$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft File: eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json) Hash identifier: hqIk6A2REtX5SoG8qfX+xyeMXiLjHpMFTZHhiOdstP0= Subject key identifier: 3C:1F:8D:79:78:57:E7:DE:33:8F:09:EB:C1:2F:5A:4B:5D:47:35:9A Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 Certificate issuer: /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Certificate serial: 083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft Manifest number: 0823 Signing time: Fri 18 Jul 2025 21:04:45 +0000 Manifest this update: Fri 18 Jul 2025 21:04:44 +0000 Manifest next update: Fri 25 Jul 2025 21:04:44 +0000 Files and hashes: 1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: BXlJc2lutYVVscmeI6LqNsUr7JVbuO5RggjKqAop2u8=) 2: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: XB8wSFVQZAHvqakZ35MOgP2u0Ix9DouCb4nv3BULPR8=) 3: C664689AE0F511EABB96D531C4F9AE02.roa (hash: dYyNNCNhHnZkGZCDfE/V9Ur6jl+sr7C71Nxoo9EVQmI=) 4: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: DOSZg99mo70HEeL3C6AnH+3DNlQmbU02wS7iu6QLEaI=) 5: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: B74A200MEGtzjKLkG19+x2nWM7IOpN8G2t0B9881Biw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2 Validity Not Before: Jul 18 21:04:44 2025 GMT Not After : Jul 25 21:04:44 2025 GMT Subject: CN=687ab6ed-4fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:75:e7:22:d8:7f:1f:4f:4a:44:2c:1c:ce:79: d0:0c:b9:f1:ff:bb:94:b2:a7:c7:cc:35:7b:32:54: 2d:ce:cf:f5:0d:37:7c:d4:ec:e4:4d:51:bc:59:c6: 42:2a:de:33:d8:ea:cb:b9:6c:ef:da:f3:c4:c9:c1: 87:09:b2:5f:da:74:cd:3d:96:66:fd:65:58:8d:0b: 90:ca:01:d5:be:cb:60:8b:d3:17:3a:bb:70:ec:96: 78:cd:fd:8b:e8:91:56:f3:80:d4:8c:11:4b:c3:22: 3a:7a:c0:e3:78:51:e2:5d:5b:b3:eb:73:7d:d8:b0: 1a:5b:1e:22:fd:71:ff:75:98:ca:72:34:95:ca:0f: 18:fe:fa:42:64:74:34:65:ec:2b:ff:a9:ee:57:84: 79:51:7a:7c:fd:5e:e9:46:60:ed:87:fa:17:44:44: c0:bb:18:27:7f:30:74:4b:44:41:4a:48:14:c5:43: fd:f4:67:3c:f0:b1:51:77:0d:76:71:43:a2:25:90: 5f:9d:78:f1:1c:b6:54:7c:d9:26:95:b5:1d:ed:42: ff:13:9d:f4:8d:46:66:47:37:21:05:6c:1c:ce:53: c5:55:3b:df:73:95:20:ab:c6:e1:50:6f:9e:82:2a: f4:d3:4d:82:18:d0:80:f0:fd:15:4a:45:44:72:91: 81:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1F:8D:79:78:57:E7:DE:33:8F:09:EB:C1:2F:5A:4B:5D:47:35:9A X509v3 Authority Key Identifier: keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ae:03:30:2e:ef:4e:e3:89:84:de:12:51:8d:ad:df:14:17: fd:1b:67:fd:b3:96:98:e5:fa:29:99:4f:1f:1b:51:2b:0b:35: e2:3f:9d:d9:ce:93:3c:88:3d:69:81:f9:52:1f:5d:49:48:c1: 45:63:8a:cb:4a:2c:50:97:24:45:18:42:96:e2:8b:2e:0a:24: e5:32:23:73:32:fb:c0:73:31:8a:ec:47:7f:8b:3c:0a:58:ee: 12:8e:38:ea:48:5f:e2:28:e7:60:fe:2e:59:9e:5d:4e:1f:12: 9c:a8:35:14:f1:5d:2b:fe:5d:fe:b0:0b:83:19:4b:b2:46:73: 41:81:8c:47:52:db:12:50:03:fb:90:c3:6c:df:7b:cb:72:d5: 3e:a6:47:7a:0a:2b:51:5d:50:86:f3:ca:4c:d2:dd:77:13:d3: 8e:35:d2:ef:c7:8e:d2:a4:6a:8f:bb:ba:64:44:53:72:1e:b8: 9c:23:c5:6c:91:47:da:f2:ab:8a:75:9c:4c:1c:6a:45:78:c0: 4e:2f:3e:df:ff:ea:dc:b2:22:9f:bd:ca:e4:9d:24:f7:96:06: b7:38:f1:5c:9b:c8:e0:71:4e:fc:aa:93:0f:9e:bf:1d:8a:3a: 11:aa:3e:c7:fc:cc:2b:86:1e:8c:a6:94:9c:88:6d:8b:07:cc: 83:c7:af:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGRTUxMTAvBgNVBAUTKDc4QTk5NzdGRkI0N0FGM0VDMUU5NDZCQzEwRjgxMzc2 OTQ5RUJFQzIwHhcNMjUwNzE4MjEwNDQ0WhcNMjUwNzI1MjEwNDQ0WjAYMRYwFAYD VQQDEw02ODdhYjZlZC00ZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9XXnIth/H09KRCwcznnQDLnx/7uUsqfHzDV7MlQtzs/1DTd81OzkTVG8WcZC Kt4z2OrLuWzv2vPEycGHCbJf2nTNPZZm/WVYjQuQygHVvstgi9MXOrtw7JZ4zf2L 6JFW84DUjBFLwyI6esDjeFHiXVuz63N92LAaWx4i/XH/dZjKcjSVyg8Y/vpCZHQ0 Zewr/6nuV4R5UXp8/V7pRmDth/oXRETAuxgnfzB0S0RBSkgUxUP99Gc88LFRdw12 cUOiJZBfnXjxHLZUfNkmlbUd7UL/E530jUZmRzchBWwczlPFVTvfc5Ugq8bhUG+e gir0002CGNCA8P0VSkVEcpGB/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwfjXl4 V+feM48J68EvWktdRzWaMB8GA1UdIwQYMBaAFHipl3/7R68+welGvBD4E3aUnr7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkZFNS85REFGNDg2RURE RUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6N0I2VWE4RVBnVGRwU2V2 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VLbVhmX3RIcno3QjZVYThFUGdUZHBTZXZzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkZFNS85REFGNDg2RURERUIxMUVBQjMwRUQ5MjFDNEY5QUUwMi9lS21YZl90SHJ6 N0I2VWE4RVBnVGRwU2V2c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBargMwLu9O44mE3hJRja3fFBf9G2f9s5aY5fopmU8fG1ErCzXiP53Z zpM8iD1pgflSH11JSMFFY4rLSixQlyRFGEKW4osuCiTlMiNzMvvAczGK7Ed/izwK WO4SjjjqSF/iKOdg/i5Znl1OHxKcqDUU8V0r/l3+sAuDGUuyRnNBgYxHUtsSUAP7 kMNs33vLctU+pkd6CitRXVCG88pM0t13E9OONdLvx47SpGqPu7pkRFNyHricI8Vs kUfa8quKdZxMHGpFeMBOLz7f/+rcsiKfvcrknST3lga3OPFcm8jgcU78qpMPnr8d ijoRqj7H/Mwrhh6MppSciG2LB8yDx6/a -----END CERTIFICATE-----Generated at Sun Jul 20 16:22:28 2025 by rpki-client