$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json) Hash identifier: g5f/46kTRRHVHHBDICc0gCzfiyKpNNovuw9Mhi+A8u8= Subject key identifier: A3:8D:AD:EE:CA:84:96:33:F5:50:32:23:96:2D:56:59:1D:73:AB:7F Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft Manifest number: 0161 Signing time: Sun 20 Jul 2025 15:27:56 +0000 Manifest this update: Sun 20 Jul 2025 15:27:55 +0000 Manifest next update: Sun 27 Jul 2025 15:27:55 +0000 Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: f3Ht0LhjW/GO4DzGfbdOQg8JpnH7vflGJrMbyxSKRsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Validity Not Before: Jul 20 15:27:55 2025 GMT Not After : Jul 27 15:27:55 2025 GMT Subject: CN=687d0afc-6b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:2b:8f:36:97:36:d4:21:6b:79:4e:61:16: 92:a9:64:b9:13:48:6a:45:43:16:5f:ed:9a:a6:e6: 3f:60:1a:31:a8:d6:9d:0f:4e:7d:2d:d7:b3:d9:cf: 84:3e:2d:89:12:98:a2:28:d5:d8:71:38:76:d2:e4: cd:5d:ce:ff:b0:e9:6f:17:cb:19:d6:b0:75:c3:27: 7d:ee:11:a6:ef:e2:f9:32:38:ea:23:f3:1d:e0:3f: 41:f9:78:ea:f3:d0:30:dd:37:38:31:a1:81:4c:d9: 1c:fb:49:ce:70:1b:db:b6:3e:3a:b7:e5:30:e1:cb: aa:ac:57:7a:dc:f9:02:90:45:d0:d6:dd:80:05:5d: ee:d9:97:d5:16:3e:8b:e8:69:96:2f:fd:e5:76:87: 20:8e:6b:02:d8:38:a6:33:80:62:5d:a9:97:f9:03: 8a:9e:c0:d5:63:95:e0:80:e7:42:09:11:ff:b5:e2: 07:68:7b:cc:13:f7:6b:d7:db:51:47:3b:1b:27:5e: 97:3e:c7:ba:9b:b1:92:71:ff:5c:29:9c:f9:98:9f: 56:83:5d:f8:fe:0b:ad:79:79:89:56:9e:51:f0:e5: c1:94:14:ba:9b:ae:df:25:56:d0:74:20:53:0f:da: 8c:2d:ce:69:6e:28:6c:f0:e2:0f:bb:b5:d5:63:b1: 5c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8D:AD:EE:CA:84:96:33:F5:50:32:23:96:2D:56:59:1D:73:AB:7F X509v3 Authority Key Identifier: keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:52:14:44:46:2a:51:50:8d:5d:eb:27:56:1d:47:53:78:58: 19:09:88:70:08:a0:e3:47:ae:dd:98:4f:7d:e0:df:e1:1f:b4: ec:f0:2a:cc:61:8b:12:db:8c:f1:c5:60:67:be:59:61:1c:24: 7c:c8:4b:12:f2:13:f2:5c:e2:41:36:77:cb:f0:06:f8:6b:50: f8:1b:7e:8f:30:e8:ea:a6:73:ee:dd:0a:a6:46:78:2a:35:8e: 65:54:01:3c:77:f6:3c:78:c5:e6:11:31:fd:fc:22:c4:27:1d: 20:b9:e7:c9:bb:2b:90:96:25:fc:c9:fa:c8:9d:6a:1e:b5:fb: de:88:92:48:b3:31:a1:e0:a4:53:4a:76:67:8f:5e:7a:92:f3: b9:1c:50:cb:14:d3:fe:08:bb:27:cf:e8:ea:7b:7d:f5:13:c0: e5:ca:cc:f5:a2:ba:63:b4:20:ca:88:fc:14:49:3e:85:fb:b0: 2a:a8:0d:ed:4c:e5:03:02:a0:1d:33:dc:ec:d2:e6:2c:1e:39: 39:92:e3:27:bd:63:cd:dd:90:64:d6:88:e8:a4:cc:b8:e9:ee: da:95:22:3a:a6:9f:ea:3b:75:68:89:23:e2:26:19:4d:24:6b: 29:35:2c:3f:d2:78:af:33:a5:23:88:17:a1:3d:c1:93:cf:00: 1c:62:a6:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0 RTdCNDNCMTcwHhcNMjUwNzIwMTUyNzU1WhcNMjUwNzI3MTUyNzU1WjAYMRYwFAYD VQQDEw02ODdkMGFmYy02YjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWErjzaXNtQha3lOYRaSqWS5E0hqRUMWX+2apuY/YBoxqNadD059Ldez2c+E Pi2JEpiiKNXYcTh20uTNXc7/sOlvF8sZ1rB1wyd97hGm7+L5MjjqI/Md4D9B+Xjq 89Aw3Tc4MaGBTNkc+0nOcBvbtj46t+Uw4cuqrFd63PkCkEXQ1t2ABV3u2ZfVFj6L 6GmWL/3ldocgjmsC2DimM4BiXamX+QOKnsDVY5XggOdCCRH/teIHaHvME/dr19tR RzsbJ16XPse6m7GScf9cKZz5mJ9Wg134/guteXmJVp5R8OXBlBS6m67fJVbQdCBT D9qMLc5pbihs8OIPu7XVY7FcswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKONre7K hJYz9VAyI5YtVlkdc6t/MB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS9BOTBGOERBNDRDNzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16 MWtjVG9mYkVocUJPZTBPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKUhRERipRUI1d6ydWHUdTeFgZCYhwCKDjR67dmE994N/hH7Ts8CrM YYsS24zxxWBnvllhHCR8yEsS8hPyXOJBNnfL8Ab4a1D4G36PMOjqpnPu3QqmRngq NY5lVAE8d/Y8eMXmETH9/CLEJx0guefJuyuQliX8yfrInWoetfveiJJIszGh4KRT SnZnj156kvO5HFDLFNP+CLsnz+jqe331E8Dlysz1orpjtCDKiPwUST6F+7AqqA3t TOUDAqAdM9zs0uYsHjk5kuMnvWPN3ZBk1ojopMy46e7alSI6pp/qO3VoiSPiJhlN JGspNSw/0nivM6UjiBehPcGTzwAcYqZg -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:01 2025 by rpki-client