$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: jU5TZ+NFhyvynhEls+mA9N2L8VFuGOiFbq8OFbQJIXE= Subject key identifier: A5:E5:64:E6:95:F5:F7:4D:8A:CB:86:98:5F:9E:1A:7B:2B:4D:8B:EA Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 68 Signing time: Sat 19 Jul 2025 07:14:38 +0000 Manifest this update: Sat 19 Jul 2025 07:14:37 +0000 Manifest next update: Sat 26 Jul 2025 07:14:37 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: avvkixqBXAQ2uotJekNx5scbJGosgc9SI77RjUn3+fo=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: D8sGSIRpeb4KU8twC3M5LxWoSrBlM5fxXQEFrUY0ChI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:14:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Jul 19 07:14:37 2025 GMT Not After : Jul 26 07:14:37 2025 GMT Subject: CN=687b45dd-19b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:aa:ad:e3:d5:1b:48:1a:29:32:f1:1b:1b:00: 1e:89:4d:49:c7:a7:0d:a2:9f:ec:55:75:8a:bc:a1: 96:cc:01:bc:24:f8:6c:ef:ec:6c:53:99:4e:4b:71: 67:81:a3:d4:40:35:87:b8:97:18:5c:01:23:1d:06: 05:9f:f3:3e:98:54:96:d1:51:bf:51:ba:8d:16:4b: 9d:1a:d3:0f:bc:90:fb:ae:ac:9e:3b:af:5f:90:47: ff:1f:1e:52:94:85:02:f6:1c:d5:76:9f:d6:fe:2b: ee:64:fe:2f:dd:91:80:ba:5a:61:45:42:24:a0:eb: 18:3a:c9:85:35:92:56:ca:a8:16:0f:63:f1:8d:3c: 14:da:23:4e:58:4e:5e:61:c2:58:fc:87:c5:f3:e2: 43:c5:fc:8a:8c:75:b4:4f:bf:6b:00:ad:60:ed:61: 30:18:f1:2a:80:41:e1:50:13:ee:49:bc:0c:eb:3a: 2a:a9:d0:d7:ed:a0:50:49:f4:2f:7c:80:69:7e:2d: fe:b7:88:c5:32:04:f3:93:d4:3d:da:0b:94:20:96: 93:e1:e6:ee:56:78:64:ee:3c:12:8f:6b:00:b7:fd: dd:e2:93:b1:98:38:fc:00:55:bc:6c:9f:0a:d4:ba: df:36:d4:df:e1:16:5a:5e:c5:90:74:4b:22:db:24: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E5:64:E6:95:F5:F7:4D:8A:CB:86:98:5F:9E:1A:7B:2B:4D:8B:EA X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:69:ee:c2:e1:67:7d:01:ae:fb:6b:51:6e:b5:2d:d2:54:df: 49:7a:b7:6b:ae:25:db:3c:67:38:73:bf:d3:bc:63:e2:ba:86: ff:5a:8f:3a:68:e9:12:cf:31:60:eb:19:68:63:bd:bc:52:15: ab:d3:ea:9c:ee:ac:87:f2:d8:37:b8:3b:40:b2:fb:a1:d7:e2: 21:09:56:82:91:68:5c:6c:54:da:21:0c:70:d7:fe:e0:e1:32: 9f:03:d5:2f:75:7f:0a:1f:6c:8f:39:6e:c0:12:e6:c6:61:48: 09:c0:50:ee:37:f2:dd:44:73:32:ff:e6:c2:1f:80:a1:2f:e9: 75:54:ca:9b:a8:b3:34:6d:a7:0d:96:9b:c3:16:cd:c2:71:63: 7e:9c:63:d7:48:68:58:8f:22:26:fd:25:b0:11:52:4e:d0:8e: aa:de:8f:ec:fe:f0:c7:c4:38:63:cd:3a:d1:aa:41:0c:f3:96: 4a:ab:25:e2:9a:26:96:07:f2:f1:f8:5d:e4:60:c5:26:e6:25: a7:31:78:88:a6:15:dc:38:08:69:64:7a:78:42:ec:f0:9f:66: 5a:81:72:5d:48:6e:4e:a1:88:dc:63:23:eb:4d:a3:80:f8:94: ba:97:24:e8:de:36:b5:05:44:f6:73:90:93:9f:2a:68:3b:da: 79:f2:c1:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzIzODExMC8GA1UEBRMoMTJBMTAyRjA4RUQxNEY2MjNGQTZFMzFEQkFCNDlBMjRE MUI5QTE1MTAeFw0yNTA3MTkwNzE0MzdaFw0yNTA3MjYwNzE0MzdaMBgxFjAUBgNV BAMTDTY4N2I0NWRkLTE5YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvqq3j1RtIGiky8RsbAB6JTUnHpw2in+xVdYq8oZbMAbwk+Gzv7GxTmU5LcWeB o9RANYe4lxhcASMdBgWf8z6YVJbRUb9Ruo0WS50a0w+8kPuurJ47r1+QR/8fHlKU hQL2HNV2n9b+K+5k/i/dkYC6WmFFQiSg6xg6yYU1klbKqBYPY/GNPBTaI05YTl5h wlj8h8Xz4kPF/IqMdbRPv2sArWDtYTAY8SqAQeFQE+5JvAzrOiqp0NftoFBJ9C98 gGl+Lf63iMUyBPOT1D3aC5QglpPh5u5WeGTuPBKPawC3/d3ik7GYOPwAVbxsnwrU ut821N/hFlpexZB0SyLbJAdJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpeVk5pX1 902Ky4aYX54aeytNi+owHwYDVR0jBBgwFoAUEqEC8I7RT2I/puMdurSaJNG5oVEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDMjM4L0NENzE3RDlDQ0JG MzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9W RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXFFQzhJN1JUMklfcHVNZHVyU2FKTkc1b1ZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD MjM4L0NENzE3RDlDQ0JGMzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJ X3B1TWR1clNhSk5HNW9WRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGlp7sLhZ30BrvtrUW61LdJU30l6t2uuJds8Zzhzv9O8Y+K6hv9ajzpo 6RLPMWDrGWhjvbxSFavT6pzurIfy2De4O0Cy+6HX4iEJVoKRaFxsVNohDHDX/uDh Mp8D1S91fwofbI85bsAS5sZhSAnAUO438t1EczL/5sIfgKEv6XVUypuoszRtpw2W m8MWzcJxY36cY9dIaFiPIib9JbARUk7Qjqrej+z+8MfEOGPNOtGqQQzzlkqrJeKa JpYH8vH4XeRgxSbmJacxeIimFdw4CGlkenhC7PCfZlqBcl1Ibk6hiNxjI+tNo4D4 lLqXJOjeNrUFRPZzkJOfKmg72nnywYY= -----END CERTIFICATE-----Generated at Sun Jul 20 15:20:59 2025 by rpki-client