$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: IXpdQlHMy7/fWx2+xC0Zw2l2aHE/3T30XFZBO7mCJCQ= Subject key identifier: 3F:E2:32:6F:FB:21:29:1F:8F:FF:B0:E2:0D:AC:B1:73:97:E4:84:C9 Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 72 Signing time: Thu 07 Aug 2025 07:29:09 +0000 Manifest this update: Thu 07 Aug 2025 07:29:08 +0000 Manifest next update: Thu 14 Aug 2025 07:29:08 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: vhKCj2BxtNCZry1dXStVKxrkfjgAoaEI7Ci4qkWj6ng=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: D8sGSIRpeb4KU8twC3M5LxWoSrBlM5fxXQEFrUY0ChI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Aug 7 07:29:08 2025 GMT Not After : Aug 14 07:29:08 2025 GMT Subject: CN=689455c4-4063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:2d:04:29:b0:da:74:f8:16:12:6b:cb:95: 6d:ff:e9:20:19:94:77:f1:5a:de:d7:1a:2e:c1:e9: 08:11:be:a8:2f:14:95:a0:b6:bb:c2:a2:d4:21:63: 2a:4f:d7:53:67:72:10:78:ef:32:a0:89:bf:bd:d2: 17:a4:d4:97:67:c2:19:15:13:69:af:44:36:9f:06: b2:28:a9:37:54:68:d7:27:02:d2:71:6d:71:4e:4e: 9b:df:ab:f6:84:b3:72:5d:4b:3c:67:dc:31:5e:10: d4:14:69:d8:fa:26:5d:2b:d1:cb:5b:96:de:0c:f2: 6a:d7:6e:d9:47:20:cb:2a:f4:44:fa:2d:75:39:63: c2:a6:dc:f8:db:51:90:b2:b0:e6:e9:26:a2:1e:4a: a9:bf:56:6e:b0:65:77:25:f7:e8:0e:54:34:ce:3f: a9:29:22:11:31:92:42:d1:1a:ba:4f:e9:c0:6e:05: 9a:aa:92:f7:9f:53:45:6a:e9:b0:e1:ed:c7:f8:5f: a5:54:24:76:08:16:06:aa:0a:7e:b9:6f:f9:f6:08: 8d:7f:ed:6e:59:49:f1:8d:16:96:53:f7:74:5c:f5: 70:73:f3:4a:0a:1e:4e:3c:46:59:a5:e3:93:a0:3c: 0d:33:8b:a6:58:a7:4d:48:7c:67:7e:16:05:28:50: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E2:32:6F:FB:21:29:1F:8F:FF:B0:E2:0D:AC:B1:73:97:E4:84:C9 X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:fb:b0:fb:dd:dc:d5:51:7c:ff:20:b6:8c:c5:bd:45:4a:95: fc:a6:fc:58:5e:7a:b7:47:1c:c4:48:d9:3d:65:70:3e:1a:56: 9c:98:5b:a1:78:45:90:91:de:0f:8b:82:44:c8:cd:c9:d5:50: bf:73:b9:e5:77:d8:66:3e:61:2a:f1:4a:ce:c9:76:43:13:68: c4:f7:ab:02:1c:50:de:d5:e3:bf:51:8d:1a:04:4d:d1:ef:89: 2c:ce:29:9f:5c:38:af:dc:6a:dc:7c:c5:f4:e0:be:1e:7d:3d: c0:c6:ea:57:21:8d:34:04:1b:81:5c:7b:d4:e9:a1:f7:37:9b: ea:da:01:0f:3e:64:e8:68:0c:4a:c1:78:ee:dc:57:90:fe:33: 60:0f:31:44:24:fc:27:60:b2:c2:9e:de:42:c8:fd:a1:0a:36: 7c:c4:d6:37:b5:1d:37:76:29:fa:f4:fa:9d:20:96:0c:a1:ae: 8c:f0:fa:4e:01:3b:75:7d:f7:98:f5:83:90:d8:76:dc:b6:d0: 6a:a2:18:55:2f:e2:f6:66:92:aa:10:92:64:67:16:05:36:0d: 9a:ac:be:6a:9f:c3:85:60:3a:45:eb:86:1b:9b:78:c6:47:a7: 42:91:d6:26:73:e5:b8:b2:1c:eb:ed:f3:34:2c:43:36:5f:71: 42:77:00:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzIzODExMC8GA1UEBRMoMTJBMTAyRjA4RUQxNEY2MjNGQTZFMzFEQkFCNDlBMjRE MUI5QTE1MTAeFw0yNTA4MDcwNzI5MDhaFw0yNTA4MTQwNzI5MDhaMBgxFjAUBgNV BAMTDTY4OTQ1NWM0LTQwNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8/i0EKbDadPgWEmvLlW3/6SAZlHfxWt7XGi7B6QgRvqgvFJWgtrvCotQhYypP 11NnchB47zKgib+90hek1JdnwhkVE2mvRDafBrIoqTdUaNcnAtJxbXFOTpvfq/aE s3JdSzxn3DFeENQUadj6Jl0r0ctblt4M8mrXbtlHIMsq9ET6LXU5Y8Km3PjbUZCy sObpJqIeSqm/Vm6wZXcl9+gOVDTOP6kpIhExkkLRGrpP6cBuBZqqkvefU0Vq6bDh 7cf4X6VUJHYIFgaqCn65b/n2CI1/7W5ZSfGNFpZT93Rc9XBz80oKHk48Rlml45Og PA0zi6ZYp01IfGd+FgUoUKiNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP+Iyb/sh KR+P/7DiDayxc5fkhMkwHwYDVR0jBBgwFoAUEqEC8I7RT2I/puMdurSaJNG5oVEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDMjM4L0NENzE3RDlDQ0JG MzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9W RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXFFQzhJN1JUMklfcHVNZHVyU2FKTkc1b1ZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD MjM4L0NENzE3RDlDQ0JGMzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJ X3B1TWR1clNhSk5HNW9WRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACX7sPvd3NVRfP8gtozFvUVKlfym/FheerdHHMRI2T1lcD4aVpyYW6F4 RZCR3g+LgkTIzcnVUL9zueV32GY+YSrxSs7JdkMTaMT3qwIcUN7V479RjRoETdHv iSzOKZ9cOK/catx8xfTgvh59PcDG6lchjTQEG4Fce9Tpofc3m+raAQ8+ZOhoDErB eO7cV5D+M2APMUQk/CdgssKe3kLI/aEKNnzE1je1HTd2Kfr0+p0glgyhrozw+k4B O3V995j1g5DYdty20GqiGFUv4vZmkqoQkmRnFgU2DZqsvmqfw4VgOkXrhhubeMZH p0KR1iZz5biyHOvt8zQsQzZfcUJ3AHA= -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:36 2025 by rpki-client