$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json) Hash identifier: LjgjRCu9yAgRKcwkBBZTVHtLvNfpV4GMKTK1LalJDA4= Subject key identifier: DC:B1:07:C6:1E:99:6A:0C:2E:41:F9:74:FA:3B:B2:02:B5:15:F6:54 Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0E3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft Manifest number: 0E29 Signing time: Sun 10 Aug 2025 17:49:30 +0000 Manifest this update: Sun 10 Aug 2025 17:49:29 +0000 Manifest next update: Sun 17 Aug 2025 17:49:29 +0000 Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: V/RfVesPTaHFwS/uD/A0OqBGAiIkhW+cAsAvCbnb7mU=) 2: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: dyHXMPsWXIi28t7W1U3CSitpoKF85Llotwpf4kiO82E=) 3: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: wmh/Lv/hljTYcluPdVifRdxIbnQ3ag/j+c2X6L3JX5o=) 4: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: 0ehGM9KvqQVlyysL0bR6r4knV2UFgPR8E2jylMcTv9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3644 (0xe3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Aug 10 17:49:29 2025 GMT Not After : Aug 17 17:49:29 2025 GMT Subject: CN=6898dba9-d7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:4c:4a:93:0b:14:81:79:96:bd:52:7e:b4: b3:89:8f:b1:2e:9b:c2:16:51:26:2d:4d:d5:c8:c4: b0:0a:2e:ff:b3:d0:8e:60:69:8f:6d:cf:a8:31:91: 7b:cb:eb:3e:74:9c:d4:11:2a:8b:ff:36:c3:6c:9b: f9:1b:2a:d9:f8:b7:dc:d9:31:91:28:33:bf:ae:68: 48:29:74:03:1e:12:10:13:2b:5b:7e:5f:46:b8:ff: 65:74:f2:2c:0d:af:ec:0d:83:5a:ac:76:74:f9:fc: 2a:c3:3f:a7:e6:c6:af:1a:7d:f5:10:7f:53:a1:c1: 08:f3:2e:d2:31:ac:de:92:58:4e:bb:40:b8:74:f1: bd:b8:43:da:56:6f:af:ef:65:9b:a2:5f:c9:1d:b5: 92:b2:1b:fe:fc:14:f5:14:3b:a6:3c:3f:e2:7c:65: 60:2b:2d:86:9b:3e:58:ba:39:37:c3:f2:a2:6b:1f: 8e:61:56:12:3d:33:4c:12:56:11:60:2f:b1:01:80: b8:9e:fe:b5:c8:ec:ef:e6:52:ec:e4:22:8f:ba:2e: 8d:cd:1c:78:b1:64:35:49:25:56:ba:9f:09:d0:88: 32:33:3e:3b:71:37:93:d6:1c:fe:5f:93:f3:30:73: 26:0b:cf:ea:2b:77:d6:c0:a0:14:c2:77:76:ed:06: 80:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B1:07:C6:1E:99:6A:0C:2E:41:F9:74:FA:3B:B2:02:B5:15:F6:54 X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ef:0a:0d:aa:08:86:49:03:aa:aa:ce:11:6e:32:0f:59:96: 13:4b:07:36:0e:30:21:6b:02:63:2f:34:7e:90:0a:1b:c4:0c: 19:2a:08:c4:9c:89:a9:30:a1:08:19:35:79:12:3a:36:82:af: 2c:da:eb:60:0d:ee:67:5a:09:02:c0:15:23:cc:e3:b6:9b:0c: bf:7d:e6:1d:c5:d0:32:69:9c:0f:7f:5d:fb:21:db:20:79:56: dd:34:6d:84:ad:1c:fc:22:08:13:78:94:ce:e1:db:23:45:3a: eb:ad:c1:d8:32:be:10:67:c4:ed:8c:d6:43:ba:3b:49:18:d7: c3:d0:2b:fd:33:16:5b:f9:b2:df:f4:18:2b:b5:d2:21:ef:be: df:c6:b1:5a:cc:a1:ca:34:f7:1f:f8:74:c3:77:af:73:d2:a7: 35:e4:3e:8e:4c:e0:64:c0:b4:6e:14:f3:e8:ef:42:38:b6:4e: 3f:88:22:3f:4b:08:fc:9a:72:97:6b:60:63:40:86:8f:01:e0: 39:7e:9c:4c:d9:bd:52:de:1f:aa:57:48:07:12:44:39:e3:e5: fa:9e:bb:55:15:b0:bf:3a:fa:62:39:5a:41:15:5c:79:52:cd: 77:be:d9:31:c5:5e:5d:a7:45:df:1d:01:d5:f7:b3:a2:16:5c: c7:56:a4:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjUwODEwMTc0OTI5WhcNMjUwODE3MTc0OTI5WjAYMRYwFAYD VQQDEw02ODk4ZGJhOS1kN2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9NMSpMLFIF5lr1SfrSziY+xLpvCFlEmLU3VyMSwCi7/s9COYGmPbc+oMZF7 y+s+dJzUESqL/zbDbJv5GyrZ+Lfc2TGRKDO/rmhIKXQDHhIQEytbfl9GuP9ldPIs Da/sDYNarHZ0+fwqwz+n5savGn31EH9TocEI8y7SMazeklhOu0C4dPG9uEPaVm+v 72Wbol/JHbWSshv+/BT1FDumPD/ifGVgKy2Gmz5Yujk3w/Kiax+OYVYSPTNMElYR YC+xAYC4nv61yOzv5lLs5CKPui6NzRx4sWQ1SSVWup8J0IgyMz47cTeT1hz+X5Pz MHMmC8/qK3fWwKAUwnd27QaApQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNyxB8Ye mWoMLkH5dPo7sgK1FfZUMB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTdCMi8zRUUzMjM1QUFFOTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENn RHhEelFRRVUwRUExZndEX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf7woNqgiGSQOqqs4RbjIPWZYTSwc2DjAhawJjLzR+kAobxAwZKgjE nImpMKEIGTV5Ejo2gq8s2utgDe5nWgkCwBUjzOO2mwy/feYdxdAyaZwPf137Idsg eVbdNG2ErRz8IggTeJTO4dsjRTrrrcHYMr4QZ8TtjNZDujtJGNfD0Cv9MxZb+bLf 9BgrtdIh777fxrFazKHKNPcf+HTDd69z0qc15D6OTOBkwLRuFPPo70I4tk4/iCI/ Swj8mnKXa2BjQIaPAeA5fpxM2b1S3h+qV0gHEkQ54+X6nrtVFbC/OvpiOVpBFVx5 Us13vtkxxV5dp0XfHQHV97OiFlzHVqR5 -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:51 2025 by rpki-client