$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json) Hash identifier: 7in+I85haztfQLMTbmUqHiKB4zhRrtKSaHXYZvqAGog= Subject key identifier: 74:BD:FD:A6:5C:78:72:93:64:AB:65:C3:64:48:79:5A:D7:54:B8:80 Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft Manifest number: 0149 Signing time: Fri 25 Jul 2025 04:27:44 +0000 Manifest this update: Fri 25 Jul 2025 04:27:43 +0000 Manifest next update: Fri 01 Aug 2025 04:27:43 +0000 Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: 5BQaQPQVrTuIlDr05VtYnYk+6YeNYl/w1wdeodkFibI=) 2: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: zenPmnV708uWYVdBIohUknKedfQOR1ObJANCzq5j/eI=) 3: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: cNAOWRyYAIXWiMdboiFgiFug53GcE6u1QmL+e/IQa/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 04:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Validity Not Before: Jul 25 04:27:43 2025 GMT Not After : Aug 1 04:27:43 2025 GMT Subject: CN=688307c0-4929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:4a:21:89:81:7b:f5:25:05:97:bb:f7:2e: 93:00:ab:4c:50:60:6d:9f:c6:b9:66:aa:cb:a8:83: a4:35:42:8d:46:51:46:2d:df:b2:64:df:76:e4:8c: f3:6d:b6:61:f8:d8:48:20:4f:1e:01:97:7d:0a:be: 2a:18:c0:1b:b0:6a:ce:c7:f6:1b:70:09:cd:f0:e3: 6d:73:a0:2c:8c:c3:fa:d8:ff:52:61:20:5f:3d:60: 5d:a9:d1:fa:fe:dd:7b:4e:d4:88:bd:da:d9:8a:65: f3:47:38:d0:91:9b:43:31:c4:61:ea:e4:87:54:f3: 66:7c:f8:bf:db:f9:d7:0d:ce:ff:3a:d1:9d:67:09: 51:95:68:a7:5e:48:70:65:dc:f1:2f:55:63:4f:d8: d1:c8:b1:b9:8c:a6:29:ef:91:84:05:44:4b:3f:6b: 17:e4:58:4e:bf:dc:1a:e0:77:69:bf:d3:42:f0:fe: cd:f8:99:e1:95:98:bd:c9:10:c3:e2:49:45:85:b5: bb:37:d7:53:17:b2:04:a4:fb:ff:42:18:51:46:d3: 12:fd:80:1a:2b:ba:8e:11:66:69:bc:99:e6:f2:82: 4d:23:c3:0e:fc:77:34:89:63:7c:7a:9e:e9:80:81: 44:3e:f3:11:e2:9e:e6:a0:c3:05:c4:a0:a4:e3:14: 4a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BD:FD:A6:5C:78:72:93:64:AB:65:C3:64:48:79:5A:D7:54:B8:80 X509v3 Authority Key Identifier: keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a6:4d:f6:e9:52:28:4e:7c:8b:a9:ab:f7:52:f7:b5:4d:e5: 28:19:b4:13:88:81:5b:e3:ef:18:5e:2c:6e:95:a2:55:c4:ad: 69:65:a8:cf:a3:9f:6a:a8:e2:ca:24:61:ac:db:b4:a0:15:c5: ca:09:7d:ad:c1:f6:40:59:c4:ea:4c:6f:8b:61:e9:16:dd:49: 90:25:0a:c9:bf:bc:a4:0c:26:30:a3:77:c2:a0:b2:40:23:29: 37:65:61:53:91:72:a4:3e:91:98:45:01:e9:ff:4b:19:c0:20: 71:6c:ac:b8:d8:cf:e9:7d:c6:37:8c:b3:98:f5:4c:4d:d0:73: 96:b6:3e:4a:db:90:4e:c7:fa:17:61:75:5e:65:b7:4c:36:2e: 9c:7f:55:9b:9d:ab:fd:7f:45:20:36:e6:48:fc:d0:17:b2:62: 39:12:62:ae:fe:bb:16:4b:b4:92:71:1f:61:df:4e:75:50:98: e9:5b:de:d0:a4:3f:a8:29:47:ed:ab:26:7b:b2:97:ef:cc:a9: 7f:b9:2e:85:83:e6:47:ea:46:38:ab:66:7e:33:d7:ac:43:24: 93:43:03:6f:69:05:1e:3c:ee:5e:d5:18:91:d4:96:53:89:61: 2a:8c:01:cb:89:19:9a:3f:31:0e:df:85:14:69:4e:ee:06:10: fb:30:05:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0 Mjc4N0FGODMwHhcNMjUwNzI1MDQyNzQzWhcNMjUwODAxMDQyNzQzWjAYMRYwFAYD VQQDEw02ODgzMDdjMC00OTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/ZKIYmBe/UlBZe79y6TAKtMUGBtn8a5ZqrLqIOkNUKNRlFGLd+yZN925Izz bbZh+NhIIE8eAZd9Cr4qGMAbsGrOx/YbcAnN8ONtc6AsjMP62P9SYSBfPWBdqdH6 /t17TtSIvdrZimXzRzjQkZtDMcRh6uSHVPNmfPi/2/nXDc7/OtGdZwlRlWinXkhw ZdzxL1VjT9jRyLG5jKYp75GEBURLP2sX5FhOv9wa4Hdpv9NC8P7N+JnhlZi9yRDD 4klFhbW7N9dTF7IEpPv/QhhRRtMS/YAaK7qOEWZpvJnm8oJNI8MO/Hc0iWN8ep7p gIFEPvMR4p7moMMFxKCk4xRKeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHS9/aZc eHKTZKtlw2RIeVrXVLiAMB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjgxMy9BODUyNDM2QTZFMkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjIt ME1oMFVwWFFGSmhDZUhyNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCApk326VIoTnyLqav3Uve1TeUoGbQTiIFb4+8YXixulaJVxK1pZajP o59qqOLKJGGs27SgFcXKCX2twfZAWcTqTG+LYekW3UmQJQrJv7ykDCYwo3fCoLJA Iyk3ZWFTkXKkPpGYRQHp/0sZwCBxbKy42M/pfcY3jLOY9UxN0HOWtj5K25BOx/oX YXVeZbdMNi6cf1Wbnav9f0UgNuZI/NAXsmI5EmKu/rsWS7SScR9h3051UJjpW97Q pD+oKUftqyZ7spfvzKl/uS6Fg+ZH6kY4q2Z+M9esQySTQwNvaQUePO5e1RiR1JZT iWEqjAHLiRmaPzEO34UUaU7uBhD7MAVf -----END CERTIFICATE-----Generated at Sat Jul 26 01:55:54 2025 by rpki-client