$ rpki-client -vvf rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft File: ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft (raw, json) Hash identifier: qyzJO5ewDJshDphNBXpOG727VDCFCL1YhzvpXgwJv90= Subject key identifier: 55:36:C5:00:C9:24:74:88:C9:98:73:4D:B6:95:DD:1E:B7:40:54:4B Authority key identifier: 7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F Certificate issuer: /CN=A919A285/serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Certificate serial: 0891 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft Manifest number: 088A Signing time: Fri 08 Aug 2025 20:57:20 +0000 Manifest this update: Fri 08 Aug 2025 20:57:20 +0000 Manifest next update: Fri 15 Aug 2025 20:57:20 +0000 Files and hashes: 1: ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl (hash: 6WDQNk4dPdXZBpkjGHMft2fVaHtcbISO9o8MXj1+Qt8=) 2: 1DCABC72C57811EA950A8643C4F9AE02.roa (hash: 3y+P8Wjw2NbNvaqBtjPXBVu0eGWr6eeBTOCTDHgw4uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2193 (0x891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A285, serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F Validity Not Before: Aug 8 20:57:20 2025 GMT Not After : Aug 15 20:57:20 2025 GMT Subject: CN=689664b0-8a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0d:2e:49:a1:38:70:76:8c:e3:95:74:0b:63: 52:72:93:e8:db:70:1e:e2:ee:b8:aa:17:37:7c:a5: ec:d9:9a:e4:95:37:17:d4:f2:57:7c:bb:33:be:db: 4d:95:e6:62:d5:f2:31:7f:0e:45:12:5c:95:c7:c6: 70:db:bc:62:de:e2:47:68:7e:26:39:e0:8f:76:9d: b9:20:72:16:57:9a:ad:b5:91:9e:ab:e0:24:92:b0: cd:25:5a:50:45:43:54:1e:eb:30:da:44:4f:d2:8b: 8d:05:da:2a:08:82:22:09:92:14:78:bc:fc:68:02: c7:60:7b:0f:1e:31:25:d7:f1:ce:a7:9c:68:25:d9: 7d:34:cd:a5:d8:88:7e:b9:06:18:58:74:31:8c:6d: 6f:69:5d:b0:e0:dd:7c:9e:54:ae:58:49:d9:36:5c: 8e:69:42:23:f6:b8:c5:66:45:ae:e0:b6:96:c3:d9: 50:ed:c7:ee:8e:10:a5:12:67:da:87:47:7e:c9:60: 3f:07:95:6b:a4:f3:31:e9:9c:d3:b0:98:03:d6:dc: ba:42:51:e0:e6:af:21:04:83:f7:c6:84:7e:06:b6: f5:3e:79:6d:74:b6:d3:06:6f:c9:e8:fd:d6:e3:f9: 0b:37:51:e6:b1:ae:24:bd:2f:a1:ad:d8:f8:0c:e7: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:36:C5:00:C9:24:74:88:C9:98:73:4D:B6:95:DD:1E:B7:40:54:4B X509v3 Authority Key Identifier: keyid:7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:09:bc:9a:05:ad:71:94:25:59:49:35:bd:58:91:fc:13:dc: 6d:8d:e6:84:5b:0b:3e:09:cf:ce:ee:2d:a6:65:e2:dd:14:b9: ef:e9:a6:bf:52:55:6d:be:c9:33:07:1e:9b:a5:d7:8f:14:2a: 0e:b5:3f:3c:04:4e:9d:bc:5b:13:38:95:94:15:e7:03:c4:71: ee:e3:f5:d2:71:12:e2:81:64:7c:04:a6:b4:e8:df:c4:50:51: b8:2f:fe:72:92:09:0e:7d:5d:9d:b1:c4:d5:bc:7d:cd:80:8c: 9b:5b:7f:94:fc:d3:94:96:1b:38:42:45:99:8f:44:31:49:9f: fb:7e:b5:1c:09:fb:2f:24:e1:42:07:6b:d5:18:29:2f:8a:4a: f7:b1:aa:ea:53:d9:ba:ef:5f:4b:88:67:2c:3f:7c:88:31:9e: c4:03:73:cd:e2:6d:6b:73:db:28:60:40:66:4c:46:0d:77:ec: bf:7d:30:5a:95:18:90:85:2b:d3:79:f9:86:ed:d1:b5:68:99: e6:d1:88:9f:8b:ab:b1:80:44:12:c7:f5:87:2b:5a:2c:38:49: e9:eb:f3:3b:38:42:bd:f0:3d:90:e8:ed:f4:c3:c2:6c:a6:0a: 85:55:a9:4f:e2:fe:96:2e:d5:ee:44:55:aa:a3:0f:d2:6c:c8: c8:05:96:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEyODUxMTAvBgNVBAUTKDdBMzFENTczOTc5OEIwNjRBNjAwNzEzM0FBM0U1QjlD RDBFRUQ0NUYwHhcNMjUwODA4MjA1NzIwWhcNMjUwODE1MjA1NzIwWjAYMRYwFAYD VQQDEw02ODk2NjRiMC04YTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2w0uSaE4cHaM45V0C2NScpPo23Ae4u64qhc3fKXs2ZrklTcX1PJXfLszvttN leZi1fIxfw5FElyVx8Zw27xi3uJHaH4mOeCPdp25IHIWV5qttZGeq+AkkrDNJVpQ RUNUHusw2kRP0ouNBdoqCIIiCZIUeLz8aALHYHsPHjEl1/HOp5xoJdl9NM2l2Ih+ uQYYWHQxjG1vaV2w4N18nlSuWEnZNlyOaUIj9rjFZkWu4LaWw9lQ7cfujhClEmfa h0d+yWA/B5VrpPMx6ZzTsJgD1ty6QlHg5q8hBIP3xoR+Brb1PnltdLbTBm/J6P3W 4/kLN1Hmsa4kvS+hrdj4DOc3ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFU2xQDJ JHSIyZhzTbaV3R63QFRLMB8GA1UdIwQYMBaAFHox1XOXmLBkpgBxM6o+W5zQ7tRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTI4NS9ERDYyODlBQUM1 NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNHU21BSEV6cWo1Ym5ORHUx RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqSFZjNWVZc0dTbUFIRXpxajVibk5EdTFGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTI4NS9ERDYyODlBQUM1NzUxMUVBQTU1ODFDNDBDNEY5QUUwMi9lakhWYzVlWXNH U21BSEV6cWo1Ym5ORHUxRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlCbyaBa1xlCVZSTW9WJH8E9xtjeaEWws+Cc/O7i2mZeLdFLnv6aa/ UlVtvskzBx6bpdePFCoOtT88BE6dvFsTOJWUFecDxHHu4/XScRLigWR8BKa06N/E UFG4L/5ykgkOfV2dscTVvH3NgIybW3+U/NOUlhs4QkWZj0QxSZ/7frUcCfsvJOFC B2vVGCkvikr3sarqU9m6719LiGcsP3yIMZ7EA3PN4m1rc9soYEBmTEYNd+y/fTBa lRiQhSvTefmG7dG1aJnm0Yifi6uxgEQSx/WHK1osOEnp6/M7OEK98D2Q6O30w8Js pgqFValP4v6WLtXuRFWqow/SbMjIBZaW -----END CERTIFICATE-----Generated at Sun Aug 10 18:57:26 2025 by rpki-client