$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft File: EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json) Hash identifier: 0HC/YnWGQhyiuGtXPtQr1YNWQb7gsdd8lEhrQ9+jziY= Subject key identifier: 38:A9:17:33:71:B6:EF:83:6B:B8:5E:3B:07:15:A9:1C:CA:BF:29:AB Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 Certificate issuer: /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft Manifest number: 06BE Signing time: Mon 08 Sep 2025 23:18:16 +0000 Manifest this update: Mon 08 Sep 2025 23:18:16 +0000 Manifest next update: Mon 15 Sep 2025 23:18:16 +0000 Files and hashes: 1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: sgBjpzXIwBL0xkS1OgJFyGlSzKIrGh76TkYgI9CKpkg=) 2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: HpV9alDLFaENoEQRBDM1U8HrLENNv7Hd/Jy118wd7FE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019 Validity Not Before: Sep 8 23:18:16 2025 GMT Not After : Sep 15 23:18:16 2025 GMT Subject: CN=68bf6438-edb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:39:1b:66:a8:1f:1b:85:88:d9:b0:c5:f4: 14:1a:91:9c:a6:7a:8a:43:50:59:70:f1:e1:47:7c: fb:d2:06:47:83:1c:70:da:c4:90:a6:03:d7:39:dc: 69:a4:b0:6e:7c:ea:28:f5:21:3c:5d:0c:62:cc:f3: 39:fe:5b:e8:c4:48:67:07:fb:3d:3d:3e:a0:e8:21: 91:6d:71:69:3f:7e:aa:8b:0f:bb:54:11:a2:27:26: d1:ba:12:1f:12:a7:44:7a:91:8d:7c:86:00:85:96: 24:f8:23:ff:35:cb:6c:dc:e7:58:5d:ff:d2:74:1d: c2:6c:33:81:34:68:fd:eb:67:52:14:01:a6:cf:2b: b7:fd:95:2e:ab:0b:00:f1:f6:1c:df:b5:ac:e2:6a: cc:91:3c:c2:67:35:72:02:d7:50:fc:41:b3:94:fc: a8:69:a4:7d:03:7c:69:01:e9:ad:7c:0f:46:e7:05: d5:e1:eb:c7:2b:58:20:7f:ca:75:49:9b:1f:6b:55: 11:53:15:4f:70:6f:51:57:9e:e8:a5:a4:0f:de:1d: 49:f9:54:05:5f:cb:9d:d9:22:58:aa:e3:02:f5:e3: e1:7a:a2:05:12:f7:d4:f1:d5:84:1b:0a:9a:df:de: d6:62:7a:98:50:e6:17:05:aa:b1:a9:6a:3d:a5:c9: 63:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A9:17:33:71:B6:EF:83:6B:B8:5E:3B:07:15:A9:1C:CA:BF:29:AB X509v3 Authority Key Identifier: keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fd:fe:c5:71:4c:97:d0:08:d9:e5:95:d8:dd:ae:f8:da:16: 1e:37:8e:61:43:a0:c9:c7:b5:c5:1c:ed:73:b3:db:79:ac:0e: 36:0e:01:ce:1b:da:59:cb:36:d3:43:36:db:38:77:64:cc:eb: a8:2f:a2:3c:f8:76:ef:1f:1b:d3:8c:22:42:a3:1c:24:6e:19: 39:e4:95:6f:bb:f3:99:ce:54:f6:7d:6b:13:fc:0d:f1:8b:8a: c0:3f:68:a7:49:8d:d0:be:61:b0:18:f9:60:f8:09:75:0f:07: d1:25:0f:0e:2c:db:2e:1e:05:c2:a6:d9:b6:04:f1:32:a2:f9: 08:47:26:9e:e0:64:66:be:bc:c3:a3:23:2f:cf:38:c0:d5:62: 1a:a6:7e:12:b3:14:db:4b:56:45:20:28:5b:01:92:ab:a0:80: 24:d4:ce:26:fd:a4:bd:f0:42:69:1a:b3:11:bc:86:af:eb:2b: e1:1a:a1:47:ef:9c:a3:d7:cd:ae:cb:f2:d5:bd:05:c5:96:9f: ec:be:21:ff:1c:fd:36:9d:32:77:f3:58:3b:01:53:50:ed:1e: 53:f3:4f:8a:9a:0b:d7:97:36:3e:be:ce:bf:97:64:e7:83:0e: 23:8d:4e:ff:f3:1d:28:64:4b:c6:70:52:1b:3f:6c:52:5b:74: b5:71:d2:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDEyQzQ4OTcyRjI2RDA2N0E5RjIxQjRDNEZBMEM4NjYz M0UwMkMwMTkwHhcNMjUwOTA4MjMxODE2WhcNMjUwOTE1MjMxODE2WjAYMRYwFAYD VQQDEw02OGJmNjQzOC1lZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmk5G2aoHxuFiNmwxfQUGpGcpnqKQ1BZcPHhR3z70gZHgxxw2sSQpgPXOdxp pLBufOoo9SE8XQxizPM5/lvoxEhnB/s9PT6g6CGRbXFpP36qiw+7VBGiJybRuhIf EqdEepGNfIYAhZYk+CP/Ncts3OdYXf/SdB3CbDOBNGj962dSFAGmzyu3/ZUuqwsA 8fYc37Ws4mrMkTzCZzVyAtdQ/EGzlPyoaaR9A3xpAemtfA9G5wXV4evHK1ggf8p1 SZsfa1URUxVPcG9RV57opaQP3h1J+VQFX8ud2SJYquMC9ePheqIFEvfU8dWEGwqa 397WYnqYUOYXBaqxqWo9pclj3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDipFzNx tu+Da7heOwcVqRzKvymrMB8GA1UdIwQYMBaAFBLEiXLybQZ6nyG0xPoMhmM+AsAZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi9FREU0OEI5Q0VF MjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJucWZJYlRFLWd5R1l6NEN3 QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VzU0pjdkp0Qm5xZkliVEUtZ3lHWXo0Q3dCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi9FREU0OEI5Q0VFMjkxMUVCODA4NEI2MzhDNEY5QUUwMi9Fc1NKY3ZKdEJu cWZJYlRFLWd5R1l6NEN3QmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL/f7FcUyX0AjZ5ZXY3a742hYeN45hQ6DJx7XFHO1zs9t5rA42DgHO G9pZyzbTQzbbOHdkzOuoL6I8+HbvHxvTjCJCoxwkbhk55JVvu/OZzlT2fWsT/A3x i4rAP2inSY3QvmGwGPlg+Al1DwfRJQ8OLNsuHgXCptm2BPEyovkIRyae4GRmvrzD oyMvzzjA1WIapn4SsxTbS1ZFIChbAZKroIAk1M4m/aS98EJpGrMRvIav6yvhGqFH 75yj182uy/LVvQXFlp/sviH/HP02nTJ381g7AVNQ7R5T80+KmgvXlzY+vs6/l2Tn gw4jjU7/8x0oZEvGcFIbP2xSW3S1cdJp -----END CERTIFICATE-----Generated at Tue Sep 9 09:02:45 2025 by rpki-client