$ rpki-client -vvf rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft File: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft (raw, json) Hash identifier: 1Q9Na/n/dtR1JCgCaz7Q1FL0Dhto+LqaVtro5NDqaAE= Subject key identifier: 59:84:97:B5:E3:3E:83:44:79:25:88:68:8B:83:D8:E1:47:9F:B0:CC Authority key identifier: 4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74 Certificate issuer: /CN=A918E269/serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft Manifest number: 45 Signing time: Sun 07 Sep 2025 07:59:08 +0000 Manifest this update: Sun 07 Sep 2025 07:59:08 +0000 Manifest next update: Sun 14 Sep 2025 07:59:08 +0000 Files and hashes: 1: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl (hash: ItCva7LNvUo/tvXOm9FH0DzJ/LPw/0ykoisTgEzUwAs=) 2: 2B1A3764302A11F0B211AD0BC4F9AE02.roa (hash: NkhW5FW4JP+LMlscQaQBvoaph79aDkou+LpFxXsX7js=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E269, serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274 Validity Not Before: Sep 7 07:59:08 2025 GMT Not After : Sep 14 07:59:08 2025 GMT Subject: CN=68bd3b4c-285d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:80:c6:37:60:a7:26:7b:9b:ca:c8:4d:c3:ee: 49:24:d1:f9:48:1d:d4:86:e1:77:54:f9:26:af:38: 44:bc:a4:97:75:ce:95:1a:51:51:75:36:bf:8f:5c: 0e:a7:73:80:77:8b:50:8d:10:cf:07:ef:41:d3:a2: 1c:55:d9:a7:3a:cb:a4:94:1b:4d:7a:37:3f:57:82: a4:48:54:93:88:86:3c:99:df:94:53:72:9c:37:b6: 9b:70:e9:ec:93:5d:d0:51:b3:04:7d:c2:b3:6d:ed: b5:c3:bb:e9:9c:cc:7f:49:48:4d:02:68:26:10:62: 1c:3a:7b:cf:8f:5e:d1:27:64:74:cc:0a:74:d4:44: 7e:77:68:3b:34:7d:3b:2a:43:86:8c:cf:6c:3d:b4: c5:2e:c1:8e:d9:aa:ce:3d:9f:09:9e:8e:23:cc:71: f1:04:d7:f4:a7:14:66:5c:2f:a1:01:d9:3a:6e:b0: 1b:f1:d7:be:e9:b4:e8:a5:59:e2:4c:57:34:24:53: 2f:af:03:68:5a:70:4d:0b:b7:dd:a6:42:15:ff:2c: 55:22:22:e8:71:a9:b4:4f:e4:55:38:e9:36:7f:24: 68:f7:d7:83:2a:f4:b2:aa:08:15:15:df:91:b9:61: 03:44:d7:88:98:f1:a2:85:e2:e3:c3:d6:df:86:da: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:84:97:B5:E3:3E:83:44:79:25:88:68:8B:83:D8:E1:47:9F:B0:CC X509v3 Authority Key Identifier: keyid:4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:fe:d1:bb:d7:ef:fc:f6:58:96:65:89:fe:cf:9a:d0:0c:fd: 71:82:6e:ce:06:5f:73:3c:aa:2d:cc:bd:f4:44:6a:7a:2a:4b: 6e:a8:04:96:dc:86:4e:3f:dc:9b:d0:81:2d:d9:22:8f:58:2c: c8:fc:64:32:94:b6:a4:c8:4f:65:b9:f8:d1:07:54:0b:3c:0a: 64:ba:0b:87:74:0c:97:b6:0a:02:40:91:07:6e:b4:ca:91:f5: 5f:21:dd:00:74:ee:62:e2:4f:e1:ae:31:35:7c:0d:a5:cb:ef: 1f:ea:d9:70:31:98:77:e7:ab:ff:86:09:ba:23:99:81:2e:30: ce:0f:99:bf:07:a0:ca:e0:00:06:d9:e4:77:cb:f9:03:96:a9: b8:fd:ac:4e:ce:47:67:cb:b4:ca:51:ee:0d:86:63:e4:aa:e4: dc:5a:8d:b2:17:6a:81:76:d4:e0:90:b2:e8:7f:44:ba:01:ba: a1:4d:3e:75:4a:6b:75:2c:80:b4:89:b0:d5:27:32:ef:b4:99: 5c:7d:21:b9:4f:a2:2e:0f:0f:41:90:29:3c:19:21:71:21:6e: a3:38:a6:74:b2:fd:43:a2:b5:d0:56:c3:70:06:71:40:93:3f: b2:1b:88:75:67:d5:f9:3a:fa:35:a1:21:02:80:d5:60:32:20: 54:69:79:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTI2OTExMC8GA1UEBRMoNEJFMTA3MzkzNjI1MkUzQ0YwNzJGOTg5RDdGREM0RTdF N0M2NjI3NDAeFw0yNTA5MDcwNzU5MDhaFw0yNTA5MTQwNzU5MDhaMBgxFjAUBgNV BAMTDTY4YmQzYjRjLTI4NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChgMY3YKcme5vKyE3D7kkk0flIHdSG4XdU+SavOES8pJd1zpUaUVF1Nr+PXA6n c4B3i1CNEM8H70HTohxV2ac6y6SUG016Nz9XgqRIVJOIhjyZ35RTcpw3tptw6eyT XdBRswR9wrNt7bXDu+mczH9JSE0CaCYQYhw6e8+PXtEnZHTMCnTURH53aDs0fTsq Q4aMz2w9tMUuwY7Zqs49nwmejiPMcfEE1/SnFGZcL6EB2TpusBvx177ptOilWeJM VzQkUy+vA2hacE0Lt92mQhX/LFUiIuhxqbRP5FU46TZ/JGj314Mq9LKqCBUV35G5 YQNE14iY8aKF4uPD1t+G2vdFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWYSXteM+ g0R5JYhoi4PY4UefsMwwHwYDVR0jBBgwFoAUS+EHOTYlLjzwcvmJ1/3E5+fGYnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFMjY5LzM5M0JBOENFMkI2 RjExRjA4NkFERTU0RUM0RjlBRTAyL1MtRUhPVFlsTGp6d2N2bUoxXzNFNS1mR1lu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy1FSE9UWWxManp3Y3ZtSjFfM0U1LWZHWW5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF MjY5LzM5M0JBOENFMkI2RjExRjA4NkFERTU0RUM0RjlBRTAyL1MtRUhPVFlsTGp6 d2N2bUoxXzNFNS1mR1luUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM7+0bvX7/z2WJZlif7PmtAM/XGCbs4GX3M8qi3MvfREanoqS26oBJbc hk4/3JvQgS3ZIo9YLMj8ZDKUtqTIT2W5+NEHVAs8CmS6C4d0DJe2CgJAkQdutMqR 9V8h3QB07mLiT+GuMTV8DaXL7x/q2XAxmHfnq/+GCbojmYEuMM4Pmb8HoMrgAAbZ 5HfL+QOWqbj9rE7OR2fLtMpR7g2GY+Sq5NxajbIXaoF21OCQsuh/RLoBuqFNPnVK a3UsgLSJsNUnMu+0mVx9IblPoi4PD0GQKTwZIXEhbqM4pnSy/UOitdBWw3AGcUCT P7IbiHVn1fk6+jWhIQKA1WAyIFRpeXM= -----END CERTIFICATE-----Generated at Mon Sep 8 17:27:52 2025 by rpki-client