$ rpki-client -vvf rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft File: EiOAOGQwr9Y_NklEdk4bNBhj0No.mft (raw, json) Hash identifier: lqSw4+mUBbeNxfB6idv4OiEAu9kH642iT0pmTPCwcAs= Subject key identifier: 9B:09:EF:B8:5F:08:81:EF:3A:87:CB:31:1D:2A:0B:5E:63:E3:34:5F Authority key identifier: 12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA Certificate issuer: /CN=A9156AFF/serialNumber=122380386430AFD63F364944764E1B341863D0DA Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft Manifest number: 33 Signing time: Sat 19 Jul 2025 07:53:40 +0000 Manifest this update: Sat 19 Jul 2025 07:53:39 +0000 Manifest next update: Sat 26 Jul 2025 07:53:39 +0000 Files and hashes: 1: EiOAOGQwr9Y_NklEdk4bNBhj0No.crl (hash: eLuaiQBekbaJ6YoA3AuIdL++47PfVSd/htKRqKInT4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156AFF, serialNumber=122380386430AFD63F364944764E1B341863D0DA Validity Not Before: Jul 19 07:53:39 2025 GMT Not After : Jul 26 07:53:39 2025 GMT Subject: CN=687b4f03-8bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:ee:4c:7e:ed:b2:d2:e0:e6:a2:f3:ba:31: 49:21:c1:4f:b4:be:e9:07:e3:c3:d5:f4:dc:9b:cb: 58:a4:10:e7:3e:5d:a1:eb:cb:c3:70:ad:fd:f8:06: 05:53:59:62:6c:1b:9d:37:51:7c:80:33:83:08:0d: 70:1c:21:09:3a:17:af:70:37:5b:01:b6:f7:9c:3e: ff:b8:a4:a5:0b:46:74:4c:39:4b:a6:0a:98:60:c4: c5:d2:75:1b:0b:c9:c6:31:39:18:25:61:eb:f3:6f: 15:12:1b:16:df:82:ce:d7:e2:3a:dd:92:6c:57:b4: bc:6f:11:5a:7b:f3:08:81:f9:b6:a0:ff:ac:b1:2b: a2:79:5e:35:52:7a:18:2c:e8:8a:15:d5:e9:c9:3a: 35:b5:f0:2f:d9:6c:0f:e4:78:d7:1c:55:37:3f:78: 2d:d2:1c:4c:4b:ac:09:9b:94:a1:f8:25:0b:32:4b: 5a:27:93:98:96:cc:7f:17:0b:7f:bd:c3:4e:00:e6: e4:08:c3:24:1a:96:90:64:c0:c6:fe:33:38:c6:2e: 7a:44:66:2e:0a:1c:88:2a:b0:91:47:46:b3:46:67: 57:49:17:43:bb:3e:1f:a0:79:56:8e:1b:4d:b9:77: a4:d5:a5:58:bf:6d:54:b8:23:3a:da:4c:45:ab:27: 90:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:09:EF:B8:5F:08:81:EF:3A:87:CB:31:1D:2A:0B:5E:63:E3:34:5F X509v3 Authority Key Identifier: keyid:12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:6d:cf:b8:4a:00:53:df:bd:78:01:ce:c8:3b:cc:48:6c:44: 1d:cc:ec:68:64:b0:d5:3d:0e:49:a7:7b:57:58:51:0a:68:4f: 20:7d:e1:5b:be:48:42:b6:5a:92:e4:60:08:79:58:87:39:80: e5:93:84:02:38:4f:97:cc:87:80:07:ba:9d:dc:55:e2:49:28: 8b:fc:c6:8d:cb:75:94:26:b2:8c:c5:a8:65:77:01:8d:28:95: f0:9a:f5:ac:59:3c:32:74:dd:e7:df:50:ec:7f:75:ed:97:c6: e6:48:5b:c9:53:fc:c4:b1:e3:b9:98:4b:43:cd:6e:93:28:23: 24:86:15:0c:81:7b:af:8b:d8:da:9a:75:69:96:ea:20:a7:88: c8:13:ef:45:08:c6:39:c2:13:d0:c8:24:41:2b:c8:36:cf:29: c6:f8:54:e6:fa:98:21:1c:b9:ac:b3:81:a0:8b:94:02:62:d2: 8c:5c:d9:26:6c:57:ca:02:52:d0:c4:44:94:5c:c9:44:9e:03: 25:a0:29:a9:09:41:16:bb:96:42:94:e1:52:9e:54:2e:60:e1: ae:65:41:de:9c:ef:a8:1e:99:15:cb:d9:b0:fa:14:67:02:e1: 6d:43:d8:b7:14:b9:a6:d9:78:4e:0b:a4:64:5e:fb:34:b7:e1: 64:09:98:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkFGRjExMC8GA1UEBRMoMTIyMzgwMzg2NDMwQUZENjNGMzY0OTQ0NzY0RTFCMzQx ODYzRDBEQTAeFw0yNTA3MTkwNzUzMzlaFw0yNTA3MjYwNzUzMzlaMBgxFjAUBgNV BAMTDTY4N2I0ZjAzLThiZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR4+5Mfu2y0uDmovO6MUkhwU+0vukH48PV9Nyby1ikEOc+XaHry8Nwrf34BgVT WWJsG503UXyAM4MIDXAcIQk6F69wN1sBtvecPv+4pKULRnRMOUumCphgxMXSdRsL ycYxORglYevzbxUSGxbfgs7X4jrdkmxXtLxvEVp78wiB+bag/6yxK6J5XjVSehgs 6IoV1enJOjW18C/ZbA/keNccVTc/eC3SHExLrAmblKH4JQsyS1onk5iWzH8XC3+9 w04A5uQIwyQalpBkwMb+MzjGLnpEZi4KHIgqsJFHRrNGZ1dJF0O7Ph+geVaOG025 d6TVpVi/bVS4IzraTEWrJ5DDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmwnvuF8I ge86h8sxHSoLXmPjNF8wHwYDVR0jBBgwFoAUEiOAOGQwr9Y/NklEdk4bNBhj0Now DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QUZGLzNCN0IzMUI2MTRE ODExRjBBMzdFQzA0RUM0RjlBRTAyL0VpT0FPR1F3cjlZX05rbEVkazRiTkJoajBO by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWlPQU9HUXdyOVlfTmtsRWRrNGJOQmhqME5vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QUZGLzNCN0IzMUI2MTREODExRjBBMzdFQzA0RUM0RjlBRTAyL0VpT0FPR1F3cjlZ X05rbEVkazRiTkJoajBOby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKZtz7hKAFPfvXgBzsg7zEhsRB3M7GhksNU9Dkmne1dYUQpoTyB94Vu+ SEK2WpLkYAh5WIc5gOWThAI4T5fMh4AHup3cVeJJKIv8xo3LdZQmsozFqGV3AY0o lfCa9axZPDJ03effUOx/de2XxuZIW8lT/MSx47mYS0PNbpMoIySGFQyBe6+L2Nqa dWmW6iCniMgT70UIxjnCE9DIJEEryDbPKcb4VOb6mCEcuayzgaCLlAJi0oxc2SZs V8oCUtDERJRcyUSeAyWgKakJQRa7lkKU4VKeVC5g4a5lQd6c76gemRXL2bD6FGcC 4W1D2LcUuabZeE4LpGRe+zS34WQJmMI= -----END CERTIFICATE-----Generated at Sun Jul 20 07:36:24 2025 by rpki-client