$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: AeqKoJ2HhPg9PK7lkSxAEsyVtRKCfgFevLlAbiVrNR8= Subject key identifier: 39:E2:04:D4:15:F1:AC:53:4C:5D:E9:61:12:44:C5:27:B0:58:F4:FF Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 01FB Signing time: Sat 09 Aug 2025 02:45:28 +0000 Manifest this update: Sat 09 Aug 2025 02:45:28 +0000 Manifest next update: Sat 16 Aug 2025 02:45:28 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: BS957t0beFDil6sVUzMnxUTqtiP2GX9GD5vNAkFOiTk=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: Uh7B24TrfbcaCXXos+UCRzkq1ccagOkOy3EbQYTwo0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Aug 9 02:45:28 2025 GMT Not After : Aug 16 02:45:28 2025 GMT Subject: CN=6896b648-5b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:28:b4:59:93:65:d6:05:c2:1f:6e:4d:ff: cc:23:a6:fe:c8:ba:88:2a:40:66:7a:78:88:47:96: 47:00:ac:30:82:39:5c:b2:1e:c1:08:58:93:82:5e: 4d:d4:65:c5:cc:92:81:bd:df:31:fc:de:50:00:c0: dd:52:cc:72:ca:87:c9:d4:d2:23:54:3e:7f:4c:81: 92:5c:3c:c1:e0:fc:25:26:72:24:b7:50:cf:95:93: f5:c7:e5:7c:23:09:60:89:89:6a:20:56:59:ca:d0: da:5b:c7:99:51:a9:ce:35:f3:91:a4:30:7d:a9:80: 31:83:b9:aa:b0:c2:1e:7a:09:bf:74:7f:8e:86:dd: d8:62:47:16:d9:b2:9b:f2:0e:3a:79:89:70:6a:98: 8f:2d:f4:e4:73:40:32:d1:c4:09:5f:ca:5c:ee:f6: 1d:86:05:72:46:7d:30:58:ce:9c:de:9b:e1:15:24: 1d:a5:44:05:2e:6b:69:26:3b:7d:62:cc:2b:24:1a: bd:7a:c7:f9:3b:df:d6:f0:f0:ac:7b:1f:bc:dc:f4: 02:a3:1f:d8:6a:e2:1e:4e:30:e2:0b:d9:45:7b:2a: 43:b2:cd:f3:6a:ae:ea:10:f9:01:a2:5e:3a:60:d0: 55:d3:92:f8:80:3e:c4:5e:0a:50:90:4a:4b:8e:7b: e0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E2:04:D4:15:F1:AC:53:4C:5D:E9:61:12:44:C5:27:B0:58:F4:FF X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a3:d2:5b:b6:3c:0a:13:80:e8:a0:55:cd:a0:c5:b7:2e:40: 7b:9b:65:38:fc:54:7d:c3:98:4a:95:46:3d:2c:f8:05:76:51: dd:a8:df:79:9e:b4:92:a2:8e:7d:2e:e8:59:db:88:29:9c:b8: 02:1a:2c:92:61:f5:38:6c:b4:91:89:d2:76:94:3a:28:04:7a: a5:9f:0f:b2:52:ae:b1:b4:41:e3:5b:f5:f8:4b:c3:78:33:7f: 88:ba:56:13:46:34:39:9e:ad:f8:36:15:f7:c7:8f:c0:84:a7: 06:0c:ed:2a:cb:f6:dc:1e:55:52:65:99:4b:b2:dd:0b:7e:e8: 9d:21:ce:15:da:94:9c:f4:77:8a:1e:1b:70:d2:fd:c3:be:aa: 4d:2e:0f:01:91:4d:ac:c2:b4:38:21:16:d4:cf:39:7f:72:05: a8:47:39:b7:e3:03:30:4a:e0:fe:24:d0:b9:76:eb:97:0d:a6: b0:ca:24:89:67:2b:27:f8:90:8d:b3:0b:83:8f:d7:64:76:45: e2:3a:a6:b9:d0:2e:96:f2:a2:98:d3:86:5d:de:da:6a:ee:24: b1:45:eb:47:5d:52:19:15:b4:b9:b5:59:fc:23:d3:aa:d8:54: 32:19:1e:a7:43:93:8b:18:d1:e9:73:11:f2:63:94:0b:8a:3d: 78:62:9a:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUwODA5MDI0NTI4WhcNMjUwODE2MDI0NTI4WjAYMRYwFAYD VQQDEw02ODk2YjY0OC01YjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgQotFmTZdYFwh9uTf/MI6b+yLqIKkBmeniIR5ZHAKwwgjlcsh7BCFiTgl5N 1GXFzJKBvd8x/N5QAMDdUsxyyofJ1NIjVD5/TIGSXDzB4PwlJnIkt1DPlZP1x+V8 IwlgiYlqIFZZytDaW8eZUanONfORpDB9qYAxg7mqsMIeegm/dH+Oht3YYkcW2bKb 8g46eYlwapiPLfTkc0Ay0cQJX8pc7vYdhgVyRn0wWM6c3pvhFSQdpUQFLmtpJjt9 YswrJBq9esf5O9/W8PCsex+83PQCox/YauIeTjDiC9lFeypDss3zaq7qEPkBol46 YNBV05L4gD7EXgpQkEpLjnvgpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDniBNQV 8axTTF3pYRJExSewWPT/MB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACo9JbtjwKE4DooFXNoMW3LkB7m2U4/FR9w5hKlUY9LPgFdlHdqN95 nrSSoo59LuhZ24gpnLgCGiySYfU4bLSRidJ2lDooBHqlnw+yUq6xtEHjW/X4S8N4 M3+IulYTRjQ5nq34NhX3x4/AhKcGDO0qy/bcHlVSZZlLst0LfuidIc4V2pSc9HeK Hhtw0v3DvqpNLg8BkU2swrQ4IRbUzzl/cgWoRzm34wMwSuD+JNC5duuXDaawyiSJ Zysn+JCNswuDj9dkdkXiOqa50C6W8qKY04Zd3tpq7iSxRetHXVIZFbS5tVn8I9Oq 2FQyGR6nQ5OLGNHpcxHyY5QLij14YppJ -----END CERTIFICATE-----Generated at Sun Aug 10 15:59:37 2025 by rpki-client