$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft File: EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json) Hash identifier: mx1i1z7UiRt/EwAClQrKiIm+eXPSzFeB3cRLkAjaU4E= Subject key identifier: AA:7F:A6:F8:62:9D:C8:39:F2:17:5A:C0:39:C0:B2:D6:8D:CF:B6:C8 Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 Certificate issuer: /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft Manifest number: 0106 Signing time: Thu 07 Aug 2025 05:34:00 +0000 Manifest this update: Thu 07 Aug 2025 05:34:00 +0000 Manifest next update: Thu 14 Aug 2025 05:34:00 +0000 Files and hashes: 1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: 1tQ5rH6Rxx7YSJ2f80yzQ88V0nDGrIfO8qz/VKtFRKI=) 2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: J5vtQMTwpL/xmHDO4Uy4YqCD/INA3rpqnN+ZrH/2hAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380 Validity Not Before: Aug 7 05:34:00 2025 GMT Not After : Aug 14 05:34:00 2025 GMT Subject: CN=68943ac8-790f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:c4:0e:c8:c8:c0:ec:08:f5:5c:0a:10:12: 60:0a:6a:a9:c0:e7:98:7e:2f:35:b4:1b:d0:28:7f: 13:83:d4:43:02:09:e1:12:9d:01:17:a5:07:cc:28: 52:4e:3d:8e:a3:8d:f2:65:6a:65:fc:d6:b7:4c:d8: 99:e2:b0:84:7f:cb:a6:82:ff:9d:7a:46:f8:0a:b7: f2:6e:3c:02:b2:ae:2e:ff:ea:bb:1e:37:1d:56:9c: 77:98:26:0d:62:cd:fe:9b:f3:a1:e8:90:fc:79:ba: ad:28:9c:db:7f:51:6e:90:1d:01:89:23:3f:9a:64: 00:f9:f0:58:01:dc:6f:f9:b0:b4:26:1f:c8:5f:31: 7a:ed:bd:2c:6c:bc:8c:83:2f:28:14:b3:0e:3d:bb: 9e:70:6a:27:e3:79:a0:c7:15:fb:17:c5:24:ac:43: ef:7d:8a:dc:b5:40:e9:a0:23:da:ce:14:8a:42:da: 37:42:f5:c3:bf:f7:c8:9c:b2:4f:50:6f:83:35:e6: 8a:f5:b2:6f:69:cc:8b:92:2d:2d:72:76:2c:d0:2f: 8c:4c:03:89:82:28:7e:66:9b:ca:d7:e9:85:b9:9e: a9:6b:8b:05:af:2a:fc:ff:51:d0:b9:96:33:aa:57: 5e:9f:51:fd:4a:98:95:62:92:2d:e4:de:53:41:8e: 8b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7F:A6:F8:62:9D:C8:39:F2:17:5A:C0:39:C0:B2:D6:8D:CF:B6:C8 X509v3 Authority Key Identifier: keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:dc:a9:b6:a1:89:f7:e9:30:61:4a:81:a1:e8:a9:fc:ef:fb: 8f:f3:59:04:74:a9:1d:bf:d1:28:49:1c:63:5f:68:cb:0f:58: c7:11:ed:b1:c1:ee:29:0a:e2:01:56:70:0a:74:9a:ba:1e:db: f3:a9:f5:16:18:c2:45:70:b8:cb:56:5c:d0:1c:f9:a0:ee:ab: e5:af:7a:78:d7:b3:e2:f5:b4:8d:27:de:4e:ed:80:ef:61:aa: a0:ad:0a:6d:dd:3e:8e:16:35:65:a5:6d:d8:79:5e:78:4a:26: 6a:0d:2a:3c:ae:c3:44:6f:5f:6a:1f:de:a8:80:bc:a1:fe:f9: 89:42:a6:5c:36:83:ad:a9:67:fc:5a:a8:d1:13:4d:b4:5f:00: 91:02:ca:00:4c:38:9c:4f:5e:32:46:1d:a9:f5:9a:f6:cb:cf: 86:cc:5c:83:83:f0:12:7b:42:f0:57:d6:4d:b4:75:7b:ee:77: a5:1f:88:89:4d:e7:b2:c6:bf:09:80:33:84:33:16:f8:97:8e: 49:32:9b:1c:e2:d3:73:96:09:7f:08:ed:5f:7e:9e:07:7d:59: 5a:09:c9:d0:f7:92:e8:2e:f4:6a:4f:cf:74:e6:b8:9e:09:61: 15:5c:3b:aa:2b:76:43:dd:f0:17:6f:88:41:83:90:88:74:66: cc:4c:a6:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCREExMTAvBgNVBAUTKDEwN0EzOUMxQ0MwNEYyN0NDNzI2NjNEQkY3QkFFNkQ5 MkE5NTAzODAwHhcNMjUwODA3MDUzNDAwWhcNMjUwODE0MDUzNDAwWjAYMRYwFAYD VQQDEw02ODk0M2FjOC03OTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+DEDsjIwOwI9VwKEBJgCmqpwOeYfi81tBvQKH8Tg9RDAgnhEp0BF6UHzChS Tj2Oo43yZWpl/Na3TNiZ4rCEf8umgv+dekb4CrfybjwCsq4u/+q7HjcdVpx3mCYN Ys3+m/Oh6JD8ebqtKJzbf1FukB0BiSM/mmQA+fBYAdxv+bC0Jh/IXzF67b0sbLyM gy8oFLMOPbuecGon43mgxxX7F8UkrEPvfYrctUDpoCPazhSKQto3QvXDv/fInLJP UG+DNeaK9bJvacyLki0tcnYs0C+MTAOJgih+ZpvK1+mFuZ6pa4sFryr8/1HQuZYz qlden1H9SpiVYpIt5N5TQY6LuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKp/pvhi ncg58hdawDnAstaNz7bIMB8GA1UdIwQYMBaAFBB6OcHMBPJ8xyZj2/e65tkqlQOA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkJEQS82QUQzNzRBQUU2 NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThuekhKbVBiOTdybTJTcVZB NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIbzV3Y3dFOG56SEptUGI5N3JtMlNxVkE0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkJEQS82QUQzNzRBQUU2NUQxMUVFQjYxMjNFNDFDNEY5QUUwMi9FSG81d2N3RThu ekhKbVBiOTdybTJTcVZBNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg3Km2oYn36TBhSoGh6Kn87/uP81kEdKkdv9EoSRxjX2jLD1jHEe2x we4pCuIBVnAKdJq6HtvzqfUWGMJFcLjLVlzQHPmg7qvlr3p417Pi9bSNJ95O7YDv YaqgrQpt3T6OFjVlpW3YeV54SiZqDSo8rsNEb19qH96ogLyh/vmJQqZcNoOtqWf8 WqjRE020XwCRAsoATDicT14yRh2p9Zr2y8+GzFyDg/ASe0LwV9ZNtHV77nelH4iJ Teeyxr8JgDOEMxb4l45JMpsc4tNzlgl/CO1ffp4HfVlaCcnQ95LoLvRqT8905rie CWEVXDuqK3ZD3fAXb4hBg5CIdGbMTKaE -----END CERTIFICATE-----Generated at Thu Aug 7 14:44:14 2025 by rpki-client