$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft File: eKfTXvnEd150y6PRZrYbdZAkFSM.mft (raw, json) Hash identifier: p8fAaQqyF8ykevizBnBINxobjL/BZo4PYgJRk9BsgaU= Subject key identifier: E2:6B:09:F5:94:0E:37:C6:3C:04:4B:0B:2F:B5:3A:96:83:0F:F7:3B Authority key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 Certificate issuer: /CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft Manifest number: 85 Signing time: Sat 09 Aug 2025 07:05:07 +0000 Manifest this update: Sat 09 Aug 2025 07:05:07 +0000 Manifest next update: Sat 16 Aug 2025 07:05:07 +0000 Files and hashes: 1: eKfTXvnEd150y6PRZrYbdZAkFSM.crl (hash: /xvQMBXD9edS4LWSrmpNd2ACsc3gUhS431PAAcfzvRs=) 2: 8DDD0D56A98C11EFAAC0F364C4F9AE02.roa (hash: yg1U4JyDYBAoLLqLQFnhNTd+uuZ0oKhea1PeFahobmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523 Validity Not Before: Aug 9 07:05:07 2025 GMT Not After : Aug 16 07:05:07 2025 GMT Subject: CN=6896f323-dd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:a4:4c:b5:c4:e5:f0:bd:ea:d5:f9:cc:83: 36:80:ee:ac:22:09:ab:d5:14:2a:09:30:38:bb:e6: 24:60:9e:f0:cb:f6:95:5a:5e:4d:3d:1f:a2:46:51: fc:76:59:f5:c0:cd:9d:e9:3f:da:cf:7f:e7:5c:08: c0:cb:b4:62:17:b5:e8:6b:78:f4:02:21:91:52:ab: a3:3c:a5:96:66:9d:dd:d3:d1:39:fa:95:86:ae:37: c7:fc:4a:45:3f:8d:42:b1:71:7e:b8:fe:a0:03:79: 6e:ef:c1:21:2e:f7:c4:1a:00:09:e6:64:41:ed:85: 09:94:32:f9:68:81:f0:8b:17:f1:6c:53:f1:c6:cc: b5:3d:03:45:7f:af:77:b5:bb:75:c3:31:35:25:c8: e8:ce:63:cd:10:9f:a8:10:3d:85:f6:79:cb:f9:5e: 24:14:e2:d3:c7:88:d0:2b:ab:15:60:ac:e0:0d:4f: 74:ac:86:27:a3:69:2d:76:05:e8:f7:be:95:72:04: 51:c3:fd:60:75:ef:7f:0b:67:6e:c7:57:28:04:8a: 6c:5e:f2:9d:22:6b:67:cf:7a:52:4b:72:76:18:b8: 52:4b:28:c5:0e:27:c6:ca:92:cc:8f:8b:a1:cd:0b: 24:66:d0:cf:0a:20:4d:c9:6d:05:41:b4:98:09:04: ab:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6B:09:F5:94:0E:37:C6:3C:04:4B:0B:2F:B5:3A:96:83:0F:F7:3B X509v3 Authority Key Identifier: keyid:78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:07:fc:22:ee:56:dd:d0:d1:8f:ed:77:55:6c:45:9d:9f:18: a8:2f:a6:61:9b:73:6e:4b:32:95:c8:98:24:31:bc:8f:a2:ba: 74:27:6f:ed:cf:50:82:64:06:8c:d9:ee:66:aa:a5:e1:4d:ae: 7f:80:c8:40:18:ad:f2:45:a9:b7:6a:3d:13:68:01:a5:11:36: 08:4f:cd:f9:c0:17:28:41:7f:7e:de:1f:92:0a:21:1d:31:44: 5d:97:65:f9:fd:ba:d1:55:38:47:26:53:43:89:10:18:0a:0c: 29:1e:cb:1d:46:1f:6b:21:6b:39:9e:ac:bd:8c:a2:8e:e2:41: f7:13:42:67:84:80:f8:9c:a1:f0:41:0c:d3:1d:b8:c7:77:90: 41:7e:48:ac:05:d5:af:1f:43:3b:51:e8:b4:11:42:bc:45:c1: 10:78:82:97:d7:2b:0a:e6:fb:d9:c1:89:13:c1:64:a6:95:47: ba:1d:54:fe:8c:a7:e6:72:ac:52:77:35:76:89:62:73:31:16: 79:ba:38:ce:78:b9:c4:d8:1e:b1:b0:86:c4:6f:3c:46:81:9f: 51:2b:c4:ba:e7:87:5f:34:b0:60:9d:3f:8e:d7:95:9d:a4:9e: b9:4f:a7:9e:d6:cb:00:ef:ad:1e:71:c9:51:06:3d:e0:8a:a0: 2c:6a:26:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKDc4QTdEMzVFRjlDNDc3NUU3NENCQTNEMTY2QjYxQjc1 OTAyNDE1MjMwHhcNMjUwODA5MDcwNTA3WhcNMjUwODE2MDcwNTA3WjAYMRYwFAYD VQQDEw02ODk2ZjMyMy1kZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApb+kTLXE5fC96tX5zIM2gO6sIgmr1RQqCTA4u+YkYJ7wy/aVWl5NPR+iRlH8 dln1wM2d6T/az3/nXAjAy7RiF7Xoa3j0AiGRUqujPKWWZp3d09E5+pWGrjfH/EpF P41CsXF+uP6gA3lu78EhLvfEGgAJ5mRB7YUJlDL5aIHwixfxbFPxxsy1PQNFf693 tbt1wzE1JcjozmPNEJ+oED2F9nnL+V4kFOLTx4jQK6sVYKzgDU90rIYno2ktdgXo 976VcgRRw/1gde9/C2dux1coBIpsXvKdImtnz3pSS3J2GLhSSyjFDifGypLMj4uh zQskZtDPCiBNyW0FQbSYCQSrsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJrCfWU DjfGPARLCy+1OpaDD/c7MB8GA1UdIwQYMBaAFHin0175xHdedMuj0Wa2G3WQJBUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wREU4OTM0MEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9lS2ZUWHZuRWQxNTB5NlBSWnJZYmRaQWtG U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLZlRYdm5FZDE1MHk2UFJaclliZFpBa0ZTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wREU4OTM0MEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9lS2ZUWHZuRWQx NTB5NlBSWnJZYmRaQWtGU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQB/wi7lbd0NGP7XdVbEWdnxioL6Zhm3NuSzKVyJgkMbyPorp0J2/t z1CCZAaM2e5mqqXhTa5/gMhAGK3yRam3aj0TaAGlETYIT835wBcoQX9+3h+SCiEd MURdl2X5/brRVThHJlNDiRAYCgwpHssdRh9rIWs5nqy9jKKO4kH3E0JnhID4nKHw QQzTHbjHd5BBfkisBdWvH0M7Uei0EUK8RcEQeIKX1ysK5vvZwYkTwWSmlUe6HVT+ jKfmcqxSdzV2iWJzMRZ5ujjOeLnE2B6xsIbEbzxGgZ9RK8S654dfNLBgnT+O15Wd pJ65T6ee1ssA760ecclRBj3giqAsaiZE -----END CERTIFICATE-----Generated at Sun Aug 10 18:29:59 2025 by rpki-client