$ rpki-client -vvf rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft File: EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft (raw, json) Hash identifier: M5AcqP4PVvQEuHZvVGvbVSfCQ5R757yGGzNfv3k1oEo= Subject key identifier: DC:F7:09:BC:9D:A8:10:E0:8A:91:34:79:F2:08:65:81:19:53:5E:8B Authority key identifier: 10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 Certificate issuer: /CN=A914B813/serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft Manifest number: 0167 Signing time: Wed 17 Sep 2025 04:29:21 +0000 Manifest this update: Wed 17 Sep 2025 04:29:21 +0000 Manifest next update: Wed 24 Sep 2025 04:29:21 +0000 Files and hashes: 1: EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl (hash: AxYuMjJ1Qq0YPWhBEHUtFx2JpEIGwRMwbCGk6B+T500=) 2: D6CC557C6E2C11EEBFE28628C4F9AE02.roa (hash: 9LMpSs1G6DRXbhafQQ/fnV5UTQZp+aLbxUXgbbTPxiU=) 3: D663158A6E2C11EEBFE28628C4F9AE02.roa (hash: FqhwzXNHRNY+XCePlaMxiVUp2AFCJ34p2xGpiCoaVzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B813, serialNumber=107618E36C91DBED0C8745295D0149842787AF83 Validity Not Before: Sep 17 04:29:21 2025 GMT Not After : Sep 24 04:29:21 2025 GMT Subject: CN=68ca3921-894a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b3:e2:a0:d5:85:29:c3:10:a8:12:1c:b8:49: a0:2d:ae:f9:90:0e:33:62:b8:d2:b0:c2:5a:f3:0a: 7f:a1:a6:b0:29:86:fd:44:37:d2:1e:5f:b8:51:28: b1:be:fe:6f:25:ee:ee:2b:ff:cb:74:bb:cb:49:75: a6:e9:46:11:63:3c:2d:fa:54:22:fb:94:02:5e:08: f9:4f:3a:8b:ef:74:2e:56:39:f5:21:c9:29:e6:f6: ad:1b:d7:2f:cf:fd:04:2b:f6:5d:77:df:8d:70:f1: cc:50:d9:67:05:68:ba:61:ab:25:33:69:af:7c:fa: cf:f8:5e:bf:93:c0:d9:6b:f4:76:ec:10:6e:ed:a1: ab:3f:ec:fa:99:62:ae:3f:a7:ac:04:81:69:d4:6d: 00:12:9b:7c:25:d3:40:91:58:4d:9d:bc:4b:20:64: 97:8c:e2:1b:ff:2c:49:3a:89:d1:61:c4:66:1f:72: 19:52:72:f9:cd:da:68:a7:5d:91:23:33:e9:83:18: 82:52:78:af:c8:ca:ba:b2:54:22:f2:5d:45:33:b0: b8:d8:76:da:37:59:e1:3c:6c:db:16:60:a9:c1:88: e4:27:f2:32:7f:86:00:17:b8:c8:35:e2:43:23:82: e7:a4:a8:c6:0c:1c:e4:26:58:8c:bf:56:0a:84:7f: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F7:09:BC:9D:A8:10:E0:8A:91:34:79:F2:08:65:81:19:53:5E:8B X509v3 Authority Key Identifier: keyid:10:76:18:E3:6C:91:DB:ED:0C:87:45:29:5D:01:49:84:27:87:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHYY42yR2-0Mh0UpXQFJhCeHr4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B813/A852436A6E2B11EE8DD66735C4F9AE02/EHYY42yR2-0Mh0UpXQFJhCeHr4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:c9:7c:b1:da:c5:4b:46:90:04:af:44:c6:5e:e9:4b:e1:34: f5:bb:b2:08:c5:30:c1:64:84:33:10:0a:1f:c3:0a:01:51:c6: b0:c6:f8:c4:d5:41:8e:c9:5e:4b:4f:bb:6d:3c:e3:0a:4d:91: 15:f3:db:59:19:11:6a:88:f8:06:d6:f4:0d:3f:02:a3:a1:66: 45:4a:17:2a:5d:4a:cd:6e:15:ca:dc:81:b4:93:7f:69:06:ab: cc:31:ad:a3:53:24:c7:a9:e1:39:90:19:f4:ba:34:78:bf:46: 6d:be:f1:40:f0:98:a9:6f:80:4e:e0:e1:0a:12:b9:55:0e:9d: fc:27:93:00:15:9a:9b:91:63:6a:63:94:ab:75:34:5a:7b:f5: 9a:dd:23:e4:31:0f:6b:3e:97:80:0a:ab:f7:59:9d:63:2b:27: cb:7e:93:09:3c:c5:ef:51:22:6a:46:56:bb:5e:91:35:a1:bb: a9:70:05:07:6f:c1:82:38:99:2f:c1:80:5f:20:26:65:8c:24: c2:07:19:63:dd:e4:42:27:0c:5b:e6:63:61:a3:cc:c5:80:d0: db:5f:42:ed:43:b9:5a:e5:11:f9:e7:41:93:b2:1a:4f:34:72: 3d:75:39:74:2e:49:6f:d5:c6:72:43:02:92:22:c7:d5:bd:78: 2a:10:42:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI4MTMxMTAvBgNVBAUTKDEwNzYxOEUzNkM5MURCRUQwQzg3NDUyOTVEMDE0OTg0 Mjc4N0FGODMwHhcNMjUwOTE3MDQyOTIxWhcNMjUwOTI0MDQyOTIxWjAYMRYwFAYD VQQDEw02OGNhMzkyMS04OTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bPioNWFKcMQqBIcuEmgLa75kA4zYrjSsMJa8wp/oaawKYb9RDfSHl+4USix vv5vJe7uK//LdLvLSXWm6UYRYzwt+lQi+5QCXgj5TzqL73QuVjn1Ickp5vatG9cv z/0EK/Zdd9+NcPHMUNlnBWi6YaslM2mvfPrP+F6/k8DZa/R27BBu7aGrP+z6mWKu P6esBIFp1G0AEpt8JdNAkVhNnbxLIGSXjOIb/yxJOonRYcRmH3IZUnL5zdpop12R IzPpgxiCUnivyMq6slQi8l1FM7C42HbaN1nhPGzbFmCpwYjkJ/Iyf4YAF7jINeJD I4LnpKjGDBzkJliMv1YKhH/xgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNz3Cbyd qBDgipE0efIIZYEZU16LMB8GA1UdIwQYMBaAFBB2GONskdvtDIdFKV0BSYQnh6+D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjgxMy9BODUyNDM2QTZF MkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjItME1oMFVwWFFGSmhDZUhy NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VIWVk0MnlSMi0wTWgwVXBYUUZKaENlSHI0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjgxMy9BODUyNDM2QTZFMkIxMUVFOERENjY3MzVDNEY5QUUwMi9FSFlZNDJ5UjIt ME1oMFVwWFFGSmhDZUhyNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0yXyx2sVLRpAEr0TGXulL4TT1u7IIxTDBZIQzEAofwwoBUcawxvjE 1UGOyV5LT7ttPOMKTZEV89tZGRFqiPgG1vQNPwKjoWZFShcqXUrNbhXK3IG0k39p BqvMMa2jUyTHqeE5kBn0ujR4v0ZtvvFA8Jipb4BO4OEKErlVDp38J5MAFZqbkWNq Y5SrdTRae/Wa3SPkMQ9rPpeACqv3WZ1jKyfLfpMJPMXvUSJqRla7XpE1obupcAUH b8GCOJkvwYBfICZljCTCBxlj3eRCJwxb5mNho8zFgNDbX0LtQ7la5RH550GTshpP NHI9dTl0Lklv1cZyQwKSIsfVvXgqEEJX -----END CERTIFICATE-----Generated at Thu Sep 18 23:24:26 2025 by rpki-client