$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft File: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json) Hash identifier: 3OZ7CaI8bvYY4WjSNNoVPPuFfIPW3nWo0oUUfvCwe0A= Subject key identifier: FB:88:4A:E6:FD:4D:8F:BC:D9:31:0E:5E:A2:EE:C0:77:F4:49:89:25 Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 Certificate issuer: /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft Manifest number: CA Signing time: Thu 21 Aug 2025 05:55:44 +0000 Manifest this update: Thu 21 Aug 2025 05:55:44 +0000 Manifest next update: Thu 28 Aug 2025 05:55:44 +0000 Files and hashes: 1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: t4+CuPmz8IRnjSoDKyumJAToYu6BX1F8+ahDuyxybrA=) 2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: tG+xEb4Bj22fmRv5Ap5El7N6H/BamXJAvudixhV4S5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE814, serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Validity Not Before: Aug 21 05:55:44 2025 GMT Not After : Aug 28 05:55:44 2025 GMT Subject: CN=68a6b4e0-f1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1b:fd:48:07:a8:30:7f:43:a3:94:f9:67:d2: fb:a8:a8:11:b8:79:b0:b3:71:28:a3:a8:57:db:e9: 38:24:85:8a:1a:41:5b:39:51:2c:67:15:18:3b:80: ad:ec:d2:c2:be:07:68:15:2d:cd:23:d7:87:ee:b4: 25:05:40:65:6c:e3:6d:1e:f2:3d:65:9f:61:01:b5: 1e:f8:d6:70:3b:46:8a:f4:fa:a7:e6:9e:8a:2c:25: c2:18:c0:62:6b:90:66:6b:ad:e0:1d:cd:94:90:37: 52:fa:fe:12:94:5d:0f:d7:82:9b:a7:c0:8b:f7:7c: ff:4d:0d:27:97:32:31:11:60:b0:e8:29:c8:83:8d: 67:18:41:95:22:7b:05:e8:12:e0:52:10:fb:0a:37: 49:6c:81:35:9a:96:46:f3:82:8f:a4:e6:d8:4a:5a: 97:ea:24:55:17:fd:53:4f:d2:21:bc:5b:ce:71:d1: 85:63:0c:a9:ed:85:dc:9e:62:99:86:ad:9e:35:2e: af:2a:5d:b0:72:b6:01:66:05:f2:47:f4:82:81:05: 5f:47:a2:dc:2c:70:15:81:d6:d9:a4:90:0f:75:3b: 59:0e:3b:e7:6f:b1:c9:00:71:86:07:40:92:94:6e: 45:ef:a3:92:30:48:f7:5f:2c:07:17:37:e5:b8:b0: 35:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:88:4A:E6:FD:4D:8F:BC:D9:31:0E:5E:A2:EE:C0:77:F4:49:89:25 X509v3 Authority Key Identifier: keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d4:15:f8:99:05:98:de:5f:9a:b4:53:55:4f:ff:21:5f:e1: e4:12:63:e7:f2:1e:34:82:fc:ee:a8:37:bd:b2:74:a1:35:c6: db:75:90:08:02:ba:ac:6d:e0:76:8f:0a:9e:16:40:24:fd:3a: dc:95:70:0a:1f:fa:24:b3:99:5e:bd:9c:cf:59:61:de:22:25: ab:d0:4d:d5:33:26:ee:66:02:ef:74:1d:be:bb:54:9f:36:99: 49:96:27:b7:ff:1d:48:ff:7d:a9:f6:24:81:db:48:24:39:28: 7c:5c:f9:b5:ce:34:8f:be:f5:dc:63:ac:c2:ec:30:0f:81:c6: 31:8b:ec:97:3a:0f:ca:10:cb:b4:61:d1:02:87:06:ae:1a:49: ac:f3:6d:44:f1:d4:da:a5:cf:3b:35:39:ea:e6:a4:9b:7f:3e: 74:fc:a4:aa:5e:8a:00:92:ae:00:8a:13:cb:eb:38:7e:c7:18: dd:e9:ad:5b:5b:4d:8a:d2:fa:98:56:a8:30:3d:b2:3c:05:98: d8:91:2b:1d:2b:0a:73:9c:a2:51:42:3f:9f:da:cf:0c:86:d8: 97:3a:80:2e:1d:9b:db:4d:ef:a7:4f:eb:2d:ef:f7:de:05:da: e6:38:48:45:e6:f3:b4:3c:e5:37:a7:af:f2:0a:12:19:30:a1: dc:d3:77:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MTQxMTAvBgNVBAUTKDExOEQ5QkRFMzE3NTRGOTg1NENCNTU0NzQwQTI5OUYx MzdFMjQxRTIwHhcNMjUwODIxMDU1NTQ0WhcNMjUwODI4MDU1NTQ0WjAYMRYwFAYD VQQDEw02OGE2YjRlMC1mMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Bv9SAeoMH9Do5T5Z9L7qKgRuHmws3Eoo6hX2+k4JIWKGkFbOVEsZxUYO4Ct 7NLCvgdoFS3NI9eH7rQlBUBlbONtHvI9ZZ9hAbUe+NZwO0aK9Pqn5p6KLCXCGMBi a5Bma63gHc2UkDdS+v4SlF0P14Kbp8CL93z/TQ0nlzIxEWCw6CnIg41nGEGVInsF 6BLgUhD7CjdJbIE1mpZG84KPpObYSlqX6iRVF/1TT9IhvFvOcdGFYwyp7YXcnmKZ hq2eNS6vKl2wcrYBZgXyR/SCgQVfR6LcLHAVgdbZpJAPdTtZDjvnb7HJAHGGB0CS lG5F76OSMEj3XywHFzfluLA1KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPuISub9 TY+82TEOXqLuwHf0SYklMB8GA1UdIwQYMBaAFBGNm94xdU+YVMtVR0CimfE34kHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxNC84QzU3RjE1QTRB MzAxMUVGQTgzMDc3MTlDNEY5QUUwMi9FWTJiM2pGMVQ1aFV5MVZIUUtLWjhUZmlR ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZMmIzakYxVDVoVXkxVkhRS0taOFRmaVFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgxNC84QzU3RjE1QTRBMzAxMUVGQTgzMDc3MTlDNEY5QUUwMi9FWTJiM2pGMVQ1 aFV5MVZIUUtLWjhUZmlRZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB81BX4mQWY3l+atFNVT/8hX+HkEmPn8h40gvzuqDe9snShNcbbdZAI ArqsbeB2jwqeFkAk/TrclXAKH/oks5levZzPWWHeIiWr0E3VMybuZgLvdB2+u1Sf NplJlie3/x1I/32p9iSB20gkOSh8XPm1zjSPvvXcY6zC7DAPgcYxi+yXOg/KEMu0 YdEChwauGkms821E8dTapc87NTnq5qSbfz50/KSqXooAkq4AihPL6zh+xxjd6a1b W02K0vqYVqgwPbI8BZjYkSsdKwpznKJRQj+f2s8MhtiXOoAuHZvbTe+nT+st7/fe BdrmOEhF5vO0POU3p6/yChIZMKHc03fw -----END CERTIFICATE-----Generated at Sat Aug 23 02:06:46 2025 by rpki-client