$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft File: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json) Hash identifier: XWbHRMtOlurHRu8V3ZVti6eADv+asJ+8amWUM5Fb1g0= Subject key identifier: 18:52:6A:27:88:4F:26:62:E9:EA:0C:E4:BE:3D:13:44:EE:3E:82:06 Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F Certificate issuer: /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft Manifest number: 35 Signing time: Fri 05 Sep 2025 08:08:13 +0000 Manifest this update: Fri 05 Sep 2025 08:08:13 +0000 Manifest next update: Fri 12 Sep 2025 08:08:13 +0000 Files and hashes: 1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: urCespfAee5rNASyoNo8wngBWe3+e/PxI3UDXqNCeso=) 2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F Validity Not Before: Sep 5 08:08:13 2025 GMT Not After : Sep 12 08:08:13 2025 GMT Subject: CN=68ba9a6d-47b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:a4:a6:2c:5b:ad:85:1e:bc:57:96:4a:71: 29:97:7a:3d:89:a7:c8:20:f3:67:77:04:54:05:68: 59:6e:d1:f6:7a:dc:a6:3a:74:e5:47:25:a5:23:cc: 84:35:6b:e0:41:fd:35:a7:b9:43:0b:86:56:42:01: 57:86:85:62:33:9e:e4:13:c0:96:57:06:62:33:25: 56:6c:9a:e6:47:f9:49:6a:86:55:26:cb:67:63:cb: b0:5a:d7:41:85:3b:d2:30:38:8a:16:9a:08:93:4c: 22:56:c5:07:ea:c0:b0:cd:22:37:ea:97:a6:c5:aa: af:f5:59:ab:43:e9:31:d3:20:70:a8:72:45:8f:37: d1:db:f9:62:ea:fc:ab:47:de:cc:bc:6b:2b:31:f3: dd:0d:7e:ee:43:45:02:f9:7d:29:5a:20:bb:2c:6e: db:a8:9e:7f:db:48:55:52:68:99:c9:04:2e:46:24: 49:dc:6c:70:f3:3b:b5:55:aa:eb:0f:b4:8b:bf:81: f2:c2:b0:91:98:f6:8f:9b:20:46:68:e3:ec:dd:f1: 15:86:e7:e6:72:a4:06:fd:74:39:76:11:91:7c:41: a5:91:a6:42:0c:df:e4:17:9f:8b:a2:1e:be:c8:d5: b0:2b:b6:31:a1:79:a7:d6:a9:c4:41:d9:91:5d:50: f1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:52:6A:27:88:4F:26:62:E9:EA:0C:E4:BE:3D:13:44:EE:3E:82:06 X509v3 Authority Key Identifier: keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:3a:3d:9a:80:a0:f1:db:d8:44:4a:36:c5:c4:fb:2b:49:df: 69:cc:3c:49:0f:e4:c7:37:e6:bf:88:02:22:b8:02:dc:d9:98: 8a:1f:54:88:e1:7b:0f:a8:8c:2e:d8:24:eb:06:73:4b:4f:a3: a0:32:3b:ed:f6:c3:ca:1b:a1:6d:10:d8:c8:6c:55:f6:22:1a: 4b:e5:ca:e1:69:c9:e5:80:aa:f5:09:4e:03:c8:77:ed:1b:8c: f4:01:0b:6c:b6:95:dc:d6:17:6d:73:58:f5:bd:f4:c4:09:6c: d6:a9:08:f5:43:00:b5:64:16:02:a9:a7:81:14:ca:f0:b6:dd: 4b:b3:8a:6d:3a:29:53:3f:6c:34:4f:7a:27:dd:2b:72:38:f2: a1:60:e9:9f:d4:f5:19:9d:13:4c:6a:15:66:18:2a:a2:b9:92: bf:e0:f2:fa:06:a1:23:54:17:07:00:3e:f1:67:6b:0c:44:6c: f2:19:51:84:62:01:df:31:21:89:73:9d:d3:74:4f:20:95:ed: b1:6c:47:94:ea:e0:53:04:f3:44:a7:0e:5b:ac:19:82:a8:87: 42:dc:b3:a2:3d:57:a2:9e:88:bc:80:74:6d:37:f2:56:c1:ef: f9:ed:4e:2f:58:de:45:21:07:a8:f1:af:e6:71:46:ad:12:98: 3c:91:44:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC MTQ4MTEwRjAeFw0yNTA5MDUwODA4MTNaFw0yNTA5MTIwODA4MTNaMBgxFjAUBgNV BAMTDTY4YmE5YTZkLTQ3YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8g6SmLFuthR68V5ZKcSmXej2Jp8gg82d3BFQFaFlu0fZ63KY6dOVHJaUjzIQ1 a+BB/TWnuUMLhlZCAVeGhWIznuQTwJZXBmIzJVZsmuZH+UlqhlUmy2djy7Ba10GF O9IwOIoWmgiTTCJWxQfqwLDNIjfql6bFqq/1WatD6THTIHCockWPN9Hb+WLq/KtH 3sy8aysx890Nfu5DRQL5fSlaILssbtuonn/bSFVSaJnJBC5GJEncbHDzO7VVqusP tIu/gfLCsJGY9o+bIEZo4+zd8RWG5+ZypAb9dDl2EZF8QaWRpkIM3+QXn4uiHr7I 1bArtjGheafWqcRB2ZFdUPEDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGFJqJ4hP JmLp6gzkvj0TRO4+ggYwHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACE6PZqAoPHb2ERKNsXE+ytJ32nMPEkP5Mc35r+IAiK4AtzZmIofVIjh ew+ojC7YJOsGc0tPo6AyO+32w8oboW0Q2MhsVfYiGkvlyuFpyeWAqvUJTgPId+0b jPQBC2y2ldzWF21zWPW99MQJbNapCPVDALVkFgKpp4EUyvC23Uuzim06KVM/bDRP eifdK3I48qFg6Z/U9RmdE0xqFWYYKqK5kr/g8voGoSNUFwcAPvFnawxEbPIZUYRi Ad8xIYlzndN0TyCV7bFsR5Tq4FME80SnDlusGYKoh0Lcs6I9V6KeiLyAdG038lbB 7/ntTi9Y3kUhB6jxr+ZxRq0SmDyRRD0= -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:13 2025 by rpki-client