$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft File: EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json) Hash identifier: 7ccXT1GtvCIgRwey/IVVGqka7NZRq7l9l12L3SOHSxE= Subject key identifier: BE:B2:33:D2:2C:EB:68:C2:F3:6D:D3:0D:C3:95:74:BD:E9:90:9D:9F Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF Certificate issuer: /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft Manifest number: 8D Signing time: Sat 19 Jul 2025 06:46:12 +0000 Manifest this update: Sat 19 Jul 2025 06:46:11 +0000 Manifest next update: Sat 26 Jul 2025 06:46:11 +0000 Files and hashes: 1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: QEVY3pfk+8ILIBImB82ZVV1KeMlz+Q0jdNXu9BYtJ7E=) 2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: 5nFCTmC5xU4JIe+ocqPzYmN20Z681T2Mb6LU4xxafNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF Validity Not Before: Jul 19 06:46:11 2025 GMT Not After : Jul 26 06:46:11 2025 GMT Subject: CN=687b3f33-5fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:e5:88:00:3c:b3:87:93:13:3e:24:8e:31: bf:3b:ad:4d:e5:41:be:04:32:5e:d4:0f:55:54:b1: cc:7c:45:0c:96:56:d4:11:64:de:20:df:a0:ae:f4: 9f:ed:f5:a9:b8:b8:e4:f8:60:ab:f7:e0:b9:6c:8e: 4c:d7:dd:98:76:ef:8a:16:0f:27:1e:41:d0:f2:56: a1:55:f0:c3:23:22:7d:4a:a2:84:28:f1:b7:79:dc: 7d:dd:5e:14:b0:9e:06:fd:0e:d6:80:1b:55:85:fb: 26:74:bd:c7:49:95:10:13:f7:c2:ca:da:71:65:e8: 48:08:1c:ee:c0:c1:b0:f9:e4:2a:08:ed:0b:02:4f: 8a:a7:32:c1:f9:40:cd:8b:00:38:91:1b:c9:67:d7: 5b:30:fc:49:9c:4b:9e:5b:16:4b:57:ed:fb:c4:cf: 1a:09:8b:34:59:15:9c:c7:81:ed:9a:6a:2a:7a:50: 15:6f:c1:dd:c1:21:83:c1:f1:49:4d:90:a7:3a:46: 78:b0:65:35:55:38:d2:c7:43:1d:fc:f2:ed:a3:91: fc:1c:18:9f:2e:8f:fd:ea:6c:8e:2f:f0:60:aa:7a: 89:1f:1a:de:6b:59:5d:29:4a:6d:78:a2:28:c7:cf: df:92:08:6c:9a:7b:64:c5:22:59:7f:e4:ad:8e:f2: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B2:33:D2:2C:EB:68:C2:F3:6D:D3:0D:C3:95:74:BD:E9:90:9D:9F X509v3 Authority Key Identifier: keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:20:7c:e3:ed:0f:cd:e1:9e:24:b8:17:06:09:49:1e:8b:d7: 45:2e:16:f3:e5:87:72:73:bb:be:97:b5:c2:93:14:66:01:22: c6:87:9e:24:f7:b7:92:92:e6:43:33:59:4a:45:02:49:21:72: 6d:d3:21:27:ce:cb:7e:01:8f:47:25:2d:3f:79:b8:83:5b:dc: e3:13:83:75:01:26:4d:6e:dd:02:8c:b1:f4:1f:82:05:09:06: 57:65:df:5d:68:c5:4f:50:15:25:83:f8:fb:88:e5:3d:ce:40: 49:ac:e9:08:9c:c4:41:0b:7f:3c:df:4b:a3:50:7c:ae:1c:b2: b3:b1:c4:82:94:b3:02:d8:18:6d:00:f6:77:42:b7:d1:13:26: 97:4c:f1:b4:d7:7c:47:7a:e5:62:e8:44:02:aa:cf:73:6c:9b: fd:db:b5:ef:09:a3:96:eb:cc:03:ed:7a:70:86:b4:be:d2:65: ff:d1:1d:65:da:e6:1b:a1:6f:ea:e0:2e:5b:b5:2f:99:1a:17: c8:b9:66:f0:d0:b4:aa:ba:5e:28:49:7b:c1:a6:76:bb:06:96: 86:be:3c:1b:d4:21:65:e8:6d:6f:94:81:a2:42:20:3c:1c:39: a9:2a:96:99:a1:23:cb:b8:6a:64:9f:5a:22:e1:92:ec:86:d0: f1:91:4a:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2RTcxMTAvBgNVBAUTKDEyNDcwODFFOUJBOTdDMTNDN0REM0Q2OEU0NDNEMUY1 NDc5QjJBRkYwHhcNMjUwNzE5MDY0NjExWhcNMjUwNzI2MDY0NjExWjAYMRYwFAYD VQQDEw02ODdiM2YzMy01ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnunliAA8s4eTEz4kjjG/O61N5UG+BDJe1A9VVLHMfEUMllbUEWTeIN+grvSf 7fWpuLjk+GCr9+C5bI5M192Ydu+KFg8nHkHQ8lahVfDDIyJ9SqKEKPG3edx93V4U sJ4G/Q7WgBtVhfsmdL3HSZUQE/fCytpxZehICBzuwMGw+eQqCO0LAk+KpzLB+UDN iwA4kRvJZ9dbMPxJnEueWxZLV+37xM8aCYs0WRWcx4HtmmoqelAVb8HdwSGDwfFJ TZCnOkZ4sGU1VTjSx0Md/PLto5H8HBifLo/96myOL/BgqnqJHxrea1ldKUpteKIo x8/fkghsmntkxSJZf+StjvJdxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6yM9Is 62jC823TDcOVdL3pkJ2fMB8GA1UdIwQYMBaAFBJHCB6bqXwTx909aORD0fVHmyr/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTZFNy8wNjc5QUNGNDkx MjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZCUEgzVDFvNUVQUjlVZWJL djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTZFNy8wNjc5QUNGNDkxMjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZC UEgzVDFvNUVQUjlVZWJLdjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaIHzj7Q/N4Z4kuBcGCUkei9dFLhbz5Ydyc7u+l7XCkxRmASLGh54k 97eSkuZDM1lKRQJJIXJt0yEnzst+AY9HJS0/ebiDW9zjE4N1ASZNbt0CjLH0H4IF CQZXZd9daMVPUBUlg/j7iOU9zkBJrOkInMRBC38830ujUHyuHLKzscSClLMC2Bht APZ3QrfREyaXTPG013xHeuVi6EQCqs9zbJv927XvCaOW68wD7XpwhrS+0mX/0R1l 2uYboW/q4C5btS+ZGhfIuWbw0LSqul4oSXvBpna7BpaGvjwb1CFl6G1vlIGiQiA8 HDmpKpaZoSPLuGpkn1oi4ZLshtDxkUog -----END CERTIFICATE-----Generated at Sun Jul 20 11:05:07 2025 by rpki-client