$ rpki-client -vvf rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft File: eERZpLZsg1_PXW5aVoctkkfUZYo.mft (raw, json) Hash identifier: tUiBpuiXkTxV2qvrDn4G09ECQESKb6Jivu+0T58P32w= Subject key identifier: 45:25:56:3B:0F:C3:82:5A:69:64:E4:CB:72:1C:2B:DB:C5:28:24:02 Authority key identifier: 78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A Certificate issuer: /CN=A9145258/serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft Manifest number: 6F Signing time: Thu 21 Aug 2025 07:11:55 +0000 Manifest this update: Thu 21 Aug 2025 07:11:55 +0000 Manifest next update: Thu 28 Aug 2025 07:11:55 +0000 Files and hashes: 1: eERZpLZsg1_PXW5aVoctkkfUZYo.crl (hash: 5YvsDdFh7mG9t9QLBsTzblhvxnP65d7YNPEjoCVMKQs=) 2: 2C7AE786042711F0BCEB4A75C4F9AE02.roa (hash: ugBH0sY3xsy9vZ2jc2RKWYdBc6yrBC0CxRNIPq7VafI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 07:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145258, serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Validity Not Before: Aug 21 07:11:55 2025 GMT Not After : Aug 28 07:11:55 2025 GMT Subject: CN=68a6c6bb-eed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:d0:37:bc:34:f1:4b:34:8c:4f:33:1e:8e: 80:6a:ac:92:18:5f:88:f1:12:ad:11:54:84:ea:a6: 23:07:99:37:bb:3d:2c:0c:b1:6f:ec:ab:75:51:94: 2a:da:cb:94:e5:34:8c:81:5f:4f:3a:45:c6:de:d7: c5:67:d8:32:b1:5d:58:86:fc:62:af:83:91:e6:9b: f3:e0:37:a6:e9:d1:85:31:be:28:4e:a5:c9:49:10: 0b:ed:f7:53:e4:c9:c7:15:62:15:e5:2e:a8:95:9e: ac:3b:11:90:06:db:d6:09:88:3e:a5:12:c1:fd:b9: aa:20:76:d6:69:96:1b:0c:cf:11:07:15:f6:28:59: 09:b0:00:e7:18:a9:6e:e8:ec:e8:32:83:83:d8:67: a5:e1:a8:6c:df:c1:23:a1:c2:9f:cd:b5:90:d6:92: a5:2f:d6:73:12:08:cc:df:89:66:2a:c1:7a:02:2b: 4f:0d:ec:53:1e:ee:ab:4c:64:5c:1c:66:65:70:08: 89:83:a2:59:49:32:18:9c:4b:4c:e6:f2:46:18:de: 9e:5b:03:53:64:62:02:eb:0f:d1:09:9f:01:2d:36: 4f:36:fd:38:94:24:68:24:8c:8c:f3:9f:62:96:0f: 04:2e:fc:01:a5:33:a5:72:77:5d:00:e9:80:74:11: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:25:56:3B:0F:C3:82:5A:69:64:E4:CB:72:1C:2B:DB:C5:28:24:02 X509v3 Authority Key Identifier: keyid:78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:34:30:03:ad:1a:63:01:92:22:ae:32:8b:1c:1e:22:12:c6: 7e:5c:80:aa:96:e9:25:13:b4:e8:39:fe:02:cf:00:15:ab:2f: c2:8d:1d:55:cd:8e:fe:14:33:c4:43:98:65:93:aa:fa:a9:ef: 5f:de:bc:a8:f8:13:b4:1b:d5:ac:f7:52:6e:d5:95:3c:19:19: 7f:eb:9e:ed:91:55:42:54:60:98:1a:85:77:8b:23:5c:fb:38: 39:81:4e:e0:6b:34:19:8a:5e:d8:e2:e0:80:96:54:e0:a3:23: 63:31:a3:2e:ef:64:10:56:7c:f6:05:c3:c3:f6:dc:7c:74:dd: 9f:7a:b7:83:b5:1e:5d:69:5d:14:0f:28:d2:97:16:37:50:57: 26:10:84:25:a2:dc:0f:66:e8:a3:ea:b5:6c:82:2b:66:7d:e3: 87:8a:7a:e7:ef:b3:d8:bf:73:05:69:45:77:c1:19:12:d5:0e: 1a:3e:b2:24:38:44:0c:42:ad:3d:12:b9:d6:ff:08:46:aa:79: 0f:71:ce:de:95:84:65:1c:ff:da:d5:c5:ac:02:94:5a:bc:d0: 33:59:bd:7f:1b:26:c5:ff:94:e7:3a:3d:7e:db:6a:c7:82:66: 9e:a0:a6:b9:e7:9b:4a:ac:d6:48:05:75:66:0f:29:0e:3c:a0: f6:85:80:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTI1ODExMC8GA1UEBRMoNzg0NDU5QTRCNjZDODM1RkNGNUQ2RTVBNTY4NzJEOTI0 N0Q0NjU4QTAeFw0yNTA4MjEwNzExNTVaFw0yNTA4MjgwNzExNTVaMBgxFjAUBgNV BAMTDTY4YTZjNmJiLWVlZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc89A3vDTxSzSMTzMejoBqrJIYX4jxEq0RVITqpiMHmTe7PSwMsW/sq3VRlCra y5TlNIyBX086Rcbe18Vn2DKxXViG/GKvg5Hmm/PgN6bp0YUxvihOpclJEAvt91Pk yccVYhXlLqiVnqw7EZAG29YJiD6lEsH9uaogdtZplhsMzxEHFfYoWQmwAOcYqW7o 7Ogyg4PYZ6XhqGzfwSOhwp/NtZDWkqUv1nMSCMzfiWYqwXoCK08N7FMe7qtMZFwc ZmVwCImDollJMhicS0zm8kYY3p5bA1NkYgLrD9EJnwEtNk82/TiUJGgkjIzzn2KW DwQu/AGlM6Vyd10A6YB0EQlPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURSVWOw/D glppZOTLchwr28UoJAIwHwYDVR0jBBgwFoAUeERZpLZsg1/PXW5aVoctkkfUZYow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1MjU4L0FDMDlDNkVFRTMw NjExRUZBODA3QjA1M0M0RjlBRTAyL2VFUlpwTFpzZzFfUFhXNWFWb2N0a2tmVVpZ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUVSWnBMWnNnMV9QWFc1YVZvY3Rra2ZVWllvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 MjU4L0FDMDlDNkVFRTMwNjExRUZBODA3QjA1M0M0RjlBRTAyL2VFUlpwTFpzZzFf UFhXNWFWb2N0a2tmVVpZby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKA0MAOtGmMBkiKuMoscHiISxn5cgKqW6SUTtOg5/gLPABWrL8KNHVXN jv4UM8RDmGWTqvqp71/evKj4E7Qb1az3Um7VlTwZGX/rnu2RVUJUYJgahXeLI1z7 ODmBTuBrNBmKXtji4ICWVOCjI2Mxoy7vZBBWfPYFw8P23Hx03Z96t4O1Hl1pXRQP KNKXFjdQVyYQhCWi3A9m6KPqtWyCK2Z944eKeufvs9i/cwVpRXfBGRLVDho+siQ4 RAxCrT0Sudb/CEaqeQ9xzt6VhGUc/9rVxawClFq80DNZvX8bJsX/lOc6PX7baseC Zp6gprnnm0qs1kgFdWYPKQ48oPaFgG0= -----END CERTIFICATE-----Generated at Fri Aug 22 16:16:43 2025 by rpki-client