$ rpki-client -vvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft File: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft (raw, json) Hash identifier: 5u4Kp9W10WrXhhHaIKQfTxYxJi+DFzeQLpHW/HVqSI4= Subject key identifier: 04:72:4A:E3:87:2E:07:52:74:E2:7F:D5:89:87:C4:4F:5D:87:78:39 Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22 Certificate serial: 062D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft Manifest number: 0628 Signing time: Thu 04 Sep 2025 23:01:01 +0000 Manifest this update: Thu 04 Sep 2025 23:01:01 +0000 Manifest next update: Thu 11 Sep 2025 23:01:01 +0000 Files and hashes: 1: eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl (hash: J2h4e+OGd2yeicY/dvZHs+dY48gtDvypPS/Hn9fvQ1U=) 2: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (hash: 6T0bGam9Fz3MuC3/hi4HGnadBCMddUZ6zt+H3AVBHfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1581 (0x62d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22 Validity Not Before: Sep 4 23:01:01 2025 GMT Not After : Sep 11 23:01:01 2025 GMT Subject: CN=68ba1a2d-ac31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4d:b4:d6:fb:8a:b1:7e:94:d6:04:f8:63:5e: de:fd:3c:1f:68:a5:8d:2d:f4:a8:d7:54:0d:2a:af: 8e:36:4b:ec:26:44:33:bf:f3:ac:b9:b6:9e:04:a0: 6a:e9:40:e9:79:74:1d:fa:a3:89:a5:b7:ba:a9:ec: 60:32:f8:b6:fa:2d:da:a8:5c:d8:d5:92:99:f0:d7: e6:a2:df:a0:e7:7b:91:e1:95:68:5d:1f:15:f2:fb: 84:12:8d:01:b6:8e:17:b0:a3:87:d6:5f:23:a5:e3: ff:6b:46:19:6e:c5:78:82:32:58:de:1a:32:cf:b4: 3e:c6:9d:6a:a2:09:85:8f:53:d1:a0:3c:0e:15:05: c2:73:7a:18:16:51:28:50:36:34:8a:94:ee:35:70: 62:c8:a9:9a:e6:bb:96:bc:ad:49:49:f1:84:22:7e: d2:b1:40:cf:44:fe:f2:30:0a:d6:5a:58:34:0b:00: fd:9d:d1:43:5d:62:28:8b:92:56:6b:3a:a9:c4:f0: d6:f8:28:db:1d:17:2a:2d:f8:35:51:1c:6b:50:65: 07:89:f2:72:3a:3c:33:53:50:d2:72:cc:2d:be:ff: a1:ce:fc:47:43:50:0c:d9:32:8a:aa:f2:91:7a:74: ce:d9:fd:f7:78:c3:68:7d:04:9a:ab:9b:83:4e:c9: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:72:4A:E3:87:2E:07:52:74:E2:7F:D5:89:87:C4:4F:5D:87:78:39 X509v3 Authority Key Identifier: keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:bb:db:ea:e1:7b:0b:d7:b0:43:ad:bd:94:46:8f:fb:89:11: 22:a4:04:8a:b5:32:06:01:1a:ee:93:80:cc:44:0c:43:46:39: 22:c6:a7:f9:d0:a6:bf:20:b4:ec:b7:3f:5a:99:06:ed:04:79: 13:d5:17:b4:18:0b:04:da:55:47:16:ff:49:2d:99:ff:f7:48: 33:dc:b3:27:0f:b0:de:ae:0a:8c:7b:35:31:68:e6:49:05:68: ec:86:ec:13:7b:8d:20:b9:52:9e:84:1a:4f:60:be:d6:d4:10: ad:62:af:eb:c9:a5:55:81:d3:06:42:2f:3e:8d:f8:e8:de:2b: 74:eb:a1:3e:5d:e0:bd:b0:20:07:49:ed:88:6a:2b:a4:67:8b: 25:43:3b:4c:b0:25:91:d4:12:73:c1:13:bd:93:bf:95:46:b5: b5:b4:03:4d:ca:82:fa:12:77:b3:4a:d1:e3:73:ed:e2:76:0d: e7:4a:87:3a:d0:cd:6c:82:cc:cf:10:0d:cb:bf:a9:9a:d0:f0: 63:7e:40:ff:85:fa:eb:17:8f:3a:36:e9:63:7e:77:28:fc:5c: d1:88:6c:87:b2:ab:61:c7:1e:14:e9:9b:da:cd:4b:09:4d:2b: 69:7e:fb:bb:b6:3d:43:63:ae:19:03:db:a6:8c:29:0f:5f:fe: 13:49:b4:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwMDkxMTAvBgNVBAUTKDc4N0QyOTU0MEU1ODgyMzdFODVEMTYwNzk2MDAwODI5 MTE4OUZBMjIwHhcNMjUwOTA0MjMwMTAxWhcNMjUwOTExMjMwMTAxWjAYMRYwFAYD VQQDEw02OGJhMWEyZC1hYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70201vuKsX6U1gT4Y17e/TwfaKWNLfSo11QNKq+ONkvsJkQzv/OsubaeBKBq 6UDpeXQd+qOJpbe6qexgMvi2+i3aqFzY1ZKZ8Nfmot+g53uR4ZVoXR8V8vuEEo0B to4XsKOH1l8jpeP/a0YZbsV4gjJY3hoyz7Q+xp1qogmFj1PRoDwOFQXCc3oYFlEo UDY0ipTuNXBiyKma5ruWvK1JSfGEIn7SsUDPRP7yMArWWlg0CwD9ndFDXWIoi5JW azqpxPDW+CjbHRcqLfg1URxrUGUHifJyOjwzU1DScswtvv+hzvxHQ1AM2TKKqvKR enTO2f33eMNofQSaq5uDTsksQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARySuOH LgdSdOJ/1YmHxE9dh3g5MB8GA1UdIwQYMBaAFHh9KVQOWII36F0WB5YACCkRifoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDAwOS9DQzgxMDEyMEFD NkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdqZm9YUllIbGdBSUtSR0ot aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIMHBWQTVZZ2pmb1hSWUhsZ0FJS1JHSi1pSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDAwOS9DQzgxMDEyMEFDNkExMUVCQTU0QUY4N0FDNEY5QUUwMi9lSDBwVkE1WWdq Zm9YUllIbGdBSUtSR0otaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgu9vq4XsL17BDrb2URo/7iREipASKtTIGARruk4DMRAxDRjkixqf5 0Ka/ILTstz9amQbtBHkT1Re0GAsE2lVHFv9JLZn/90gz3LMnD7DergqMezUxaOZJ BWjshuwTe40guVKehBpPYL7W1BCtYq/ryaVVgdMGQi8+jfjo3it066E+XeC9sCAH Se2IaiukZ4slQztMsCWR1BJzwRO9k7+VRrW1tANNyoL6EnezStHjc+3idg3nSoc6 0M1sgszPEA3Lv6ma0PBjfkD/hfrrF486Nuljfnco/FzRiGyHsqthxx4U6ZvazUsJ TStpfvu7tj1DY64ZA9umjCkPX/4TSbTX -----END CERTIFICATE-----Generated at Sat Sep 6 06:31:29 2025 by rpki-client