$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft File: eFqwsi3OWhJmUAwQZrT2sF91ysA.mft (raw, json) Hash identifier: eFkPzD0XZt9ZbCF7eX1Z+6iDqr0IixZAMsU/S1q8mtA= Subject key identifier: 64:9A:D8:0E:CC:54:F1:BF:41:09:F1:12:C4:86:F5:DC:81:23:4F:C9 Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Certificate serial: 10DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft Manifest number: 10D3 Signing time: Wed 06 Aug 2025 17:25:48 +0000 Manifest this update: Wed 06 Aug 2025 17:25:48 +0000 Manifest next update: Wed 13 Aug 2025 17:25:48 +0000 Files and hashes: 1: eFqwsi3OWhJmUAwQZrT2sF91ysA.crl (hash: YvNha1wK1YUoap5hn53OCB708WRRFu4k5ARECVb0zj4=) 2: B3250BC6307B11E989188B3BC4F9AE02.roa (hash: i5f3IsLQcqkFQbLcTMdHVFZRfy5na+MUmyuuokwDYXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 17:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4318 (0x10de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Validity Not Before: Aug 6 17:25:48 2025 GMT Not After : Aug 13 17:25:48 2025 GMT Subject: CN=6893901c-7611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cb:e8:ec:e4:e5:fd:71:d9:a3:19:42:3f:92: 2c:c8:6f:8b:01:1a:41:3b:6e:15:6c:39:f0:6f:e0: 16:33:7f:46:33:c8:72:50:e1:ea:e7:69:80:93:34: 4e:9b:44:e2:ac:36:43:cc:a2:66:e2:82:fc:de:c3: bb:de:11:d6:7e:3d:0e:26:c0:50:aa:e7:de:e6:e9: 7a:ce:49:c3:ad:75:4d:4e:bf:89:6d:7b:21:56:38: e2:4f:62:77:cf:e1:98:15:6c:44:68:37:6f:e4:cd: 5f:71:dd:42:a1:a8:ae:07:5a:ab:ab:be:c6:26:f0: 9e:03:76:78:f1:16:2e:20:63:a2:82:ec:37:28:26: 9b:ba:9a:2d:45:ae:b5:dd:0f:e3:e1:7f:74:c4:4f: ce:d8:76:5a:b8:04:e4:ac:e3:35:3a:08:06:c5:b9: 24:5b:79:73:36:e5:ef:19:18:fb:d0:52:87:98:94: 8e:0c:06:44:2d:ba:c6:5b:dd:17:df:dc:f6:78:15: 2f:b8:e3:8d:74:e4:e2:d6:04:05:51:c2:8c:de:8a: 82:31:43:3a:c6:95:af:34:1b:bd:c8:9e:05:96:2f: cc:25:ed:68:52:5b:a9:25:2a:f4:b5:df:58:40:89: f9:0e:79:dc:d0:11:40:13:fb:f7:28:20:8c:e9:d2: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9A:D8:0E:CC:54:F1:BF:41:09:F1:12:C4:86:F5:DC:81:23:4F:C9 X509v3 Authority Key Identifier: keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:83:99:a0:4b:fd:d6:8f:00:a7:04:8e:b5:07:91:e4:b5:5e: 02:16:68:be:12:55:ec:32:66:27:3a:14:9f:ec:74:4d:50:d8: 93:91:1e:22:24:55:19:72:b1:94:b0:6a:c6:40:0a:17:59:5d: 7f:06:21:6b:47:e1:3d:f4:b5:2c:91:a3:0d:9d:8f:d6:2c:28: 64:c8:d8:82:1b:e0:83:a3:1c:11:3c:8c:e2:8b:68:0c:2c:52: b4:90:35:de:cc:de:50:d9:84:95:1d:a6:d7:eb:b3:27:76:f3: 08:0f:7b:e5:9b:9b:74:e0:8b:d9:a6:c4:d6:c5:0c:de:f3:5a: 96:32:cf:94:1c:bf:e1:d3:3c:67:1d:b6:f0:60:a9:d9:5d:d9: cb:5b:40:bf:1a:e8:11:98:8b:9a:63:88:70:39:87:ac:86:fa: 7e:cc:38:1e:30:b5:04:3c:f4:24:35:dd:fe:3c:73:e9:1a:7d: 26:0d:22:aa:fc:ad:ae:90:be:bb:94:33:16:eb:e1:47:11:51: cc:55:85:5c:c7:40:f3:90:28:92:53:2b:44:dc:4d:35:ee:ec: 4a:2d:64:38:98:73:50:f8:ab:63:c1:cc:1f:30:a4:cc:0b:e5: 72:88:be:f7:a6:9f:93:4d:51:82:11:4a:53:5e:1a:65:49:f3: eb:b3:6e:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDRTkxMTAvBgNVBAUTKDc4NUFCMEIyMkRDRTVBMTI2NjUwMEMxMDY2QjRGNkIw NUY3NUNBQzAwHhcNMjUwODA2MTcyNTQ4WhcNMjUwODEzMTcyNTQ4WjAYMRYwFAYD VQQDEw02ODkzOTAxYy03NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmcvo7OTl/XHZoxlCP5IsyG+LARpBO24VbDnwb+AWM39GM8hyUOHq52mAkzRO m0TirDZDzKJm4oL83sO73hHWfj0OJsBQqufe5ul6zknDrXVNTr+JbXshVjjiT2J3 z+GYFWxEaDdv5M1fcd1CoaiuB1qrq77GJvCeA3Z48RYuIGOiguw3KCabupotRa61 3Q/j4X90xE/O2HZauATkrOM1OggGxbkkW3lzNuXvGRj70FKHmJSODAZELbrGW90X 39z2eBUvuOONdOTi1gQFUcKM3oqCMUM6xpWvNBu9yJ4Fli/MJe1oUlupJSr0td9Y QIn5Dnnc0BFAE/v3KCCM6dKJHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSa2A7M VPG/QQnxEsSG9dyBI0/JMB8GA1UdIwQYMBaAFHhasLItzloSZlAMEGa09rBfdcrA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNFOS84NzEwNkQzRTI3 MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1doSm1VQXdRWnJUMnNGOTF5 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGcXdzaTNPV2hKbVVBd1FaclQyc0Y5MXlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkNFOS84NzEwNkQzRTI3MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1do Sm1VQXdRWnJUMnNGOTF5c0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYg5mgS/3WjwCnBI61B5HktV4CFmi+ElXsMmYnOhSf7HRNUNiTkR4i JFUZcrGUsGrGQAoXWV1/BiFrR+E99LUskaMNnY/WLChkyNiCG+CDoxwRPIzii2gM LFK0kDXezN5Q2YSVHabX67MndvMID3vlm5t04IvZpsTWxQze81qWMs+UHL/h0zxn HbbwYKnZXdnLW0C/GugRmIuaY4hwOYeshvp+zDgeMLUEPPQkNd3+PHPpGn0mDSKq /K2ukL67lDMW6+FHEVHMVYVcx0DzkCiSUytE3E017uxKLWQ4mHNQ+KtjwcwfMKTM C+VyiL73pp+TTVGCEUpTXhplSfPrs26r -----END CERTIFICATE-----Generated at Thu Aug 7 02:00:52 2025 by rpki-client