$ rpki-client -vvf rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft File: EiOAOGQwr9Y_NklEdk4bNBhj0No.mft (raw, json) Hash identifier: ScqZskD0Ud9dtv2RjJ/F5KiopslYWNEtaAPvs6N395M= Subject key identifier: 6D:97:9A:B4:3C:28:5A:32:BB:B7:35:EB:D1:21:0E:4B:22:35:13:0A Authority key identifier: 12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA Certificate issuer: /CN=A9156AFF/serialNumber=122380386430AFD63F364944764E1B341863D0DA Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft Manifest number: 53 Signing time: Fri 19 Sep 2025 07:58:58 +0000 Manifest this update: Fri 19 Sep 2025 07:58:58 +0000 Manifest next update: Fri 26 Sep 2025 07:58:58 +0000 Files and hashes: 1: EiOAOGQwr9Y_NklEdk4bNBhj0No.crl (hash: 5R18DC/uizrH/K+DTy0iexLHr4VljRxQvLkNrW9Mr24=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156AFF, serialNumber=122380386430AFD63F364944764E1B341863D0DA Validity Not Before: Sep 19 07:58:58 2025 GMT Not After : Sep 26 07:58:58 2025 GMT Subject: CN=68cd0d42-b57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:b2:60:0c:7f:7b:4c:43:be:38:50:18:a8: 2d:08:5e:f3:bc:8b:83:05:ba:d4:65:ad:4d:5e:97: 36:f4:4d:61:e8:91:b3:c1:10:9c:ee:65:1e:c4:b0: 4e:92:68:4d:57:4d:08:b5:57:c9:1b:e5:9e:28:36: 5f:89:c2:7c:fa:72:42:d8:2d:44:f1:46:6d:4a:20: 22:46:4d:f8:58:97:46:8c:69:4c:8b:ee:62:95:f7: e7:73:0f:d6:78:2e:35:1d:a6:a0:45:86:ae:41:b6: 87:c6:0a:65:d8:f3:cd:81:3f:3e:91:5c:ee:21:45: 7f:32:92:0d:39:d8:0e:2a:e5:d9:d6:ef:77:40:0f: 25:73:62:67:8b:40:d3:da:f7:58:c4:fe:f6:a2:1b: 77:03:16:1a:1c:a1:4b:eb:37:e3:28:d5:43:90:5b: cd:5f:72:16:1b:ba:65:05:0c:1d:21:71:53:52:e5: 1b:56:f3:88:73:5f:c9:02:20:6e:fe:3a:1c:23:d6: 4e:90:cd:01:a8:40:64:21:f6:4c:a0:64:45:8b:2f: d1:d5:12:d1:d0:f7:57:16:de:3f:d6:62:72:72:54: cd:4c:cc:23:9b:20:49:cb:69:0f:fc:d8:8e:4e:b1: c7:7d:a6:9a:ec:00:4e:4d:6a:01:6c:54:d1:1f:61: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:97:9A:B4:3C:28:5A:32:BB:B7:35:EB:D1:21:0E:4B:22:35:13:0A X509v3 Authority Key Identifier: keyid:12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:7a:3c:12:ac:70:50:5f:90:f3:64:97:55:c3:2c:7c:da:62: 8b:02:cd:c8:df:6d:fc:e5:3a:74:59:80:1a:a4:a5:7e:83:fd: 49:11:49:13:85:af:70:9e:fe:b5:7b:7c:14:9a:3c:a4:09:52: 26:80:2b:c0:61:40:e8:ac:0b:42:6f:24:d9:89:85:1a:c0:9b: 9f:18:1c:e0:d5:b9:73:60:6c:ac:8e:fb:e7:4b:0f:e6:4c:4f: b5:86:4b:30:de:2a:e9:43:52:45:53:ae:ff:3e:36:af:bf:d4: a5:73:29:9f:fb:8c:f2:93:f5:1b:73:9b:7b:4b:af:89:ef:93: 81:c2:cc:4e:63:02:3d:35:5c:d6:95:29:ef:08:4b:c8:0a:79: 25:9e:73:70:40:70:33:f2:8a:b4:5e:26:0c:f4:2d:f0:79:3f: e0:92:20:7f:d7:25:ef:92:40:7a:59:97:20:95:e7:1b:95:6c: 71:cb:96:86:98:c1:15:5d:47:b9:3d:50:bb:d5:d7:47:8e:16: e5:cc:3e:3d:52:2f:97:ac:46:be:44:36:96:4b:7a:28:57:47: 25:2a:44:2a:29:ef:90:07:13:5c:15:5e:e0:7d:b5:00:ba:b1: e1:4f:c0:ed:34:87:20:01:db:aa:57:01:3b:7a:c4:55:77:17: 61:47:3d:15 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkFGRjExMC8GA1UEBRMoMTIyMzgwMzg2NDMwQUZENjNGMzY0OTQ0NzY0RTFCMzQx ODYzRDBEQTAeFw0yNTA5MTkwNzU4NThaFw0yNTA5MjYwNzU4NThaMBgxFjAUBgNV BAMTDTY4Y2QwZDQyLWI1N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWyrJgDH97TEO+OFAYqC0IXvO8i4MFutRlrU1elzb0TWHokbPBEJzuZR7EsE6S aE1XTQi1V8kb5Z4oNl+Jwnz6ckLYLUTxRm1KICJGTfhYl0aMaUyL7mKV9+dzD9Z4 LjUdpqBFhq5BtofGCmXY882BPz6RXO4hRX8ykg052A4q5dnW73dADyVzYmeLQNPa 91jE/vaiG3cDFhocoUvrN+Mo1UOQW81fchYbumUFDB0hcVNS5RtW84hzX8kCIG7+ Ohwj1k6QzQGoQGQh9kygZEWLL9HVEtHQ91cW3j/WYnJyVM1MzCObIEnLaQ/82I5O scd9pprsAE5NagFsVNEfYZPvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbZeatDwo WjK7tzXr0SEOSyI1EwowHwYDVR0jBBgwFoAUEiOAOGQwr9Y/NklEdk4bNBhj0Now DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QUZGLzNCN0IzMUI2MTRE ODExRjBBMzdFQzA0RUM0RjlBRTAyL0VpT0FPR1F3cjlZX05rbEVkazRiTkJoajBO by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWlPQU9HUXdyOVlfTmtsRWRrNGJOQmhqME5vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QUZGLzNCN0IzMUI2MTREODExRjBBMzdFQzA0RUM0RjlBRTAyL0VpT0FPR1F3cjlZ X05rbEVkazRiTkJoajBOby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGF6PBKscFBfkPNkl1XDLHzaYosCzcjfbfzlOnRZgBqkpX6D/UkRSROF r3Ce/rV7fBSaPKQJUiaAK8BhQOisC0JvJNmJhRrAm58YHODVuXNgbKyO++dLD+ZM T7WGSzDeKulDUkVTrv8+Nq+/1KVzKZ/7jPKT9Rtzm3tLr4nvk4HCzE5jAj01XNaV Ke8IS8gKeSWec3BAcDPyirReJgz0LfB5P+CSIH/XJe+SQHpZlyCV5xuVbHHLloaY wRVdR7k9ULvV10eOFuXMPj1SL5esRr5ENpZLeihXRyUqRCop75AHE1wVXuB9tQC6 seFPwO00hyAB26pXATt6xFV3F2FHPRU= -----END CERTIFICATE-----Generated at Fri Sep 19 17:30:59 2025 by rpki-client