$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft File: EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json) Hash identifier: auMMK8/pFibohQvJu2EEY992DUc8eSut+AlbhbOB2FI= Subject key identifier: D4:EE:9D:6C:FE:BD:2A:DB:90:2E:E7:2A:68:F0:CC:28:0D:50:EA:FF Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft Manifest number: 1A Signing time: Fri 05 Sep 2025 08:29:39 +0000 Manifest this update: Fri 05 Sep 2025 08:29:38 +0000 Manifest next update: Fri 12 Sep 2025 08:29:38 +0000 Files and hashes: 1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: vbTNiwrJN88kgo8L9qyPsVP4YtUiNh46HB44xHxkVho=) 2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: aA4NuSUsD5J7xDniHCGMsk40FqbunmjtgWh3zqGnLE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8 Validity Not Before: Sep 5 08:29:38 2025 GMT Not After : Sep 12 08:29:38 2025 GMT Subject: CN=68ba9f73-7f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:e1:5a:b3:65:06:f6:0c:6b:85:e7:18:36: b5:7b:6e:1f:d6:69:5f:6b:3f:5d:a3:01:2c:6c:1e: a4:ec:fd:a7:fa:f1:73:b8:86:51:07:14:f3:ab:16: e4:d3:9f:6b:f2:8a:a8:0d:fa:64:fd:d1:e5:88:6d: 12:a4:a2:bc:01:e0:fe:86:ff:50:8b:ab:28:1c:6b: 28:0b:c3:07:8e:fd:3e:64:a8:be:05:67:6d:f4:20: 17:39:9e:ab:4f:f1:75:04:c1:71:a0:6b:c0:a1:42: ba:77:a6:5a:a9:24:d4:0f:51:35:ff:a7:fd:2d:cf: 86:7e:75:ee:7e:63:64:3f:ea:4a:af:bf:24:9d:e5: 0f:17:da:dc:7d:f7:ad:47:8e:0f:46:57:9f:10:55: eb:af:9c:a0:e9:18:bf:94:1b:8f:83:f5:38:99:15: 25:37:8a:02:98:49:dc:1b:c0:0b:4f:e4:e7:15:89: 40:1a:cd:1e:e8:f3:f9:82:cd:1b:c4:b2:4e:86:e2: 83:58:51:f3:83:3d:b8:f8:6f:27:be:ae:42:52:65: e0:32:1b:79:1f:4d:9d:20:33:5a:6d:b4:97:77:fa: 88:0f:03:5a:93:26:68:04:2b:b1:df:7b:ec:05:2f: 72:01:64:96:93:42:f8:28:c0:05:25:b3:af:ae:e0: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EE:9D:6C:FE:BD:2A:DB:90:2E:E7:2A:68:F0:CC:28:0D:50:EA:FF X509v3 Authority Key Identifier: keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:76:a8:bb:e1:0f:04:51:13:05:de:c4:b7:95:8b:4a:4f:e7: f9:37:36:fc:fc:11:7a:8c:b8:98:94:1d:d2:02:00:f1:2c:bc: 82:ba:69:38:9a:f8:8a:45:7a:95:93:50:68:c9:3d:58:a6:52: bd:c5:2f:43:ec:46:1c:d9:e5:14:19:65:6d:02:a3:35:5e:8d: f9:e5:7d:c3:98:18:21:6f:28:c3:1c:82:ca:ab:ab:e6:08:4a: 90:e5:e5:5c:91:56:34:48:b0:f1:0a:89:1f:36:e4:72:c7:c6: e8:0d:93:44:ff:77:08:8f:2e:ae:b7:a7:07:cd:f3:8e:20:4a: bf:0c:d1:33:ae:3e:60:68:86:63:b0:ed:19:76:87:03:9d:c6: de:d1:16:f4:e5:8b:d3:0a:18:31:23:92:85:cf:f2:94:75:27: 6d:4f:42:6a:84:56:61:d9:00:cd:42:b8:ce:8a:8e:b3:ff:9c: 93:a9:12:2a:20:dd:a0:0b:25:56:c1:2f:83:73:60:40:74:79: d3:a6:01:4c:48:a6:9c:ab:8d:2d:0a:90:fe:ca:c0:67:8c:e7: 64:bd:7a:1a:63:6c:c7:ff:37:74:81:f7:2b:8f:b2:d2:22:67: 96:e7:50:ce:2c:2e:f8:c5:a1:be:86:a9:70:b2:5e:60:6f:3f: 4d:0a:ad:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0Q1QjExMC8GA1UEBRMoMTBBQzYzMDY2RTlBQkM0MjJBQzVGNDVBMjI3MTBENTAy RUJFNDJDODAeFw0yNTA5MDUwODI5MzhaFw0yNTA5MTIwODI5MzhaMBgxFjAUBgNV BAMTDTY4YmE5ZjczLTdmMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWguFas2UG9gxrhecYNrV7bh/WaV9rP12jASxsHqTs/af68XO4hlEHFPOrFuTT n2vyiqgN+mT90eWIbRKkorwB4P6G/1CLqygcaygLwweO/T5kqL4FZ230IBc5nqtP 8XUEwXGga8ChQrp3plqpJNQPUTX/p/0tz4Z+de5+Y2Q/6kqvvySd5Q8X2tx9961H jg9GV58QVeuvnKDpGL+UG4+D9TiZFSU3igKYSdwbwAtP5OcViUAazR7o8/mCzRvE sk6G4oNYUfODPbj4bye+rkJSZeAyG3kfTZ0gM1pttJd3+ogPA1qTJmgEK7Hfe+wF L3IBZJaTQvgowAUls6+u4P0FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1O6dbP69 KtuQLucqaPDMKA1Q6v8wHwYDVR0jBBgwFoAUEKxjBm6avEIqxfRaInENUC6+Qsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3RDVCLzc5ODMzODVBNjky RTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZhdkVJcXhmUmFJbkVOVUM2LVFz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUt4akJtNmF2RUlxeGZSYUluRU5VQzYtUXNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 RDVCLzc5ODMzODVBNjkyRTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZhdkVJ cXhmUmFJbkVOVUM2LVFzZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJl2qLvhDwRREwXexLeVi0pP5/k3Nvz8EXqMuJiUHdICAPEsvIK6aTia +IpFepWTUGjJPVimUr3FL0PsRhzZ5RQZZW0CozVejfnlfcOYGCFvKMMcgsqrq+YI SpDl5VyRVjRIsPEKiR825HLHxugNk0T/dwiPLq63pwfN844gSr8M0TOuPmBohmOw 7Rl2hwOdxt7RFvTli9MKGDEjkoXP8pR1J21PQmqEVmHZAM1CuM6KjrP/nJOpEiog 3aALJVbBL4NzYEB0edOmAUxIppyrjS0KkP7KwGeM52S9ehpjbMf/N3SB9yuPstIi Z5bnUM4sLvjFob6GqXCyXmBvP00KrWg= -----END CERTIFICATE-----Generated at Sat Sep 6 15:19:18 2025 by rpki-client