$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft File: ezWJ19jaa93mDzmOflK6heWuM1c.mft (raw, json) Hash identifier: u6PV2A+y46r7t5Knv5VjbBRV+GGk/KnNqkx/55R2MIc= Subject key identifier: 21:CD:08:B7:AC:69:05:FD:03:2F:04:0D:D6:71:BF:B5:16:AD:CC:A4 Authority key identifier: 7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 Certificate issuer: /CN=A916EF76/serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Certificate serial: 1815 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft Manifest number: 180D Signing time: Sun 20 Jul 2025 16:34:01 +0000 Manifest this update: Sun 20 Jul 2025 16:34:01 +0000 Manifest next update: Sun 27 Jul 2025 16:34:01 +0000 Files and hashes: 1: ezWJ19jaa93mDzmOflK6heWuM1c.crl (hash: aGTHdDU+WH1MdRmU2h++0CcV/9GrIYGn2W+Z675bo6I=) 2: B4F0A9F800A011E8B6C9E20AC4F9AE02.roa (hash: nE2SMAFaQ2lno0OXjrXqdk80Cil1YlPktKv0bTOPaBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6165 (0x1815) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF76, serialNumber=7B3589D7D8DA6BDDE60F398E7E52BA85E5AE3357 Validity Not Before: Jul 20 16:34:01 2025 GMT Not After : Jul 27 16:34:01 2025 GMT Subject: CN=687d1a79-f95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:97:2e:36:12:3c:b1:a3:69:99:69:f8:aa:8f: 09:1f:82:56:92:8a:22:43:5e:73:14:ac:3c:88:71: 10:d5:dd:bf:4d:bc:89:3f:a1:6c:42:00:0e:8c:2f: b8:7e:ba:3c:bc:12:ae:e6:93:e3:ab:c2:ce:bf:5d: f9:89:04:11:7c:9b:2e:66:7c:8a:f8:4d:e2:69:87: 3b:fe:2f:fb:45:0c:50:95:44:69:7a:18:15:1d:30: 00:1f:46:24:2d:a1:fd:76:de:cf:b9:49:a4:4a:6f: 41:ed:93:8b:fe:47:e7:b2:d0:8d:f3:b9:5a:c9:6f: 2f:f7:6a:94:95:43:f3:79:8c:92:02:99:73:31:79: 87:3b:6f:bd:ba:85:c7:26:67:46:f5:3a:53:60:e1: 6d:7a:a6:36:5e:ad:dd:44:af:c1:48:04:26:92:4d: c6:dd:60:0a:37:82:c9:bf:85:2a:4f:9f:85:8f:79: 0f:0a:9a:7b:c1:a8:d2:82:77:69:98:35:7d:1b:26: e5:30:a9:f8:91:f6:a8:16:0a:87:84:06:45:52:69: 14:70:30:89:f2:29:76:19:76:bd:8b:9f:17:e0:fd: e3:a8:04:b7:39:d2:1c:89:63:52:6a:5f:e2:73:1f: c1:17:f6:39:03:a0:59:d7:a0:7a:7f:a4:48:c2:a3: 01:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CD:08:B7:AC:69:05:FD:03:2F:04:0D:D6:71:BF:B5:16:AD:CC:A4 X509v3 Authority Key Identifier: keyid:7B:35:89:D7:D8:DA:6B:DD:E6:0F:39:8E:7E:52:BA:85:E5:AE:33:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezWJ19jaa93mDzmOflK6heWuM1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF76/29BE58F0B8CD11E79E431861C4F9AE02/ezWJ19jaa93mDzmOflK6heWuM1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:33:64:e0:ed:99:c8:ad:d2:fd:ba:db:ee:b5:a8:4e:f7:de: 38:e3:54:3e:dd:d5:55:0b:b9:ed:39:c9:5c:bd:ee:b8:cf:e7: a5:24:82:d7:ff:c2:ab:84:53:57:1b:a4:15:6c:d4:cb:84:f9: 47:85:6a:06:5b:3c:a4:09:61:9f:a2:89:7e:38:14:d2:3e:74: c8:b1:6a:a1:d0:83:b1:ee:78:9f:e6:c9:36:d8:18:ec:07:30: 0f:e8:25:df:d6:c0:c9:93:70:f4:7e:8e:18:71:ec:31:8f:5f: 05:93:f0:eb:52:c1:df:2a:70:e5:7d:c8:2a:25:56:f8:33:3f: 42:a8:f9:5f:c6:e7:c4:2c:97:3a:fb:d5:95:8f:dc:1e:3b:31: 55:35:0a:f8:77:fd:46:ae:3d:04:9a:ae:62:93:cb:ce:d1:f5: 93:96:27:6c:ec:37:b3:bf:50:99:a0:76:8a:6f:bf:a9:d2:4c: 71:93:2e:ab:3d:43:61:70:56:9f:cc:c7:72:fc:9c:e4:98:4c: 1c:4b:c1:cc:c4:bb:56:97:74:e9:19:c0:63:2e:b0:70:42:9f: 55:5a:da:60:15:ed:7c:e3:41:d5:c1:31:de:01:ba:f6:e3:a2: 16:fd:40:2f:e3:ab:0b:fe:fe:9d:84:19:a4:69:4e:45:d8:a8: 80:74:a1:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNzYxMTAvBgNVBAUTKDdCMzU4OUQ3RDhEQTZCRERFNjBGMzk4RTdFNTJCQTg1 RTVBRTMzNTcwHhcNMjUwNzIwMTYzNDAxWhcNMjUwNzI3MTYzNDAxWjAYMRYwFAYD VQQDEw02ODdkMWE3OS1mOTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5cuNhI8saNpmWn4qo8JH4JWkooiQ15zFKw8iHEQ1d2/TbyJP6FsQgAOjC+4 fro8vBKu5pPjq8LOv135iQQRfJsuZnyK+E3iaYc7/i/7RQxQlURpehgVHTAAH0Yk LaH9dt7PuUmkSm9B7ZOL/kfnstCN87layW8v92qUlUPzeYySAplzMXmHO2+9uoXH JmdG9TpTYOFteqY2Xq3dRK/BSAQmkk3G3WAKN4LJv4UqT5+Fj3kPCpp7wajSgndp mDV9GyblMKn4kfaoFgqHhAZFUmkUcDCJ8il2GXa9i58X4P3jqAS3OdIciWNSal/i cx/BF/Y5A6BZ16B6f6RIwqMBdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHNCLes aQX9Ay8EDdZxv7UWrcykMB8GA1UdIwQYMBaAFHs1idfY2mvd5g85jn5SuoXlrjNX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY3Ni8yOUJFNThGMEI4 Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5M21Eem1PZmxLNmhlV3VN MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6V0oxOWphYTkzbUR6bU9mbEs2aGVXdU0xYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY3Ni8yOUJFNThGMEI4Q0QxMUU3OUU0MzE4NjFDNEY5QUUwMi9leldKMTlqYWE5 M21Eem1PZmxLNmhlV3VNMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKM2Tg7ZnIrdL9utvutahO994441Q+3dVVC7ntOclcve64z+elJILX /8KrhFNXG6QVbNTLhPlHhWoGWzykCWGfool+OBTSPnTIsWqh0IOx7nif5sk22Bjs BzAP6CXf1sDJk3D0fo4Ycewxj18Fk/DrUsHfKnDlfcgqJVb4Mz9CqPlfxufELJc6 +9WVj9weOzFVNQr4d/1Grj0Emq5ik8vO0fWTlids7Dezv1CZoHaKb7+p0kxxky6r PUNhcFafzMdy/JzkmEwcS8HMxLtWl3TpGcBjLrBwQp9VWtpgFe1840HVwTHeAbr2 46IW/UAv46sL/v6dhBmkaU5F2KiAdKH2 -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:15 2025 by rpki-client