$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft File: EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json) Hash identifier: +67tOFWokOvpml8RXFaJx1GFpR51l0WgIlaW6eNdkhI= Subject key identifier: 47:A9:3D:51:81:3C:4A:2F:2F:4F:54:3F:4B:4F:1A:E2:3F:8F:F8:F1 Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E Certificate issuer: /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Certificate serial: 124A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft Manifest number: 123E Signing time: Wed 20 Aug 2025 17:12:33 +0000 Manifest this update: Wed 20 Aug 2025 17:12:33 +0000 Manifest next update: Wed 27 Aug 2025 17:12:33 +0000 Files and hashes: 1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: DGM3n8MFsUr+rvdBZ/P0ZOL5sx1zaBILGDGPMqzMkB4=) 2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: NX0Uu06g9kaFwSmmKkUW0sgMJpCNI4RFhei0HlK1wt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 17:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4682 (0x124a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91833FF, serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E Validity Not Before: Aug 20 17:12:33 2025 GMT Not After : Aug 27 17:12:33 2025 GMT Subject: CN=68a60201-c682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:73:e9:d0:08:ad:ec:df:d4:1f:ae:80:46: 51:38:7a:fe:ae:c0:86:68:07:32:c7:03:ee:8c:86: 37:ae:df:89:66:1e:5c:76:00:98:fc:92:7a:6b:de: cb:87:4d:2e:69:30:3c:ff:af:cf:8d:5c:04:bd:ed: f6:29:37:87:aa:f1:1e:37:67:e3:e4:c5:c0:9f:85: 40:d1:d1:54:2c:9f:e2:0e:f7:fb:11:2f:84:92:00: 64:56:b9:6a:e6:41:f7:0c:d7:1a:be:19:c5:1d:2a: ff:f6:39:d8:16:b2:c9:24:16:4a:3c:a1:25:5e:93: 44:21:6e:48:0d:e3:df:3c:a7:24:27:35:5d:9c:fe: 24:fe:39:7d:d3:7d:2d:77:cc:1f:d4:8c:0b:b9:f5: 0b:53:ec:ff:11:e8:89:a9:49:3f:a5:1f:89:50:71: 78:4f:c0:79:1f:ce:64:6d:a6:b4:26:c5:12:43:5c: 5c:d3:ec:1e:ca:16:9e:a6:20:a7:3d:92:b9:cb:b8: 99:57:f7:e5:2c:3e:2b:43:c8:b8:98:57:fa:03:50: fe:b2:f0:a7:c6:e2:f8:99:36:21:94:27:75:76:9e: 6b:ca:18:4c:aa:8b:d1:54:f5:32:ec:b5:83:c9:8d: 27:ed:30:09:52:4b:47:14:52:93:00:98:db:ec:fd: df:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A9:3D:51:81:3C:4A:2F:2F:4F:54:3F:4B:4F:1A:E2:3F:8F:F8:F1 X509v3 Authority Key Identifier: keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d3:ca:74:cb:3f:b7:11:f7:00:42:35:1e:64:db:c8:20:8f: c8:88:b1:46:fc:cf:6a:8b:2a:23:f3:e2:fc:45:dd:93:96:73: 89:ac:6d:56:6b:59:92:9e:01:b7:2a:3f:0c:42:c1:1f:1f:fc: 2f:79:64:94:16:d0:ba:d2:10:b9:a9:09:6b:b9:e1:c7:ef:5a: a4:f3:7b:c1:5d:de:78:1a:80:3d:6b:a8:00:c3:ae:3a:ba:87: c6:80:2b:12:eb:02:53:d1:76:49:70:de:14:94:4f:db:95:0a: 95:23:50:63:a8:37:fa:c8:5f:90:13:24:50:da:d3:5b:9a:12: 5f:c3:7b:22:28:8b:75:8b:f3:9b:d3:e4:75:cf:58:c5:05:86: c8:06:52:c4:33:48:16:38:61:e8:e0:a1:a7:60:6a:b1:1c:4e: a0:b7:59:92:90:7e:b1:d0:54:2a:76:63:ed:a8:7e:41:a0:24: e4:82:88:5d:cc:75:c8:c9:0d:55:6d:91:12:30:f8:58:9c:75: e0:38:3e:37:64:33:29:41:47:14:fd:52:e9:a6:22:40:4f:af: 11:38:05:68:be:57:08:8a:91:00:2b:75:00:80:98:cb:ec:61: 98:3f:78:95:a0:7a:b3:d4:ba:ba:d1:e6:64:d7:8b:75:98:e6: 79:0d:93:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMzRkYxMTAvBgNVBAUTKDEyMzI3REZDOUU4ODgzQ0RCQjZDNkVFRUIzOTI1RjJD OEMwRjdFNUUwHhcNMjUwODIwMTcxMjMzWhcNMjUwODI3MTcxMjMzWjAYMRYwFAYD VQQDEw02OGE2MDIwMS1jNjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSlz6dAIrezf1B+ugEZROHr+rsCGaAcyxwPujIY3rt+JZh5cdgCY/JJ6a97L h00uaTA8/6/PjVwEve32KTeHqvEeN2fj5MXAn4VA0dFULJ/iDvf7ES+EkgBkVrlq 5kH3DNcavhnFHSr/9jnYFrLJJBZKPKElXpNEIW5IDePfPKckJzVdnP4k/jl9030t d8wf1IwLufULU+z/EeiJqUk/pR+JUHF4T8B5H85kbaa0JsUSQ1xc0+weyhaepiCn PZK5y7iZV/flLD4rQ8i4mFf6A1D+svCnxuL4mTYhlCd1dp5ryhhMqovRVPUy7LWD yY0n7TAJUktHFFKTAJjb7P3faQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEepPVGB PEovL09UP0tPGuI/j/jxMB8GA1UdIwQYMBaAFBIyffyeiIPNu2xu7rOSXyyMD35e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzNGRi8xNEVGRTdFNEUw N0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4MjdiRzd1czVKZkxJd1Bm bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VqSjlfSjZJZzgyN2JHN3VzNUpmTEl3UGZsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzNGRi8xNEVGRTdFNEUwN0QxMUU4QTVGMEZCMzVDNEY5QUUwMi9Fako5X0o2SWc4 MjdiRzd1czVKZkxJd1BmbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB108p0yz+3EfcAQjUeZNvIII/IiLFG/M9qiyoj8+L8Rd2TlnOJrG1W a1mSngG3Kj8MQsEfH/wveWSUFtC60hC5qQlrueHH71qk83vBXd54GoA9a6gAw646 uofGgCsS6wJT0XZJcN4UlE/blQqVI1BjqDf6yF+QEyRQ2tNbmhJfw3siKIt1i/Ob 0+R1z1jFBYbIBlLEM0gWOGHo4KGnYGqxHE6gt1mSkH6x0FQqdmPtqH5BoCTkgohd zHXIyQ1VbZESMPhYnHXgOD43ZDMpQUcU/VLppiJAT68ROAVovlcIipEAK3UAgJjL 7GGYP3iVoHqz1Lq60eZk14t1mOZ5DZOM -----END CERTIFICATE-----Generated at Thu Aug 21 06:20:02 2025 by rpki-client