$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft File: eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json) Hash identifier: pgBjJIAje3OJ62ph0mmdqETZsPKwUir0kDIcRTqk2Fo= Subject key identifier: 37:62:8F:1D:49:A7:C2:46:3E:CC:C7:EB:9A:F8:FA:16:BB:01:50:97 Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Certificate serial: 0BD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft Manifest number: 0BB3 Signing time: Sun 24 Aug 2025 18:58:08 +0000 Manifest this update: Sun 24 Aug 2025 18:58:07 +0000 Manifest next update: Sun 31 Aug 2025 18:58:07 +0000 Files and hashes: 1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: j95X/qm6GDwoTF9YOyPhVWKVkc6uBPmeeDnzZhSn0RE=) 2: CEFDECF850B011F0B9262D4FC4F9AE02.roa (hash: WtUGGPBORu2ELV1J85b8AQ+2CLGSrU7TTTxiEKhsYHc=) 3: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: xCXQqgm7s0yqcl5rlXb69u+J291yS3/BUfkPMKe4WIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3024 (0xbd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567 Validity Not Before: Aug 24 18:58:07 2025 GMT Not After : Aug 31 18:58:07 2025 GMT Subject: CN=68ab60bf-f2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:13:cd:66:f6:70:d5:23:40:c6:af:e2:e4:73: cb:02:08:87:4d:78:06:52:a4:eb:8f:c8:7a:09:65: a9:6e:6f:35:43:5b:0b:d4:f8:40:b3:5f:6b:14:4a: 55:7a:bd:38:17:cf:8d:c4:fb:04:79:a2:0a:90:e7: 67:71:4d:24:9e:c7:c6:7f:9a:43:5c:75:fd:b4:ce: c9:19:ae:27:d3:5b:59:c9:1a:67:15:ba:88:44:c5: b1:99:c6:db:cb:dc:12:bf:c8:72:31:af:d2:e6:e8: 8e:ac:1a:06:48:8b:0f:51:cb:44:39:5e:a9:4d:11: 93:b4:4d:9e:5d:53:8e:25:e3:ac:54:a4:4b:ca:92: a9:55:af:1f:09:c1:34:1c:5f:ee:b3:8a:f3:2f:5a: dc:2e:8d:97:18:10:b1:8c:3a:32:96:af:3b:f9:75: 8c:72:71:72:f4:83:5e:db:ea:2a:6c:ed:d9:73:ef: 08:8b:0d:d7:0b:a1:0a:34:9c:92:93:41:e4:cc:91: 25:fe:75:9f:ea:e8:a8:b2:d0:e3:1b:3d:88:50:0e: 1c:cd:da:3a:46:40:f0:58:ba:6c:80:03:d6:df:f2: c4:4d:74:ac:71:f1:a8:94:0a:87:14:ce:6c:ba:e3: ad:2e:4a:65:5b:33:6a:b4:d7:eb:e4:0f:0b:0e:dd: 06:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:62:8F:1D:49:A7:C2:46:3E:CC:C7:EB:9A:F8:FA:16:BB:01:50:97 X509v3 Authority Key Identifier: keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1d:4a:78:ac:6f:4c:92:d5:45:d5:c2:6c:b4:75:7b:c5:e7: 45:ac:2c:2e:ff:2e:63:4f:37:11:a7:db:e8:75:b5:a2:4c:de: c9:80:66:3f:8d:5b:28:98:4b:31:ed:6b:75:1f:e8:5a:9d:1b: 3a:e6:25:c5:dd:f5:c4:14:c9:b4:b2:d1:ee:14:3b:af:8b:2d: 8a:1c:2d:d3:a0:20:09:a8:02:79:5f:e2:6e:a9:18:5f:cf:5a: e7:1d:53:77:5f:4b:0d:3b:b9:fa:96:e2:4c:03:73:5b:cd:62: 2c:d5:81:56:b0:ce:b1:4a:98:77:62:46:e8:8e:79:8b:28:31: 07:bb:2b:17:7f:e8:82:18:ba:6e:f6:57:56:68:8f:1a:b3:df: 24:4f:eb:70:3a:c1:df:b8:ae:f0:9f:41:69:94:d3:76:11:c6: 10:b7:b0:79:b6:79:b5:f6:25:04:c2:eb:69:42:72:e8:24:3d: 12:a2:60:25:b0:a1:da:02:1e:67:e4:0c:c3:24:b3:0e:ec:9b: f9:9a:72:d7:e8:e3:0e:52:84:26:34:d9:07:73:6c:0a:89:7d: f2:75:5d:d0:b7:2a:c2:fb:9d:08:de:9e:42:20:ef:25:24:70: d4:59:1e:12:a1:a8:7f:be:e9:e0:ad:7a:30:b8:77:00:65:c9: 55:ef:39:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5 NEJFNzY1NjcwHhcNMjUwODI0MTg1ODA3WhcNMjUwODMxMTg1ODA3WjAYMRYwFAYD VQQDEw02OGFiNjBiZi1mMmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBPNZvZw1SNAxq/i5HPLAgiHTXgGUqTrj8h6CWWpbm81Q1sL1PhAs19rFEpV er04F8+NxPsEeaIKkOdncU0knsfGf5pDXHX9tM7JGa4n01tZyRpnFbqIRMWxmcbb y9wSv8hyMa/S5uiOrBoGSIsPUctEOV6pTRGTtE2eXVOOJeOsVKRLypKpVa8fCcE0 HF/us4rzL1rcLo2XGBCxjDoylq87+XWMcnFy9INe2+oqbO3Zc+8Iiw3XC6EKNJyS k0HkzJEl/nWf6uiostDjGz2IUA4czdo6RkDwWLpsgAPW3/LETXSscfGolAqHFM5s uuOtLkplWzNqtNfr5A8LDt0GwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdijx1J p8JGPszH65r4+ha7AVCXMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDlCRi9EMTNEQTFENDJERkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1 T2FuQ1dWalBsN0dVdm5aV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSHUp4rG9MktVF1cJstHV7xedFrCwu/y5jTzcRp9vodbWiTN7JgGY/ jVsomEsx7Wt1H+hanRs65iXF3fXEFMm0stHuFDuviy2KHC3ToCAJqAJ5X+JuqRhf z1rnHVN3X0sNO7n6luJMA3NbzWIs1YFWsM6xSph3YkbojnmLKDEHuysXf+iCGLpu 9ldWaI8as98kT+twOsHfuK7wn0FplNN2EcYQt7B5tnm19iUEwutpQnLoJD0SomAl sKHaAh5n5AzDJLMO7Jv5mnLX6OMOUoQmNNkHc2wKiX3ydV3QtyrC+50I3p5CIO8l JHDUWR4Soah/vungrXowuHcAZclV7znZ -----END CERTIFICATE-----Generated at Sun Aug 24 21:40:52 2025 by rpki-client