$ rpki-client -vvf rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft File: esbv-wTCtYD1pWtqdGzf4FOvap4.mft (raw, json) Hash identifier: UU2+dltcFrQwp+75fhYrSAglfr2tFAeeyk+zkFg+QnI= Subject key identifier: A4:A6:7A:08:A5:99:D4:64:40:6D:6C:04:78:58:4F:5D:99:77:A9:72 Authority key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E Certificate issuer: /CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E Certificate serial: 0B1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft Manifest number: 0B0B Signing time: Sun 24 Aug 2025 19:21:12 +0000 Manifest this update: Sun 24 Aug 2025 19:21:12 +0000 Manifest next update: Sun 31 Aug 2025 19:21:12 +0000 Files and hashes: 1: esbv-wTCtYD1pWtqdGzf4FOvap4.crl (hash: OrGXvj0bfjXaahbW21Kh9hx+ospdT64EwnAN2mYzWHs=) 2: D9C33050560B11EDA1636E52C4F9AE02.roa (hash: RuSZgMZ4QoYvu76O7V8W4nab76a8ye3lfqmWyPmtPvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2847 (0xb1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91747E1, serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E Validity Not Before: Aug 24 19:21:12 2025 GMT Not After : Aug 31 19:21:12 2025 GMT Subject: CN=68ab6628-f554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:69:2c:e0:23:ca:2c:b2:e9:a6:b8:29:3b: 0b:43:8f:29:c9:db:a8:63:88:1b:e2:1f:3c:8c:07: f7:34:36:2a:a9:4e:0d:3d:c2:a9:7b:20:db:df:45: 45:3d:d3:6e:ac:bb:7c:e2:c7:1e:a1:0e:94:b3:20: 00:0e:48:c6:86:81:19:57:a2:b4:3b:a4:8c:e6:dd: f7:c3:75:c4:6d:08:91:45:f3:0a:23:f4:9a:7e:f4: 24:d7:15:80:a3:9e:aa:64:1e:3b:49:ac:2d:15:62: 51:f4:cb:3a:b8:af:24:06:ba:2d:07:ff:8a:2f:7f: 2c:d1:a7:a6:9e:cb:e5:dd:82:f9:a5:86:1b:6d:37: 38:30:79:49:a7:ea:2a:ca:f4:59:e0:da:8a:be:80: 72:c3:5d:41:06:c9:85:0a:a9:55:07:a2:0a:64:51: e3:c2:77:15:b2:3d:bc:7b:98:06:0f:b8:45:91:e9: 72:27:14:d2:c6:87:b3:0c:69:d1:ef:ef:bc:ab:07: b4:a7:41:67:29:c2:ba:19:0c:68:d3:36:94:22:c2: 85:a3:ee:bc:c1:48:2d:f3:f7:90:33:bf:88:82:4b: 9f:5d:d5:2f:5a:9d:10:be:0d:3d:f8:80:15:21:9d: 63:3c:41:d5:67:0a:9b:e0:16:a6:86:b6:19:9d:63: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A6:7A:08:A5:99:D4:64:40:6D:6C:04:78:58:4F:5D:99:77:A9:72 X509v3 Authority Key Identifier: keyid:7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:81:4f:08:b5:19:09:71:78:f8:81:8b:d9:7c:b8:d0:75:db: 52:b5:2c:5e:ba:36:68:05:48:4a:10:38:49:eb:7d:40:6b:c5: b8:b7:0f:ee:06:89:60:23:bf:67:a6:17:d4:b9:e6:73:41:df: 3e:98:d4:f4:21:0b:c9:a5:4b:4b:5c:b3:89:a6:24:cb:47:32: 1a:35:35:38:ff:5b:13:59:56:9d:04:9a:1c:36:ce:b1:a6:23: 82:c3:2f:00:e1:cf:55:a9:77:f4:c7:e7:62:1b:23:d8:49:e2: b3:48:5a:18:68:42:a3:4c:b8:fa:da:b8:be:1d:e5:17:d5:82: f7:c2:50:a3:34:6c:36:44:60:7e:02:9e:85:c1:6c:f8:48:db: 17:7a:fc:ab:e8:9c:3f:ea:9d:a6:4f:12:a8:a6:63:0c:fa:95: 23:46:e3:ab:6c:53:2b:a3:b4:4a:00:7a:57:81:54:78:41:b3: 87:10:45:28:1e:a8:09:2f:18:16:51:90:bd:56:dd:ff:17:3b: c9:ab:08:1d:cc:1b:c2:2a:5b:5c:f2:60:d2:01:1a:f8:c7:09: 25:29:bc:74:4b:b8:34:60:d0:c5:10:31:7d:72:86:b4:7c:9a: 68:95:69:c1:c7:2c:f8:42:58:8d:14:32:cc:59:4e:a3:d7:b8: 47:2a:a1:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ3RTExMTAvBgNVBAUTKDdBQzZFRkZCMDRDMkI1ODBGNUE1NkI2QTc0NkNERkUw NTNBRjZBOUUwHhcNMjUwODI0MTkyMTEyWhcNMjUwODMxMTkyMTEyWjAYMRYwFAYD VQQDEw02OGFiNjYyOC1mNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyidpLOAjyiyy6aa4KTsLQ48pyduoY4gb4h88jAf3NDYqqU4NPcKpeyDb30VF PdNurLt84sceoQ6UsyAADkjGhoEZV6K0O6SM5t33w3XEbQiRRfMKI/SafvQk1xWA o56qZB47SawtFWJR9Ms6uK8kBrotB/+KL38s0aemnsvl3YL5pYYbbTc4MHlJp+oq yvRZ4NqKvoByw11BBsmFCqlVB6IKZFHjwncVsj28e5gGD7hFkelyJxTSxoezDGnR 7++8qwe0p0FnKcK6GQxo0zaUIsKFo+68wUgt8/eQM7+IgkufXdUvWp0Qvg09+IAV IZ1jPEHVZwqb4BamhrYZnWOypwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSmegil mdRkQG1sBHhYT12Zd6lyMB8GA1UdIwQYMBaAFHrG7/sEwrWA9aVranRs3+BTr2qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDdFMS9DRTM0NzJERTRD QzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdUQ3RZRDFwV3RxZEd6ZjRGT3Zh cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzYnYtd1RDdFlEMXBXdHFkR3pmNEZPdmFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDdFMS9DRTM0NzJERTRDQzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdUQ3RZ RDFwV3RxZEd6ZjRGT3ZhcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAgU8ItRkJcXj4gYvZfLjQddtStSxeujZoBUhKEDhJ631Aa8W4tw/u BolgI79nphfUueZzQd8+mNT0IQvJpUtLXLOJpiTLRzIaNTU4/1sTWVadBJocNs6x piOCwy8A4c9VqXf0x+diGyPYSeKzSFoYaEKjTLj62ri+HeUX1YL3wlCjNGw2RGB+ Ap6FwWz4SNsXevyr6Jw/6p2mTxKopmMM+pUjRuOrbFMro7RKAHpXgVR4QbOHEEUo HqgJLxgWUZC9Vt3/FzvJqwgdzBvCKltc8mDSARr4xwklKbx0S7g0YNDFEDF9coa0 fJpolWnBxyz4QliNFDLMWU6j17hHKqFy -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:27 2025 by rpki-client