$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft File: EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft (raw, json) Hash identifier: THu+n6xNrru9/Cs+47pisu+8BLlscAG8QzprGeDajOs= Subject key identifier: 19:91:92:7C:67:03:54:E5:EC:66:70:81:8F:E3:14:0D:EA:A7:FE:7C Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0B7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft Manifest number: 0B6E Signing time: Fri 22 Aug 2025 19:11:50 +0000 Manifest this update: Fri 22 Aug 2025 19:11:50 +0000 Manifest next update: Fri 29 Aug 2025 19:11:50 +0000 Files and hashes: 1: EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl (hash: ouYexFbhlGY9Uyt4NrWBGAGYPCE1u2iJM2v+1FZQQOw=) 2: 2A08F1A4369211EAA64E320BC4F9AE02.roa (hash: I91qaFQgep6EuuEEdqbhO4Prklw7ndmFH38wo16kLVk=) 3: 5D822954368F11EAB3D4CE7FC4F9AE02.roa (hash: /cS7IVALMe9B/AtpjJXVY/jO3FykqwmgPTZQLz+GjqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2940 (0xb7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Aug 22 19:11:50 2025 GMT Not After : Aug 29 19:11:50 2025 GMT Subject: CN=68a8c0f6-d6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:1a:bf:73:a0:99:1f:de:73:43:6d:b6:4f: 62:3a:fc:6d:2e:3d:d6:cc:f9:70:7b:47:3c:a0:ea: 6d:7b:fc:63:7f:14:cf:b1:c7:60:f5:64:12:7d:9e: 11:7c:3b:ff:13:4a:26:3a:3f:9b:78:f4:d0:2e:0b: bc:65:18:62:19:8d:0b:25:25:46:7e:fe:cf:5d:5f: 14:59:3a:89:d7:cb:a5:db:91:5a:8a:ab:8d:2b:ce: 8e:ea:88:27:53:42:d3:2f:7b:d1:9f:bb:28:5c:2b: ba:5b:9b:c3:b2:e4:7a:61:f2:f8:62:30:1c:01:ca: 40:70:86:df:7c:ac:51:3d:23:bc:f4:02:8a:68:2c: 21:54:30:b9:0b:fc:b0:4c:a2:e6:11:75:01:87:3c: 83:46:93:3e:30:a1:e7:ea:0b:c3:99:6f:29:a1:b3: e4:f8:8e:88:dc:71:50:4a:b6:96:c3:10:83:1f:e7: 90:7d:e7:09:81:70:93:f3:b5:f3:f0:9f:36:db:37: 0c:29:8b:b9:7d:f3:2f:3e:cf:de:1d:7a:e6:28:9d: 0d:0c:e0:c4:79:0d:90:99:44:a3:fb:07:b1:89:31: 72:b7:9b:ed:d2:64:f4:6f:4f:b3:c6:8a:37:fd:73: 0e:22:d8:38:f3:dd:6c:7b:f8:1d:68:25:8e:54:a3: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:91:92:7C:67:03:54:E5:EC:66:70:81:8F:E3:14:0D:EA:A7:FE:7C X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:a9:59:bc:c4:41:f9:42:8d:fd:80:82:03:f6:96:c2:b1:ec: ef:c2:2d:ec:62:65:1b:b5:32:a3:41:14:9f:7b:0d:1f:9a:71: 80:a2:a6:12:cc:30:f4:33:b3:eb:80:81:06:0b:d5:de:06:5f: 38:52:87:a8:d0:b2:62:b4:a5:86:bb:52:93:67:6e:d3:f1:ca: 64:51:fd:55:d2:6f:32:b3:7f:63:21:cf:56:fe:22:ce:c6:8e: f7:e4:3f:f9:fb:8e:75:d3:bc:d8:28:2f:5b:7b:e9:1a:d6:47: ec:21:cd:00:67:36:ad:fc:a6:e1:d5:e3:ea:0f:35:53:46:2d: ca:ff:e7:7a:05:cc:99:bf:10:44:f4:f3:21:cf:d0:09:4c:02: 7f:79:f0:91:1c:78:6b:43:00:e7:c1:7e:2f:3a:5a:cd:ca:64: 5e:ef:df:5f:28:5b:44:29:ed:ce:7b:9f:82:86:85:27:4c:b5: 24:bd:5f:6d:5c:2e:9a:f8:18:58:da:f0:b6:87:79:60:29:ef: a3:fb:99:21:94:09:78:8e:48:43:3b:0e:f9:69:3c:70:8c:3d: 6a:9d:bb:71:f2:50:9b:96:5b:ac:d5:ee:0e:fc:d7:37:8e:2f: fa:21:a6:d2:38:1f:5f:06:61:e1:0e:bc:7a:01:4b:64:be:83: b1:af:86:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjUwODIyMTkxMTUwWhcNMjUwODI5MTkxMTUwWjAYMRYwFAYD VQQDEw02OGE4YzBmNi1kNmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypUav3OgmR/ec0Nttk9iOvxtLj3WzPlwe0c8oOpte/xjfxTPscdg9WQSfZ4R fDv/E0omOj+bePTQLgu8ZRhiGY0LJSVGfv7PXV8UWTqJ18ul25FaiquNK86O6ogn U0LTL3vRn7soXCu6W5vDsuR6YfL4YjAcAcpAcIbffKxRPSO89AKKaCwhVDC5C/yw TKLmEXUBhzyDRpM+MKHn6gvDmW8pobPk+I6I3HFQSraWwxCDH+eQfecJgXCT87Xz 8J822zcMKYu5ffMvPs/eHXrmKJ0NDODEeQ2QmUSj+wexiTFyt5vt0mT0b0+zxoo3 /XMOItg4891se/gdaCWOVKPqfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmRknxn A1Tl7GZwgY/jFA3qp/58MB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTBGQS9BQUEwRUJFMDM2OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVY QnNadUY3OGIwLW1XSjZHQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3qVm8xEH5Qo39gIID9pbCsezvwi3sYmUbtTKjQRSfew0fmnGAoqYS zDD0M7PrgIEGC9XeBl84Uoeo0LJitKWGu1KTZ27T8cpkUf1V0m8ys39jIc9W/iLO xo735D/5+45107zYKC9be+ka1kfsIc0AZzat/Kbh1ePqDzVTRi3K/+d6BcyZvxBE 9PMhz9AJTAJ/efCRHHhrQwDnwX4vOlrNymRe799fKFtEKe3Oe5+ChoUnTLUkvV9t XC6a+BhY2vC2h3lgKe+j+5khlAl4jkhDOw75aTxwjD1qnbtx8lCbllus1e4O/Nc3 ji/6IabSOB9fBmHhDrx6AUtkvoOxr4aK -----END CERTIFICATE-----Generated at Sat Aug 23 03:27:34 2025 by rpki-client