$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft File: EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft (raw, json) Hash identifier: 3G+UA1rTy9CTx/bEayBOvXhDOBqnjgbSl4BC0E3F/NA= Subject key identifier: 5C:7A:EC:CC:52:3F:CA:72:BA:80:46:36:98:BD:E5:7F:00:E2:CD:6E Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F Certificate issuer: /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Certificate serial: 155E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft Manifest number: 1521 Signing time: Sun 10 Aug 2025 16:48:51 +0000 Manifest this update: Sun 10 Aug 2025 16:48:50 +0000 Manifest next update: Sun 17 Aug 2025 16:48:50 +0000 Files and hashes: 1: EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl (hash: mhWceHj2M2Nd2ahniffvfyCBO/rVAMJDl8t4d6OiA98=) 2: F99707CEBAC511E9A77CDE7BC4F9AE02.roa (hash: 5uUW31UVlhS1EMeW8SdNyNqfE7foPIsbvKPSkNYxTTw=) 3: E7084A18E1FF11ED8291C918C4F9AE02.roa (hash: 825LdLpPgTmUB6Z/jlNKQqUyb06kFuccOU7CVvrtwj4=) 4: E80E94F8E1FF11ED8291C918C4F9AE02.roa (hash: sEzbj9zVcGYfQVtymkbJCAL7nuZefcCGjL2IRtqWF/o=) 5: 065737305C9511EDABB9FA49C4F9AE02.roa (hash: A9mSeJtqPQ5OLPMu8OwuZB0s+QUpXaZBGlbtc6BBl4M=) 6: E5E5AB76E1FF11ED8291C918C4F9AE02.roa (hash: uZ4XGMAryuNiLEYH4OkW1daYwrGTX1yw6VXfeQKddWo=) 7: E4C72AB2E1FF11ED8291C918C4F9AE02.roa (hash: evUrAmQOOHS6gFCNS5NNu+gRFX265k9Xi2+XGDvOjys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5470 (0x155e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Validity Not Before: Aug 10 16:48:50 2025 GMT Not After : Aug 17 16:48:50 2025 GMT Subject: CN=6898cd73-b4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:38:93:1b:16:9e:29:1b:9d:74:7d:fa:7a: cc:8e:68:86:9e:d8:ce:d4:5e:5b:e2:4d:74:c4:4b: ac:4a:c0:8f:41:b1:d2:62:6f:97:16:8d:17:e7:68: e6:18:7d:5b:25:d1:e0:b5:e6:99:96:86:aa:fa:c6: d1:ee:d3:c7:e1:92:b8:22:64:2b:de:7f:bd:00:b5: 5c:cb:0b:d2:b1:a3:4c:f8:0b:14:44:cc:a0:f5:cc: 1a:af:fa:6a:5b:d4:28:21:23:28:c5:4e:b4:fb:eb: 0e:a9:0b:19:6d:8c:90:6c:90:91:7b:df:37:fa:ea: c1:b4:fb:75:af:49:97:80:45:57:2f:ef:28:8f:26: 08:d7:dd:b7:65:b3:d7:3f:3c:ab:5f:db:cd:14:83: 10:79:d3:9d:52:4a:b8:79:c8:13:db:a2:71:5b:f7: 5a:d8:41:4a:29:3d:c7:c7:e9:70:cf:4b:1c:19:6b: aa:de:0e:e2:b5:9c:f5:8a:c4:9d:c6:fe:7b:51:a4: 36:3c:8b:f5:ad:fa:8b:45:e6:ce:3b:4d:63:7d:3c: 73:e5:95:d3:1f:02:60:4e:3d:b2:b4:82:90:3e:8d: b7:26:08:3b:e9:24:f0:c8:4e:34:08:86:0a:4c:5a: 23:d6:53:d3:38:62:6a:c0:c4:01:8a:aa:66:54:1d: 24:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7A:EC:CC:52:3F:CA:72:BA:80:46:36:98:BD:E5:7F:00:E2:CD:6E X509v3 Authority Key Identifier: keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:34:99:31:d0:92:3d:39:00:4b:32:f5:8b:32:04:36:75:e0: 69:15:a3:e5:2c:de:33:48:a8:b3:84:e2:80:1d:80:71:80:d8: ef:0f:fa:d3:a0:f1:de:e2:2c:7d:47:9c:de:57:a2:29:d5:10: 29:9e:53:d1:e3:25:88:23:dc:77:5a:c0:1f:97:38:7c:15:cc: 63:bb:5c:54:6b:8c:c5:7b:74:94:65:d6:8d:ab:f8:85:99:c7: 88:c0:34:39:7f:ff:c3:b1:b6:50:42:a0:1a:4f:14:7a:e9:8c: 8d:fb:a4:7e:1d:96:6e:b5:70:ea:a4:7c:df:3d:b8:df:78:33: 91:a5:e2:cf:0a:03:68:99:49:69:ce:d8:bc:f7:fd:c0:58:34: aa:f4:ea:72:1c:51:cc:62:8a:1d:eb:3a:1b:17:8b:38:41:d5: e3:14:e6:32:df:bb:73:4c:34:5b:22:55:3a:15:60:29:5e:78: 87:61:d2:a2:22:9e:75:6b:14:4e:f4:c1:ec:b8:2a:e2:64:1a: aa:5b:e2:33:b3:a6:3b:b9:3b:89:30:04:59:b1:47:79:8f:17: 1d:c2:83:ee:d0:c9:e6:be:73:95:50:46:a4:6a:3e:e7:63:06: 60:4c:ff:6d:f1:1b:c3:1b:da:35:6d:fc:8d:e6:4f:a1:cd:8b: c8:79:15:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE NEM2RDU3MUYwHhcNMjUwODEwMTY0ODUwWhcNMjUwODE3MTY0ODUwWjAYMRYwFAYD VQQDEw02ODk4Y2Q3My1iNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovc4kxsWnikbnXR9+nrMjmiGntjO1F5b4k10xEusSsCPQbHSYm+XFo0X52jm GH1bJdHgteaZloaq+sbR7tPH4ZK4ImQr3n+9ALVcywvSsaNM+AsURMyg9cwar/pq W9QoISMoxU60++sOqQsZbYyQbJCRe983+urBtPt1r0mXgEVXL+8ojyYI1923ZbPX PzyrX9vNFIMQedOdUkq4ecgT26JxW/da2EFKKT3Hx+lwz0scGWuq3g7itZz1isSd xv57UaQ2PIv1rfqLRebOO01jfTxz5ZXTHwJgTj2ytIKQPo23Jgg76STwyE40CIYK TFoj1lPTOGJqwMQBiqpmVB0kBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFx67MxS P8pyuoBGNpi95X8A4s1uMB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2 NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlGQy84MTA0NUUzQTU2NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1R bXg5UE5KaE9uRGJVeHRWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSNJkx0JI9OQBLMvWLMgQ2deBpFaPlLN4zSKizhOKAHYBxgNjvD/rT oPHe4ix9R5zeV6Ip1RApnlPR4yWII9x3WsAflzh8Fcxju1xUa4zFe3SUZdaNq/iF mceIwDQ5f//DsbZQQqAaTxR66YyN+6R+HZZutXDqpHzfPbjfeDORpeLPCgNomUlp zti89/3AWDSq9OpyHFHMYood6zobF4s4QdXjFOYy37tzTDRbIlU6FWApXniHYdKi Ip51axRO9MHsuCriZBqqW+Izs6Y7uTuJMARZsUd5jxcdwoPu0MnmvnOVUEakaj7n YwZgTP9t8RvDG9o1bfyN5k+hzYvIeRU2 -----END CERTIFICATE-----Generated at Mon Aug 11 04:27:14 2025 by rpki-client