$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft File: EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json) Hash identifier: j+7so5bvPAKl/wSdtd+cit5xKYHPepiXP0b6PjFcZsg= Subject key identifier: F2:95:8E:3B:42:51:E3:D9:25:DC:F7:74:3F:89:67:0F:9E:34:64:F5 Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 Certificate issuer: /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft Manifest number: 017B Signing time: Sat 06 Sep 2025 15:28:20 +0000 Manifest this update: Sat 06 Sep 2025 15:28:19 +0000 Manifest next update: Sat 13 Sep 2025 15:28:19 +0000 Files and hashes: 1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: tZ9pM0Khfimci3R2F1R+WP0oys7x1LI0xBAIiHuUlBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 15:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17 Validity Not Before: Sep 6 15:28:19 2025 GMT Not After : Sep 13 15:28:19 2025 GMT Subject: CN=68bc5313-9634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:e2:46:54:2c:c9:48:3c:e5:f1:06:e7:41: 21:8e:ea:94:99:fd:fd:d8:cf:b8:91:78:58:55:f8: ae:2e:57:17:0d:63:ed:98:db:ec:58:ea:38:0e:8d: 33:c7:39:16:ec:17:a9:ce:08:0f:2a:3a:b8:8f:71: 17:57:99:ee:b6:d1:19:6b:06:2b:8e:87:9b:aa:83: 0c:3e:52:4a:ac:fe:f4:d0:b8:0e:bb:f3:af:0a:05: db:bb:53:cc:6c:52:7d:ef:1d:c5:82:ac:30:c1:2f: 53:26:0f:1b:bd:34:57:03:c4:18:1b:65:1e:2f:e9: e8:90:4e:b0:6c:39:80:87:7b:9e:5a:7b:e4:51:76: 47:5b:2b:6f:6e:05:9c:55:8e:d2:5a:6d:d2:81:10: 85:88:da:7c:5d:ba:98:6a:87:ae:af:88:da:c4:5f: 95:39:c4:c3:28:d0:bb:37:ae:30:df:a2:d5:d4:cb: f3:f1:a4:0f:95:f6:62:03:38:dd:f2:57:e2:a5:20: 10:3f:80:43:57:61:47:3b:a5:11:bc:ef:54:93:9d: ca:c8:af:4d:75:8d:f9:bb:08:48:25:d6:7e:8d:35: ba:3b:2a:82:34:b4:d2:06:80:ce:d6:5b:b5:9a:e2: b2:84:eb:99:65:c9:40:53:1a:27:36:2d:9c:49:e7: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:95:8E:3B:42:51:E3:D9:25:DC:F7:74:3F:89:67:0F:9E:34:64:F5 X509v3 Authority Key Identifier: keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f9:af:c3:6e:f9:a1:96:04:63:a5:5b:80:40:40:e7:67:ee: e3:4b:6a:fb:a0:3c:ff:ff:02:5a:e7:25:09:f2:33:b8:df:ba: 84:78:a0:5a:80:4d:7c:ce:36:a2:04:98:45:81:b4:94:93:4d: f1:23:b5:99:6c:11:38:8d:39:77:d7:43:e3:39:1a:4d:41:45: f7:02:55:e1:8e:a5:dc:00:c3:28:82:13:f3:2c:4a:09:48:75: 99:1e:d4:54:89:21:89:4d:b3:08:62:bf:e2:e5:5d:c2:1b:7c: c1:cb:26:82:de:90:8f:e0:6e:19:7e:4b:ee:6c:61:06:e5:db: a6:eb:a0:d0:60:71:76:dd:01:13:7d:af:64:8e:93:d3:eb:d6: 29:b3:ba:1a:ff:12:0b:35:6f:ce:ba:63:50:9b:54:ed:d0:c0: 1e:8f:7e:3e:21:8f:24:31:86:ef:11:7c:96:98:a3:ed:c7:b3: 25:8d:c1:3e:a3:f6:98:79:83:7a:21:ce:93:fd:f8:1c:ce:fc: 47:69:70:53:98:4d:b5:39:b2:26:dc:a2:eb:56:fe:e8:72:7c: c0:aa:09:19:c8:45:46:0a:dc:73:d0:56:d7:b8:df:6f:98:23: 40:f8:88:7a:73:a3:c2:74:2c:7b:cf:d1:d5:44:3d:65:b6:9e: 9e:39:42:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IxREExMTAvBgNVBAUTKDExMDlGQkM3M0ExODlCM0Q2NDcxM0ExRjZDNDg2QTA0 RTdCNDNCMTcwHhcNMjUwOTA2MTUyODE5WhcNMjUwOTEzMTUyODE5WjAYMRYwFAYD VQQDEw02OGJjNTMxMy05NjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFfiRlQsyUg85fEG50EhjuqUmf392M+4kXhYVfiuLlcXDWPtmNvsWOo4Do0z xzkW7BepzggPKjq4j3EXV5nuttEZawYrjoebqoMMPlJKrP700LgOu/OvCgXbu1PM bFJ97x3FgqwwwS9TJg8bvTRXA8QYG2UeL+nokE6wbDmAh3ueWnvkUXZHWytvbgWc VY7SWm3SgRCFiNp8XbqYaoeur4jaxF+VOcTDKNC7N64w36LV1Mvz8aQPlfZiAzjd 8lfipSAQP4BDV2FHO6URvO9Uk53KyK9NdY35uwhIJdZ+jTW6OyqCNLTSBoDO1lu1 muKyhOuZZclAUxonNi2cSed86wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKVjjtC UePZJdz3dD+JZw+eNGT1MB8GA1UdIwQYMBaAFBEJ+8c6GJs9ZHE6H2xIagTntDsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS9BOTBGOERBNDRD NzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16MWtjVG9mYkVocUJPZTBP eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VRbjd4em9ZbXoxa2NUb2ZiRWhxQk9lME94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjFEQS9BOTBGOERBNDRDNzkxMUVFQTc5RENEM0JDNEY5QUUwMi9FUW43eHpvWW16 MWtjVG9mYkVocUJPZTBPeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv+a/DbvmhlgRjpVuAQEDnZ+7jS2r7oDz//wJa5yUJ8jO437qEeKBa gE18zjaiBJhFgbSUk03xI7WZbBE4jTl310PjORpNQUX3AlXhjqXcAMMoghPzLEoJ SHWZHtRUiSGJTbMIYr/i5V3CG3zByyaC3pCP4G4ZfkvubGEG5dum66DQYHF23QET fa9kjpPT69Yps7oa/xILNW/OumNQm1Tt0MAej34+IY8kMYbvEXyWmKPtx7MljcE+ o/aYeYN6Ic6T/fgczvxHaXBTmE21ObIm3KLrVv7ocnzAqgkZyEVGCtxz0FbXuN9v mCNA+Ih6c6PCdCx7z9HVRD1ltp6eOUKw -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:53 2025 by rpki-client