c:ed:8b:d7:0e:06:f9:c3:56:7b: fc:c1:1a:5e:b6:e8:d7:a4:05:0e:60:93:f8:01:8e:13:48:17: f5:76:a8:4b:57:cb:95:e8:e3:0d:9d:3a:ae:76:af:d1:2d:88: 8e:93:c4:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKEQxRTI5OUY5RTgyQzkzN0NCMkIyQTY5MDYxRTgxNzM0 MUY4NTA4RjUwHhcNMjUwODA5MDMzMzI0WhcNMjUwODE2MDMzMzI0WjAYMRYwFAYD VQQDEw02ODk2YzE4NC03OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1P7c/ONWJtH2GdKzR6ZDDfeAjVzGV2UPoXvyzHJwkBDtgjEJhaVpyrrd8xlr SkcvSlpUhlfRYMolvtv8sCs297oph47AEdv0BwqmE+nJuZJ9RgxgEJkXf1GWJdUy sY9c8wcW7lXU2cFtWN+vhHcl0kZuDMgFJEWoaZI5Xy3V0bJ4soQLZ7UOyRqSxAXI Eda8m25Aur0MbPnKhp/Tm8VRbDIurpvRJRAUyw4WzzSBWI456IwwIGvzgBds4ZPs 4JitrJlXriyIe5zbhMeQBLkeO/C7zCn1fukRcB/5/R95eAv12MbpjE+JuhE0i3Qm 2ZLgsbgLo1afhQVC3IlVRucekQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOXfH9D TDLbttuYpfF4J+98WGWDMB8GA1UdIwQYMBaAFNHimfnoLJN8srKmkGHoFzQfhQj1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy80RUE2QzYxOEU4 QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2szeXlzcWFRWWVnWE5CLUZD UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBlS1otZWdzazN5eXNxYVFZZWdYTkItRkNQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy80RUE2QzYxOEU4QkQxMUVEOEI4OTI1MjJDNEY5QUUwMi8wZUtaLWVnc2sz eXlzcWFRWWVnWE5CLUZDUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfIfgv8cWngRWd37N6ITHNB/u4WeNd5UHmiMzvaLEtuCaW8lub3cb4 oSuO2rQmdUmEYs/X2vFnXgmG1xwUyk9ZeeVUnBp/irFblwZODHBr65O1TlTaYLeO eKQr6ofb0fSuMmsOpdwId+5r+sRAZ5vfYENYvqpZ4lb6xQZw8WK6QLJxjik/CzjL X6Bn0g/wp/v0cwkMKOIplZmfuxfGxDAxh0LjvR4KITWM1W7drqgQu+bPf3dvwihY 6ZdJdBmGxAanzclYHHTvLjvmuTpyXjzti9cOBvnDVnv8wRpetujXpAUOYJP4AY4T SBf1dqhLV8uV6OMNnTqudq/RLYiOk8RZ -----END CERTIFICATE-----Generated at Sun Aug 10 18:53:16 2025 by rpki-client