$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft File: EPSBzyjc51gajMuOUN4Jj3yLyRU.mft (raw, json) Hash identifier: G9n57B0k2+9tvw+NVtsCxvOo9X9LBzosK34Al7jaUEs= Subject key identifier: 33:64:1F:DC:A5:D0:73:A6:6B:6A:51:95:40:67:BF:8D:A7:FC:14:30 Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 Certificate issuer: /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft Manifest number: 0125 Signing time: Mon 21 Jul 2025 04:47:12 +0000 Manifest this update: Mon 21 Jul 2025 04:47:11 +0000 Manifest next update: Mon 28 Jul 2025 04:47:11 +0000 Files and hashes: 1: EPSBzyjc51gajMuOUN4Jj3yLyRU.crl (hash: 9AWx42qGj95EEnx7mG32fQgza0a9z0/NXl5sIYJG/Xc=) 2: E070CA0CAA2E11EEA404D421C4F9AE02.roa (hash: iZU8zdfl9m+d7mdN1RiWPOsL2RUjP7KC4vEHrZwKmZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122134, serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915 Validity Not Before: Jul 21 04:47:11 2025 GMT Not After : Jul 28 04:47:11 2025 GMT Subject: CN=687dc64f-2a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:20:71:07:84:9e:57:2b:4b:66:6d:a7:b7: a1:d3:82:29:02:e0:61:d5:f6:f8:45:a4:25:74:df: 58:b0:85:98:bb:76:94:47:3a:42:bb:a6:cb:88:06: 57:dd:a7:a0:10:f8:c5:44:b2:63:1f:07:c5:38:8e: b6:b8:e9:fd:3b:cf:e4:7b:3a:e7:47:ca:89:c8:fb: bb:2e:2d:e0:8e:d0:b3:67:21:8f:47:fa:9c:05:85: 69:40:6b:26:00:c9:94:d8:0d:d2:4a:f6:f7:71:2a: f5:b2:ce:84:bd:b3:ac:ef:60:9f:09:a8:67:fe:69: 62:59:aa:0a:60:44:3f:8b:a0:e3:9a:93:6b:49:b0: cc:6d:ee:7d:c9:ff:55:af:ce:ab:3f:d8:c3:0f:b4: ed:ed:b4:ac:25:09:07:39:d4:a8:16:c5:bc:e3:30: 7c:0c:db:41:db:e4:d7:f8:c2:a1:90:e9:81:78:76: a3:13:2d:d0:d8:f4:88:56:b3:a6:7b:cd:52:c1:67: 43:ce:67:f1:95:27:0a:1a:dc:78:87:81:cd:37:a5: 6e:fb:21:4c:58:75:c9:bf:4e:83:2c:d6:14:ae:12: 70:8c:32:ea:33:6f:46:37:d5:04:14:d8:1c:15:1c: 8a:50:36:fe:55:d6:85:76:63:c1:1c:87:fb:eb:67: e1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:64:1F:DC:A5:D0:73:A6:6B:6A:51:95:40:67:BF:8D:A7:FC:14:30 X509v3 Authority Key Identifier: keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:5f:e5:2d:26:61:48:f6:87:8c:36:cc:e3:38:7a:cc:78:9f: c2:7d:ce:ef:49:aa:d1:1a:71:91:b5:c8:1f:c5:e6:01:9e:c3: 2e:08:68:65:5a:56:c4:b6:b0:2d:64:39:dc:ad:f7:00:3b:6f: 70:5a:6b:04:60:7f:46:3d:3a:6c:de:60:b4:b7:43:36:e5:87: b2:62:f6:8c:02:c2:f0:28:b8:16:c7:87:47:f9:0b:a7:e4:1c: 75:d4:dc:01:be:de:ec:2a:a7:a7:82:70:c5:9e:2f:f7:23:68: 38:0b:b4:67:a9:ca:54:ff:69:e7:5b:72:a2:05:59:c8:13:43: 4a:63:aa:e8:bc:f0:5a:4a:0a:71:32:91:02:1b:74:ed:cb:a2: dd:61:9d:6e:28:e5:55:30:d6:02:2f:04:d8:38:dc:86:f5:29: 56:36:f6:98:59:07:70:bc:8c:29:cf:5e:24:e2:b9:51:fc:b6: ae:12:76:d2:ac:c4:a5:8b:e7:7c:aa:11:16:7f:2e:9e:68:a4: 1a:d4:d8:14:37:bb:fe:19:2f:10:41:bf:47:b8:c6:ff:f1:3e: 9e:bf:24:15:66:d9:41:2e:a5:93:0f:62:36:6f:7e:c1:03:ff: ab:62:e9:fd:13:d1:08:b9:90:b2:f6:1b:66:c7:d7:0c:97:79: 05:03:25:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxMzQxMTAvBgNVBAUTKDEwRjQ4MUNGMjhEQ0U3NTgxQThDQ0I4RTUwREUwOThG N0M4QkM5MTUwHhcNMjUwNzIxMDQ0NzExWhcNMjUwNzI4MDQ0NzExWjAYMRYwFAYD VQQDEw02ODdkYzY0Zi0yYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxukgcQeEnlcrS2Ztp7eh04IpAuBh1fb4RaQldN9YsIWYu3aURzpCu6bLiAZX 3aegEPjFRLJjHwfFOI62uOn9O8/kezrnR8qJyPu7Li3gjtCzZyGPR/qcBYVpQGsm AMmU2A3SSvb3cSr1ss6EvbOs72CfCahn/mliWaoKYEQ/i6DjmpNrSbDMbe59yf9V r86rP9jDD7Tt7bSsJQkHOdSoFsW84zB8DNtB2+TX+MKhkOmBeHajEy3Q2PSIVrOm e81SwWdDzmfxlScKGtx4h4HNN6Vu+yFMWHXJv06DLNYUrhJwjDLqM29GN9UEFNgc FRyKUDb+VdaFdmPBHIf762fhAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNkH9yl 0HOma2pRlUBnv42n/BQwMB8GA1UdIwQYMBaAFBD0gc8o3OdYGozLjlDeCY98i8kV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjEzNC83OUEzMzU3NkFB MkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUxZ2FqTXVPVU40SmozeUx5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQU0J6eWpjNTFnYWpNdU9VTjRKajN5THlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjEzNC83OUEzMzU3NkFBMkUxMUVFODhCQTJFMjFDNEY5QUUwMi9FUFNCenlqYzUx Z2FqTXVPVU40SmozeUx5UlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1X+UtJmFI9oeMNszjOHrMeJ/Cfc7vSarRGnGRtcgfxeYBnsMuCGhl WlbEtrAtZDncrfcAO29wWmsEYH9GPTps3mC0t0M25YeyYvaMAsLwKLgWx4dH+Qun 5Bx11NwBvt7sKqengnDFni/3I2g4C7RnqcpU/2nnW3KiBVnIE0NKY6rovPBaSgpx MpECG3Tty6LdYZ1uKOVVMNYCLwTYONyG9SlWNvaYWQdwvIwpz14k4rlR/LauEnbS rMSli+d8qhEWfy6eaKQa1NgUN7v+GS8QQb9HuMb/8T6evyQVZtlBLqWTD2I2b37B A/+rYun9E9EIuZCy9htmx9cMl3kFAyV9 -----END CERTIFICATE-----Generated at Mon Jul 21 13:15:57 2025 by rpki-client