$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft File: mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft (raw, json) Hash identifier: BtJqmoXF7dUH6x4ZkO5vHFzwV+IecmNcTtJBlrPxbBU= Subject key identifier: 6D:0A:29:18:5A:2C:2D:1D:59:92:0A:BE:64:E0:87:10:5B:93:A5:E5 Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 Certificate issuer: /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft Manifest number: 01D9 Signing time: Sat 23 Aug 2025 02:51:51 +0000 Manifest this update: Sat 23 Aug 2025 02:51:50 +0000 Manifest next update: Sat 30 Aug 2025 02:51:50 +0000 Files and hashes: 1: mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl (hash: SeB7goRHGCu8WqNYQKuVbyTPSG4//ukBMP6lX0+m1vY=) 2: EE4D73F2AE5611EDA021E516C4F9AE02.roa (hash: rHhV9X+494LZVhsBFnMPP35cu2Qc4CF3Pf3vW78mDqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E67, serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Validity Not Before: Aug 23 02:51:50 2025 GMT Not After : Aug 30 02:51:50 2025 GMT Subject: CN=68a92cc6-e4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c0:6c:df:b8:fc:f1:f5:d4:6c:53:22:60:a2: 69:a0:8f:60:78:97:7d:2b:07:72:ea:7a:85:73:23: aa:d8:3a:e2:00:72:73:f7:b7:79:97:bb:45:f2:7e: 9b:bc:b9:80:75:a9:79:11:31:27:ac:6a:72:4e:ec: d9:9e:29:93:09:da:32:f4:ee:c2:86:71:4b:dd:eb: d5:04:3c:fc:b5:af:8f:76:5b:48:80:92:73:1e:34: 42:82:43:df:08:e3:42:aa:1f:3a:2d:f4:3d:7c:b7: 19:06:a3:f7:d6:78:96:cc:b1:93:27:22:4d:b7:b6: f7:a1:27:0d:34:cd:db:3c:d9:3b:7d:2c:6d:a1:5b: cd:62:46:48:c9:b1:e7:84:4c:bf:01:ef:fd:3a:de: 78:4a:0a:72:bb:6f:78:8a:27:8b:52:aa:94:9f:c5: 61:da:63:72:a0:0d:8f:a6:ba:98:0a:66:d9:87:3a: 82:2b:aa:ea:91:72:cd:94:94:8f:10:4b:b2:d9:36: dc:11:c8:46:9a:9e:d1:78:5d:55:e3:93:75:48:c3: 76:a8:89:5b:f1:88:c4:b7:39:fb:86:ac:21:ed:35: b0:52:97:fa:f8:ff:ff:b9:fb:10:54:17:4d:b8:aa: 13:3a:e0:b7:73:62:33:05:fd:58:60:90:dd:ae:73: d3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0A:29:18:5A:2C:2D:1D:59:92:0A:BE:64:E0:87:10:5B:93:A5:E5 X509v3 Authority Key Identifier: keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:68:df:59:b9:5b:33:cb:70:2d:67:cc:d6:d1:93:ec:9d:2a: 68:94:17:a6:76:df:89:71:15:c5:7a:4d:8a:b6:e5:23:26:47: 84:62:b9:26:01:37:08:c3:87:c6:24:77:62:e8:45:6d:82:cb: bd:7f:c5:70:8b:c6:6c:1a:63:db:58:99:d8:9c:25:47:1c:87: 72:a0:40:5f:8d:85:e2:1b:f1:ad:d4:08:d0:a3:4d:1b:0c:c6: bd:e5:a3:bb:43:b1:31:b1:21:d0:32:6d:4e:84:a5:4c:ee:0f: 17:c5:69:b9:36:cf:22:25:3d:ff:82:62:56:24:77:c1:8f:26: 78:f7:36:e3:e5:74:9b:cd:a2:43:4c:1e:46:cd:ef:43:d6:ad: 6f:24:0e:ac:ee:0b:e5:04:e6:33:80:02:e7:6e:4c:ff:5d:f0: e0:03:e4:cb:b3:2f:20:5e:6a:06:50:a2:ce:d6:97:6d:e8:31: e2:cb:69:b6:53:83:24:05:47:7a:08:8e:d9:4e:ca:cd:7b:e5: 6a:c8:32:af:6b:ac:ef:2b:14:aa:1f:16:95:dd:8e:f7:ea:fa: 59:27:bf:a6:3c:f7:87:e5:a3:91:4a:22:94:dc:ed:81:06:10: ce:03:73:07:e0:a1:bf:a8:d2:5f:f8:34:c2:b5:86:97:eb:b3: 03:f7:c2:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFNjcxMTAvBgNVBAUTKDk4NDNDODkyNzdBODEyQUJEN0ZBREFCNTJEMUQ2MUQy NzhCQTJCMTkwHhcNMjUwODIzMDI1MTUwWhcNMjUwODMwMDI1MTUwWjAYMRYwFAYD VQQDEw02OGE5MmNjNi1lNGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsBs37j88fXUbFMiYKJpoI9geJd9Kwdy6nqFcyOq2DriAHJz97d5l7tF8n6b vLmAdal5ETEnrGpyTuzZnimTCdoy9O7ChnFL3evVBDz8ta+PdltIgJJzHjRCgkPf CONCqh86LfQ9fLcZBqP31niWzLGTJyJNt7b3oScNNM3bPNk7fSxtoVvNYkZIybHn hEy/Ae/9Ot54Sgpyu294iieLUqqUn8Vh2mNyoA2PprqYCmbZhzqCK6rqkXLNlJSP EEuy2TbcEchGmp7ReF1V45N1SMN2qIlb8YjEtzn7hqwh7TWwUpf6+P//ufsQVBdN uKoTOuC3c2IzBf1YYJDdrnPTsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0KKRha LC0dWZIKvmTghxBbk6XlMB8GA1UdIwQYMBaAFJhDyJJ3qBKr1/ratS0dYdJ4uisZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUU2Ny8yMkMxNDUyOEFF NTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0VxdlgtdHExTFIxaDBuaTZL eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21FUElrbmVvRXF2WC10cTFMUjFoMG5pNkt4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUU2Ny8yMkMxNDUyOEFFNTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0Vx dlgtdHExTFIxaDBuaTZLeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEaN9ZuVszy3AtZ8zW0ZPsnSpolBemdt+JcRXFek2KtuUjJkeEYrkm ATcIw4fGJHdi6EVtgsu9f8Vwi8ZsGmPbWJnYnCVHHIdyoEBfjYXiG/Gt1AjQo00b DMa95aO7Q7ExsSHQMm1OhKVM7g8XxWm5Ns8iJT3/gmJWJHfBjyZ49zbj5XSbzaJD TB5Gze9D1q1vJA6s7gvlBOYzgALnbkz/XfDgA+TLsy8gXmoGUKLO1pdt6DHiy2m2 U4MkBUd6CI7ZTsrNe+VqyDKva6zvKxSqHxaV3Y736vpZJ7+mPPeH5aORSiKU3O2B BhDOA3MH4KG/qNJf+DTCtYaX67MD98K9 -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:13 2025 by rpki-client