$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft File: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json) Hash identifier: rsnKIVFY/6UB91GipltlNELetpJLKgKjNxMckXI6m6M= Subject key identifier: 56:2D:D5:29:72:92:D0:F3:58:94:85:92:05:40:44:53:B0:A1:68:4B Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Certificate serial: 3545 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft Manifest number: 3504 Signing time: Sat 06 Sep 2025 14:45:39 +0000 Manifest this update: Sat 06 Sep 2025 14:45:39 +0000 Manifest next update: Sat 13 Sep 2025 14:45:39 +0000 Files and hashes: 1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: kZotnl70TvU/7Jm1+siBhgmWbpVgFlCeQGajOfo6XL4=) 2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: fT98Wy1t5VScFWJuQupk2LhedSGkV+ojkzEZelCkDWM=) 3: CAE324148A3311F091DEBC42C4F9AE02.roa (hash: 1GJIa0xCy7ffT8GF61jfRTkKOAbXSUpcRhyVPnWT4/w=) 4: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: dGU6CJvrS/pXM1BPExEcoLwBj3XVO3Qw6BjkQ3c5uZ8=) 5: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: d/7DMtiXfQBwX+8qOXb96W9MkSduRe+bpauiOZ+JfzU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13637 (0x3545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2 Validity Not Before: Sep 6 14:45:39 2025 GMT Not After : Sep 13 14:45:39 2025 GMT Subject: CN=68bc4913-22e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:f9:fb:a2:95:cb:d8:85:3b:d0:ee:38:f2: 9d:87:4d:fe:d8:2f:a1:00:c3:13:8f:5b:4a:2c:83: c2:69:2c:27:52:a1:9f:43:b6:c1:0f:ed:c2:40:1c: c5:65:0c:8b:a5:f6:e5:cf:cf:40:49:be:92:81:c6: aa:fa:40:a8:51:52:41:ca:b8:1d:c7:9b:4e:5b:60: 2d:79:2f:f9:6e:9b:32:ee:77:57:45:09:bd:69:b1: 04:e7:8f:c4:1e:74:a9:2a:eb:a5:1f:d2:0b:7b:dd: d9:65:75:60:1f:81:c1:8d:ae:de:8e:34:1a:b8:8f: 4c:8c:86:79:91:bb:b6:78:49:49:77:28:1f:bb:61: e1:4c:5c:6f:81:52:bb:80:7d:86:57:a8:78:5d:dd: c3:d0:ba:9e:ef:94:b6:a7:76:94:d4:e1:7a:5f:f0: d0:79:ca:47:81:72:f7:76:74:58:3c:6f:fc:b5:05: 53:b0:05:3c:f1:83:f0:63:b5:d5:79:c7:1f:a5:25: fa:da:22:b1:71:30:22:12:83:b2:b8:54:56:8e:0d: de:7b:a7:80:19:78:38:51:fc:e4:77:39:52:89:98: 2b:58:c6:c4:00:90:a9:b2:8f:4d:36:00:93:a4:15: ee:4c:3b:5b:47:ca:53:4b:4b:d9:1d:07:37:3d:0c: f5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2D:D5:29:72:92:D0:F3:58:94:85:92:05:40:44:53:B0:A1:68:4B X509v3 Authority Key Identifier: keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b8:57:72:31:4d:8d:37:7e:61:73:86:d6:26:13:4b:24:61: c3:6f:78:88:18:e0:81:c0:23:2f:10:c5:f3:c8:f0:fd:0d:18: 13:cb:13:fa:3f:b2:77:7b:70:15:33:08:bc:ef:65:0b:71:ba: e3:4a:ca:2f:51:39:bf:e1:48:1c:b0:d2:fe:d4:f8:26:31:db: 39:b5:f2:79:a9:35:57:03:df:df:93:d5:5e:80:ea:09:62:1e: 6c:d5:10:cd:26:58:c6:6d:e3:f2:a2:b5:d8:c4:50:25:ba:eb: cd:45:63:57:8a:29:bd:a5:79:49:8f:f6:2d:04:03:1b:2e:f2: a4:18:ac:89:44:a6:00:29:9a:ba:ee:a3:69:aa:b2:5e:0a:6c: cc:2c:5d:41:30:33:85:1a:10:d2:cc:b1:0f:9c:ae:43:e0:22: 70:bc:02:2f:80:ee:a9:d5:6d:44:45:13:40:8b:0b:97:cd:82: 29:3a:de:32:4c:c5:e8:9b:c6:f0:a8:ad:98:c7:7d:1b:c0:30: f9:2f:ae:a3:1d:d8:96:12:2a:30:2a:63:d6:af:cb:4c:54:7f: 70:b3:27:1d:77:2b:6a:03:d7:69:ab:e1:e2:18:76:02:ad:9f: 0a:b3:f4:0c:92:4b:10:49:18:38:2d:1c:04:ff:e5:12:68:cc: 99:cb:be:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZGQjAxMTAvBgNVBAUTKDEzMjQwNDMwMjFCQjQ1RDdGRjY2RjIwQUZDNjgzOTM0 MzEzMEMzRjIwHhcNMjUwOTA2MTQ0NTM5WhcNMjUwOTEzMTQ0NTM5WjAYMRYwFAYD VQQDEw02OGJjNDkxMy0yMmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3v5+6KVy9iFO9DuOPKdh03+2C+hAMMTj1tKLIPCaSwnUqGfQ7bBD+3CQBzF ZQyLpfblz89ASb6Sgcaq+kCoUVJByrgdx5tOW2AteS/5bpsy7ndXRQm9abEE54/E HnSpKuulH9ILe93ZZXVgH4HBja7ejjQauI9MjIZ5kbu2eElJdygfu2HhTFxvgVK7 gH2GV6h4Xd3D0Lqe75S2p3aU1OF6X/DQecpHgXL3dnRYPG/8tQVTsAU88YPwY7XV eccfpSX62iKxcTAiEoOyuFRWjg3ee6eAGXg4UfzkdzlSiZgrWMbEAJCpso9NNgCT pBXuTDtbR8pTS0vZHQc3PQz1mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYt1Sly ktDzWJSFkgVARFOwoWhLMB8GA1UdIwQYMBaAFBMkBDAhu0XX/2byCvxoOTQxMMPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkZCMC9FNTU3QzAwMDFE OTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1JkZl9adklLX0dnNU5ERXd3 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V5UUVNQ0c3UmRmX1p2SUtfR2c1TkRFd3dfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkZCMC9FNTU3QzAwMDFEOTIxMUUyOTMzQTIxRjYwOEIwMkNEMi9FeVFFTUNHN1Jk Zl9adklLX0dnNU5ERXd3X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADuFdyMU2NN35hc4bWJhNLJGHDb3iIGOCBwCMvEMXzyPD9DRgTyxP6 P7J3e3AVMwi872ULcbrjSsovUTm/4UgcsNL+1PgmMds5tfJ5qTVXA9/fk9VegOoJ Yh5s1RDNJljGbePyorXYxFAluuvNRWNXiim9pXlJj/YtBAMbLvKkGKyJRKYAKZq6 7qNpqrJeCmzMLF1BMDOFGhDSzLEPnK5D4CJwvAIvgO6p1W1ERRNAiwuXzYIpOt4y TMXom8bwqK2Yx30bwDD5L66jHdiWEiowKmPWr8tMVH9wsycddytqA9dpq+HiGHYC rZ8Ks/QMkksQSRg4LRwE/+USaMyZy745 -----END CERTIFICATE-----Generated at Sun Sep 7 10:53:42 2025 by rpki-client