$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft File: EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json) Hash identifier: Jflqb7hJV7l34DKjNhp+R2eoG87UYuJ14JNQCrNpGCU= Subject key identifier: 3C:AA:5F:3C:AD:6F:F7:9A:AB:76:C7:39:63:BC:66:79:53:74:03:D6 Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 Certificate issuer: /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Certificate serial: 10AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft Manifest number: 10A0 Signing time: Thu 18 Sep 2025 17:31:27 +0000 Manifest this update: Thu 18 Sep 2025 17:31:27 +0000 Manifest next update: Thu 25 Sep 2025 17:31:27 +0000 Files and hashes: 1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: psOak4obWYHaTd/dcKwqJmT7qVdrmMsfHbUFPv96eNs=) 2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: S/gVJ+TtEF1mtr8NQHi7hBzO8ZEUNieBwZ0+m5tF7pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4267 (0x10ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Validity Not Before: Sep 18 17:31:27 2025 GMT Not After : Sep 25 17:31:27 2025 GMT Subject: CN=68cc41ef-776e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:91:2c:4c:91:f6:5f:23:6b:fe:df:4e:ea: 21:a6:95:d1:e2:60:66:ad:ec:fb:ab:5d:58:fb:a6: c5:56:bf:e9:48:08:92:db:60:6d:5d:b2:5f:7d:e8: b2:2b:92:ab:9e:04:5a:c0:b9:9e:b0:95:29:d4:d7: ad:2b:b4:a8:90:3d:ef:86:2e:10:3e:83:ea:e3:a5: cd:80:4f:67:ba:a3:4b:1b:40:22:39:11:26:0b:ea: 7d:61:a0:9c:42:20:4c:24:b3:ea:d0:1b:6f:db:a0: 06:d6:22:20:ce:a3:52:4d:93:38:ca:e8:82:8c:72: 65:cf:72:ed:a0:33:13:80:51:0c:d4:fe:5f:7c:ac: 0f:7f:a3:d5:bd:f3:5e:11:5d:7f:6d:a3:dd:7f:92: df:37:28:5e:d0:f5:8f:79:c0:d8:87:dc:10:ad:a9: d2:c1:72:82:b1:bd:fb:3b:21:75:e7:f5:92:d1:0d: cb:e0:14:92:03:90:51:d2:f6:0f:5c:2b:03:95:c2: 5a:ef:46:cf:9c:e7:d5:fa:a3:e3:50:27:8c:bb:7f: 1c:69:94:d2:25:33:3f:92:eb:98:76:b4:94:26:66: 12:a4:f1:14:5a:a6:46:bc:ac:3d:80:77:fd:e1:a6: 77:46:0a:41:59:96:22:b6:aa:83:ab:9b:01:fe:be: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AA:5F:3C:AD:6F:F7:9A:AB:76:C7:39:63:BC:66:79:53:74:03:D6 X509v3 Authority Key Identifier: keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:40:16:c6:0b:59:06:95:d9:59:81:86:74:3a:cc:6d:27:ef: 04:d0:46:f5:10:21:73:f4:b3:a1:86:ee:89:cf:53:c8:7c:6e: 48:ca:0f:08:71:10:e8:f3:74:ab:7d:ce:99:bc:bc:11:35:f5: a6:64:13:6a:f0:c7:5c:be:75:68:38:47:ae:89:c6:a6:9e:cd: b6:07:25:ac:d3:bc:32:0e:0b:bf:c5:f6:75:f1:43:68:d8:1b: 3f:5f:1c:39:83:45:58:b3:f7:55:40:c7:24:8b:44:04:22:75: db:32:7d:60:1d:3c:b6:09:36:01:46:d0:22:ae:51:16:4c:65: 4c:9d:71:a3:01:ca:ad:11:dc:87:a2:c3:c5:a0:f7:6e:2b:1c: ac:d7:a0:5d:29:fd:37:67:9f:42:98:b2:66:3d:19:df:ce:fc: 46:b5:44:71:27:aa:be:6f:a2:15:10:e4:b8:70:e5:7a:b3:50: bc:f1:76:6c:3b:b6:b6:8e:38:9d:29:50:46:8b:5e:17:61:e2: ae:14:7b:43:09:f3:4e:db:f3:be:96:d6:c5:26:f3:95:51:40: ea:a8:53:ff:c2:76:74:d6:18:32:26:ef:9f:4d:e5:43:61:26: 07:54:98:b2:61:47:32:05:56:e8:c4:42:9f:2d:69:b1:21:b6: 89:6e:57:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKDEwRjYxQzZCQkUzNjc0MDQ1MTJGQkM4M0NEREE4NUE5 OUM3RjNDNzUwHhcNMjUwOTE4MTczMTI3WhcNMjUwOTI1MTczMTI3WjAYMRYwFAYD VQQDEw02OGNjNDFlZi03NzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm2RLEyR9l8ja/7fTuohppXR4mBmrez7q11Y+6bFVr/pSAiS22BtXbJffeiy K5KrngRawLmesJUp1NetK7SokD3vhi4QPoPq46XNgE9nuqNLG0AiOREmC+p9YaCc QiBMJLPq0Btv26AG1iIgzqNSTZM4yuiCjHJlz3LtoDMTgFEM1P5ffKwPf6PVvfNe EV1/baPdf5LfNyhe0PWPecDYh9wQranSwXKCsb37OyF15/WS0Q3L4BSSA5BR0vYP XCsDlcJa70bPnOfV+qPjUCeMu38caZTSJTM/kuuYdrSUJmYSpPEUWqZGvKw9gHf9 4aZ3RgpBWZYitqqDq5sB/r4dSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyqXzyt b/eaq3bHOWO8ZnlTdAPWMB8GA1UdIwQYMBaAFBD2HGu+NnQEUS+8g83ahamcfzx1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FQzgyMzBFMjNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRBUlJMN3lEemRxRnFaeF9Q SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQWWNhNzQyZEFSUkw3eUR6ZHFGcVp4X1BIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk3NC9FQzgyMzBFMjNBNDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRB UlJMN3lEemRxRnFaeF9QSFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbQBbGC1kGldlZgYZ0OsxtJ+8E0Eb1ECFz9LOhhu6Jz1PIfG5Iyg8I cRDo83Srfc6ZvLwRNfWmZBNq8MdcvnVoOEeuicamns22ByWs07wyDgu/xfZ18UNo 2Bs/Xxw5g0VYs/dVQMcki0QEInXbMn1gHTy2CTYBRtAirlEWTGVMnXGjAcqtEdyH osPFoPduKxys16BdKf03Z59CmLJmPRnfzvxGtURxJ6q+b6IVEOS4cOV6s1C88XZs O7a2jjidKVBGi14XYeKuFHtDCfNO2/O+ltbFJvOVUUDqqFP/wnZ01hgyJu+fTeVD YSYHVJiyYUcyBVboxEKfLWmxIbaJblfS -----END CERTIFICATE-----Generated at Sat Sep 20 03:02:36 2025 by rpki-client