$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft File: 0ewZe9sNlRk40e71SWoRrMoCiO8.mft (raw, json) Hash identifier: TC7QiZqkOVif4H5KXa98TLIuoevIiXabCJyYyIBt5gE= Subject key identifier: 24:EA:C6:85:4D:AD:95:65:8C:1E:9F:7B:DE:DA:C2:55:6B:87:A3:40 Authority key identifier: D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF Certificate issuer: /CN=A919FDC0/serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft Manifest number: 0A Signing time: Sat 09 Aug 2025 08:41:21 +0000 Manifest this update: Sat 09 Aug 2025 08:41:21 +0000 Manifest next update: Sat 16 Aug 2025 08:41:21 +0000 Files and hashes: 1: 0ewZe9sNlRk40e71SWoRrMoCiO8.crl (hash: vL66AioAHw9IIQKKjbPfj129yg8bw5juOdRVKmhDjO4=) 2: ACFE803469E911F0A7D42F68C4F9AE02.roa (hash: hVcLQOQnj8t+4j/b6kUDlk5JAqcOolfdhy262nXQ91E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=D1EC197BDB0D951938D1EEF5496A11ACCA0288EF Validity Not Before: Aug 9 08:41:21 2025 GMT Not After : Aug 16 08:41:21 2025 GMT Subject: CN=689709b1-0028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:b5:21:79:d0:9e:c2:01:e1:36:e1:38:fb: 1b:cc:ed:4c:2c:ea:3b:fe:b3:38:6a:6c:08:4d:56: b6:35:29:ca:00:be:9c:f4:9e:03:28:74:fb:07:82: 80:48:b2:72:49:d6:24:cb:4b:e9:ad:c4:b7:61:d4: c6:0e:2e:64:d0:09:ba:fb:22:ca:20:2b:80:af:f4: e5:e4:60:82:59:8b:76:04:2a:50:85:17:4a:8f:ae: 1e:46:fd:f8:f2:99:09:be:1d:54:6f:d6:9c:6d:1e: 30:4c:1c:f1:95:71:96:ee:9a:33:a3:f0:82:55:08: 84:ad:21:1b:c4:ce:5c:0a:22:cb:b7:d0:4d:37:13: 25:98:2a:85:20:a6:25:ca:ac:48:b9:d6:ca:d2:a8: ed:09:53:8b:59:d6:42:a9:4b:fe:90:e3:93:6e:e2: b8:47:29:67:7e:fd:1c:ed:07:71:d9:d2:65:33:c9: 1d:90:ba:69:50:11:fe:8f:15:50:ba:42:d7:7d:7a: 8a:27:c9:d0:03:09:e6:e5:19:69:bb:41:db:bd:fa: 91:a4:78:8e:21:f9:4c:5c:fe:82:30:26:13:88:a7: ea:76:85:9e:98:ba:e2:3d:79:31:d2:70:be:8b:1e: ec:a5:41:85:a6:c6:5c:0c:1c:99:1b:2d:30:67:83: ff:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:EA:C6:85:4D:AD:95:65:8C:1E:9F:7B:DE:DA:C2:55:6B:87:A3:40 X509v3 Authority Key Identifier: keyid:D1:EC:19:7B:DB:0D:95:19:38:D1:EE:F5:49:6A:11:AC:CA:02:88:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ewZe9sNlRk40e71SWoRrMoCiO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/2954D62A69E911F081B65B67C4F9AE02/0ewZe9sNlRk40e71SWoRrMoCiO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:33:37:1a:ed:27:fc:d0:d1:a3:f7:70:d6:44:7e:63:13:e0: 9c:e6:cc:58:9b:38:d5:fe:b0:6d:24:aa:cc:47:00:9a:7a:2b: dd:57:18:d2:b5:79:51:4e:ee:ac:ee:1a:1e:77:cd:b2:28:bd: 79:52:74:df:f4:3b:b2:42:63:9f:b8:1c:81:a7:5f:8f:68:64: 7e:ea:12:ce:48:14:1f:18:17:c8:7f:31:2a:35:9e:c7:34:98: e8:b6:37:97:1e:79:b2:1f:54:0e:3f:a4:6f:3c:0c:f1:91:e2: d3:95:f0:a9:9b:ea:bc:9e:1a:8f:76:29:77:71:fb:4a:05:8b: a0:35:f2:ab:37:a1:ab:1c:6b:cb:18:3a:d0:af:f8:a6:d3:93: e6:e0:a0:31:2c:8c:93:d2:3e:1e:f0:ef:98:11:8b:cf:87:c8: 80:8a:6b:05:29:c5:91:9b:7f:4c:1a:02:3b:79:55:67:ae:37: 70:57:ba:22:cc:a6:b4:d3:d9:8f:f7:75:98:0a:15:86:1d:28: 9e:88:50:98:eb:eb:92:b0:23:43:12:91:f6:96:71:1f:b6:0b: cb:22:98:c1:22:73:24:ad:4b:d7:ba:f8:54:9b:25:69:c3:c1: bf:13:d1:e6:73:6a:34:f2:c2:95:06:68:d3:58:ea:fb:dc:fd: c1:7e:82:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkRDMDExMC8GA1UEBRMoRDFFQzE5N0JEQjBEOTUxOTM4RDFFRUY1NDk2QTExQUND QTAyODhFRjAeFw0yNTA4MDkwODQxMjFaFw0yNTA4MTYwODQxMjFaMBgxFjAUBgNV BAMTDTY4OTcwOWIxLTAwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDZ7UhedCewgHhNuE4+xvM7Uws6jv+szhqbAhNVrY1KcoAvpz0ngModPsHgoBI snJJ1iTLS+mtxLdh1MYOLmTQCbr7IsogK4Cv9OXkYIJZi3YEKlCFF0qPrh5G/fjy mQm+HVRv1pxtHjBMHPGVcZbumjOj8IJVCIStIRvEzlwKIsu30E03EyWYKoUgpiXK rEi51srSqO0JU4tZ1kKpS/6Q45Nu4rhHKWd+/RztB3HZ0mUzyR2QumlQEf6PFVC6 Qtd9eoonydADCeblGWm7Qdu9+pGkeI4h+Uxc/oIwJhOIp+p2hZ6YuuI9eTHScL6L HuylQYWmxlwMHJkbLTBng/+xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJOrGhU2t lWWMHp973trCVWuHo0AwHwYDVR0jBBgwFoAU0ewZe9sNlRk40e71SWoRrMoCiO8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzI5NTRENjJBNjlF OTExRjA4MUI2NUI2N0M0RjlBRTAyLzBld1plOXNObFJrNDBlNzFTV29Sck1vQ2lP OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMGV3WmU5c05sUms0MGU3MVNXb1JyTW9DaU84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG REMwLzI5NTRENjJBNjlFOTExRjA4MUI2NUI2N0M0RjlBRTAyLzBld1plOXNObFJr NDBlNzFTV29Sck1vQ2lPOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK0zNxrtJ/zQ0aP3cNZEfmMT4JzmzFibONX+sG0kqsxHAJp6K91XGNK1 eVFO7qzuGh53zbIovXlSdN/0O7JCY5+4HIGnX49oZH7qEs5IFB8YF8h/MSo1nsc0 mOi2N5ceebIfVA4/pG88DPGR4tOV8Kmb6ryeGo92KXdx+0oFi6A18qs3oasca8sY OtCv+KbTk+bgoDEsjJPSPh7w75gRi8+HyICKawUpxZGbf0waAjt5VWeuN3BXuiLM prTT2Y/3dZgKFYYdKJ6IUJjr65KwI0MSkfaWcR+2C8simMEicyStS9e6+FSbJWnD wb8T0eZzajTywpUGaNNY6vvc/cF+ghw= -----END CERTIFICATE-----Generated at Sat Aug 9 23:23:09 2025 by rpki-client