$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: Zm2qGaTee+pmsS37nJ2cgYJsgLgrFC5hPobm9GlMWGU= Subject key identifier: 97:7B:37:1B:73:37:2C:FF:43:E9:58:AC:DB:CD:13:9D:5F:6F:6D:0F Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 82 Signing time: Sun 07 Sep 2025 07:10:51 +0000 Manifest this update: Sun 07 Sep 2025 07:10:50 +0000 Manifest next update: Sun 14 Sep 2025 07:10:50 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: AHSiFVpE82OLZbnhq4eTz8n/9oZ3L5ouri6Pb6k2drI=) 2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: D8sGSIRpeb4KU8twC3M5LxWoSrBlM5fxXQEFrUY0ChI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Sep 7 07:10:50 2025 GMT Not After : Sep 14 07:10:50 2025 GMT Subject: CN=68bd2ffb-f52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:94:4a:75:8b:8a:67:e4:eb:28:ff:91:db: 81:1f:f7:d2:0a:bf:99:a6:08:e4:83:4e:8c:b0:ad: c1:92:21:fb:21:12:3d:53:bf:1a:b7:b0:32:af:64: aa:71:16:59:93:0c:51:e0:0c:97:d3:2b:12:b5:45: 36:a3:62:80:7f:7f:c5:e7:02:6e:ae:c8:72:4a:2e: 74:21:63:08:12:56:78:8e:b6:ba:b0:7c:8f:e0:fc: 36:e7:69:26:0f:dc:80:15:2c:be:28:b7:ce:b1:4e: dc:7a:c4:f9:d2:05:ae:18:7c:36:0e:56:46:f4:66: 72:80:cc:dc:f9:06:23:d9:d6:96:9c:96:8c:5e:8b: d6:99:10:f8:ca:ed:95:34:fa:9a:d2:41:95:f5:42: cf:7f:ec:3d:bf:35:0e:53:9e:a1:e4:d8:46:8c:5f: 68:d9:84:b8:37:41:79:d0:8b:53:0a:5b:7b:be:68: 8b:1d:b1:f0:2d:a9:75:91:09:cc:83:d8:79:06:79: 81:69:26:7d:21:0f:73:39:93:25:af:45:ab:08:1a: 70:2c:0c:0a:38:49:03:10:88:c0:14:b1:91:95:4c: 6f:be:c3:aa:28:cc:51:33:6b:4c:79:6d:7d:e9:31: ec:fa:0d:f2:fe:4d:53:c6:cf:5d:16:ff:80:f1:51: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7B:37:1B:73:37:2C:FF:43:E9:58:AC:DB:CD:13:9D:5F:6F:6D:0F X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:14:e1:ba:a6:00:d1:fc:60:21:cb:03:b4:00:68:6c:21:7f: 5b:b2:73:9a:f3:75:72:42:4e:69:d5:4b:d5:45:0c:0c:0c:fa: 03:3b:81:bc:ee:d5:14:58:d7:0f:65:80:ee:16:83:8b:32:90: 86:dd:5f:88:43:6e:e1:98:50:94:a5:a6:43:75:d9:6c:05:ed: c7:90:9b:94:9d:c3:51:23:d0:f8:85:b3:f4:e2:8b:97:f3:a0: 2d:55:b8:ee:89:93:ed:a2:ab:8a:3a:59:6e:1e:69:75:93:6a: a3:c1:0d:e6:c1:7c:e7:80:b0:d1:e6:80:1d:f8:f0:dc:de:da: c2:45:47:1b:3b:63:48:1d:2d:8e:46:53:e1:c9:7f:3c:76:42: 54:aa:a0:cc:da:31:4e:25:c4:28:af:24:cd:07:52:23:22:72: 78:3e:21:dd:fe:1b:40:17:ed:73:7b:6e:0d:c1:fd:d2:fe:35: 7a:3a:56:dc:17:39:ba:c1:2e:71:ac:a0:aa:96:a0:86:0c:55: cf:83:0b:3a:76:07:41:3e:68:1e:de:45:f3:c2:13:70:35:43: 5a:a7:91:98:1a:b0:5f:f8:a9:d2:c2:ce:e5:09:31:64:ad:a4: 65:e7:3a:e7:c0:62:d4:0d:21:cb:03:94:80:c4:4a:f0:40:29: 4a:d5:4b:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0 RDFCOUExNTEwHhcNMjUwOTA3MDcxMDUwWhcNMjUwOTE0MDcxMDUwWjAYMRYwFAYD VQQDEw02OGJkMmZmYi1mNTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvz6USnWLimfk6yj/kduBH/fSCr+Zpgjkg06MsK3BkiH7IRI9U78at7Ayr2Sq cRZZkwxR4AyX0ysStUU2o2KAf3/F5wJurshySi50IWMIElZ4jra6sHyP4Pw252km D9yAFSy+KLfOsU7cesT50gWuGHw2DlZG9GZygMzc+QYj2daWnJaMXovWmRD4yu2V NPqa0kGV9ULPf+w9vzUOU56h5NhGjF9o2YS4N0F50ItTClt7vmiLHbHwLal1kQnM g9h5BnmBaSZ9IQ9zOZMlr0WrCBpwLAwKOEkDEIjAFLGRlUxvvsOqKMxRM2tMeW19 6THs+g3y/k1Txs9dFv+A8VEZuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJd7Nxtz Nyz/Q+lYrNvNE51fb20PMB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQy SV9wdU1kdXJTYUpORzVvVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3FOG6pgDR/GAhywO0AGhsIX9bsnOa83VyQk5p1UvVRQwMDPoDO4G8 7tUUWNcPZYDuFoOLMpCG3V+IQ27hmFCUpaZDddlsBe3HkJuUncNRI9D4hbP04ouX 86AtVbjuiZPtoquKOlluHml1k2qjwQ3mwXzngLDR5oAd+PDc3trCRUcbO2NIHS2O RlPhyX88dkJUqqDM2jFOJcQoryTNB1IjInJ4PiHd/htAF+1ze24Nwf3S/jV6Olbc Fzm6wS5xrKCqlqCGDFXPgws6dgdBPmge3kXzwhNwNUNap5GYGrBf+KnSws7lCTFk raRl5zrnwGLUDSHLA5SAxErwQClK1Uvh -----END CERTIFICATE-----Generated at Sun Sep 7 14:22:29 2025 by rpki-client