$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft File: ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft (raw, json) Hash identifier: uZ1LvOO8lzHVF/eNfphyqUozeQwmzCtGO4NfMLUtAR4= Subject key identifier: 3B:12:31:EC:70:D6:C8:96:91:30:E6:9D:7B:97:7B:F0:8E:9C:50:4D Authority key identifier: 7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13 Certificate issuer: /CN=A9157B93/serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft Manifest number: 29 Signing time: Sat 19 Jul 2025 08:02:16 +0000 Manifest this update: Sat 19 Jul 2025 08:02:16 +0000 Manifest next update: Sat 26 Jul 2025 08:02:16 +0000 Files and hashes: 1: ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl (hash: efogzGqijPSXDybQhVvnK4YnvnR+cAWO4dwqkOV8EOA=) 2: 7C487C522AD711F0889A9C4CC4F9AE02.roa (hash: dcosUg556kia3puig3z/Vay8g6P730lM2nj6N4MJmoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157B93, serialNumber=7B3F6157E997EF17CA507E66107FC89E8E3E3913 Validity Not Before: Jul 19 08:02:16 2025 GMT Not After : Jul 26 08:02:16 2025 GMT Subject: CN=687b5108-7c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7e:44:42:53:45:62:c6:19:5a:12:cb:0a:bd: 73:19:55:cd:35:23:56:ee:7f:6f:bb:20:d7:56:f5: 2f:32:d2:78:10:8f:c2:eb:c2:3a:46:84:fd:b6:07: ec:74:cd:e2:46:e0:26:06:76:a5:d8:27:ba:2b:2e: fd:9e:5e:01:aa:4d:11:b4:81:98:af:8f:83:45:17: 78:c5:6b:53:86:d1:63:6c:04:0f:af:c3:c6:f8:2b: 24:ad:52:1e:3d:86:1c:2b:c6:c0:9d:64:32:24:d6: e1:b5:cb:b6:bf:a0:32:c7:ee:a2:95:f5:ee:d3:30: fe:4b:c3:ce:bf:b0:c3:fb:aa:e1:6e:f9:9b:ce:36: 93:47:83:b3:f2:0d:20:31:6f:58:48:c3:21:d2:ef: ab:c9:95:b2:ba:37:f8:39:fa:e4:b8:6d:9a:f1:82: 74:d6:28:d5:8a:cf:f4:be:93:89:52:76:17:03:26: a0:4b:7e:0b:9e:8a:d4:32:34:c4:75:95:c1:65:15: 68:25:fa:49:51:1c:be:05:08:98:b0:e7:43:5b:55: d6:52:d1:af:29:5a:35:ea:e5:36:b6:22:28:e9:ae: 10:b0:47:31:91:6c:ec:c9:f1:66:31:68:c1:f9:ca: 61:87:f2:12:c2:dd:ab:92:35:b0:13:b5:79:2c:c6: 14:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:12:31:EC:70:D6:C8:96:91:30:E6:9D:7B:97:7B:F0:8E:9C:50:4D X509v3 Authority Key Identifier: keyid:7B:3F:61:57:E9:97:EF:17:CA:50:7E:66:10:7F:C8:9E:8E:3E:39:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9hV-mX7xfKUH5mEH_Ino4-ORM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B93/773DFB7229FD11F0BD552033C4F9AE02/ez9hV-mX7xfKUH5mEH_Ino4-ORM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cf:1a:1d:02:79:b5:b9:37:47:79:a1:c1:0c:d5:38:7a:4b: fc:3d:c0:5d:b6:81:7b:04:f5:7c:e7:ff:47:82:d5:81:7b:30: 34:83:b6:cd:95:c1:92:fd:f5:1c:3f:e2:05:d7:cf:fd:c6:95: fc:b6:8b:96:2c:e8:12:e6:74:63:d8:39:39:0f:19:2d:00:72: a0:94:04:f9:c1:62:06:90:d5:ef:cd:b9:65:0a:5b:29:3a:d2: f6:44:40:d3:fe:7d:87:92:2f:ed:1b:9a:11:47:f0:87:58:6c: df:a2:51:97:ba:91:88:cb:d7:46:d9:9c:a0:cb:b1:6d:54:b6: 90:7b:c9:ac:04:a6:b5:b9:01:2c:89:6a:34:9d:84:ed:e6:ac: 40:5b:1e:25:5d:39:a0:4c:bb:8d:eb:7c:4d:5f:cb:0f:09:e9: 60:91:91:92:28:28:1a:0f:e1:8a:72:e3:30:15:04:8d:4d:70: 08:04:a1:89:57:10:2b:29:22:be:35:34:7a:d1:7f:9b:6c:4d: 28:a3:4a:11:d2:96:2b:0a:71:40:db:ea:07:70:26:dc:58:86: 82:c8:77:14:37:d6:cd:df:c2:20:a5:49:85:a9:79:a2:86:b7: cf:ff:4a:a4:84:c7:53:40:6e:4a:43:f5:dc:04:ae:d4:c9:4f: 89:ea:50:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 N0I5MzExMC8GA1UEBRMoN0IzRjYxNTdFOTk3RUYxN0NBNTA3RTY2MTA3RkM4OUU4 RTNFMzkxMzAeFw0yNTA3MTkwODAyMTZaFw0yNTA3MjYwODAyMTZaMBgxFjAUBgNV BAMTDTY4N2I1MTA4LTdjOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRfkRCU0VixhlaEssKvXMZVc01I1buf2+7INdW9S8y0ngQj8LrwjpGhP22B+x0 zeJG4CYGdqXYJ7orLv2eXgGqTRG0gZivj4NFF3jFa1OG0WNsBA+vw8b4KyStUh49 hhwrxsCdZDIk1uG1y7a/oDLH7qKV9e7TMP5Lw86/sMP7quFu+ZvONpNHg7PyDSAx b1hIwyHS76vJlbK6N/g5+uS4bZrxgnTWKNWKz/S+k4lSdhcDJqBLfgueitQyNMR1 lcFlFWgl+klRHL4FCJiw50NbVdZS0a8pWjXq5Ta2IijprhCwRzGRbOzJ8WYxaMH5 ymGH8hLC3auSNbATtXksxhStAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOxIx7HDW yJaRMOade5d78I6cUE0wHwYDVR0jBBgwFoAUez9hV+mX7xfKUH5mEH/Ino4+ORMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3QjkzLzc3M0RGQjcyMjlG RDExRjBCRDU1MjAzM0M0RjlBRTAyL2V6OWhWLW1YN3hmS1VINW1FSF9Jbm80LU9S TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXo5aFYtbVg3eGZLVUg1bUVIX0lubzQtT1JNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 QjkzLzc3M0RGQjcyMjlGRDExRjBCRDU1MjAzM0M0RjlBRTAyL2V6OWhWLW1YN3hm S1VINW1FSF9Jbm80LU9STS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI/PGh0CebW5N0d5ocEM1Th6S/w9wF22gXsE9Xzn/0eC1YF7MDSDts2V wZL99Rw/4gXXz/3Glfy2i5Ys6BLmdGPYOTkPGS0AcqCUBPnBYgaQ1e/NuWUKWyk6 0vZEQNP+fYeSL+0bmhFH8IdYbN+iUZe6kYjL10bZnKDLsW1UtpB7yawEprW5ASyJ ajSdhO3mrEBbHiVdOaBMu43rfE1fyw8J6WCRkZIoKBoP4Ypy4zAVBI1NcAgEoYlX ECspIr41NHrRf5tsTSijShHSlisKcUDb6gdwJtxYhoLIdxQ31s3fwiClSYWpeaKG t8//SqSEx1NAbkpD9dwErtTJT4nqUP8= -----END CERTIFICATE-----Generated at Mon Jul 21 06:55:15 2025 by rpki-client