$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft File: eVMBxo-H8Eofn0mb3y0p84RX-9M.mft (raw, json) Hash identifier: K0VzZCWX/68PjmcHFjIripvTZAmg9O0HgxBuC8WxyHI= Subject key identifier: 80:E3:B2:F7:7C:E1:B0:50:79:F4:B1:14:60:33:4B:3A:E5:94:2A:4D Authority key identifier: 79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3 Certificate issuer: /CN=A91D5749/serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft Manifest number: 01FA Signing time: Thu 21 Aug 2025 02:28:58 +0000 Manifest this update: Thu 21 Aug 2025 02:28:57 +0000 Manifest next update: Thu 28 Aug 2025 02:28:57 +0000 Files and hashes: 1: eVMBxo-H8Eofn0mb3y0p84RX-9M.crl (hash: rX1+dn8xk5jh+SFKiTaY9gM1y0aetnH8e4OQOoYc1zg=) 2: FA57A19A72CE11ED9E7FF20FC4F9AE02.roa (hash: yJ4lShlDGyRUFuRYtdd4tf+gPrXiWJKg0kEkwM3sQJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5749, serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3 Validity Not Before: Aug 21 02:28:57 2025 GMT Not After : Aug 28 02:28:57 2025 GMT Subject: CN=68a68469-d94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a8:e8:cf:f5:76:1c:cc:7e:6f:49:bd:e5:bd: 6c:2e:f6:8c:d1:5f:e8:15:91:ec:27:9d:65:2a:64: 8e:66:d8:86:e6:69:d5:f5:33:94:c5:de:63:2a:ce: d3:54:cb:2e:c2:0a:95:40:35:d4:59:8b:76:aa:9f: b6:ea:89:76:ed:31:32:19:22:94:ca:e0:36:4b:a5: 37:2a:e2:ad:a6:77:55:cb:3a:ea:ab:8d:22:7b:26: 89:df:20:b7:b5:3b:8b:41:33:9a:eb:83:e7:3c:8c: 48:6e:6a:79:26:1a:3d:81:29:06:84:ee:2e:1b:46: 3b:13:2d:fb:bf:f4:7a:9f:c3:f2:0f:ce:ad:9d:b5: 3f:f5:88:f9:6a:00:f8:cf:3c:ed:6b:e9:3a:26:8a: 3d:23:06:2d:d1:cc:ec:22:8f:43:47:d8:6c:28:3a: 00:70:e0:83:ff:a4:e0:23:b5:29:d3:ae:73:e7:b5: a6:55:6e:78:b5:c3:5d:29:29:17:f6:47:59:ba:eb: 04:7c:d7:21:08:5d:f6:46:e4:a9:4b:90:4b:54:65: 9b:91:56:81:b4:29:c6:29:ec:2f:7d:05:ed:61:5c: 5b:f4:bf:c8:ed:cf:e3:48:1e:45:c7:e8:55:e2:14: 00:26:f3:a7:a0:8a:d6:b2:96:cd:50:d3:b2:98:dc: 11:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E3:B2:F7:7C:E1:B0:50:79:F4:B1:14:60:33:4B:3A:E5:94:2A:4D X509v3 Authority Key Identifier: keyid:79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b2:9a:85:69:8b:b5:a4:a9:53:fd:0b:dc:f0:30:b3:db:3d: 2a:00:9e:cd:32:4d:b7:e2:e8:06:93:21:31:46:14:63:99:8a: 77:12:a4:00:77:68:ec:e6:3b:c0:0b:be:93:1d:13:92:76:6b: 34:ec:63:61:9e:ed:60:de:34:1b:dc:54:27:f8:8b:c3:39:b7: b2:b3:43:fb:7f:12:ce:35:d8:af:cd:22:77:a7:1f:61:cc:8a: dd:d1:cf:7f:28:92:1e:08:d8:67:53:e2:4e:ea:cb:89:20:f9: ef:a0:e2:e5:ea:9a:05:81:6f:28:a1:5a:c0:fb:3b:bc:e2:d2: e5:f0:d7:95:4d:e8:05:d9:5d:41:89:62:1a:d2:2c:ee:d2:8c: 11:ba:ff:32:f6:09:1e:a8:31:1e:9d:37:5d:de:6a:c7:e9:66: 2e:42:29:33:c2:34:24:f5:2f:1e:33:a8:bc:ab:2c:7c:5b:a2: 80:86:ce:66:1f:02:ee:7f:90:ca:d8:c4:0d:88:5c:45:10:35: 3f:8c:90:a4:ca:b5:4c:38:f2:8e:c3:be:a5:9e:00:e2:4f:5c: bc:86:dd:23:0e:d8:c8:65:b3:51:da:4c:af:1f:69:f7:63:00: ed:4e:21:35:12:aa:7f:4a:62:c3:bd:94:d2:65:86:ce:4f:55: e1:f6:2c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU3NDkxMTAvBgNVBAUTKDc5NTMwMUM2OEY4N0YwNEExRjlGNDk5QkRGMkQyOUYz ODQ1N0ZCRDMwHhcNMjUwODIxMDIyODU3WhcNMjUwODI4MDIyODU3WjAYMRYwFAYD VQQDEw02OGE2ODQ2OS1kOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6joz/V2HMx+b0m95b1sLvaM0V/oFZHsJ51lKmSOZtiG5mnV9TOUxd5jKs7T VMsuwgqVQDXUWYt2qp+26ol27TEyGSKUyuA2S6U3KuKtpndVyzrqq40ieyaJ3yC3 tTuLQTOa64PnPIxIbmp5Jho9gSkGhO4uG0Y7Ey37v/R6n8PyD86tnbU/9Yj5agD4 zzzta+k6Joo9IwYt0czsIo9DR9hsKDoAcOCD/6TgI7Up065z57WmVW54tcNdKSkX 9kdZuusEfNchCF32RuSpS5BLVGWbkVaBtCnGKewvfQXtYVxb9L/I7c/jSB5Fx+hV 4hQAJvOnoIrWspbNUNOymNwRvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDjsvd8 4bBQefSxFGAzSzrllCpNMB8GA1UdIwQYMBaAFHlTAcaPh/BKH59Jm98tKfOEV/vT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTc0OS9DNzBFQzNCQTcy Q0MxMUVEOTA4RjZGMEZDNEY5QUUwMi9lVk1CeG8tSDhFb2ZuMG1iM3kwcDg0Ulgt OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VWTUJ4by1IOEVvZm4wbWIzeTBwODRSWC05TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTc0OS9DNzBFQzNCQTcyQ0MxMUVEOTA4RjZGMEZDNEY5QUUwMi9lVk1CeG8tSDhF b2ZuMG1iM3kwcDg0UlgtOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZspqFaYu1pKlT/Qvc8DCz2z0qAJ7NMk234ugGkyExRhRjmYp3EqQA d2js5jvAC76THROSdms07GNhnu1g3jQb3FQn+IvDObeys0P7fxLONdivzSJ3px9h zIrd0c9/KJIeCNhnU+JO6suJIPnvoOLl6poFgW8ooVrA+zu84tLl8NeVTegF2V1B iWIa0izu0owRuv8y9gkeqDEenTdd3mrH6WYuQikzwjQk9S8eM6i8qyx8W6KAhs5m HwLuf5DK2MQNiFxFEDU/jJCkyrVMOPKOw76lngDiT1y8ht0jDtjIZbNR2kyvH2n3 YwDtTiE1Eqp/SmLDvZTSZYbOT1Xh9ixh -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:42 2025 by rpki-client