$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json) Hash identifier: CagphIDybDqvn4zTRrtbeFSaq3tLjTJoxiIC3SwpvqA= Subject key identifier: 07:77:D2:B3:89:49:F5:68:E4:D5:B6:68:5D:4B:09:9C:37:D5:97:CA Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0E8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft Manifest number: 0E85 Signing time: Sun 20 Jul 2025 17:43:13 +0000 Manifest this update: Sun 20 Jul 2025 17:43:12 +0000 Manifest next update: Sun 27 Jul 2025 17:43:12 +0000 Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: NpCZ/YcWxIK33Lu017L+X6zTQbGH/FmuQjzlF2lyHtw=) 2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: U9KBsxBRcXn+lvll9K6vuuTm2toDlFCHVWsbee/fhwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3723 (0xe8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: Jul 20 17:43:12 2025 GMT Not After : Jul 27 17:43:12 2025 GMT Subject: CN=687d2ab1-0487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:28:d9:e2:eb:bc:12:b7:a4:2a:05:1a:36:3b: 62:3e:84:b2:3f:62:16:61:8e:95:b3:36:2e:6f:8d: 57:13:74:3c:ff:85:e3:ca:80:a5:2c:79:f3:f0:6c: ad:42:ad:c3:1b:0c:38:01:0e:37:94:f6:37:1f:a3: 2b:9e:9e:6e:f7:90:2d:f2:f5:14:e3:f4:87:c2:af: cd:59:6e:a5:d3:df:7f:30:77:67:cd:c3:7e:1f:f9: 0a:d1:a6:a9:86:0c:3b:a4:45:6c:c4:d2:1f:76:7a: 4d:17:37:43:a2:f2:b7:bd:c9:46:fd:85:66:ff:2f: bf:78:f8:6c:04:27:e6:52:be:2a:77:a2:f6:81:b9: 88:5f:64:50:5f:37:d6:45:ee:05:fa:f2:71:31:96: 4c:c0:aa:25:3d:07:ea:d1:52:12:96:33:8d:52:f1: 52:91:67:06:8e:63:86:22:a6:ca:32:bd:41:18:e9: de:a6:21:d6:1e:03:7b:10:b7:2b:bb:37:5c:3f:46: c3:54:a2:59:1b:e0:0b:62:21:67:e3:e9:29:cb:19: d2:1e:6f:f5:a8:92:42:46:e0:be:73:de:9f:2d:3c: e2:a0:2a:79:6f:c1:8a:fb:4f:40:ee:27:59:36:48: 77:2a:67:ca:7e:8c:2c:64:d7:68:99:77:83:38:04: 5b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:77:D2:B3:89:49:F5:68:E4:D5:B6:68:5D:4B:09:9C:37:D5:97:CA X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e2:a8:b7:32:ab:6f:00:37:f1:39:64:58:b2:77:f9:c1:06: a3:f8:74:36:6f:f7:40:30:db:d7:89:28:e4:f0:cf:0a:34:06: ac:f1:a2:c2:e8:58:9f:6e:9a:ac:46:eb:c7:5e:a3:de:47:4d: c6:5f:3d:f6:f3:3d:91:6a:58:00:c4:91:1f:d1:08:a8:32:86: 6d:45:55:5b:ef:fa:e5:8b:9d:5b:d1:b5:84:50:c6:5b:ca:76: e4:73:24:2b:8a:5e:1c:cd:b9:ae:80:81:72:d6:13:99:f9:ae: 9e:31:b3:9f:c8:d0:ee:34:05:4f:52:c9:7a:15:9d:e6:98:97: f5:fb:0a:a2:b3:2b:ee:cc:b0:47:b4:40:46:6d:7a:7e:6a:26: cc:b1:8e:c3:c0:ea:98:b5:af:f5:02:b8:bc:d1:e1:0e:df:78: be:9d:67:89:4b:1b:99:87:70:68:06:e7:d2:41:87:e8:bc:1f: 83:61:bb:f2:b0:64:88:5c:13:ca:d5:8d:05:84:c4:ff:7e:75: 91:49:98:f4:75:f9:ea:4a:82:72:15:85:25:34:e8:88:32:1d: 15:0f:68:f6:6f:41:45:8e:fc:d4:82:fb:80:55:ad:ae:ed:e5: f4:fd:77:79:7d:bf:28:6b:3b:74:40:80:39:15:48:5c:24:3c: 12:40:80:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjUwNzIwMTc0MzEyWhcNMjUwNzI3MTc0MzEyWjAYMRYwFAYD VQQDEw02ODdkMmFiMS0wNDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ijZ4uu8ErekKgUaNjtiPoSyP2IWYY6VszYub41XE3Q8/4XjyoClLHnz8Gyt Qq3DGww4AQ43lPY3H6Mrnp5u95At8vUU4/SHwq/NWW6l099/MHdnzcN+H/kK0aap hgw7pEVsxNIfdnpNFzdDovK3vclG/YVm/y+/ePhsBCfmUr4qd6L2gbmIX2RQXzfW Re4F+vJxMZZMwKolPQfq0VISljONUvFSkWcGjmOGIqbKMr1BGOnepiHWHgN7ELcr uzdcP0bDVKJZG+ALYiFn4+kpyxnSHm/1qJJCRuC+c96fLTzioCp5b8GK+09A7idZ Nkh3KmfKfowsZNdomXeDOARbhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAd30rOJ SfVo5NW2aF1LCZw31ZfKMB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y alBkaElGRmV5c1l1X2FQa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK4qi3MqtvADfxOWRYsnf5wQaj+HQ2b/dAMNvXiSjk8M8KNAas8aLC 6FifbpqsRuvHXqPeR03GXz328z2RalgAxJEf0QioMoZtRVVb7/rli51b0bWEUMZb ynbkcyQril4czbmugIFy1hOZ+a6eMbOfyNDuNAVPUsl6FZ3mmJf1+wqisyvuzLBH tEBGbXp+aibMsY7DwOqYta/1Ari80eEO33i+nWeJSxuZh3BoBufSQYfovB+DYbvy sGSIXBPK1Y0FhMT/fnWRSZj0dfnqSoJyFYUlNOiIMh0VD2j2b0FFjvzUgvuAVa2u 7eX0/Xd5fb8oazt0QIA5FUhcJDwSQIBZ -----END CERTIFICATE-----Generated at Mon Jul 21 12:57:56 2025 by rpki-client