$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft File: EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json) Hash identifier: GdPyUDYRyIjSYDJiJHDGTaXhlkAqWfEtpq6q/2dMc1M= Subject key identifier: CF:83:34:82:41:1A:61:84:16:72:73:7A:6E:89:E2:C3:67:40:13:2C Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 Certificate issuer: /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft Manifest number: 020F Signing time: Wed 17 Sep 2025 02:40:02 +0000 Manifest this update: Wed 17 Sep 2025 02:40:01 +0000 Manifest next update: Wed 24 Sep 2025 02:40:01 +0000 Files and hashes: 1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: oLV1kTtZrdjV1fqJOOSb0YEJuTnJ1YSBBEBiOdfgPZQ=) 2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: Uh7B24TrfbcaCXXos+UCRzkq1ccagOkOy3EbQYTwo0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544 Validity Not Before: Sep 17 02:40:01 2025 GMT Not After : Sep 24 02:40:01 2025 GMT Subject: CN=68ca1f81-2380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:ad:25:a9:4d:47:d9:4e:cc:00:d3:7b:55: 96:d3:b4:ad:13:d5:92:2b:cf:d9:fa:3e:8d:16:60: e7:54:a2:06:8e:bd:b4:9e:31:91:02:f0:9e:17:95: 0b:e5:46:dc:29:2a:d3:59:64:9b:59:51:9a:e6:05: 90:3f:6b:07:62:bd:ca:0d:96:77:b7:82:a1:0d:06: 69:2e:b8:ed:70:18:df:8b:1b:0d:33:5a:c7:f5:58: 78:2d:a0:28:47:7b:09:90:0f:f1:ac:0a:50:d4:08: 62:bd:a3:69:c2:0c:cd:57:1a:f0:f4:29:f5:cc:e8: bc:e7:08:df:fe:f5:9d:ad:0e:07:1d:77:79:ac:94: 13:10:68:ae:44:bc:61:0b:e5:3b:35:23:2b:ff:cb: 8f:08:f0:e8:26:d5:7c:07:c4:7e:7e:30:11:dc:b8: 60:9b:85:17:05:ec:44:09:71:dc:ff:ef:88:93:a5: 4b:6f:16:5e:4f:f5:9e:f7:d5:c0:31:f0:03:da:d8: 3a:9c:c3:9f:a7:28:ab:8f:bc:84:20:7f:48:cc:6f: 11:60:b2:02:15:f2:ae:d4:5d:98:73:d1:31:8a:f3: 24:a1:b6:6b:63:3f:ae:ac:d7:e2:c6:ad:b8:88:67: 6a:4e:19:55:b9:9d:74:8c:f1:56:19:6a:b6:ce:68: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:83:34:82:41:1A:61:84:16:72:73:7A:6E:89:E2:C3:67:40:13:2C X509v3 Authority Key Identifier: keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:64:67:9a:c6:9e:12:ac:cf:b8:39:6e:14:30:1b:4b:d3:29: 5a:49:1b:ef:25:e4:6c:98:b9:7d:78:e9:20:5a:8d:64:81:b0: 4c:5b:80:a2:c3:d0:14:39:4b:3b:2a:b2:6d:15:33:6c:88:74: 5f:24:2c:77:36:a3:c4:ec:8d:23:c8:53:4f:20:47:b7:99:24: ad:bb:a1:4f:85:86:12:70:f7:65:08:df:11:17:cd:14:b9:9e: 30:48:3a:30:5d:4d:11:5b:45:c3:c4:51:0e:a7:00:ba:65:7e: 58:81:48:6c:82:48:5e:f3:e7:3c:ea:72:c9:87:7c:70:d4:bd: d6:2e:29:4b:d7:e2:49:f5:0e:85:05:db:9d:55:ba:b1:b6:b7: 8e:49:65:2a:53:8f:20:8a:c6:ac:df:e2:76:cc:5e:4c:8d:e7: 8f:4a:a0:80:8a:fe:07:60:04:5c:67:e6:b3:ee:2f:96:b0:59: 37:3f:3a:83:2c:3a:0b:b6:fa:88:bd:7d:5c:fb:62:69:64:fe: 54:f1:0b:3f:9e:48:ff:3a:e1:90:b2:64:bd:f8:99:82:5b:88: 54:ed:ef:f1:29:f5:e4:16:40:da:6e:79:76:64:d2:90:52:d1: 1d:6c:53:ac:39:7e:23:c9:9d:d5:be:c7:11:09:4e:fc:29:32: 2b:f5:7d:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx MjE0N0Q1NDQwHhcNMjUwOTE3MDI0MDAxWhcNMjUwOTI0MDI0MDAxWjAYMRYwFAYD VQQDEw02OGNhMWY4MS0yMzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbetJalNR9lOzADTe1WW07StE9WSK8/Z+j6NFmDnVKIGjr20njGRAvCeF5UL 5UbcKSrTWWSbWVGa5gWQP2sHYr3KDZZ3t4KhDQZpLrjtcBjfixsNM1rH9Vh4LaAo R3sJkA/xrApQ1AhivaNpwgzNVxrw9Cn1zOi85wjf/vWdrQ4HHXd5rJQTEGiuRLxh C+U7NSMr/8uPCPDoJtV8B8R+fjAR3Lhgm4UXBexECXHc/++Ik6VLbxZeT/We99XA MfAD2tg6nMOfpyirj7yEIH9IzG8RYLICFfKu1F2Yc9ExivMkobZrYz+urNfixq24 iGdqThlVuZ10jPFWGWq2zmg7uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+DNIJB GmGEFnJzem6J4sNnQBMsMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj V3RxUF9GdkxPRWtTRkgxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUZGeaxp4SrM+4OW4UMBtL0ylaSRvvJeRsmLl9eOkgWo1kgbBMW4Ci w9AUOUs7KrJtFTNsiHRfJCx3NqPE7I0jyFNPIEe3mSStu6FPhYYScPdlCN8RF80U uZ4wSDowXU0RW0XDxFEOpwC6ZX5YgUhsgkhe8+c86nLJh3xw1L3WLilL1+JJ9Q6F BdudVbqxtreOSWUqU48gisas3+J2zF5MjeePSqCAiv4HYARcZ+az7i+WsFk3PzqD LDoLtvqIvX1c+2JpZP5U8Qs/nkj/OuGQsmS9+JmCW4hU7e/xKfXkFkDabnl2ZNKQ UtEdbFOsOX4jyZ3VvscRCU78KTIr9X0d -----END CERTIFICATE-----Generated at Thu Sep 18 20:24:57 2025 by rpki-client