$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: TqtEFKaZaDueVZRvkNgT+OKXjM5gPog6efiieX5LuZw= Subject key identifier: 18:2F:CF:13:81:CB:6F:D3:14:66:FF:8B:F8:F4:97:7F:E6:5A:BF:30 Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 03C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 03C3 Signing time: Wed 17 Sep 2025 01:06:59 +0000 Manifest this update: Wed 17 Sep 2025 01:06:58 +0000 Manifest next update: Wed 24 Sep 2025 01:06:58 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: FBL+rtm/nnmpMgFGL4X5PS07cdc7c5OoKqM1JY8hnXk=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 01:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: Sep 17 01:06:58 2025 GMT Not After : Sep 24 01:06:58 2025 GMT Subject: CN=68ca09b2-cbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:05:79:db:83:10:21:c3:d3:34:3e:f4:a9: 0e:4f:19:ee:d5:07:d0:17:db:a1:a0:2c:bb:97:59: 75:a1:59:00:bf:53:84:01:8b:4a:48:e4:4e:d1:1e: 4e:64:d1:49:97:0b:b2:db:91:e6:ce:9f:70:68:01: 36:b6:97:ea:9e:c7:6f:a7:8e:a1:c4:1d:6a:38:11: ed:3d:f7:bf:cc:5a:ab:c3:27:9b:d2:cf:00:81:36: 1a:54:44:4b:d3:89:b2:a7:2c:8a:68:01:40:b8:72: 5a:8d:b4:48:37:cc:18:b5:c0:ea:f0:0c:d3:c0:c3: ab:2b:b7:94:16:34:61:3d:37:53:e3:7a:bb:e4:0a: af:c5:e2:60:1d:15:8b:00:14:7b:3c:9b:c9:f8:8a: d1:3f:51:51:58:8c:72:4c:91:8f:22:70:db:1c:4a: d9:aa:45:92:a3:5c:23:18:e1:41:bf:b8:f9:b6:f3: ea:af:69:c7:c2:fb:4a:a7:89:03:1a:c6:04:6c:ea: 91:96:c3:32:1e:c7:fa:93:c9:81:c8:f9:89:c9:59: 0b:fe:d0:c9:2d:01:71:2d:52:2b:c2:e9:12:6e:ca: f6:63:a1:41:e9:4b:99:b7:90:05:cb:16:38:38:e9: ed:e5:04:cb:35:50:8d:88:e3:42:20:55:b0:33:1c: 87:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2F:CF:13:81:CB:6F:D3:14:66:FF:8B:F8:F4:97:7F:E6:5A:BF:30 X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:c9:73:03:6d:6f:71:95:83:d6:b0:c6:55:c3:39:79:a7:b5: 9a:64:f3:77:af:a1:63:14:ef:45:c1:01:a9:c5:7d:3e:2e:f2: 75:d2:f4:57:c3:1c:52:1e:16:ba:6a:ad:a2:11:2d:bf:3e:66: 4b:d9:c2:5b:b4:c9:c9:c7:83:a3:a9:93:6f:3b:10:d4:c6:41: b7:df:c9:7c:b7:7b:c4:47:d7:86:08:f0:b6:28:a4:b6:a0:a1: 39:63:36:d4:40:c5:4f:a1:4f:03:1c:30:1d:88:d3:99:6a:9a: fa:29:52:f6:c4:a7:1d:d5:59:5c:f9:e6:bd:00:4b:fc:23:7d: 85:40:1c:6c:84:da:d4:58:a4:d6:64:29:9b:b0:1f:61:a9:ac: 87:c5:fd:e1:44:0b:db:3c:43:de:18:28:6a:6e:36:3b:f4:27: 3d:b7:ce:be:2b:43:bc:5b:e5:65:6a:c9:60:27:2b:84:86:10: 93:d8:f5:28:2f:5b:dc:60:7a:17:af:8e:f6:14:09:52:54:93: ae:4d:bf:ef:44:34:ed:94:26:ce:d8:3f:7b:41:d0:d7:66:04: 00:42:a2:30:ba:e2:5c:a8:a7:c6:2f:c4:2a:05:96:39:f9:b2: 50:58:f9:ab:30:31:33:15:bd:04:03:e2:5a:32:bf:93:3d:f8: da:d3:ba:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjUwOTE3MDEwNjU4WhcNMjUwOTI0MDEwNjU4WjAYMRYwFAYD VQQDEw02OGNhMDliMi1jYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqEFeduDECHD0zQ+9KkOTxnu1QfQF9uhoCy7l1l1oVkAv1OEAYtKSORO0R5O ZNFJlwuy25Hmzp9waAE2tpfqnsdvp46hxB1qOBHtPfe/zFqrwyeb0s8AgTYaVERL 04mypyyKaAFAuHJajbRIN8wYtcDq8AzTwMOrK7eUFjRhPTdT43q75AqvxeJgHRWL ABR7PJvJ+IrRP1FRWIxyTJGPInDbHErZqkWSo1wjGOFBv7j5tvPqr2nHwvtKp4kD GsYEbOqRlsMyHsf6k8mByPmJyVkL/tDJLQFxLVIrwukSbsr2Y6FB6UuZt5AFyxY4 OOnt5QTLNVCNiONCIFWwMxyHTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgvzxOB y2/TFGb/i/j0l3/mWr8wMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtyXMDbW9xlYPWsMZVwzl5p7WaZPN3r6FjFO9FwQGpxX0+LvJ10vRX wxxSHha6aq2iES2/PmZL2cJbtMnJx4OjqZNvOxDUxkG338l8t3vER9eGCPC2KKS2 oKE5YzbUQMVPoU8DHDAdiNOZapr6KVL2xKcd1Vlc+ea9AEv8I32FQBxshNrUWKTW ZCmbsB9hqayHxf3hRAvbPEPeGChqbjY79Cc9t86+K0O8W+VlaslgJyuEhhCT2PUo L1vcYHoXr472FAlSVJOuTb/vRDTtlCbO2D97QdDXZgQAQqIwuuJcqKfGL8QqBZY5 +bJQWPmrMDEzFb0EA+JaMr+TPfja07pz -----END CERTIFICATE-----Generated at Thu Sep 18 23:24:01 2025 by rpki-client