$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft File: EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json) Hash identifier: 19xd41jAzBG6m2E7GH2IsXuOyiqX2hy+bnz5j/q5Ek8= Subject key identifier: 0A:C0:9A:19:49:C2:BE:A6:09:65:B0:12:75:4B:43:AA:37:6E:2B:6B Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 Certificate issuer: /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft Manifest number: AE Signing time: Mon 21 Jul 2025 06:11:41 +0000 Manifest this update: Mon 21 Jul 2025 06:11:40 +0000 Manifest next update: Mon 28 Jul 2025 06:11:40 +0000 Files and hashes: 1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: gvSxlGGLWDAu/DQYAeA1sKNEt8vy28foSAYX3VtWACY=) 2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: iVgLpNzw9WvLZDCrNCeZKcdKAVuHQLIqgkettJkRmpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9 Validity Not Before: Jul 21 06:11:40 2025 GMT Not After : Jul 28 06:11:40 2025 GMT Subject: CN=687dda1c-192f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:34:90:4b:5d:13:6a:08:e3:7a:7c:43:60: 0a:6b:81:cc:53:51:70:13:94:83:ce:a7:a9:66:b4: c2:1f:c3:c4:15:95:dd:2c:77:fe:fe:aa:3f:df:d2: 2a:36:e6:e3:63:b2:2a:37:ee:23:1a:10:fd:e7:95: 73:1c:24:cc:e6:79:7e:7b:70:c4:c0:c2:64:c6:25: 58:ea:50:63:af:10:77:7b:98:fb:2a:e8:e2:c6:57: f3:c8:5e:20:9c:7d:a9:3f:61:f8:8b:36:70:2e:1c: 31:4a:2f:63:7e:e4:b1:86:8d:bb:1b:21:ac:50:ff: 22:4e:b6:bc:1d:f7:37:b9:49:1f:df:32:aa:4c:11: a3:3c:4f:80:71:1e:cf:1f:7a:72:4c:96:18:4d:d3: e2:cb:6d:f4:11:71:b0:67:9f:02:a5:3b:2c:1a:aa: 53:96:e0:75:60:d7:33:78:ab:09:0c:dc:44:9f:a4: 94:ea:70:68:49:e9:05:0d:07:5a:97:76:df:79:42: 31:88:18:81:40:b8:0d:fb:78:0a:85:0c:16:65:83: 06:62:bd:ba:74:fd:0a:39:ff:61:57:2e:ac:dd:68: b9:6c:af:ed:d6:17:e5:21:a1:b7:13:de:81:1c:28: aa:7d:03:32:9f:d0:97:41:25:6a:a5:6a:bf:e4:81: ec:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C0:9A:19:49:C2:BE:A6:09:65:B0:12:75:4B:43:AA:37:6E:2B:6B X509v3 Authority Key Identifier: keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:9b:22:6a:a2:39:ca:03:01:dc:e8:9d:16:6c:c6:fb:3a:9e: 4c:8f:c0:6d:ea:cb:60:f4:33:fc:e6:d3:bd:82:32:60:cb:52: e3:61:64:f2:9d:42:9c:32:85:60:dc:d3:1e:39:da:e6:28:c5: 1a:f1:d3:80:d5:80:b0:2a:ff:66:0c:62:d9:7a:53:40:a0:3e: b0:74:97:e4:b3:72:e5:51:ce:d7:89:9c:20:73:95:e3:61:ad: 11:f4:95:cf:e4:ff:a9:df:1d:9d:13:d6:b7:6c:77:07:1c:c2: 94:dd:ce:2b:ec:83:de:86:0f:1b:38:5b:b5:a7:05:eb:45:24: cc:6c:0d:0d:33:f2:19:b2:1d:5d:f8:79:ea:03:a9:83:09:e5: df:b0:03:c1:fd:e6:9b:b0:83:3b:8b:80:ae:8f:a3:ce:5c:f8: cd:07:cf:ff:d8:d8:18:04:83:9f:73:31:59:55:f9:ab:59:52: ff:27:85:4a:18:5e:82:38:f4:1a:8a:50:c1:30:ac:f1:a3:d9: a8:e6:47:36:76:ad:b0:60:b9:eb:3c:a2:1e:12:dc:17:81:86: 1c:dd:ca:07:b2:54:98:e8:c0:2e:db:21:d5:c5:fc:b9:a7:94: 16:81:f3:ec:60:13:ee:e5:9c:22:e3:c2:30:a9:5d:ce:cc:b0: 21:a1:0d:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU5NjQxMTAvBgNVBAUTKDExNkYwQTJBNkE0QjkyNDJENzdBMjUwQjcxNzAwODE1 RDI5OEREQjkwHhcNMjUwNzIxMDYxMTQwWhcNMjUwNzI4MDYxMTQwWjAYMRYwFAYD VQQDEw02ODdkZGExYy0xOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0o0kEtdE2oI43p8Q2AKa4HMU1FwE5SDzqepZrTCH8PEFZXdLHf+/qo/39Iq NubjY7IqN+4jGhD955VzHCTM5nl+e3DEwMJkxiVY6lBjrxB3e5j7KujixlfzyF4g nH2pP2H4izZwLhwxSi9jfuSxho27GyGsUP8iTra8Hfc3uUkf3zKqTBGjPE+AcR7P H3pyTJYYTdPiy230EXGwZ58CpTssGqpTluB1YNczeKsJDNxEn6SU6nBoSekFDQda l3bfeUIxiBiBQLgN+3gKhQwWZYMGYr26dP0KOf9hVy6s3Wi5bK/t1hflIaG3E96B HCiqfQMyn9CXQSVqpWq/5IHs7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArAmhlJ wr6mCWWwEnVLQ6o3bitrMB8GA1UdIwQYMBaAFBFvCipqS5JC13olC3FwCBXSmN25 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTk2NC9GNTMxRURFNDVC MTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtrTFhlaVVMY1hBSUZkS1kz YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VXOEtLbXBMa2tMWGVpVUxjWEFJRmRLWTNiay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTk2NC9GNTMxRURFNDVCMTQxMUVGQUM5NzQ0NjFDNEY5QUUwMi9FVzhLS21wTGtr TFhlaVVMY1hBSUZkS1kzYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtmyJqojnKAwHc6J0WbMb7Op5Mj8Bt6stg9DP85tO9gjJgy1LjYWTy nUKcMoVg3NMeOdrmKMUa8dOA1YCwKv9mDGLZelNAoD6wdJfks3LlUc7XiZwgc5Xj Ya0R9JXP5P+p3x2dE9a3bHcHHMKU3c4r7IPehg8bOFu1pwXrRSTMbA0NM/IZsh1d +HnqA6mDCeXfsAPB/eabsIM7i4Cuj6POXPjNB8//2NgYBIOfczFZVfmrWVL/J4VK GF6COPQailDBMKzxo9mo5kc2dq2wYLnrPKIeEtwXgYYc3coHslSY6MAu2yHVxfy5 p5QWgfPsYBPu5Zwi48IwqV3OzLAhoQ0m -----END CERTIFICATE-----Generated at Wed Jul 23 02:29:24 2025 by rpki-client