$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft File: EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json) Hash identifier: xRmHfdzS3LQOsCTBvvpibaJPZ970Z2eXbml4rvAwp9A= Subject key identifier: 8D:39:12:DC:3D:7C:33:22:9E:0A:00:CE:88:B1:F2:DC:E8:E0:04:3B Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 Certificate issuer: /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft Manifest number: 0688 Signing time: Sun 10 Aug 2025 22:22:33 +0000 Manifest this update: Sun 10 Aug 2025 22:22:32 +0000 Manifest next update: Sun 17 Aug 2025 22:22:32 +0000 Files and hashes: 1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: 1cfaj5IT8eLdZoGWJIVjrB0N0F2RsEfvae9nd8Eo9xQ=) 2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: BEroe25M20UrAiw8SyEvv6Pk5mXlFp9GQ+z/Vqtvaw0=) 3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: sdo5dB4yf8kL9E/pHn7+OshW8DyNii5atqW56lYezBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53 Validity Not Before: Aug 10 22:22:32 2025 GMT Not After : Aug 17 22:22:32 2025 GMT Subject: CN=68991ba8-378b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:95:0f:2e:94:d8:16:53:ba:f7:c3:a6:0d: 92:7d:73:b0:57:cb:61:a8:8b:20:e3:22:f1:2f:7d: 86:4c:73:41:31:e9:e2:a0:15:3a:38:80:f1:1f:71: dd:94:9d:fd:26:0f:d3:e3:0d:25:8b:8a:f3:10:9d: eb:2d:dc:f7:c5:41:89:61:38:1a:37:31:a4:c6:bb: 5e:d0:21:70:d0:2b:34:4a:f9:f5:5d:73:6b:1b:86: 13:0a:6b:68:43:82:21:77:d1:55:1e:e7:c7:27:bc: b8:1b:eb:3a:c9:af:c9:ee:a6:be:a3:08:29:ee:7f: 9f:56:f7:0e:88:d4:1c:9d:06:dd:b1:55:ab:6f:2b: 1a:df:cc:ea:97:c0:27:6d:e7:94:3a:d2:13:b8:61: cb:be:81:aa:6d:0e:1e:c2:7f:6a:74:ee:48:b6:42: b2:d1:ad:43:f2:71:41:25:0a:42:c6:b9:61:f3:11: 6a:0e:c7:c8:58:3d:17:34:c7:1d:de:41:bd:d0:0e: dc:50:37:4e:9c:c5:fa:88:71:f0:d3:5f:a1:7d:5e: a5:d6:86:e4:b1:27:11:fe:f0:99:00:a8:5a:1c:a3: 52:a7:ad:12:d4:90:c4:ac:20:5f:ff:c6:eb:12:2e: b2:70:b4:e3:6e:67:17:1e:f5:06:1a:ea:7d:39:86: 2e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:39:12:DC:3D:7C:33:22:9E:0A:00:CE:88:B1:F2:DC:E8:E0:04:3B X509v3 Authority Key Identifier: keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:58:ca:3e:36:cf:f3:7f:14:cb:d0:9d:c2:2d:09:ca:ba:0f: cf:d1:ac:6d:5b:a6:ed:88:67:1d:3e:82:50:c8:bd:44:ed:5d: 54:70:05:9e:7d:63:fe:8d:fd:ba:fa:52:52:df:3d:f0:6f:b7: b0:03:94:df:68:32:34:3e:80:95:35:15:aa:f8:d7:f2:6d:47: 6f:b0:f2:1b:a0:33:fc:01:95:d2:cd:1a:d4:e6:dc:e7:f3:64: eb:52:40:db:c8:45:a5:26:ce:37:f9:b5:d3:b9:99:b0:e4:c3: 92:c2:32:68:b6:75:3a:33:b1:60:cf:bb:3e:04:91:3d:44:e6: f7:a4:b1:af:ce:1a:bc:66:5f:3f:40:fb:7f:61:fb:c0:2b:a8: 12:fb:f9:73:da:ee:bd:54:cc:27:6b:bc:0b:78:ec:7a:c3:16: 01:4f:28:6d:d7:8f:b7:7c:20:c6:51:ec:e6:28:b6:55:df:fa: b0:66:72:d3:96:e2:d8:c2:46:c7:bb:f3:a7:a7:b9:f8:4e:9f: 77:75:24:f3:2d:b8:87:ab:c0:34:b7:79:93:d5:67:73:be:26: c3:1d:39:80:84:4f:4d:84:63:5e:05:d9:e8:de:57:8d:62:9c: bd:cc:16:6c:37:32:54:33:50:0c:d4:b8:92:2d:8f:bf:14:77: 8c:00:71:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcyMjIxMTAvBgNVBAUTKDExQjQ0NTU2Qjc5NjI3ODUzRjQwMzFFRDZERDU3Mjg0 MDU2RUZGNTMwHhcNMjUwODEwMjIyMjMyWhcNMjUwODE3MjIyMjMyWjAYMRYwFAYD VQQDEw02ODk5MWJhOC0zNzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Y+VDy6U2BZTuvfDpg2SfXOwV8thqIsg4yLxL32GTHNBMenioBU6OIDxH3Hd lJ39Jg/T4w0li4rzEJ3rLdz3xUGJYTgaNzGkxrte0CFw0Cs0Svn1XXNrG4YTCmto Q4Ihd9FVHufHJ7y4G+s6ya/J7qa+owgp7n+fVvcOiNQcnQbdsVWrbysa38zql8An beeUOtITuGHLvoGqbQ4ewn9qdO5ItkKy0a1D8nFBJQpCxrlh8xFqDsfIWD0XNMcd 3kG90A7cUDdOnMX6iHHw01+hfV6l1obksScR/vCZAKhaHKNSp60S1JDErCBf/8br Ei6ycLTjbmcXHvUGGup9OYYurQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI05Etw9 fDMingoAzoix8tzo4AQ7MB8GA1UdIwQYMBaAFBG0RVa3lieFP0Ax7W3VcoQFbv9T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzIyMi9DQTA3NjE1ODgw NzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0VV9RREh0YmRWeWhBVnVf MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ViUkZWcmVXSjRVX1FESHRiZFZ5aEFWdV8xTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzIyMi9DQTA3NjE1ODgwNzUxMUVCOERDQjk4NEVDNEY5QUUwMi9FYlJGVnJlV0o0 VV9RREh0YmRWeWhBVnVfMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdWMo+Ns/zfxTL0J3CLQnKug/P0axtW6btiGcdPoJQyL1E7V1UcAWe fWP+jf26+lJS3z3wb7ewA5TfaDI0PoCVNRWq+NfybUdvsPIboDP8AZXSzRrU5tzn 82TrUkDbyEWlJs43+bXTuZmw5MOSwjJotnU6M7Fgz7s+BJE9ROb3pLGvzhq8Zl8/ QPt/YfvAK6gS+/lz2u69VMwna7wLeOx6wxYBTyht14+3fCDGUezmKLZV3/qwZnLT luLYwkbHu/Onp7n4Tp93dSTzLbiHq8A0t3mT1WdzvibDHTmAhE9NhGNeBdno3leN Ypy9zBZsNzJUM1AM1LiSLY+/FHeMAHEP -----END CERTIFICATE-----Generated at Mon Aug 11 11:08:41 2025 by rpki-client