$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft File: eE7A8P-dbYDcn33OORSfxg-WFJk.mft (raw, json) Hash identifier: gg22S70z3Fx3pBluE0XnIIVz//Q8ddB7diCCw+ho5wA= Subject key identifier: 0E:49:30:13:FC:B9:C5:B3:B1:08:0E:54:A0:7D:62:36:B5:7C:B5:18 Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft Manifest number: E8 Signing time: Fri 19 Sep 2025 05:58:50 +0000 Manifest this update: Fri 19 Sep 2025 05:58:49 +0000 Manifest next update: Fri 26 Sep 2025 05:58:49 +0000 Files and hashes: 1: eE7A8P-dbYDcn33OORSfxg-WFJk.crl (hash: bVH6QN2xRt1dk7+AFRbF1CpQIiVvOTJ3pPpgfeYSi9M=) 2: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (hash: H9iBAev1i2fVG9Su0JRgr3VpHwr3qa10u8oippD4Mno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: Sep 19 05:58:49 2025 GMT Not After : Sep 26 05:58:49 2025 GMT Subject: CN=68ccf11a-a79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:01:be:bb:40:be:69:6f:b8:b2:8a:0e:4b:1e: e9:6b:cf:93:63:09:2a:6d:2b:09:4a:a0:e8:0c:2f: 01:df:08:30:3e:58:29:09:bc:5d:b9:51:2e:5f:76: f6:61:db:8a:61:7d:11:56:51:ed:de:22:83:4b:47: 8c:1a:7b:32:6b:3a:24:c4:1d:50:ac:17:5b:c6:cb: f0:f4:9a:63:da:ab:67:9e:dc:65:94:56:e8:4d:a5: 65:dc:a4:f8:46:35:43:ed:c5:9d:cd:24:ed:bf:ce: a7:97:85:5b:85:56:e7:9a:fa:e3:d8:1f:8b:28:40: 7b:3c:b4:a4:9b:d8:30:b5:81:a2:45:45:50:57:cf: 96:8b:00:8d:25:08:74:a5:25:74:09:93:c4:01:91: 54:c6:af:c2:cd:03:45:62:0e:11:3b:e0:71:1b:17: ab:fa:8d:7c:7b:8b:0e:e9:1e:d0:f1:b3:b6:6b:53: e6:da:ad:de:20:4c:80:9a:7c:0a:2b:69:3f:af:4d: c1:3b:d6:22:fd:34:69:cf:ba:b1:8f:c5:77:50:6f: fc:84:f6:c5:85:1b:94:5e:ae:9a:fe:76:84:81:08: b7:81:1a:bd:63:da:bc:3a:63:07:a9:82:be:03:60: 14:eb:87:0c:80:c2:43:55:ba:d3:aa:2a:0e:bd:bd: 87:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:49:30:13:FC:B9:C5:B3:B1:08:0E:54:A0:7D:62:36:B5:7C:B5:18 X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:d4:bd:49:6e:02:2d:d3:54:2e:ff:b8:ab:98:16:07:cc:f9: 6c:67:a6:7d:6c:f0:d2:23:f9:66:1c:54:1d:b6:45:12:f7:69: 3e:95:58:dd:24:ab:4c:5c:d9:18:c6:40:3e:2c:60:80:2a:c3: b6:0a:9a:49:b6:25:f4:30:95:89:4a:96:3e:c3:99:76:ab:af: 40:b5:9c:20:2f:c6:98:ea:d9:b2:0b:72:98:13:f6:ea:0c:b1: 1b:d3:92:7e:fd:63:04:15:f7:d5:4a:df:44:34:33:2d:21:f1: dd:a9:8d:39:d3:18:3e:65:61:42:21:3b:08:82:e2:6e:3a:3b: cc:98:f5:26:7f:15:d4:ab:50:6d:17:da:38:db:10:3f:24:b2: 76:48:5a:38:95:8e:0f:cb:03:a5:dd:a4:b6:8e:3b:f1:09:37: e0:ef:b2:b1:bf:cb:31:67:a1:48:90:14:91:20:57:02:5c:e9: 6b:6c:7a:89:29:9f:c6:96:c0:49:c2:ff:3e:27:f7:c0:57:8b: 58:85:a3:d5:a0:26:41:02:fa:49:62:9b:67:1d:15:05:2d:5e: 8c:cb:f7:2d:42:4f:eb:01:f6:4f:85:07:a7:2c:37:5d:57:98: d5:c8:66:0b:e0:bc:a8:77:9a:7c:84:a0:a8:07:2b:ae:f0:4c: ea:cc:2f:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RDRTM5MTQ5RkM2 MEY5NjE0OTkwHhcNMjUwOTE5MDU1ODQ5WhcNMjUwOTI2MDU1ODQ5WjAYMRYwFAYD VQQDEw02OGNjZjExYS1hNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgG+u0C+aW+4sooOSx7pa8+TYwkqbSsJSqDoDC8B3wgwPlgpCbxduVEuX3b2 YduKYX0RVlHt3iKDS0eMGnsyazokxB1QrBdbxsvw9Jpj2qtnntxllFboTaVl3KT4 RjVD7cWdzSTtv86nl4VbhVbnmvrj2B+LKEB7PLSkm9gwtYGiRUVQV8+WiwCNJQh0 pSV0CZPEAZFUxq/CzQNFYg4RO+BxGxer+o18e4sO6R7Q8bO2a1Pm2q3eIEyAmnwK K2k/r03BO9Yi/TRpz7qxj8V3UG/8hPbFhRuUXq6a/naEgQi3gRq9Y9q8OmMHqYK+ A2AU64cMgMJDVbrTqioOvb2HQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5JMBP8 ucWzsQgOVKB9Yja1fLUYMB8GA1UdIwQYMBaAFHhOwPD/nW2A3J99zjkUn8YPlhSZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9DNjY1REYyMjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZRGNuMzNPT1JTZnhnLVdG SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZ RGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA21L1JbgIt01Qu/7irmBYHzPlsZ6Z9bPDSI/lmHFQdtkUS92k+lVjd JKtMXNkYxkA+LGCAKsO2CppJtiX0MJWJSpY+w5l2q69AtZwgL8aY6tmyC3KYE/bq DLEb05J+/WMEFffVSt9ENDMtIfHdqY050xg+ZWFCITsIguJuOjvMmPUmfxXUq1Bt F9o42xA/JLJ2SFo4lY4PywOl3aS2jjvxCTfg77Kxv8sxZ6FIkBSRIFcCXOlrbHqJ KZ/GlsBJwv8+J/fAV4tYhaPVoCZBAvpJYptnHRUFLV6My/ctQk/rAfZPhQenLDdd V5jVyGYL4Lyod5p8hKCoByuu8EzqzC8W -----END CERTIFICATE-----Generated at Fri Sep 19 15:28:11 2025 by rpki-client