$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json) Hash identifier: 66NXt82gTAizZrdy/XQQzCzSG3kNZMsEk4e/T3QRID0= Subject key identifier: 74:C2:94:F6:83:FE:6B:4A:C0:45:F8:E1:16:F3:A3:E4:7B:98:5C:A6 Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft Manifest number: 068B Signing time: Thu 24 Jul 2025 23:38:58 +0000 Manifest this update: Thu 24 Jul 2025 23:38:57 +0000 Manifest next update: Thu 31 Jul 2025 23:38:57 +0000 Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: 38dpqGHyPbIYc2lMA/kFY7mCtnIo0GuMhYf3jFWCrFk=) 2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: dJfXhzg8XYwoUOs2sQdFfnXRTK5+51aUZ+Zq8zrXhMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 23:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: Jul 24 23:38:57 2025 GMT Not After : Jul 31 23:38:57 2025 GMT Subject: CN=6882c412-3189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:01:1b:c1:d8:03:43:99:24:6e:6b:c9:3e:f9: 8c:4c:78:51:25:be:23:c1:6e:a1:a0:73:2f:e4:01: 99:c2:83:60:28:33:eb:57:0e:b9:3a:04:96:e4:39: df:be:8d:a0:d5:2c:c2:2f:49:08:aa:1c:05:17:6b: db:eb:b4:f1:14:86:1e:c6:f6:24:7f:6b:5e:b2:f5: 5a:36:4f:e4:3f:43:68:b4:97:ab:87:6e:70:59:f9: c3:7e:74:d0:c9:7c:19:99:31:67:93:82:a7:3b:9d: f4:d9:62:e9:92:7d:f3:b6:a8:b3:2e:4c:60:b7:ec: 83:bc:25:eb:59:88:40:1d:db:74:86:75:d1:69:96: a4:45:a3:b8:d6:b1:6a:99:98:1f:29:71:d7:5f:2c: e4:b9:c9:8c:b9:5e:8d:1b:51:b2:38:9e:ac:e2:f8: 3d:f0:b9:38:7d:aa:ae:54:b0:7d:14:23:72:3c:e1: 26:06:6e:49:68:50:2a:da:f1:b3:55:4e:c9:a4:cd: e8:0b:a5:f9:e9:eb:85:91:a7:0a:8e:cd:bf:c3:e6: 71:99:fe:d4:39:d7:e7:fd:d2:25:12:2e:f2:e2:d8: 33:fe:cd:38:66:4e:7f:e0:85:45:9f:46:e9:75:f5: bc:10:f1:85:fe:f8:27:a7:d3:b4:cb:85:dc:95:1c: 15:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C2:94:F6:83:FE:6B:4A:C0:45:F8:E1:16:F3:A3:E4:7B:98:5C:A6 X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:3f:9c:e8:67:f3:8e:87:24:6c:3b:44:83:13:dd:3a:7d:21: 0c:b9:f8:40:8e:99:e4:ad:e1:64:34:65:35:c7:e7:b5:74:8d: b8:e1:cc:d2:f3:c5:56:55:7e:fe:02:65:03:e9:22:11:4a:8e: 8d:cd:9b:36:a2:85:67:35:5f:80:75:1b:49:dd:25:9e:f6:a5: 9b:e6:98:57:5a:b4:88:c6:71:b4:9c:48:3c:bb:32:27:9d:2a: b0:8c:4d:7e:44:82:27:47:5f:b8:01:57:81:4d:96:1d:2a:7c: c5:4c:05:58:60:f9:78:bf:7c:a6:ae:2b:f9:a2:86:09:8a:23: 01:2b:6a:c3:ed:9b:1f:45:f4:ff:dd:41:54:78:f0:a0:98:ba: 48:32:16:1b:9e:f5:0b:db:2f:58:de:1b:e5:69:5e:24:e6:a0: dc:2e:6f:eb:58:01:31:42:28:74:fe:aa:0e:3e:90:c0:91:48: d8:40:ad:79:0b:c6:99:72:54:ee:97:5a:a6:b4:ee:6c:3e:2f: 6b:19:45:43:31:76:c5:5b:e2:df:63:fb:17:ec:04:0a:3a:45: 30:9d:d7:9e:ab:cf:e2:00:8a:bc:fc:fa:2d:04:c4:b0:35:c0: de:5b:8a:18:77:05:db:7b:7c:56:2f:63:ab:89:db:3f:c1:02: 84:8b:11:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz M0UwMkMwMTkwHhcNMjUwNzI0MjMzODU3WhcNMjUwNzMxMjMzODU3WjAYMRYwFAYD VQQDEw02ODgyYzQxMi0zMTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAEbwdgDQ5kkbmvJPvmMTHhRJb4jwW6hoHMv5AGZwoNgKDPrVw65OgSW5Dnf vo2g1SzCL0kIqhwFF2vb67TxFIYexvYkf2tesvVaNk/kP0NotJerh25wWfnDfnTQ yXwZmTFnk4KnO5302WLpkn3ztqizLkxgt+yDvCXrWYhAHdt0hnXRaZakRaO41rFq mZgfKXHXXyzkucmMuV6NG1GyOJ6s4vg98Lk4faquVLB9FCNyPOEmBm5JaFAq2vGz VU7JpM3oC6X56euFkacKjs2/w+Zxmf7UOdfn/dIlEi7y4tgz/s04Zk5/4IVFn0bp dfW8EPGF/vgnp9O0y4XclRwVMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTClPaD /mtKwEX44Rbzo+R7mFymMB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3 QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu cWZJYlRFLWd5R1l6NEN3QmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkP5zoZ/OOhyRsO0SDE906fSEMufhAjpnkreFkNGU1x+e1dI244czS 88VWVX7+AmUD6SIRSo6NzZs2ooVnNV+AdRtJ3SWe9qWb5phXWrSIxnG0nEg8uzIn nSqwjE1+RIInR1+4AVeBTZYdKnzFTAVYYPl4v3ymriv5ooYJiiMBK2rD7ZsfRfT/ 3UFUePCgmLpIMhYbnvUL2y9Y3hvlaV4k5qDcLm/rWAExQih0/qoOPpDAkUjYQK15 C8aZclTul1qmtO5sPi9rGUVDMXbFW+LfY/sX7AQKOkUwndeeq8/iAIq8/PotBMSw NcDeW4oYdwXbe3xWL2Orids/wQKEixEl -----END CERTIFICATE-----Generated at Fri Jul 25 22:55:06 2025 by rpki-client