$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft File: eQckJnCjuJ00jVqEHayNGC62YH4.mft (raw, json) Hash identifier: rsgtrKqp+4vjSOMIRpDN9BgQfHr7Zws9WeaZu1VeiK0= Subject key identifier: 88:9C:0D:C0:4A:D3:6B:BD:AD:BB:A4:E6:AE:56:91:DE:38:B1:02:87 Authority key identifier: 79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E Certificate issuer: /CN=A913DC32/serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft Manifest number: 61 Signing time: Fri 05 Sep 2025 07:37:29 +0000 Manifest this update: Fri 05 Sep 2025 07:37:29 +0000 Manifest next update: Fri 12 Sep 2025 07:37:29 +0000 Files and hashes: 1: eQckJnCjuJ00jVqEHayNGC62YH4.crl (hash: tekt13zGtlef1Bo71oyvrTGwwUrGrfn94QpO52Nxogg=) 2: 22E5730815AC11F0BA789D40C4F9AE02.roa (hash: iWmeds3ikQddJ0zOLOMR2/nAx9kIXx/domN/vEqWgPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DC32, serialNumber=7907242670A3B89D348D5A841DAC8D182EB6607E Validity Not Before: Sep 5 07:37:29 2025 GMT Not After : Sep 12 07:37:29 2025 GMT Subject: CN=68ba9339-4cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d8:c3:c0:1e:78:2e:17:dd:32:08:31:a0:41: b8:ab:fb:57:e2:21:b8:e2:c2:f3:2d:7b:6e:ce:60: 03:13:69:e0:b4:37:ed:ab:1c:61:3f:f1:34:4a:97: 4d:bb:0e:5a:66:aa:7b:01:10:e6:22:ff:fa:22:cf: c8:41:e8:f6:5d:84:90:a5:26:2d:2e:e5:d2:2b:77: 52:4a:96:92:f1:cf:7e:8c:d6:76:21:49:28:50:08: df:39:22:4e:1c:27:f3:7a:5b:56:55:78:93:3a:05: 60:f0:35:7c:f2:30:fe:38:68:8c:c7:c3:e1:42:5b: 13:fe:0f:ca:28:ab:b5:e3:bb:4e:cb:77:1e:30:7e: 8f:18:01:40:f8:5a:62:f5:96:2b:80:40:cc:47:7e: 6a:57:f8:5e:64:05:54:09:ff:e7:89:ef:bf:cd:06: ce:c2:1d:08:23:cd:11:02:cb:bf:49:de:d8:e4:65: 50:47:bf:07:ab:30:70:8f:5f:95:cb:db:9f:6c:3b: 7e:25:d1:0a:0e:c0:1e:c3:c5:bc:61:87:6f:bd:a1: 19:0b:37:45:3b:88:62:0c:ab:ca:74:a1:60:1e:fa: cd:c0:8e:5b:3d:3d:ca:87:29:e8:f9:9c:58:bc:e5: d2:c1:0e:c7:4f:5e:27:b0:1f:76:a6:11:6e:02:9e: d0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9C:0D:C0:4A:D3:6B:BD:AD:BB:A4:E6:AE:56:91:DE:38:B1:02:87 X509v3 Authority Key Identifier: keyid:79:07:24:26:70:A3:B8:9D:34:8D:5A:84:1D:AC:8D:18:2E:B6:60:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eQckJnCjuJ00jVqEHayNGC62YH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC32/7B750BFEFCFD11EFADB86115C4F9AE02/eQckJnCjuJ00jVqEHayNGC62YH4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:07:c8:dd:29:60:46:1f:fe:2f:b9:7b:64:5e:eb:38:9a:04: 0c:fb:19:e7:8c:f0:1a:bd:5a:8d:1e:b3:96:d5:b5:be:7b:52: 9c:13:32:e9:54:60:82:3b:73:12:a1:f0:43:ab:3f:1c:1f:46: 92:80:3c:93:89:08:30:88:09:6b:7b:be:ea:8d:82:39:d9:d0: b8:35:2d:af:00:f2:be:fc:2d:14:1e:cb:92:9d:0b:98:d9:2b: f5:06:5e:b9:01:cc:3d:28:73:c0:f8:d5:45:85:33:df:55:fe: ef:15:26:e1:4a:d1:6d:74:dc:d4:e7:76:e2:ae:5f:ed:a9:b4: 58:3a:30:5b:60:01:b8:a2:0b:d9:cc:c3:ee:e8:d0:2b:3d:bb: ca:b9:04:7c:e9:cb:da:b1:91:80:a2:95:c2:4a:53:56:1b:2b: 63:8b:b8:e2:2b:0f:92:10:37:46:de:33:a7:84:13:5d:d1:3f: fd:7b:d5:93:69:f2:dc:98:c7:af:f4:41:78:bc:07:6b:1c:a3: 7b:9b:d3:5d:18:05:b0:61:67:65:7a:22:f2:85:07:1b:01:b3: 71:64:d4:c4:28:dc:e3:55:a9:db:04:b6:a1:cd:a8:f8:60:8e: eb:27:ac:c4:86:20:ae:4e:97:00:d6:54:b5:b2:c1:a2:a2:7c: d9:ff:3c:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REMzMjExMC8GA1UEBRMoNzkwNzI0MjY3MEEzQjg5RDM0OEQ1QTg0MURBQzhEMTgy RUI2NjA3RTAeFw0yNTA5MDUwNzM3MjlaFw0yNTA5MTIwNzM3MjlaMBgxFjAUBgNV BAMTDTY4YmE5MzM5LTRjYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD42MPAHnguF90yCDGgQbir+1fiIbjiwvMte27OYAMTaeC0N+2rHGE/8TRKl027 DlpmqnsBEOYi//oiz8hB6PZdhJClJi0u5dIrd1JKlpLxz36M1nYhSShQCN85Ik4c J/N6W1ZVeJM6BWDwNXzyMP44aIzHw+FCWxP+D8ooq7Xju07Ldx4wfo8YAUD4WmL1 liuAQMxHfmpX+F5kBVQJ/+eJ77/NBs7CHQgjzRECy79J3tjkZVBHvwerMHCPX5XL 259sO34l0QoOwB7Dxbxhh2+9oRkLN0U7iGIMq8p0oWAe+s3Ajls9PcqHKej5nFi8 5dLBDsdPXiewH3amEW4CntAXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiJwNwErT a72tu6TmrlaR3jixAocwHwYDVR0jBBgwFoAUeQckJnCjuJ00jVqEHayNGC62YH4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEQzMyLzdCNzUwQkZFRkNG RDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUowMGpWcUVIYXlOR0M2MllI NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVFja0puQ2p1SjAwalZxRUhheU5HQzYyWUg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE QzMyLzdCNzUwQkZFRkNGRDExRUZBREI4NjExNUM0RjlBRTAyL2VRY2tKbkNqdUow MGpWcUVIYXlOR0M2MllINC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8HyN0pYEYf/i+5e2Re6ziaBAz7GeeM8Bq9Wo0es5bVtb57UpwTMulU YII7cxKh8EOrPxwfRpKAPJOJCDCICWt7vuqNgjnZ0Lg1La8A8r78LRQey5KdC5jZ K/UGXrkBzD0oc8D41UWFM99V/u8VJuFK0W103NTnduKuX+2ptFg6MFtgAbiiC9nM w+7o0Cs9u8q5BHzpy9qxkYCilcJKU1YbK2OLuOIrD5IQN0beM6eEE13RP/171ZNp 8tyYx6/0QXi8B2sco3ub010YBbBhZ2V6IvKFBxsBs3Fk1MQo3ONVqdsEtqHNqPhg jusnrMSGIK5OlwDWVLWywaKifNn/PJ0= -----END CERTIFICATE-----Generated at Sat Sep 6 21:35:56 2025 by rpki-client