$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft File: ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json) Hash identifier: CR16muSxsW8RrNRXJvGzTcYZU2MYd/YOLelYs6vpIdU= Subject key identifier: AF:18:E7:B1:9E:73:39:0A:8D:EF:63:E3:63:53:57:E5:AD:23:32:CD Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 Certificate issuer: /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft Manifest number: 01B1 Signing time: Tue 09 Sep 2025 03:16:07 +0000 Manifest this update: Tue 09 Sep 2025 03:16:07 +0000 Manifest next update: Tue 16 Sep 2025 03:16:07 +0000 Files and hashes: 1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: HAhxMtXyTVOdSpeFRfa2k6FVoUhjtA2lHUXO5djPeo8=) 2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: cgIQr0GieCik6XIQ9DuWPAAcXd8eAWq6OJRsIDCYebA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0 Validity Not Before: Sep 9 03:16:07 2025 GMT Not After : Sep 16 03:16:07 2025 GMT Subject: CN=68bf9bf7-e145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:18:33:be:3b:e9:2d:be:de:a6:7e:2c:7a: 53:3b:2f:05:d4:c4:0c:3f:92:2c:97:f4:b0:3e:09: 60:2c:71:d9:5c:e4:23:fb:3e:5d:34:4b:82:65:6f: 1d:69:0c:97:a5:d4:bf:2e:7e:73:aa:d8:a0:a0:cf: 93:bb:64:ba:bb:49:a1:42:22:cc:16:26:9e:d2:17: 36:23:93:f9:1c:a4:a4:40:91:d1:29:a4:b6:b1:8a: 46:57:65:e8:f1:62:3a:44:2d:f3:6c:03:5b:76:5a: 30:c8:83:74:8c:d6:7c:04:49:60:be:3f:73:91:f0: d5:a9:11:f9:34:a4:50:7e:9f:b2:99:f2:4d:76:a5: 09:15:bf:b6:4d:eb:1f:52:44:04:13:1e:63:bc:5d: ec:06:61:f7:d4:bd:55:aa:00:da:64:3f:ad:1c:f1: be:ec:8a:de:b6:0d:39:5e:a4:22:9c:96:89:5d:64: 81:40:cb:b2:08:9c:6c:5d:de:c6:64:f1:13:eb:1c: b7:f2:f0:15:c5:0b:32:4e:0e:29:44:0e:4a:ba:60: a8:10:23:df:c4:c0:c2:98:1a:20:a2:55:8a:de:06: eb:82:4a:5e:f3:3e:39:13:5c:35:a7:8a:8d:80:fc: 57:2e:ce:2f:a2:b6:3d:6c:a8:6f:a2:e1:dd:03:de: a7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:18:E7:B1:9E:73:39:0A:8D:EF:63:E3:63:53:57:E5:AD:23:32:CD X509v3 Authority Key Identifier: keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:6a:c7:74:21:65:fa:67:0c:41:96:bf:d2:73:07:ae:89:b5: bd:0f:37:5e:09:60:0b:eb:ce:75:25:c5:5d:6a:db:74:fc:0f: 2c:74:68:90:41:02:55:c8:02:f5:2e:9b:6a:82:da:53:f3:0a: 4b:7e:ee:50:ef:6c:ab:c8:81:f2:aa:b2:26:d6:15:5c:de:83: 1b:8e:7a:cb:b5:f9:59:f6:2d:29:99:26:66:55:dc:6c:90:a9: 78:d4:ad:88:f2:cd:5f:17:2b:ca:09:de:33:d0:af:d3:96:7b: a5:ee:2d:8f:af:a1:11:01:54:dc:5a:a3:4d:8a:77:76:8c:21: 4d:0d:8e:52:20:1f:2d:43:9c:ae:7d:34:86:d0:1b:72:3c:66: 89:be:50:2b:97:fd:61:54:38:2f:62:b3:19:2d:18:56:cb:1a: 9b:2b:e4:dc:bc:bc:98:0f:ab:f7:13:ba:86:7b:29:3a:69:ab: 42:aa:06:f2:c1:75:cd:da:8e:12:26:47:fa:17:34:2d:02:fc: 9c:2a:02:e5:6f:67:43:e9:fb:79:45:fc:58:45:52:c2:46:54: 39:c9:6f:b1:1a:78:9d:7f:8d:0b:2f:fa:d0:58:4e:64:42:93: 12:eb:ee:a0:f0:68:67:59:78:c8:c6:04:8b:98:df:69:73:3a: 8f:d5:80:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0 MzI4NzIzQTAwHhcNMjUwOTA5MDMxNjA3WhcNMjUwOTE2MDMxNjA3WjAYMRYwFAYD VQQDEw02OGJmOWJmNy1lMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgIYM7476S2+3qZ+LHpTOy8F1MQMP5Isl/SwPglgLHHZXOQj+z5dNEuCZW8d aQyXpdS/Ln5zqtigoM+Tu2S6u0mhQiLMFiae0hc2I5P5HKSkQJHRKaS2sYpGV2Xo 8WI6RC3zbANbdlowyIN0jNZ8BElgvj9zkfDVqRH5NKRQfp+ymfJNdqUJFb+2Tesf UkQEEx5jvF3sBmH31L1VqgDaZD+tHPG+7Iretg05XqQinJaJXWSBQMuyCJxsXd7G ZPET6xy38vAVxQsyTg4pRA5KumCoECPfxMDCmBogolWK3gbrgkpe8z45E1w1p4qN gPxXLs4vorY9bKhvouHdA96nAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8Y57Ge czkKje9j42NTV+WtIzLNMB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0 OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN QllSV2pBWkt1QU5ES0hJNkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHasd0IWX6ZwxBlr/ScweuibW9DzdeCWAL6851JcVdatt0/A8sdGiQ QQJVyAL1LptqgtpT8wpLfu5Q72yryIHyqrIm1hVc3oMbjnrLtflZ9i0pmSZmVdxs kKl41K2I8s1fFyvKCd4z0K/Tlnul7i2Pr6ERAVTcWqNNind2jCFNDY5SIB8tQ5yu fTSG0BtyPGaJvlArl/1hVDgvYrMZLRhWyxqbK+TcvLyYD6v3E7qGeyk6aatCqgby wXXN2o4SJkf6FzQtAvycKgLlb2dD6ft5RfxYRVLCRlQ5yW+xGnidf40LL/rQWE5k QpMS6+6g8GhnWXjIxgSLmN9pczqP1YB7 -----END CERTIFICATE-----Generated at Wed Sep 10 04:17:35 2025 by rpki-client