$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft File: Eb6TUALwKMF878tfClhoOZJbU0o.mft (raw, json) Hash identifier: 8m9Yau3OLUE5Qo6IlpoPZRVmauZWSBeygV6+if9EkcQ= Subject key identifier: 36:29:76:B5:67:86:81:D0:1A:BA:A4:C8:32:13:59:3B:B5:4F:F0:D0 Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A Certificate serial: 04CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft Manifest number: 04B0 Signing time: Tue 09 Sep 2025 00:02:55 +0000 Manifest this update: Tue 09 Sep 2025 00:02:55 +0000 Manifest next update: Tue 16 Sep 2025 00:02:55 +0000 Files and hashes: 1: Eb6TUALwKMF878tfClhoOZJbU0o.crl (hash: 2qOPHOp7+Yx8yFs1gZ+SNhU/jYUCbVncwO8saQtwBkA=) 2: D4811B86EDB011EF8DFB1285C4F9AE02.roa (hash: SBQxEfvRtigT5bEDI6seg5kkik1Rm2jHZgM5BeYrFDs=) 3: D510745CEDB011EF8DFB1285C4F9AE02.roa (hash: HNUWA+ux84qVz38Z2qvVinYPBG/IUuFzmqWlaDMGYvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113066, serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A Validity Not Before: Sep 9 00:02:55 2025 GMT Not After : Sep 16 00:02:55 2025 GMT Subject: CN=68bf6eaf-db3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:b4:d1:22:7a:f8:79:ff:bf:38:bf:0e:7b: ca:d5:e4:c8:b1:e2:b7:e3:ff:8c:69:d1:5f:6c:2c: 06:39:f6:a2:a6:84:cf:bf:a0:b0:60:2c:cd:f1:49: 64:c4:4d:21:9a:5e:33:d1:0d:d4:2b:a7:fc:19:86: 1f:7c:61:21:7d:44:96:3e:ca:f7:c4:6f:a5:77:9a: 0f:d5:84:5f:80:d4:16:2e:da:1f:7e:98:12:30:9e: 24:aa:f0:4a:a5:1b:fc:b1:af:77:e5:f1:b5:26:93: 16:21:8a:b0:08:52:4c:1d:6c:66:f1:11:49:6b:d8: 76:ff:56:60:6e:a7:b4:0e:32:b0:88:b9:63:0e:62: 5e:26:6e:68:4f:21:06:3f:5c:29:ba:ae:c9:74:d5: 10:03:30:0c:16:e6:cd:81:88:54:aa:7b:93:d5:59: a0:31:f2:98:d6:2a:5f:31:0f:2c:71:49:8d:63:b6: 70:4e:80:32:d2:97:34:b9:e4:94:a2:bb:2f:be:8e: bf:94:b1:11:81:a7:84:9b:a6:19:cb:9a:f1:74:9c: 29:88:65:c3:57:fa:c7:9a:5f:4f:fa:6c:83:f0:7c: f7:41:4e:3f:4a:c0:6e:20:c0:17:4b:5a:83:48:71: 26:d6:e8:a8:c7:d9:c7:f7:f2:df:ab:92:a2:4c:96: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:29:76:B5:67:86:81:D0:1A:BA:A4:C8:32:13:59:3B:B5:4F:F0:D0 X509v3 Authority Key Identifier: keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f0:7f:cb:f8:f2:f0:f0:aa:f3:63:0a:09:f1:93:0e:68:30: 16:f0:5d:43:df:36:c8:02:88:7e:0a:6d:8d:5a:b7:9d:c9:7a: 0a:3f:ef:7c:f9:b6:50:d9:a4:ea:5f:6b:16:85:ff:5c:e8:29: b6:e7:a8:bb:b2:0e:47:3d:3a:8a:bf:a2:ec:58:e2:f8:15:40: a6:5c:5e:76:12:22:68:4f:ef:89:43:a6:3c:2c:29:d6:8a:3d: e7:ac:fe:7e:de:3f:67:e6:c7:84:17:92:83:94:dc:0a:09:ca: 54:a6:ef:bc:40:db:84:5f:56:c8:f3:d6:05:03:9d:61:58:df: 7f:cb:e8:5a:f9:10:ff:fb:7a:fa:05:f7:34:f6:7e:4b:a1:c5: 91:ed:09:11:9a:9f:69:be:ef:b9:b0:15:38:f8:07:31:f7:7c: 0c:0b:36:19:0b:93:10:8a:20:95:e7:5b:fb:ec:10:bf:50:e2: e2:a4:03:a2:bb:fc:76:87:65:9d:c1:ba:ed:c2:77:58:41:74: 8e:59:4b:f6:62:a1:8a:cd:00:18:33:71:90:e9:8e:c2:31:9f: a3:49:30:93:e8:0c:b7:4f:a9:92:76:e6:c5:b4:ac:5d:26:8f: 51:48:f3:73:37:b7:7f:f6:41:ea:f6:bb:19:0c:59:df:ce:b1: 1b:be:82:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwNjYxMTAvBgNVBAUTKDExQkU5MzUwMDJGMDI4QzE3Q0VGQ0I1RjBBNTg2ODM5 OTI1QjUzNEEwHhcNMjUwOTA5MDAwMjU1WhcNMjUwOTE2MDAwMjU1WjAYMRYwFAYD VQQDEw02OGJmNmVhZi1kYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxge00SJ6+Hn/vzi/DnvK1eTIseK34/+MadFfbCwGOfaipoTPv6CwYCzN8Ulk xE0hml4z0Q3UK6f8GYYffGEhfUSWPsr3xG+ld5oP1YRfgNQWLtoffpgSMJ4kqvBK pRv8sa935fG1JpMWIYqwCFJMHWxm8RFJa9h2/1Zgbqe0DjKwiLljDmJeJm5oTyEG P1wpuq7JdNUQAzAMFubNgYhUqnuT1VmgMfKY1ipfMQ8scUmNY7ZwToAy0pc0ueSU orsvvo6/lLERgaeEm6YZy5rxdJwpiGXDV/rHml9P+myD8Hz3QU4/SsBuIMAXS1qD SHEm1uiox9nH9/Lfq5KiTJZE2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYpdrVn hoHQGrqkyDITWTu1T/DQMB8GA1UdIwQYMBaAFBG+k1AC8CjBfO/LXwpYaDmSW1NK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA2Ni82NzgyRTJEQTRF M0YxMUVDQTJCNTJCMzFDNEY5QUUwMi9FYjZUVUFMd0tNRjg3OHRmQ2xob09aSmJV MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ViNlRVQUx3S01GODc4dGZDbGhvT1pKYlUwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzA2Ni82NzgyRTJEQTRFM0YxMUVDQTJCNTJCMzFDNEY5QUUwMi9FYjZUVUFMd0tN Rjg3OHRmQ2xob09aSmJVMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ8H/L+PLw8KrzYwoJ8ZMOaDAW8F1D3zbIAoh+Cm2NWredyXoKP+98 +bZQ2aTqX2sWhf9c6Cm256i7sg5HPTqKv6LsWOL4FUCmXF52EiJoT++JQ6Y8LCnW ij3nrP5+3j9n5seEF5KDlNwKCcpUpu+8QNuEX1bI89YFA51hWN9/y+ha+RD/+3r6 Bfc09n5LocWR7QkRmp9pvu+5sBU4+Acx93wMCzYZC5MQiiCV51v77BC/UOLipAOi u/x2h2WdwbrtwndYQXSOWUv2YqGKzQAYM3GQ6Y7CMZ+jSTCT6Ay3T6mSdubFtKxd Jo9RSPNzN7d/9kHq9rsZDFnfzrEbvoLH -----END CERTIFICATE-----Generated at Tue Sep 9 12:21:17 2025 by rpki-client