$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft File: ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json) Hash identifier: oihx9/k+gBlin1ZZ8NvSJDC+LcF+59zxrc82CI3tk+8= Subject key identifier: B7:7F:92:8F:39:48:A4:5A:65:DE:59:00:14:A4:00:1D:52:C6:88:E7 Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D Certificate issuer: /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft Manifest number: C9 Signing time: Sat 09 Aug 2025 06:08:33 +0000 Manifest this update: Sat 09 Aug 2025 06:08:33 +0000 Manifest next update: Sat 16 Aug 2025 06:08:33 +0000 Files and hashes: 1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: 1SerEz2hCKaB7awuUeJUwcWpYNvXi1NkVYFkKEZITa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Validity Not Before: Aug 9 06:08:33 2025 GMT Not After : Aug 16 06:08:33 2025 GMT Subject: CN=6896e5e1-a16f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:95:46:6f:42:e5:64:19:43:02:fe:d4:77:ee: cc:ef:64:36:15:80:ab:29:63:51:8e:cd:ff:36:9b: ea:0a:cc:90:37:69:8d:85:fd:07:7f:9c:60:f3:99: 49:ef:87:ac:8b:c1:fd:53:95:b0:c0:4c:48:ef:0b: 73:8b:94:ce:68:64:74:dd:d5:89:08:ef:c4:3b:1d: a3:dd:98:56:81:57:23:5a:0f:4c:d4:d4:d7:70:8e: 3e:4a:ae:d8:c9:c0:9f:81:2c:00:e7:61:c1:ec:47: 50:d8:df:a9:db:c8:03:2e:1d:fc:0f:f2:fb:80:31: 84:64:c8:24:42:a6:77:4f:68:e0:76:0d:b1:e3:2d: 90:b1:9d:41:f1:01:bb:f8:39:60:60:82:90:7e:84: 42:20:60:d2:4d:a3:82:89:8a:a9:9f:f8:e0:ba:a7: 82:89:96:e1:1b:75:ad:42:a6:e1:53:38:e8:6f:ae: 6d:ea:bf:7d:b8:5c:ed:63:24:fc:84:31:f6:2b:81: 59:98:08:f7:76:93:6b:aa:1e:29:80:05:4d:57:2c: f1:ab:aa:58:88:43:9d:54:ec:e3:c3:63:25:df:19: 6e:52:96:19:73:4d:40:82:63:ba:1a:fc:a1:10:33: 8c:24:1f:72:21:ea:db:12:17:61:c6:9b:8d:20:16: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7F:92:8F:39:48:A4:5A:65:DE:59:00:14:A4:00:1D:52:C6:88:E7 X509v3 Authority Key Identifier: keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:d5:16:cb:24:6c:55:97:78:c6:00:7f:41:c5:e7:80:86:38: 1d:4e:f8:38:ff:2c:89:4b:d9:8f:fd:81:c3:c3:d5:25:6c:e5: 3e:f5:02:e2:6d:82:44:8d:e5:8f:62:a7:d1:d7:ca:74:44:2d: da:69:86:bd:f4:cb:d1:2f:15:0e:31:24:46:01:9a:ac:84:50: 26:d4:19:9d:8e:7d:82:31:01:91:11:8b:a4:e8:d6:33:34:fa: 6e:cc:72:75:d9:85:20:50:42:21:bd:41:f3:47:38:be:ad:74: 30:fb:79:f1:d2:b8:9f:17:84:86:c5:76:61:fc:30:b2:1f:88: 5d:0b:d4:c4:3b:86:f0:e2:84:3b:1c:b5:1d:de:83:f9:5f:68: 21:e4:9d:25:97:04:07:bd:c2:d8:2d:52:8d:7e:bc:a9:96:48: bc:e7:30:ce:40:b8:2f:5b:b3:33:10:0e:04:1a:ae:1f:e1:5f: bc:0f:5e:90:a5:e1:38:a8:ba:2a:d7:89:03:7d:46:0b:e2:85: ab:27:91:13:dc:42:e0:0c:4f:a6:a8:5f:f8:c5:09:76:3e:03: 52:23:10:c4:0a:67:a7:4f:29:1c:ed:98:fd:1c:d2:be:8e:8f: 98:74:85:77:af:f7:ec:83:b5:e6:75:dc:c2:c3:20:90:8f:ef: 22:c9:57:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKDdBOUZGODY0QzUwMzE4MDY3MTMwNTg4RTZEQkE5MjhC QTFDMDNBNUQwHhcNMjUwODA5MDYwODMzWhcNMjUwODE2MDYwODMzWjAYMRYwFAYD VQQDEw02ODk2ZTVlMS1hMTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JVGb0LlZBlDAv7Ud+7M72Q2FYCrKWNRjs3/NpvqCsyQN2mNhf0Hf5xg85lJ 74esi8H9U5WwwExI7wtzi5TOaGR03dWJCO/EOx2j3ZhWgVcjWg9M1NTXcI4+Sq7Y ycCfgSwA52HB7EdQ2N+p28gDLh38D/L7gDGEZMgkQqZ3T2jgdg2x4y2QsZ1B8QG7 +DlgYIKQfoRCIGDSTaOCiYqpn/jguqeCiZbhG3WtQqbhUzjob65t6r99uFztYyT8 hDH2K4FZmAj3dpNrqh4pgAVNVyzxq6pYiEOdVOzjw2Ml3xluUpYZc01AgmO6Gvyh EDOMJB9yIerbEhdhxpuNIBYBUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLd/ko85 SKRaZd5ZABSkAB1SxojnMB8GA1UdIwQYMBaAFHqf+GTFAxgGcTBYjm26kouhwDpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi83NjRDQTJEMDQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdBWnhNRmlPYmJxU2k2SEFP bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwXzRaTVVER0FaeE1GaU9iYnFTaTZIQU9sMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi83NjRDQTJEMDQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdB WnhNRmlPYmJxU2k2SEFPbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR1RbLJGxVl3jGAH9BxeeAhjgdTvg4/yyJS9mP/YHDw9UlbOU+9QLi bYJEjeWPYqfR18p0RC3aaYa99MvRLxUOMSRGAZqshFAm1Bmdjn2CMQGREYuk6NYz NPpuzHJ12YUgUEIhvUHzRzi+rXQw+3nx0rifF4SGxXZh/DCyH4hdC9TEO4bw4oQ7 HLUd3oP5X2gh5J0llwQHvcLYLVKNfryplki85zDOQLgvW7MzEA4EGq4f4V+8D16Q peE4qLoq14kDfUYL4oWrJ5ET3ELgDE+mqF/4xQl2PgNSIxDECmenTykc7Zj9HNK+ jo+YdIV3r/fsg7XmddzCwyCQj+8iyVf+ -----END CERTIFICATE-----Generated at Sun Aug 10 13:49:02 2025 by rpki-client