$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft File: eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json) Hash identifier: 5CjlpSwy2PGvV+PWKe/i4zuCtQndB3HUuQcd1PpWgZI= Subject key identifier: 62:37:DF:E7:71:B3:88:71:36:3D:15:6B:D5:04:C7:1C:FA:1B:DD:0C Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96 Certificate issuer: /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft Manifest number: 01A1 Signing time: Fri 19 Sep 2025 03:51:16 +0000 Manifest this update: Fri 19 Sep 2025 03:51:15 +0000 Manifest next update: Fri 26 Sep 2025 03:51:15 +0000 Files and hashes: 1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: PaJmf0fYF4HZAd5JDpT7FXhlgLua8AiPkRTn0WY0/UI=) 2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: TxTcbAcufMja4FsqpJQTg2We2RY0eq4FwQMk5GLL3ms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596 Validity Not Before: Sep 19 03:51:15 2025 GMT Not After : Sep 26 03:51:15 2025 GMT Subject: CN=68ccd334-2c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e5:04:78:32:9e:0a:d9:56:75:46:a6:b2:5d: 51:5c:4c:34:55:48:e4:b4:d1:1b:89:a4:65:49:52: 48:16:02:78:e7:7a:a6:5d:bf:72:7b:5b:99:97:46: 85:c5:5e:36:06:80:e3:df:e7:1b:0b:8d:38:89:b2: 8d:39:e5:00:41:64:e4:fd:38:5a:58:6e:eb:8a:2f: 25:fc:d6:8c:85:74:ba:a5:4e:72:0a:67:08:f0:9d: 52:e1:de:9c:e3:ef:35:3b:95:a1:10:97:03:f3:34: 07:a9:b9:7f:96:db:07:ec:5a:58:90:96:d2:a5:c4: eb:9c:7f:fc:6c:ac:cb:14:2b:7c:f3:2f:9b:24:33: 5a:ba:8b:9b:0a:49:79:4f:3f:ff:78:30:d8:0a:3d: 8c:5e:da:cd:31:b2:ea:95:5d:11:24:90:c8:62:45: 78:44:cd:45:66:e2:39:23:01:2e:f9:6d:96:0a:e8: 47:d2:ea:c5:ad:84:6b:6e:b7:46:0b:b4:60:ec:12: 9c:3a:3b:e1:34:6b:18:a8:f3:cd:c4:45:1b:ed:a9: 65:4d:a8:0a:41:ee:3b:b3:c4:e6:60:67:02:76:f0: d7:b9:fe:fd:60:25:49:67:3f:b1:08:04:e9:92:fb: 6c:77:94:d3:07:9e:fc:4c:39:75:e2:1d:6f:47:c9: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:37:DF:E7:71:B3:88:71:36:3D:15:6B:D5:04:C7:1C:FA:1B:DD:0C X509v3 Authority Key Identifier: keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b2:9e:e6:3e:d2:77:35:95:01:0a:37:01:59:67:d2:16:01: df:da:ab:ba:9a:68:45:1b:d4:f0:95:30:19:0d:03:d8:71:98: 2f:de:c9:23:46:16:0b:1e:ef:b6:ab:4c:5c:56:b9:64:48:6e: ab:d7:46:23:cc:a7:ee:ab:96:c9:80:18:9f:b8:cd:4f:28:7d: ba:fe:b9:55:9d:3b:1c:e6:f4:bd:c3:54:43:54:11:c4:b7:59: 22:a4:66:b8:59:89:d0:8f:4b:f6:d3:d1:24:a8:db:87:62:c9: 00:19:af:83:10:ca:25:8e:be:15:fb:10:81:72:71:f6:cc:ec: dc:14:9f:3c:d1:87:69:cd:c8:6d:20:c4:25:78:87:9c:53:e5: 43:39:0a:8a:79:af:d6:d2:71:7d:df:d6:7b:a7:a4:71:2c:92: 8c:6b:cc:32:d4:18:a3:84:f6:d9:d2:c7:15:0c:de:6a:ac:91: eb:cf:75:4d:53:bd:ad:f1:e9:5f:36:6c:91:48:6e:d5:56:d7: df:61:3a:e2:00:13:8f:59:b3:2b:68:6f:7c:07:5c:91:fa:29: a1:3c:98:23:91:f1:8d:63:50:13:61:9a:2a:d7:e0:27:d7:d0: eb:ab:eb:9c:18:9f:d2:eb:41:5e:29:e6:53:f4:d4:07:5e:40: ae:90:8d:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNBMjcxMTAvBgNVBAUTKDc5MkUwQjNFQjM2MDQ0MjdGQzg0OEY5NkM3MzRBQzRE OTlGRTc1OTYwHhcNMjUwOTE5MDM1MTE1WhcNMjUwOTI2MDM1MTE1WjAYMRYwFAYD VQQDEw02OGNjZDMzNC0yYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8eUEeDKeCtlWdUamsl1RXEw0VUjktNEbiaRlSVJIFgJ453qmXb9ye1uZl0aF xV42BoDj3+cbC404ibKNOeUAQWTk/ThaWG7rii8l/NaMhXS6pU5yCmcI8J1S4d6c 4+81O5WhEJcD8zQHqbl/ltsH7FpYkJbSpcTrnH/8bKzLFCt88y+bJDNauoubCkl5 Tz//eDDYCj2MXtrNMbLqlV0RJJDIYkV4RM1FZuI5IwEu+W2WCuhH0urFrYRrbrdG C7Rg7BKcOjvhNGsYqPPNxEUb7allTagKQe47s8TmYGcCdvDXuf79YCVJZz+xCATp kvtsd5TTB578TDl14h1vR8kn6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGI33+dx s4hxNj0Va9UExxz6G90MMB8GA1UdIwQYMBaAFHkuCz6zYEQn/ISPlsc0rE2Z/nWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0EyNy81MzVFQTY0RTIx RjcxMUVFQkI4NDg2MzRDNEY5QUUwMi9lUzRMUHJOZ1JDZjhoSS1XeHpTc1Rabi1k WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VTNExQck5nUkNmOGhJLVd4elNzVFpuLWRaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0EyNy81MzVFQTY0RTIxRjcxMUVFQkI4NDg2MzRDNEY5QUUwMi9lUzRMUHJOZ1JD ZjhoSS1XeHpTc1Rabi1kWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8sp7mPtJ3NZUBCjcBWWfSFgHf2qu6mmhFG9TwlTAZDQPYcZgv3skj RhYLHu+2q0xcVrlkSG6r10YjzKfuq5bJgBifuM1PKH26/rlVnTsc5vS9w1RDVBHE t1kipGa4WYnQj0v209EkqNuHYskAGa+DEMoljr4V+xCBcnH2zOzcFJ880Ydpzcht IMQleIecU+VDOQqKea/W0nF939Z7p6RxLJKMa8wy1BijhPbZ0scVDN5qrJHrz3VN U72t8elfNmyRSG7VVtffYTriABOPWbMraG98B1yR+imhPJgjkfGNY1ATYZoq1+An 19Drq+ucGJ/S60FeKeZT9NQHXkCukI0c -----END CERTIFICATE-----Generated at Fri Sep 19 09:13:13 2025 by rpki-client