$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json) Hash identifier: trzpjcNIfrnzze4Xl6ChbqYdUom2wBO+vD4MPTeHqkQ= Subject key identifier: 15:9E:DE:9D:5C:93:30:9C:C6:84:DB:82:55:8B:C7:A6:51:93:B0:51 Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft Manifest number: 0148 Signing time: Wed 23 Jul 2025 04:28:37 +0000 Manifest this update: Wed 23 Jul 2025 04:28:37 +0000 Manifest next update: Wed 30 Jul 2025 04:28:37 +0000 Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: pflr2UNZVgVsTVV9BM2OXd+xZsr3IOxfSoNpW4YCFpY=) 2: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: zenPmnV708uWYVdBIohUknKedfQOR1ObJANCzq5j/eI=) 3: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: cNAOWRyYAIXWiMdboiFgiFug53GcE6u1QmL+e/IQa/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 04:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Validity Not Before: Jul 23 04:28:37 2025 GMT Not After : Jul 30 04:28:37 2025 GMT Subject: CN=688064f5-29d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:90:ba:5d:c5:a5:57:bc:ad:09:13:85:87: aa:44:17:8b:6f:7f:41:b6:bf:a6:f3:75:d0:78:97: 2f:4c:05:a8:f3:34:bf:1c:b5:43:90:08:a9:c8:ec: 83:8a:48:6b:95:6d:ff:30:60:fd:e3:65:0a:3a:a7: ef:7a:d4:00:00:bf:6d:e6:83:72:d3:bb:7f:8c:d9: 8f:23:c2:82:6a:76:23:a8:9f:ec:f7:75:ea:3b:2c: 1e:88:3a:ad:1a:f1:26:89:e1:e4:9b:6c:03:f2:37: 3f:b3:55:26:b7:1a:37:de:3c:d7:80:a5:07:b1:c0: 09:2d:71:76:1f:93:c8:4e:11:22:bf:36:16:2c:64: ea:0c:15:76:c3:01:92:8e:21:54:9f:4e:44:e0:9e: 09:a5:2e:b7:16:15:19:09:9e:a3:8c:48:1e:9b:74: 7d:7c:ea:da:49:b2:d5:f1:12:de:34:b6:69:24:7b: 86:d9:e7:8b:25:3a:0d:0c:da:74:b7:af:ed:93:38: 77:c7:e6:5b:06:f2:87:fe:3a:de:dd:7f:cd:14:c1: a8:f4:b2:0c:76:a1:89:a0:70:4a:14:b2:ff:bc:44: fd:9f:36:d4:40:32:f9:34:d4:68:b1:e5:42:d7:76: 9a:27:47:12:8b:7e:77:19:5b:c8:eb:e7:97:f3:50: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9E:DE:9D:5C:93:30:9C:C6:84:DB:82:55:8B:C7:A6:51:93:B0:51 X509v3 Authority Key Identifier: keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:80:e7:74:dd:80:3a:81:9c:69:68:f3:58:f4:4e:f7:79:e6: 12:9c:a6:d4:fa:ad:15:72:ab:4e:b8:a1:33:92:88:a1:16:85: c7:c9:7c:21:66:8d:dc:e1:c0:8c:fe:9e:93:66:7f:89:99:88: b9:6e:ca:aa:d5:c3:2b:db:4a:cf:6d:9c:a8:6d:7b:71:93:34: 96:04:06:e8:e9:a2:ba:59:10:a6:34:66:b2:a9:df:b6:d9:f9: 4c:f0:d5:02:f1:81:4e:6e:9d:2e:cd:0b:3c:6b:2a:26:ed:cf: b7:9e:fa:f1:17:8c:23:c9:6d:15:58:a1:5f:0c:65:e2:2f:48: 03:f6:eb:7c:b3:7c:47:45:56:5b:79:02:95:57:6b:e4:94:ca: 18:25:6c:07:43:70:19:a7:a2:e7:c0:d3:0e:00:b8:7a:f0:04: 34:09:9e:8b:c6:31:24:85:e5:a8:ec:7d:c3:fa:e7:08:7c:e1: 1c:2f:6b:81:db:5c:5f:fa:31:e0:d4:1f:98:cd:7e:58:f6:25: 65:76:5b:d3:7c:07:82:82:a5:8b:d8:8c:a0:e2:fe:d3:d6:33: 47:81:54:a2:c6:34:bd:b9:01:28:06:18:99:e9:a3:6e:82:ab: 4e:57:2b:8b:96:21:ec:a9:84:1e:49:70:a6:13:f0:eb:a0:0e: 0c:fb:9e:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0 Mjc4N0FGODMwHhcNMjUwNzIzMDQyODM3WhcNMjUwNzMwMDQyODM3WjAYMRYwFAYD VQQDEw02ODgwNjRmNS0yOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2WQul3FpVe8rQkThYeqRBeLb39Btr+m83XQeJcvTAWo8zS/HLVDkAipyOyD ikhrlW3/MGD942UKOqfvetQAAL9t5oNy07t/jNmPI8KCanYjqJ/s93XqOyweiDqt GvEmieHkm2wD8jc/s1Umtxo33jzXgKUHscAJLXF2H5PIThEivzYWLGTqDBV2wwGS jiFUn05E4J4JpS63FhUZCZ6jjEgem3R9fOraSbLV8RLeNLZpJHuG2eeLJToNDNp0 t6/tkzh3x+ZbBvKH/jre3X/NFMGo9LIMdqGJoHBKFLL/vET9nzbUQDL5NNRoseVC 13aaJ0cSi353GVvI6+eX81C3gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWe3p1c kzCcxoTbglWLx6ZRk7BRMB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjgxMy9BODUyNDM2QTZFMkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjIt ME1oMFVwWFFGSmhDZUhyNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsgOd03YA6gZxpaPNY9E73eeYSnKbU+q0VcqtOuKEzkoihFoXHyXwh Zo3c4cCM/p6TZn+JmYi5bsqq1cMr20rPbZyobXtxkzSWBAbo6aK6WRCmNGayqd+2 2flM8NUC8YFObp0uzQs8ayom7c+3nvrxF4wjyW0VWKFfDGXiL0gD9ut8s3xHRVZb eQKVV2vklMoYJWwHQ3AZp6LnwNMOALh68AQ0CZ6LxjEkheWo7H3D+ucIfOEcL2uB 21xf+jHg1B+YzX5Y9iVldlvTfAeCgqWL2Iyg4v7T1jNHgVSixjS9uQEoBhiZ6aNu gqtOVyuLliHsqYQeSXCmE/DroA4M+552 -----END CERTIFICATE-----Generated at Thu Jul 24 05:00:31 2025 by rpki-client