$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft File: EawzZ40YMzz-vUmJK1aJnifqY0g.mft (raw, json) Hash identifier: vB2F9Ka9dPc3VuFDWUsz7i/i5F1DzXk9k/nfRBbvRVQ= Subject key identifier: B3:1A:F7:7D:E6:15:41:97:ED:AC:5B:C9:AB:11:F7:07:44:09:5E:88 Authority key identifier: 11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48 Certificate issuer: /CN=A919DA26/serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft Manifest number: 01EA Signing time: Sat 23 Aug 2025 02:41:57 +0000 Manifest this update: Sat 23 Aug 2025 02:41:56 +0000 Manifest next update: Sat 30 Aug 2025 02:41:56 +0000 Files and hashes: 1: EawzZ40YMzz-vUmJK1aJnifqY0g.crl (hash: gVllfbcRY4ZxB+p//O/tYXNTnCChbxzSGezbn0zP5lc=) 2: A7119C2E8FEE11ED83F3C543C4F9AE02.roa (hash: +93D0eusWWNntkjGYUSo149HmgTU1FPvVrCP6VBiF1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:41:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DA26, serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348 Validity Not Before: Aug 23 02:41:56 2025 GMT Not After : Aug 30 02:41:56 2025 GMT Subject: CN=68a92a74-e8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ca:05:09:2c:d3:b9:c4:12:06:84:d6:61:42: 46:35:63:87:93:63:a5:29:81:fc:d5:bc:e1:29:2e: 0d:02:88:21:bb:27:77:de:50:fe:0b:39:ab:4f:17: d1:5a:f4:f1:89:20:e7:a2:7d:9c:ca:0f:69:3a:fb: 8f:84:93:fe:c5:b1:75:f7:72:e6:39:c5:f5:4a:31: ea:7b:1f:90:95:87:12:d2:88:68:05:73:19:a7:c0: 33:06:b0:bf:d5:d4:01:45:6d:4c:54:42:b6:b6:10: aa:78:df:30:2d:43:69:06:8d:c8:bf:cf:2b:17:9b: df:1b:b9:29:ab:42:65:0a:6f:a1:76:b5:98:35:42: a5:dd:25:7f:f8:5e:10:4d:e5:f3:27:6d:fb:b5:34: fb:63:a9:4f:c3:c7:fb:af:b1:53:75:4b:96:e1:dc: d5:de:69:92:e8:36:d3:a3:3b:cf:e8:ee:f1:c2:35: 58:5a:61:16:21:1f:19:7e:60:1f:a4:bc:b8:d2:18: c3:ae:62:08:60:e7:ba:a5:50:f9:72:f1:72:1b:ac: a9:35:d4:ab:d1:3f:28:6b:3d:bd:d1:11:89:6d:93: bf:6e:87:26:ac:f0:78:c7:c5:13:5e:9c:d0:ad:66: 84:a7:7c:e3:a4:a3:5e:8f:82:b8:b6:e3:a1:47:4d: 9e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1A:F7:7D:E6:15:41:97:ED:AC:5B:C9:AB:11:F7:07:44:09:5E:88 X509v3 Authority Key Identifier: keyid:11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:de:1a:86:90:7f:7a:91:dd:a4:85:1e:c4:3d:63:81:cf:ae: 21:68:3c:32:71:1f:6d:0d:2c:52:a4:20:3b:94:3f:d1:98:dc: 4f:28:88:21:c4:62:cf:b9:12:a4:f5:7f:04:e8:5a:a4:2b:a8: 1f:5c:50:0c:af:16:0e:ab:d8:82:0d:61:af:20:93:ab:98:8c: c9:f5:f5:6e:ed:3b:b5:63:86:e8:fa:4e:4d:69:a0:fa:e6:6b: b7:19:f6:78:39:71:6a:67:88:df:89:c0:f2:ea:1e:f0:26:f6: 93:36:ae:bb:50:04:08:80:5d:6b:5e:72:b8:dc:cc:9b:89:f8: b9:df:78:1b:78:99:b6:1f:3b:9d:28:3e:ad:fe:06:6a:05:a8: 13:6f:76:a0:9e:20:6a:ce:86:6d:ea:44:90:22:ce:fa:83:fd: 30:56:ea:b7:57:0f:31:0e:a4:6c:da:a7:f6:af:6f:ea:08:e1: 6e:29:04:63:d1:23:8d:a0:05:bd:70:c5:8f:b4:c6:1f:08:94: 7e:05:56:90:73:68:c4:61:28:1b:7c:c6:ee:3c:9e:95:6c:6c: 27:ec:36:57:7c:25:5f:f4:7a:71:bf:f1:d8:6d:8d:0c:d2:e0: f6:41:9b:98:b4:c1:2d:a4:39:f7:5f:56:2e:38:1f:92:96:38: 7f:d7:cc:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURBMjYxMTAvBgNVBAUTKDExQUMzMzY3OEQxODMzM0NGRUJENDk4OTJCNTY4OTlF MjdFQTYzNDgwHhcNMjUwODIzMDI0MTU2WhcNMjUwODMwMDI0MTU2WjAYMRYwFAYD VQQDEw02OGE5MmE3NC1lOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMoFCSzTucQSBoTWYUJGNWOHk2OlKYH81bzhKS4NAoghuyd33lD+CzmrTxfR WvTxiSDnon2cyg9pOvuPhJP+xbF193LmOcX1SjHqex+QlYcS0ohoBXMZp8AzBrC/ 1dQBRW1MVEK2thCqeN8wLUNpBo3Iv88rF5vfG7kpq0JlCm+hdrWYNUKl3SV/+F4Q TeXzJ237tTT7Y6lPw8f7r7FTdUuW4dzV3mmS6DbTozvP6O7xwjVYWmEWIR8ZfmAf pLy40hjDrmIIYOe6pVD5cvFyG6ypNdSr0T8oaz290RGJbZO/bocmrPB4x8UTXpzQ rWaEp3zjpKNej4K4tuOhR02epwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMa933m FUGX7axbyasR9wdECV6IMB8GA1UdIwQYMBaAFBGsM2eNGDM8/r1JiStWiZ4n6mNI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REEyNi85QjA3MjBBNDhG RUMxMUVEQjkwMUE3NDNDNEY5QUUwMi9FYXd6WjQwWU16ei12VW1KSzFhSm5pZnFZ MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Vhd3paNDBZTXp6LXZVbUpLMWFKbmlmcVkwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REEyNi85QjA3MjBBNDhGRUMxMUVEQjkwMUE3NDNDNEY5QUUwMi9FYXd6WjQwWU16 ei12VW1KSzFhSm5pZnFZMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB33hqGkH96kd2khR7EPWOBz64haDwycR9tDSxSpCA7lD/RmNxPKIgh xGLPuRKk9X8E6FqkK6gfXFAMrxYOq9iCDWGvIJOrmIzJ9fVu7Tu1Y4bo+k5NaaD6 5mu3GfZ4OXFqZ4jficDy6h7wJvaTNq67UAQIgF1rXnK43Mybifi533gbeJm2Hzud KD6t/gZqBagTb3agniBqzoZt6kSQIs76g/0wVuq3Vw8xDqRs2qf2r2/qCOFuKQRj 0SONoAW9cMWPtMYfCJR+BVaQc2jEYSgbfMbuPJ6VbGwn7DZXfCVf9Hpxv/HYbY0M 0uD2QZuYtMEtpDn3X1YuOB+Sljh/18zj -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:55 2025 by rpki-client