$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft File: EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json) Hash identifier: ZCqyfxeSLhok3hKY+QNZe21THW+MTOvPJ5gO1wFEzYM= Subject key identifier: C1:55:92:04:08:F3:5F:1A:2A:A9:0E:81:96:27:F2:AE:D3:7C:33:BF Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61 Certificate issuer: /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61 Certificate serial: 0E84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft Manifest number: 0E7B Signing time: Sun 24 Aug 2025 17:40:09 +0000 Manifest this update: Sun 24 Aug 2025 17:40:08 +0000 Manifest next update: Sun 31 Aug 2025 17:40:08 +0000 Files and hashes: 1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: 4qMttu9VZsdXoLkbfTWngar8on+5g1v32sN//+S3bAs=) 2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: WHACvNrcE0YDUYNFLw70C4k+Gn2fGHs4oAn4CLKhehw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3716 (0xe84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61 Validity Not Before: Aug 24 17:40:08 2025 GMT Not After : Aug 31 17:40:08 2025 GMT Subject: CN=68ab4e78-535c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:eb:c7:d6:8f:dc:ea:3d:3f:dd:ef:cf:0f: 56:c4:b3:ce:1a:88:44:0e:fe:49:39:d5:f7:1f:72: f4:aa:91:7f:8d:88:74:84:e2:74:12:98:d1:20:a6: f1:62:fb:3f:45:16:12:37:62:c7:cd:29:4a:fa:a7: 91:2c:8d:5d:41:d6:7b:2d:e1:2f:7a:5f:12:68:c1: 95:2d:05:f3:e2:2f:26:68:8c:52:93:40:76:4a:fe: 36:61:fd:49:26:87:d1:3e:5c:6a:27:9c:48:58:e7: ca:d4:e7:db:d2:9b:d0:a3:c1:bf:cb:24:01:07:ff: c7:04:0b:98:63:ae:01:56:0d:0d:71:3e:32:2d:9a: 1e:f9:a3:d1:8d:e0:cc:4e:4f:ce:29:c6:23:37:ce: 11:d9:53:65:d9:f7:17:92:a8:4b:9a:60:0f:3c:27: 6d:eb:3c:13:54:51:92:d0:fb:d8:57:83:2a:80:82: b2:b1:99:a2:23:66:fe:e9:43:29:e3:72:49:d4:70: 5b:80:29:ae:01:1c:9d:e7:88:86:7d:09:49:f0:b4: b1:39:cd:55:5f:7f:74:bc:f0:88:4b:2c:d5:17:1b: 90:82:6b:99:1a:b0:44:a9:9e:37:5c:dd:72:43:a5: 82:13:ce:ad:6e:6d:ca:e1:23:66:5b:92:84:c9:9f: df:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:55:92:04:08:F3:5F:1A:2A:A9:0E:81:96:27:F2:AE:D3:7C:33:BF X509v3 Authority Key Identifier: keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:8e:d2:62:a2:4c:d0:d0:6d:bd:1d:b7:d7:9f:82:63:e5:ac: ab:50:c8:eb:63:ac:60:ed:2f:d5:42:d5:fc:8a:46:13:d4:67: 6a:67:0a:9e:cc:9e:7e:20:53:a1:23:93:3d:10:d5:f3:1a:47: 4d:ba:ec:d3:34:7c:7c:84:b7:7d:bb:bb:f1:e1:12:b3:4c:56: f9:0f:fa:9a:34:8c:dc:f2:87:6b:42:9a:19:b3:d3:35:7f:36: 50:3f:f6:10:b0:67:e8:00:5f:d0:a1:c2:92:5c:02:c9:cb:7b: 06:d1:6d:ab:a5:d8:89:bf:98:6c:6d:f1:84:7d:10:65:77:70: 05:d8:ed:de:33:e3:8f:27:c3:d2:e5:7f:1c:9e:9f:d9:72:f8: 2b:dd:e0:5b:af:cd:c5:3e:c9:99:4b:7a:35:71:72:e1:05:5e: 09:b5:6d:bc:25:21:2c:e0:06:e9:9b:f6:02:3d:9f:77:44:a1: d9:d7:27:db:35:6b:02:3c:d7:a4:02:b1:ff:99:0f:8a:ab:ec: 68:79:62:fc:b5:7f:99:bc:7b:a7:b4:cd:2e:62:4a:48:70:5d: 59:a8:f2:95:9c:0a:73:f5:37:ad:b6:53:e9:bb:60:4b:86:96: 13:c0:bc:94:e0:fc:26:83:0e:d9:03:c5:1b:7b:59:c4:ed:59: 54:3f:bc:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QjQxMTAvBgNVBAUTKDEwNDQ5OTdCQzYzQTgxM0RBMDRDMUI5MTg5NzM3NEI2 OEIwNEJBNjEwHhcNMjUwODI0MTc0MDA4WhcNMjUwODMxMTc0MDA4WjAYMRYwFAYD VQQDEw02OGFiNGU3OC01MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5Prx9aP3Oo9P93vzw9WxLPOGohEDv5JOdX3H3L0qpF/jYh0hOJ0EpjRIKbx Yvs/RRYSN2LHzSlK+qeRLI1dQdZ7LeEvel8SaMGVLQXz4i8maIxSk0B2Sv42Yf1J JofRPlxqJ5xIWOfK1Ofb0pvQo8G/yyQBB//HBAuYY64BVg0NcT4yLZoe+aPRjeDM Tk/OKcYjN84R2VNl2fcXkqhLmmAPPCdt6zwTVFGS0PvYV4MqgIKysZmiI2b+6UMp 43JJ1HBbgCmuARyd54iGfQlJ8LSxOc1VX390vPCISyzVFxuQgmuZGrBEqZ43XN1y Q6WCE86tbm3K4SNmW5KEyZ/fcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFVkgQI 818aKqkOgZYn8q7TfDO/MB8GA1UdIwQYMBaAFBBEmXvGOoE9oEwbkYlzdLaLBLph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdCNC8zNjA4OTIyMDlE OUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdUMmdUQnVSaVhOMHRvc0V1 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFU1plOFk2Z1QyZ1RCdVJpWE4wdG9zRXVtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdCNC8zNjA4OTIyMDlEOUExMUU5QUU5Qzg4NUFDNEY5QUUwMi9FRVNaZThZNmdU MmdUQnVSaVhOMHRvc0V1bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBjtJiokzQ0G29HbfXn4Jj5ayrUMjrY6xg7S/VQtX8ikYT1GdqZwqe zJ5+IFOhI5M9ENXzGkdNuuzTNHx8hLd9u7vx4RKzTFb5D/qaNIzc8odrQpoZs9M1 fzZQP/YQsGfoAF/QocKSXALJy3sG0W2rpdiJv5hsbfGEfRBld3AF2O3eM+OPJ8PS 5X8cnp/Zcvgr3eBbr83FPsmZS3o1cXLhBV4JtW28JSEs4Abpm/YCPZ93RKHZ1yfb NWsCPNekArH/mQ+Kq+xoeWL8tX+ZvHuntM0uYkpIcF1ZqPKVnApz9TettlPpu2BL hpYTwLyU4Pwmgw7ZA8Ube1nE7VlUP7wq -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:37 2025 by rpki-client