$ rpki-client -vvf rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft File: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft (raw, json) Hash identifier: j0FF3Wk5CZqHtej/TjfRKR53/6H7f2Tci+0xmNNaTtc= Subject key identifier: 3F:AD:74:7F:82:BE:DB:76:1E:A8:A3:0D:2A:08:4C:23:88:28:F4:54 Authority key identifier: 4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74 Certificate issuer: /CN=A918E269/serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft Manifest number: 33 Signing time: Sun 03 Aug 2025 08:05:35 +0000 Manifest this update: Sun 03 Aug 2025 08:05:35 +0000 Manifest next update: Sun 10 Aug 2025 08:05:35 +0000 Files and hashes: 1: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl (hash: D37muSWh0cnTOfRJ0qLzQOErROixgYQqn8Lz+GdCjIQ=) 2: 2B1A3764302A11F0B211AD0BC4F9AE02.roa (hash: NkhW5FW4JP+LMlscQaQBvoaph79aDkou+LpFxXsX7js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 08:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E269, serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274 Validity Not Before: Aug 3 08:05:35 2025 GMT Not After : Aug 10 08:05:35 2025 GMT Subject: CN=688f184f-b34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:1e:04:9b:53:ac:6f:b9:77:f4:26:d9:47: fb:8e:ae:14:2c:b1:27:03:ed:4f:b4:16:f7:bf:a7: 35:da:1e:ff:92:dc:66:0b:46:d5:29:a9:82:ba:ba: 42:12:13:dc:23:2d:14:3b:e0:89:97:b2:af:7f:fb: bf:95:00:8a:b9:de:23:71:13:91:28:9b:7a:3d:56: 31:0d:73:93:b0:a3:0e:df:b4:c2:17:30:1e:3a:a1: cf:62:2a:f7:52:1a:70:2a:c7:02:16:34:0b:ce:01: c1:b2:b9:02:5b:52:e6:e7:2c:8c:e5:c3:29:fb:2e: 34:17:87:7c:d2:73:72:b6:7c:df:6a:8d:86:f3:d9: 08:83:b7:05:cc:3a:06:c9:37:38:1a:b5:28:a1:52: 96:eb:6d:f1:c1:60:53:33:0e:85:82:d1:55:5a:8e: 36:27:ef:08:50:f1:19:e8:c4:c4:7f:dd:13:7b:eb: d8:6d:0c:a3:2f:12:1c:75:de:19:8d:d1:46:e7:7c: fc:d6:92:17:21:9c:82:a3:96:3c:ef:db:20:5f:8b: cf:cb:3f:23:cb:22:91:0d:79:ac:da:59:ce:6e:20: 21:88:3d:1e:c8:0a:e2:cd:d2:f0:88:bf:25:60:7f: 2a:2f:27:19:93:89:54:ab:2a:54:5c:65:25:4e:db: f3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AD:74:7F:82:BE:DB:76:1E:A8:A3:0D:2A:08:4C:23:88:28:F4:54 X509v3 Authority Key Identifier: keyid:4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a2:04:17:21:d4:d0:2c:9c:a3:02:25:b5:6a:c5:93:fd:c8: a6:7e:4e:88:bc:ae:10:c4:7d:4a:74:de:10:e8:53:d2:a2:e7: 4c:c7:4e:fb:c3:97:e3:1d:b2:17:cc:a1:26:2a:6f:30:24:b4: 40:00:56:fc:81:b8:1b:44:52:d2:85:52:c5:b1:bf:7b:e1:dc: 79:9e:f8:a4:72:bf:15:84:24:cd:9b:7f:d8:1b:eb:4a:ee:5b: 64:57:9e:5f:06:d0:d6:65:95:bd:a3:f0:8a:04:aa:40:f5:42: bf:60:7f:a4:a7:29:e7:4e:68:88:4d:8c:9a:42:48:bc:02:16: d2:2f:c5:58:78:9b:41:64:fb:84:39:86:3d:ca:fa:bf:55:cf: a3:53:29:dd:d8:0c:63:3d:5e:a9:90:d1:a8:5e:b3:be:43:ea: 48:c0:c8:58:21:a6:39:54:bc:67:e4:3d:71:c4:39:25:34:29: 7d:8f:08:5b:9e:96:a9:8a:25:ad:5a:d7:00:7e:ec:e7:47:85: f9:53:46:bd:ee:27:7d:f4:e9:53:a3:d9:21:3d:22:42:4b:86: f5:62:72:7f:56:b1:18:78:56:5b:f8:8b:be:90:f6:64:3b:0e: 51:79:c4:ba:f5:83:f9:89:b3:4e:17:ca:ee:44:b4:8a:95:06: e1:56:6f:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTI2OTExMC8GA1UEBRMoNEJFMTA3MzkzNjI1MkUzQ0YwNzJGOTg5RDdGREM0RTdF N0M2NjI3NDAeFw0yNTA4MDMwODA1MzVaFw0yNTA4MTAwODA1MzVaMBgxFjAUBgNV BAMTDTY4OGYxODRmLWIzNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrmx4Em1Osb7l39CbZR/uOrhQssScD7U+0Fve/pzXaHv+S3GYLRtUpqYK6ukIS E9wjLRQ74ImXsq9/+7+VAIq53iNxE5Eom3o9VjENc5Owow7ftMIXMB46oc9iKvdS GnAqxwIWNAvOAcGyuQJbUubnLIzlwyn7LjQXh3zSc3K2fN9qjYbz2QiDtwXMOgbJ NzgatSihUpbrbfHBYFMzDoWC0VVajjYn7whQ8RnoxMR/3RN769htDKMvEhx13hmN 0UbnfPzWkhchnIKjljzv2yBfi8/LPyPLIpENeazaWc5uICGIPR7ICuLN0vCIvyVg fyovJxmTiVSrKlRcZSVO2/PTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP610f4K+ 23YeqKMNKghMI4go9FQwHwYDVR0jBBgwFoAUS+EHOTYlLjzwcvmJ1/3E5+fGYnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMjY5LzM5M0JBOENFMkI2 RjExRjA4NkFERTU0RUM0RjlBRTAyL1MtRUhPVFlsTGp6d2N2bUoxXzNFNS1mR1lu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy1FSE9UWWxManp3Y3ZtSjFfM0U1LWZHWW5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MjY5LzM5M0JBOENFMkI2RjExRjA4NkFERTU0RUM0RjlBRTAyL1MtRUhPVFlsTGp6 d2N2bUoxXzNFNS1mR1luUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHSiBBch1NAsnKMCJbVqxZP9yKZ+Toi8rhDEfUp03hDoU9Ki50zHTvvD l+MdshfMoSYqbzAktEAAVvyBuBtEUtKFUsWxv3vh3Hme+KRyvxWEJM2bf9gb60ru W2RXnl8G0NZllb2j8IoEqkD1Qr9gf6SnKedOaIhNjJpCSLwCFtIvxVh4m0Fk+4Q5 hj3K+r9Vz6NTKd3YDGM9XqmQ0ahes75D6kjAyFghpjlUvGfkPXHEOSU0KX2PCFue lqmKJa1a1wB+7OdHhflTRr3uJ3306VOj2SE9IkJLhvVicn9WsRh4Vlv4i76Q9mQ7 DlF5xLr1g/mJs04Xyu5EtIqVBuFWb2s= -----END CERTIFICATE-----Generated at Mon Aug 4 11:09:25 2025 by rpki-client