$ rpki-client -vvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft File: EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json) Hash identifier: hDBPwzSMCCQIxN0jdx4yCbTxbQWN2hjoZXrpNCn2cfw= Subject key identifier: 4C:29:E8:A3:0F:F7:C2:E6:62:A2:55:32:00:29:8A:39:ED:CA:7A:4C Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 Certificate issuer: /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft Manifest number: 0202 Signing time: Sat 19 Jul 2025 02:29:23 +0000 Manifest this update: Sat 19 Jul 2025 02:29:23 +0000 Manifest next update: Sat 26 Jul 2025 02:29:23 +0000 Files and hashes: 1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: OLpisi6EKi3kx8TMdBe7/k0HH8AovZMRiTjIGPD7cn8=) 2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: y8u3ZZNWwXMV6EsCoReGtHsNbMX1mb+g+HfYKyQ+Y/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9 Validity Not Before: Jul 19 02:29:23 2025 GMT Not After : Jul 26 02:29:23 2025 GMT Subject: CN=687b0303-fe6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:14:ff:92:23:b9:5d:7c:6c:76:eb:ad:82: e5:73:0f:77:e2:99:98:6a:76:62:e2:1a:62:15:08: 2a:76:2f:8f:32:16:0b:fa:d6:7f:d6:07:55:db:e7: 52:54:c5:10:7d:46:f8:ea:7b:0b:8c:13:f1:1d:73: be:6c:59:af:67:0c:08:eb:0b:e2:62:cd:ab:f7:e8: be:2d:c1:4f:01:fa:22:49:d0:41:cd:a5:c1:bc:f9: 12:63:92:99:25:90:04:f6:19:97:0e:2d:ec:be:96: ec:0a:f4:75:4d:c0:7b:fe:b7:91:cf:7e:d4:43:c7: 56:9d:25:47:10:81:85:8b:1d:a3:50:54:c0:21:e0: cd:8a:0b:28:1c:2d:70:a6:89:e7:98:48:16:83:b3: e1:1c:0c:4d:b0:c6:4d:84:de:19:a0:ec:fe:ac:4d: 76:6a:1f:a0:31:48:09:dc:20:fb:74:b7:4f:77:76: f3:13:8b:8e:5b:eb:95:89:c0:bc:b2:d1:4f:9c:9a: 0a:26:6a:67:2a:2a:68:b0:26:fb:23:a1:a3:f9:ed: c9:f4:01:d4:e6:4d:6c:9c:5f:0c:74:3c:21:85:e3: d4:38:4d:4b:7d:cd:8f:1d:61:87:55:6f:6e:da:e3: c4:e9:8d:1c:e4:2c:70:b2:1b:7d:f6:5c:3f:93:ef: b3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:29:E8:A3:0F:F7:C2:E6:62:A2:55:32:00:29:8A:39:ED:CA:7A:4C X509v3 Authority Key Identifier: keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:24:7e:08:2f:f0:71:4a:40:4a:61:c7:a6:12:35:65:61:ba: fb:1c:be:33:09:d7:4a:46:33:72:f9:98:83:fb:f0:98:76:f2: 43:64:c5:fb:17:80:e2:b9:9e:66:ce:c9:98:6a:64:9a:68:e0: 4f:38:90:10:c7:2e:a1:6a:ab:20:b1:66:bb:ae:0e:b1:b9:55: c4:7c:a7:24:dd:ee:01:34:9d:07:b4:70:ba:2c:e9:52:5d:1f: b6:40:c4:cf:3c:13:5d:1a:94:75:e8:65:b8:7d:2a:5d:79:3b: 90:8f:67:0e:3c:0b:60:5a:8e:c7:15:12:47:43:2c:d2:a7:0e: c7:1d:3b:e5:1b:d8:76:98:43:31:27:51:74:a6:17:78:c9:df: c1:e6:0e:f1:dc:a6:d1:a6:db:3b:33:08:9d:29:b8:62:34:27: 80:97:0a:ec:13:3d:a3:0c:7c:25:b9:8a:a5:71:d2:8c:32:6f: 7b:2f:dd:8e:1e:7c:fc:e4:1e:a5:e7:eb:02:fa:8f:a5:19:98: 99:2d:e1:a1:9a:4f:f7:f5:ae:3d:18:82:bd:df:02:28:9b:87: 67:bd:9c:52:c7:6e:27:f6:12:10:13:35:12:a2:68:d7:40:ac: ac:62:1b:e1:b4:38:a4:ea:5f:4b:56:20:69:40:d3:b4:1e:70: 36:1b:7c:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA2QjIxMTAvBgNVBAUTKDEwQ0E2MkMyQTc0OUJGOTFGNTYyMkFERUMwRjE5NjE4 NDkzQ0JCQTkwHhcNMjUwNzE5MDIyOTIzWhcNMjUwNzI2MDIyOTIzWjAYMRYwFAYD VQQDEw02ODdiMDMwMy1mZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4EU/5IjuV18bHbrrYLlcw934pmYanZi4hpiFQgqdi+PMhYL+tZ/1gdV2+dS VMUQfUb46nsLjBPxHXO+bFmvZwwI6wviYs2r9+i+LcFPAfoiSdBBzaXBvPkSY5KZ JZAE9hmXDi3svpbsCvR1TcB7/reRz37UQ8dWnSVHEIGFix2jUFTAIeDNigsoHC1w ponnmEgWg7PhHAxNsMZNhN4ZoOz+rE12ah+gMUgJ3CD7dLdPd3bzE4uOW+uVicC8 stFPnJoKJmpnKiposCb7I6Gj+e3J9AHU5k1snF8MdDwhhePUOE1Lfc2PHWGHVW9u 2uPE6Y0c5Cxwsht99lw/k++zawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwp6KMP 98LmYqJVMgApijntynpMMB8GA1UdIwQYMBaAFBDKYsKnSb+R9WIq3sDxlhhJPLup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDZCMi8zMjFGREQzRTRE ODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1SDFZaXJld1BHV0dFazh1 NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VNcGl3cWRKdjVIMVlpcmV3UEdXR0VrOHU2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDZCMi8zMjFGREQzRTREODMxMUVEODdGQjFFNkZDNEY5QUUwMi9FTXBpd3FkSnY1 SDFZaXJld1BHV0dFazh1NmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoJH4IL/BxSkBKYcemEjVlYbr7HL4zCddKRjNy+ZiD+/CYdvJDZMX7 F4DiuZ5mzsmYamSaaOBPOJAQxy6haqsgsWa7rg6xuVXEfKck3e4BNJ0HtHC6LOlS XR+2QMTPPBNdGpR16GW4fSpdeTuQj2cOPAtgWo7HFRJHQyzSpw7HHTvlG9h2mEMx J1F0phd4yd/B5g7x3KbRpts7MwidKbhiNCeAlwrsEz2jDHwluYqlcdKMMm97L92O Hnz85B6l5+sC+o+lGZiZLeGhmk/39a49GIK93wIom4dnvZxSx24n9hIQEzUSomjX QKysYhvhtDik6l9LViBpQNO0HnA2G3wm -----END CERTIFICATE-----Generated at Sun Jul 20 07:51:59 2025 by rpki-client