$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json) Hash identifier: iUEJnRNduav8P3UMCKpiP6w1g8OSZGXuQKjgkpRAFMU= Subject key identifier: 92:2C:80:7A:4C:E1:29:A7:A8:9C:AA:13:1B:8E:D2:65:F2:B7:99:B9 Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft Manifest number: D8 Signing time: Fri 05 Sep 2025 05:59:36 +0000 Manifest this update: Fri 05 Sep 2025 05:59:35 +0000 Manifest next update: Fri 12 Sep 2025 05:59:35 +0000 Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: iqvT2GWlbEPu4KTmoivi0ybuPzh+OZnou8M7tftBv84=) 2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: GLbMFy1JbyAVM7u4jQAEv8xQTj/rbFbdkkf2ZQWfsOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Validity Not Before: Sep 5 05:59:35 2025 GMT Not After : Sep 12 05:59:35 2025 GMT Subject: CN=68ba7c47-109b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:3b:04:e2:ce:97:a8:a4:be:3c:3a:e2:df: c9:12:6d:41:b6:f5:40:be:6d:9b:cf:70:1b:b5:e3: f6:c9:95:5d:cb:8b:b0:7a:b1:73:a2:46:8c:a2:2c: 6b:69:98:1b:8c:98:0b:4f:a0:a5:48:2e:05:d5:fc: 74:d3:e7:b6:27:a9:e6:bf:e2:5e:71:81:0f:dc:d3: 3b:79:84:fa:d2:74:97:e9:20:c4:83:1c:b6:7b:a3: 58:37:47:39:4d:72:07:f5:93:06:2d:53:f4:a8:6e: ed:65:28:42:f5:2d:a0:e3:de:20:c5:9f:c9:99:b7: 99:7a:49:1c:ac:5a:74:1e:0c:4c:06:9e:c2:19:96: 26:a9:dc:b4:9b:7a:89:1d:7c:30:5c:7d:62:31:fe: 63:34:c0:3d:c4:ba:10:17:b6:b8:47:7c:95:f8:e6: b2:a9:d3:18:97:50:d1:da:ef:f3:92:34:ec:be:65: f9:77:46:00:da:c0:da:4c:d0:74:6e:26:0f:f4:3c: 7e:ff:e8:05:f1:55:a7:2e:45:ba:2c:22:3b:c6:82: 9c:c3:70:db:b8:f2:55:e3:a8:14:cf:b3:b9:44:2f: 92:72:87:16:c8:e0:ee:1e:78:66:8e:67:f1:0b:94: 8d:42:e0:eb:f3:de:3c:d5:32:c0:41:56:87:d9:e5: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2C:80:7A:4C:E1:29:A7:A8:9C:AA:13:1B:8E:D2:65:F2:B7:99:B9 X509v3 Authority Key Identifier: keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:d7:60:fa:a5:d0:3c:d0:56:89:29:d0:76:00:4b:7f:10:0a: 78:cd:e9:ef:a3:dd:e3:38:66:03:55:a3:cf:f5:13:12:ad:46: a1:d9:f1:2b:b9:0f:e1:84:1c:28:84:db:44:6d:36:fb:f5:f0: 6d:d6:b3:b9:83:e9:42:95:90:90:c9:a8:b6:ad:73:c8:06:bb: 5b:23:6f:c6:a2:4d:ab:61:ca:a1:a3:6e:65:6d:ce:02:c9:06: a0:fa:7c:44:fd:09:11:79:a1:3a:39:0c:7b:5c:ea:6a:3a:fe: aa:3d:5a:b4:1d:8e:30:e3:45:12:4c:f8:7f:49:21:ba:90:8c: ab:82:b5:4e:4d:68:ea:f5:b4:9a:00:bd:e3:e0:d3:24:8a:3c: 70:3e:8b:5b:55:3c:31:1c:9f:a9:01:8f:ee:9e:ed:fd:3e:e0: 85:c3:b2:83:40:e0:31:d7:c6:8e:83:05:3b:18:80:dd:82:12: 15:bb:d1:78:05:73:1b:d9:b1:ac:b4:5a:4a:91:f4:78:be:48: 0a:93:6b:3b:ce:93:ec:e8:1e:02:26:ac:06:1c:70:bf:69:ad: c3:2c:c2:c6:a2:8e:b8:e0:ed:72:ea:50:33:c1:6f:6d:0f:71: b6:84:c2:ea:44:c7:4a:12:7d:1a:88:1e:5b:fd:66:b3:9f:42: 32:d2:91:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5 M0RFQTIzNzUwHhcNMjUwOTA1MDU1OTM1WhcNMjUwOTEyMDU1OTM1WjAYMRYwFAYD VQQDEw02OGJhN2M0Ny0xMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue07BOLOl6ikvjw64t/JEm1BtvVAvm2bz3AbteP2yZVdy4uwerFzokaMoixr aZgbjJgLT6ClSC4F1fx00+e2J6nmv+JecYEP3NM7eYT60nSX6SDEgxy2e6NYN0c5 TXIH9ZMGLVP0qG7tZShC9S2g494gxZ/JmbeZekkcrFp0HgxMBp7CGZYmqdy0m3qJ HXwwXH1iMf5jNMA9xLoQF7a4R3yV+OayqdMYl1DR2u/zkjTsvmX5d0YA2sDaTNB0 biYP9Dx+/+gF8VWnLkW6LCI7xoKcw3DbuPJV46gUz7O5RC+ScocWyODuHnhmjmfx C5SNQuDr89481TLAQVaH2eXX4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIsgHpM 4SmnqJyqExuO0mXyt5m5MB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG amZ4S01vVkE4Yk9UM3FJM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE12D6pdA80FaJKdB2AEt/EAp4zenvo93jOGYDVaPP9RMSrUah2fEr uQ/hhBwohNtEbTb79fBt1rO5g+lClZCQyai2rXPIBrtbI2/Gok2rYcqho25lbc4C yQag+nxE/QkReaE6OQx7XOpqOv6qPVq0HY4w40USTPh/SSG6kIyrgrVOTWjq9bSa AL3j4NMkijxwPotbVTwxHJ+pAY/unu39PuCFw7KDQOAx18aOgwU7GIDdghIVu9F4 BXMb2bGstFpKkfR4vkgKk2s7zpPs6B4CJqwGHHC/aa3DLMLGoo644O1y6lAzwW9t D3G2hMLqRMdKEn0aiB5b/Wazn0Iy0pHc -----END CERTIFICATE-----Generated at Sat Sep 6 06:58:32 2025 by rpki-client