$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft File: EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json) Hash identifier: W6s0gNIo1/LNbvCU5fef+GtqRtoomf9yQXqvB3fl444= Subject key identifier: 53:14:EC:39:EF:D6:79:B5:C5:AD:4C:CF:E5:AA:F0:D0:53:EE:D8:01 Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A Certificate issuer: /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft Manifest number: 012E Signing time: Wed 03 Sep 2025 05:05:58 +0000 Manifest this update: Wed 03 Sep 2025 05:05:58 +0000 Manifest next update: Wed 10 Sep 2025 05:05:58 +0000 Files and hashes: 1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: ZAGhbWYhyxkREQcbbeEf/+vx8y+qurLr24nQzX5F834=) 2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: YLouRJayszJ+YXIZjA0nYlRHirFmGMZNUS3tAUGchSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Validity Not Before: Sep 3 05:05:58 2025 GMT Not After : Sep 10 05:05:58 2025 GMT Subject: CN=68b7ccb6-e19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7c:bb:d4:a7:25:92:5d:57:1e:76:33:de:7d: 20:a7:a4:b3:f2:8a:30:b7:2c:5a:6e:85:6d:81:a0: a0:4c:2b:03:5f:a6:e9:46:10:6f:7d:3b:4f:17:71: 2d:76:d2:3d:ff:ae:28:4e:56:00:76:c0:86:7b:94: 1b:64:89:d7:54:0c:fa:91:aa:16:4b:e1:d9:4a:cd: d5:d2:00:23:21:7c:df:9b:cc:b7:0f:be:e8:bf:73: 35:2e:ec:d5:91:a6:c9:f0:2f:9d:d6:ff:bb:94:4f: e6:e9:18:72:f7:e0:86:45:f0:55:fd:c0:45:24:4c: ac:40:9f:c1:f5:e6:03:7f:a3:80:51:e8:22:a7:7b: 9d:84:11:5e:f9:3b:61:fc:88:fa:97:26:9d:76:4b: fe:05:62:8b:71:db:c5:9a:e5:95:85:3e:84:44:86: 6f:a9:09:ee:ec:c5:18:ec:d8:d8:e2:93:de:b9:10: 92:b4:ab:cb:ad:c1:92:73:48:85:2e:a4:69:82:5c: 64:c5:bc:0c:2b:da:38:14:50:ee:45:25:fd:a8:02: 9c:2a:fa:58:b9:9e:dc:1d:15:1a:66:e9:11:f8:02: fb:c3:ef:0a:3f:7e:7e:9f:fc:1e:b4:68:77:34:9c: 20:05:6e:00:a5:d6:e7:5e:38:95:8e:37:ca:17:44: 2e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:14:EC:39:EF:D6:79:B5:C5:AD:4C:CF:E5:AA:F0:D0:53:EE:D8:01 X509v3 Authority Key Identifier: keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:48:2f:b3:2e:4e:bb:f2:40:c8:18:cb:b0:14:13:05:05:a0: 7a:9b:e1:d8:25:4f:d1:4a:1e:1b:03:71:96:d0:2f:ab:88:bb: f5:64:67:1e:0f:ba:bd:88:98:db:62:a2:9f:fc:57:4c:28:40: 45:29:11:e9:3e:c2:e3:37:30:ae:4d:c5:db:b3:2c:b0:6f:ee: cd:76:69:a2:15:90:35:da:fb:3f:43:d8:0d:f2:94:19:a4:a5: 6c:9e:4d:6a:a6:c9:c5:7c:f8:f0:f8:ca:81:98:61:af:6e:db: c6:5a:f3:ae:e7:bd:48:f7:36:f2:77:95:0d:aa:2c:64:57:f0: 38:ad:31:56:40:e0:7b:b6:0f:7b:fd:8d:6b:5c:aa:44:5d:1a: 7f:76:79:13:0f:43:54:0c:a2:b8:c9:c2:90:9a:b1:9b:ed:26: 7e:2c:b8:38:f5:ce:4a:e1:b8:ee:6b:a0:88:cd:ac:b9:b9:da: 2c:41:e8:4d:40:af:55:8e:f7:21:7b:70:0b:80:6f:71:ca:11: 6a:a1:6d:8d:26:14:b8:0c:3d:45:24:ff:8f:a8:71:49:3c:23: fe:4c:31:3f:21:89:57:55:d6:1a:57:e4:17:62:a4:8a:ff:41: c8:77:bf:96:14:73:d0:37:61:9f:af:7a:63:86:6a:31:ff:ff: eb:61:2b:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKDExNUE0MTYwQzg1NTU0N0Q5RTMxMEM2MEQzRDA4OENC QkM5QTk5MkEwHhcNMjUwOTAzMDUwNTU4WhcNMjUwOTEwMDUwNTU4WjAYMRYwFAYD VQQDEw02OGI3Y2NiNi1lMTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33y71Kclkl1XHnYz3n0gp6Sz8oowtyxaboVtgaCgTCsDX6bpRhBvfTtPF3Et dtI9/64oTlYAdsCGe5QbZInXVAz6kaoWS+HZSs3V0gAjIXzfm8y3D77ov3M1LuzV kabJ8C+d1v+7lE/m6Rhy9+CGRfBV/cBFJEysQJ/B9eYDf6OAUegip3udhBFe+Tth /Ij6lyaddkv+BWKLcdvFmuWVhT6ERIZvqQnu7MUY7NjY4pPeuRCStKvLrcGSc0iF LqRpglxkxbwMK9o4FFDuRSX9qAKcKvpYuZ7cHRUaZukR+AL7w+8KP35+n/wetGh3 NJwgBW4ApdbnXjiVjjfKF0QuxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMU7Dnv 1nm1xa1Mz+Wq8NBT7tgBMB8GA1UdIwQYMBaAFBFaQWDIVVR9njEMYNPQiMu8mpkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC9GRUNBNzUwNkJF N0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZIMmVNUXhnMDlDSXk3eWFt U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VWcEJZTWhWVkgyZU1ReGcwOUNJeTd5YW1Tby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC9GRUNBNzUwNkJFN0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZI MmVNUXhnMDlDSXk3eWFtU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJSC+zLk678kDIGMuwFBMFBaB6m+HYJU/RSh4bA3GW0C+riLv1ZGce D7q9iJjbYqKf/FdMKEBFKRHpPsLjNzCuTcXbsyywb+7NdmmiFZA12vs/Q9gN8pQZ pKVsnk1qpsnFfPjw+MqBmGGvbtvGWvOu571I9zbyd5UNqixkV/A4rTFWQOB7tg97 /Y1rXKpEXRp/dnkTD0NUDKK4ycKQmrGb7SZ+LLg49c5K4bjua6CIzay5udosQehN QK9Vjvche3ALgG9xyhFqoW2NJhS4DD1FJP+PqHFJPCP+TDE/IYlXVdYaV+QXYqSK /0HId7+WFHPQN2Gfr3pjhmox///rYStH -----END CERTIFICATE-----Generated at Thu Sep 4 13:58:36 2025 by rpki-client