$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft File: ej5CbJYle98kPDxjt4A4NAUlwqk.mft (raw, json) Hash identifier: x1iqlffU3JCIGFTIyyYygQGLwwKpNMmHBUOaXK3sBxg= Subject key identifier: DF:80:FC:48:B6:00:EE:DE:A8:66:11:58:46:1C:61:C7:13:54:F7:C6 Authority key identifier: 7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 Certificate issuer: /CN=A9150CF3/serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft Manifest number: 0391 Signing time: Sat 23 Aug 2025 02:03:12 +0000 Manifest this update: Sat 23 Aug 2025 02:03:12 +0000 Manifest next update: Sat 30 Aug 2025 02:03:12 +0000 Files and hashes: 1: ej5CbJYle98kPDxjt4A4NAUlwqk.crl (hash: obDhJ7332yPhXyuULvKTu/dj7QWsvJN4FpCK5mhX5d0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF3, serialNumber=7A3E426C96257BDF243C3C63B78038340525C2A9 Validity Not Before: Aug 23 02:03:12 2025 GMT Not After : Aug 30 02:03:12 2025 GMT Subject: CN=68a92160-bc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:8c:5c:74:c4:2b:5d:77:ec:b2:64:a1:5b: 29:55:f3:76:c0:e0:83:a9:0a:23:f7:c4:0c:97:ff: 13:a8:97:fe:fd:d7:b4:41:d8:b7:51:86:80:7f:a4: b9:dc:1f:3f:4b:f1:63:38:1e:aa:d4:a0:49:c8:92: ce:07:78:88:78:2c:b0:8f:67:a1:3d:54:f7:ff:72: 45:71:b4:4b:84:2d:e0:d2:f3:50:19:91:72:5f:64: 0c:cb:5a:7c:bb:12:d4:20:a3:e7:9b:52:c4:97:fd: 4b:20:b7:18:6c:bc:93:4f:d2:8a:6f:39:6f:9d:50: e8:2d:64:23:03:11:6f:8c:cc:c8:fa:2a:26:06:c9: 40:d9:a8:a3:fb:69:ae:4b:06:be:53:14:a1:6e:12: 54:ed:b1:6b:8b:b8:b5:d2:5b:28:36:2e:6a:42:5a: db:81:5f:99:da:8e:f4:c8:d7:a3:9b:63:dd:31:7e: 90:d2:1f:38:9c:6f:d0:4a:c3:43:2f:06:24:86:28: 50:c6:9d:9a:74:0d:c8:05:fa:16:37:f3:a0:37:b0: 86:40:5a:3e:1c:fe:1a:56:be:66:98:84:fd:b0:6d: db:29:a5:84:dc:26:77:18:3c:5b:29:eb:15:ab:ff: 8c:4d:49:43:34:1b:28:17:52:23:4f:de:16:8d:a4: 3f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:80:FC:48:B6:00:EE:DE:A8:66:11:58:46:1C:61:C7:13:54:F7:C6 X509v3 Authority Key Identifier: keyid:7A:3E:42:6C:96:25:7B:DF:24:3C:3C:63:B7:80:38:34:05:25:C2:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej5CbJYle98kPDxjt4A4NAUlwqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/ej5CbJYle98kPDxjt4A4NAUlwqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:2e:27:83:0f:15:df:34:32:a1:5b:ac:ed:4e:db:c2:c2:2e: a0:fa:e8:be:2d:83:32:00:8e:41:70:8e:7d:22:59:a4:f1:dd: 37:12:fa:99:14:fc:33:5a:87:f8:98:78:d0:18:10:ec:d0:e4: dd:78:15:8c:58:3c:c5:3d:51:f6:11:46:a2:19:f8:e6:5c:dd: 27:3d:4e:9d:0b:a4:ea:78:42:50:46:f8:a2:59:6b:94:d6:03: 0d:04:62:de:ac:3f:31:18:09:e3:9f:84:07:22:64:ac:c0:3a: d3:19:d6:fe:d7:b0:5c:0f:f7:33:5f:ca:80:cf:58:6b:9d:06: eb:98:ae:bc:f2:00:9c:31:34:67:ee:72:cf:3f:08:45:5b:d4: 93:53:a1:a5:d3:86:37:80:d0:db:d2:d2:db:f6:21:50:2d:95: b5:40:7a:cc:be:e8:1d:4e:fa:b5:55:7b:c8:aa:a3:89:fb:49: 12:f2:8b:5d:cd:98:18:ba:e5:d9:10:85:c3:d0:e2:45:3c:a6: bb:00:d7:37:b4:81:0e:d4:61:c9:88:a7:a2:81:57:65:ae:8f: cf:64:54:53:17:e3:7c:78:a4:bf:79:9c:c9:9f:38:79:e3:e5: 18:76:53:75:b2:5c:d5:34:71:c7:85:67:1a:64:e9:66:55:fd: 2a:0a:4e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjMxMTAvBgNVBAUTKDdBM0U0MjZDOTYyNTdCREYyNDNDM0M2M0I3ODAzODM0 MDUyNUMyQTkwHhcNMjUwODIzMDIwMzEyWhcNMjUwODMwMDIwMzEyWjAYMRYwFAYD VQQDEw02OGE5MjE2MC1iYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDqMXHTEK1137LJkoVspVfN2wOCDqQoj98QMl/8TqJf+/de0Qdi3UYaAf6S5 3B8/S/FjOB6q1KBJyJLOB3iIeCywj2ehPVT3/3JFcbRLhC3g0vNQGZFyX2QMy1p8 uxLUIKPnm1LEl/1LILcYbLyTT9KKbzlvnVDoLWQjAxFvjMzI+iomBslA2aij+2mu Swa+UxShbhJU7bFri7i10lsoNi5qQlrbgV+Z2o70yNejm2PdMX6Q0h84nG/QSsND LwYkhihQxp2adA3IBfoWN/OgN7CGQFo+HP4aVr5mmIT9sG3bKaWE3CZ3GDxbKesV q/+MTUlDNBsoF1IjT94WjaQ/SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+A/Ei2 AO7eqGYRWEYcYccTVPfGMB8GA1UdIwQYMBaAFHo+QmyWJXvfJDw8Y7eAODQFJcKp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMy8wMjhGOUVGRTJF ODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5OGtQRHhqdDRBNE5BVWx3 cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqNUNiSllsZTk4a1BEeGp0NEE0TkFVbHdxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMy8wMjhGOUVGRTJFODYxMUVEOUQyRURDNERDNEY5QUUwMi9lajVDYkpZbGU5 OGtQRHhqdDRBNE5BVWx3cWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBLieDDxXfNDKhW6ztTtvCwi6g+ui+LYMyAI5BcI59Ilmk8d03EvqZ FPwzWof4mHjQGBDs0OTdeBWMWDzFPVH2EUaiGfjmXN0nPU6dC6TqeEJQRviiWWuU 1gMNBGLerD8xGAnjn4QHImSswDrTGdb+17BcD/czX8qAz1hrnQbrmK688gCcMTRn 7nLPPwhFW9STU6Gl04Y3gNDb0tLb9iFQLZW1QHrMvugdTvq1VXvIqqOJ+0kS8otd zZgYuuXZEIXD0OJFPKa7ANc3tIEO1GHJiKeigVdlro/PZFRTF+N8eKS/eZzJnzh5 4+UYdlN1slzVNHHHhWcaZOlmVf0qCk4d -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:09 2025 by rpki-client