$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: sdkcMPhte3L7JnYYvRHrQb1r8EsZ/IJIJZ6oNxMxazE= Subject key identifier: 01:A5:3D:41:0A:2E:C6:24:0D:CA:D1:E4:68:93:35:93:ED:4A:02:EC Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: 27 Signing time: Sat 09 Aug 2025 08:18:53 +0000 Manifest this update: Sat 09 Aug 2025 08:18:53 +0000 Manifest next update: Sat 16 Aug 2025 08:18:53 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: auR5RYBhscfab+7Wi5zfHrz0PPWF2hy1mLOBZ5k8PFw=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Aug 9 08:18:53 2025 GMT Not After : Aug 16 08:18:53 2025 GMT Subject: CN=6897046d-b5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d0:e6:cc:22:42:49:9f:58:ed:c6:d6:a3:1f: 98:53:ed:5e:3b:78:09:16:89:e9:68:ed:ec:5d:f4: 49:dd:0e:69:3c:40:db:29:c8:86:cb:41:96:85:ab: ad:08:20:f7:11:3f:98:76:3e:77:eb:32:a5:bf:84: 32:67:c8:ff:25:40:26:87:93:3a:bb:a3:28:f9:43: 66:15:16:25:c8:00:f9:b3:93:1e:d6:07:de:ad:29: 23:ff:4a:fa:d0:1b:f1:f0:92:e9:cf:7f:f7:b2:b6: f8:5c:ca:3b:fe:95:a3:af:36:88:8f:a1:1d:eb:5f: e1:a4:29:51:80:f6:bf:5f:41:9f:b0:89:76:12:fa: 18:3b:3b:8a:fe:cf:7b:6b:94:38:d9:2c:47:3f:66: 07:7a:85:c4:bc:ba:75:55:a4:3f:f5:d9:43:da:d6: 73:64:eb:d0:54:37:5c:4f:b6:f1:b7:00:3d:9b:a6: 01:a8:8a:93:8b:d6:bd:5d:48:86:b8:c1:a0:e4:bf: 2b:64:60:9f:61:39:18:f6:96:2d:48:b8:46:2b:43: 1f:f9:8a:49:34:d8:ce:aa:a2:38:82:29:f8:fd:8f: 14:b3:79:50:40:86:ab:c1:80:bf:4b:15:44:42:db: e5:5a:d8:45:36:b9:31:8c:26:b5:5f:be:6e:46:37: 90:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A5:3D:41:0A:2E:C6:24:0D:CA:D1:E4:68:93:35:93:ED:4A:02:EC X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:23:0b:9e:35:3a:7f:69:ec:ab:bd:fa:9a:2b:91:15:4f:93: 03:f3:cd:a9:32:e6:aa:25:42:bc:49:9e:93:75:aa:7d:f5:2a: 48:8b:fa:58:64:50:72:d7:29:c6:76:45:a3:c6:c1:46:ce:0d: fa:98:83:1c:64:72:1d:ec:51:f4:e9:d0:40:37:db:6d:2a:5f: 7e:47:63:23:24:2e:f8:d5:e2:7e:6b:c3:35:e2:8c:af:5f:a8: 01:8f:90:72:b6:96:17:d2:8a:8a:62:bc:df:50:a5:da:73:f6: f6:5e:8b:fc:9a:ba:b3:47:f1:2f:b4:57:3b:8e:05:04:87:79: f9:9a:e8:15:55:49:b1:ee:d5:fb:78:73:51:ed:b4:63:26:c3: 3d:56:54:24:f3:75:9d:c5:28:a1:72:88:4f:56:75:89:a9:e4: 08:06:0e:12:4f:b4:c6:c1:2a:06:71:f3:8c:5b:c1:ed:f2:53: 37:d6:ab:02:29:59:98:01:06:be:28:e5:f0:e1:7c:b8:b7:cf: 6e:b6:79:fa:a5:7b:8a:2e:94:56:d8:7d:5d:56:da:e6:01:92: 0d:ef:9d:01:a9:57:8c:f1:30:7a:29:f8:5e:85:df:66:e6:05: da:ac:f6:13:5e:78:88:f2:86:de:e0:28:b0:ba:6a:53:97:0f: 9c:17:90:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC MTQ4MTEwRjAeFw0yNTA4MDkwODE4NTNaFw0yNTA4MTYwODE4NTNaMBgxFjAUBgNV BAMTDTY4OTcwNDZkLWI1ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA0ObMIkJJn1jtxtajH5hT7V47eAkWielo7exd9EndDmk8QNspyIbLQZaFq60I IPcRP5h2PnfrMqW/hDJnyP8lQCaHkzq7oyj5Q2YVFiXIAPmzkx7WB96tKSP/SvrQ G/HwkunPf/eytvhcyjv+laOvNoiPoR3rX+GkKVGA9r9fQZ+wiXYS+hg7O4r+z3tr lDjZLEc/Zgd6hcS8unVVpD/12UPa1nNk69BUN1xPtvG3AD2bpgGoipOL1r1dSIa4 waDkvytkYJ9hORj2li1IuEYrQx/5ikk02M6qojiCKfj9jxSzeVBAhqvBgL9LFURC 2+Va2EU2uTGMJrVfvm5GN5DhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAaU9QQou xiQNytHkaJM1k+1KAuwwHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGAjC541On9p7Ku9+porkRVPkwPzzaky5qolQrxJnpN1qn31KkiL+lhk UHLXKcZ2RaPGwUbODfqYgxxkch3sUfTp0EA3220qX35HYyMkLvjV4n5rwzXijK9f qAGPkHK2lhfSiopivN9Qpdpz9vZei/yaurNH8S+0VzuOBQSHefma6BVVSbHu1ft4 c1HttGMmwz1WVCTzdZ3FKKFyiE9WdYmp5AgGDhJPtMbBKgZx84xbwe3yUzfWqwIp WZgBBr4o5fDhfLi3z262efqle4oulFbYfV1W2uYBkg3vnQGpV4zxMHop+F6F32bm Bdqs9hNeeIjyht7gKLC6alOXD5wXkEY= -----END CERTIFICATE-----Generated at Mon Aug 11 08:49:42 2025 by rpki-client