$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft File: eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json) Hash identifier: Z64Yr8LxFV+lVN6XUedgRjltnEksl5kjkcnqSSL6dqQ= Subject key identifier: 7B:42:B8:F3:87:28:71:BD:C3:56:F7:93:7E:DA:05:5A:EF:96:89:C4 Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B Certificate issuer: /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Certificate serial: 34F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft Manifest number: 34CE Signing time: Fri 18 Jul 2025 14:33:22 +0000 Manifest this update: Fri 18 Jul 2025 14:33:22 +0000 Manifest next update: Fri 25 Jul 2025 14:33:22 +0000 Files and hashes: 1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: Vt5yFM9E6excfgnbsAhObMWt3yJV0QA0lxUbCbJO5pA=) 2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: LI2pTAtj2FrGkxTBu/kHsrcO7e2WbrdhGE8h6n7f+mA=) 3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: EtN9WHkYOoh1Toml+yZQvfO83/c6JcmYJR90QSo2UxE=) 4: D230A150840E11EFB3D1036BC4F9AE02.roa (hash: JS1dP/Z3wRNVnOwepT6cYwjkzee8Wo5X7MrAc7I3mlg=) 5: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: oxQvbEvt1VKVOZrQR/1bF13JTfe0jqTt+sjD6nr8S1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13561 (0x34f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B Validity Not Before: Jul 18 14:33:22 2025 GMT Not After : Jul 25 14:33:22 2025 GMT Subject: CN=687a5b32-e491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:59:24:20:83:08:fb:b4:a5:8c:ac:ee:bd: 65:13:2a:d8:dc:0d:74:d8:ff:9a:22:ae:46:59:3f: 0f:f5:b8:de:2a:03:77:e3:24:6c:6d:f3:56:53:82: 0c:61:50:b4:ae:68:16:b0:b1:22:98:0c:8f:7a:2b: 5f:27:5b:b2:67:6d:f5:1f:1b:9b:fb:6b:d7:23:38: 24:c4:d0:7b:ce:b0:2e:f3:80:83:19:16:52:54:4e: 5b:70:60:c3:5e:3d:73:42:a8:62:f6:ab:89:b9:64: ac:78:73:f8:2a:92:c8:a4:91:80:57:86:d8:61:9a: b9:13:96:53:65:cc:be:da:7f:b6:ab:8d:d0:a8:23: e6:d8:3a:ef:7b:fb:e1:b4:92:02:0b:03:99:a8:e3: 03:f1:05:b1:b2:31:14:5c:1f:86:8d:86:be:c5:ec: 64:a1:ba:69:33:1f:2e:99:df:1d:78:bd:4e:ca:ef: ab:bc:58:fb:eb:1d:2c:5c:b8:82:01:3f:d5:73:5f: a2:d8:c4:5c:98:e3:39:bd:07:be:fd:f1:ed:1b:34: 72:e3:f8:20:48:66:ac:75:cb:ab:a6:aa:17:8a:d7: da:66:70:b3:64:2f:8d:36:bd:f1:03:92:79:ac:d7: b9:27:cf:d8:a4:86:eb:6e:a0:65:c5:0a:f6:a2:c7: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:42:B8:F3:87:28:71:BD:C3:56:F7:93:7E:DA:05:5A:EF:96:89:C4 X509v3 Authority Key Identifier: keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:af:a4:d6:07:01:3b:aa:9a:66:77:45:b8:24:fe:a3:d6:5d: 01:da:d1:9d:e2:f5:3d:b4:90:f6:50:51:75:b8:0b:d5:ab:13: f3:b5:e2:42:b0:90:80:b2:f3:b8:2e:99:71:01:b7:4f:ab:ee: a1:4b:d4:8f:a6:6d:ce:68:83:d5:e2:74:24:fc:73:34:fc:38: 45:2d:35:9b:e5:20:56:46:2a:ad:ee:aa:d3:1e:b0:61:10:44: 5a:c5:54:e1:42:40:d3:61:a9:7d:e2:ff:ea:c8:e5:cf:f8:c6: d6:e7:73:99:7f:71:e5:8d:cc:a5:cf:e5:e1:4d:65:fb:75:9b: ba:2d:49:f3:ae:f1:3c:79:27:de:c7:7a:41:39:f6:ce:35:9d: 8d:29:9f:f3:1f:8f:cc:a1:ff:f7:de:cc:32:00:d1:b4:df:4c: 9c:cf:4d:7a:ad:df:bf:db:8f:70:53:d5:e7:7e:04:68:72:43: a4:ee:cd:d4:0f:ea:c8:4f:0e:62:3e:32:96:ff:96:91:9f:d3: 9d:62:5e:cd:03:20:5e:e5:91:3d:e5:59:4a:46:1a:51:24:23: a5:4b:d2:fb:b5:af:29:a9:17:27:e9:4f:9b:19:81:a7:b7:4b: 13:e1:9d:cc:68:75:4b:84:64:e7:8e:73:32:1f:d4:30:da:b1: c6:d6:be:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUU5QTUxMTAvBgNVBAUTKDdBQUM2N0RCQzFFQjkyOEUyOTUxMzYyRTBCQzZBQzc2 NzdFMkRDN0IwHhcNMjUwNzE4MTQzMzIyWhcNMjUwNzI1MTQzMzIyWjAYMRYwFAYD VQQDEw02ODdhNWIzMi1lNDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtF1ZJCCDCPu0pYys7r1lEyrY3A102P+aIq5GWT8P9bjeKgN34yRsbfNWU4IM YVC0rmgWsLEimAyPeitfJ1uyZ231Hxub+2vXIzgkxNB7zrAu84CDGRZSVE5bcGDD Xj1zQqhi9quJuWSseHP4KpLIpJGAV4bYYZq5E5ZTZcy+2n+2q43QqCPm2Drve/vh tJICCwOZqOMD8QWxsjEUXB+GjYa+xexkobppMx8umd8deL1Oyu+rvFj76x0sXLiC AT/Vc1+i2MRcmOM5vQe+/fHtGzRy4/ggSGasdcurpqoXitfaZnCzZC+NNr3xA5J5 rNe5J8/YpIbrbqBlxQr2osfu0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtCuPOH KHG9w1b3k37aBVrvlonEMB8GA1UdIwQYMBaAFHqsZ9vB65KOKVE2LgvGrHZ34tx7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTlBNS9BMzJFRkVCODFE ODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtvNHBVVFl1Qzhhc2RuZmkz SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VxeG4yOEhya280cFVUWXVDOGFzZG5maTNIcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTlBNS9BMzJFRkVCODFEODkxMUUyOTJFNEZERTIwOEIwMkNEMi9lcXhuMjhIcmtv NHBVVFl1Qzhhc2RuZmkzSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARr6TWBwE7qppmd0W4JP6j1l0B2tGd4vU9tJD2UFF1uAvVqxPzteJC sJCAsvO4LplxAbdPq+6hS9SPpm3OaIPV4nQk/HM0/DhFLTWb5SBWRiqt7qrTHrBh EERaxVThQkDTYal94v/qyOXP+MbW53OZf3Hljcylz+XhTWX7dZu6LUnzrvE8eSfe x3pBOfbONZ2NKZ/zH4/Mof/33swyANG030ycz016rd+/249wU9XnfgRockOk7s3U D+rITw5iPjKW/5aRn9OdYl7NAyBe5ZE95VlKRhpRJCOlS9L7ta8pqRcn6U+bGYGn t0sT4Z3MaHVLhGTnjnMyH9Qw2rHG1r5c -----END CERTIFICATE-----Generated at Sun Jul 20 07:37:24 2025 by rpki-client