$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft File: EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json) Hash identifier: pIYXR/PrrsqueKLBBN2pUiLx9Nsof25ihDeQ0h3K/RI= Subject key identifier: 54:BF:4D:56:06:64:35:C1:BC:4E:4D:7C:C9:F4:3F:FA:87:66:79:1E Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0EAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft Manifest number: 0EA4 Signing time: Thu 18 Sep 2025 17:50:15 +0000 Manifest this update: Thu 18 Sep 2025 17:50:14 +0000 Manifest next update: Thu 25 Sep 2025 17:50:14 +0000 Files and hashes: 1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: NfdsQ1EV+umnnqANbcNp02RDv8BQpJtbqtB0nSeykX0=) 2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: U9KBsxBRcXn+lvll9K6vuuTm2toDlFCHVWsbee/fhwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3754 (0xeaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: Sep 18 17:50:14 2025 GMT Not After : Sep 25 17:50:14 2025 GMT Subject: CN=68cc4657-d5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a2:bd:aa:a3:e5:32:45:ed:93:3a:9b:7b:2e: c9:a2:58:4f:4f:0c:b1:3e:23:4f:92:44:49:16:33: 08:65:8d:29:1b:c9:4f:c1:63:94:e6:b4:88:e8:b7: af:f9:ec:ad:bb:4c:42:43:9b:79:fa:44:28:18:b9: 43:93:c0:f2:8d:77:37:47:4a:26:08:4b:59:d4:a5: 92:ed:8b:fa:a5:14:9a:6f:fb:8e:02:11:06:7e:58: 92:84:7d:86:a5:08:38:c8:e2:93:50:29:31:2f:0f: 18:bb:04:cd:be:db:1a:c5:33:94:cd:27:d7:c6:d7: 74:3e:49:b5:e1:65:01:e9:25:d7:1a:dc:4f:5d:11: b2:bd:62:d4:da:b3:0b:60:d4:5e:24:96:7e:b9:bc: 83:01:d0:0e:c1:c5:d0:56:35:f7:99:92:d3:f1:a6: a2:1b:bf:73:b4:d7:a2:40:30:04:c6:6c:6e:d4:57: e9:22:56:2f:e7:c8:6e:bb:08:d6:05:f4:69:e1:18: 33:40:eb:6a:a7:9e:2c:3e:e4:0c:e2:95:61:b0:e7: 77:36:7c:55:ff:c4:3d:31:18:c5:fb:7f:59:c7:c0: 93:c3:18:06:f0:03:08:45:ae:e5:f7:b6:50:13:e2: 3b:34:43:88:6d:e0:7f:b1:c3:45:67:bd:ca:e3:dd: b1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BF:4D:56:06:64:35:C1:BC:4E:4D:7C:C9:F4:3F:FA:87:66:79:1E X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:53:1f:1c:34:9f:15:10:60:3b:9e:53:86:9c:67:c4:3b:01: d6:13:a4:6f:a5:4d:76:3c:38:1d:ee:55:d6:b1:e1:b2:05:41: e9:05:c1:67:00:33:ba:cf:1b:48:ef:78:db:5b:c9:4b:59:58: cc:b9:15:10:8e:16:f2:74:34:12:00:88:85:88:2d:cd:25:a2: 7b:9a:02:e9:ee:ec:25:ea:1c:f8:d4:24:62:c4:c0:e3:50:22: 37:87:4a:56:a4:1c:8a:a0:9f:2b:b7:45:9c:d9:ae:f2:01:7b: 53:2b:be:df:07:e8:7f:1d:36:a1:07:77:09:22:e2:80:ee:9d: c8:46:98:3f:61:5a:33:dd:34:89:19:d8:33:18:c1:39:c3:3b: c2:44:ff:c2:30:cf:e4:09:92:21:c2:c1:de:a5:44:8a:d4:7b: 39:0c:8d:c9:0c:3c:66:fa:b9:08:d7:51:fa:f3:76:95:2e:10: 4f:ad:7a:9e:fc:cf:06:57:bc:0f:cd:28:27:bd:0b:8c:0e:b6: f2:33:aa:24:82:c6:26:2a:e5:ac:8d:45:77:91:a1:58:78:d2: eb:a3:cd:96:36:37:fc:5a:3f:86:14:92:f8:7b:14:22:8c:c7: 59:50:02:ef:e2:99:b3:ec:f1:a2:10:02:98:ce:97:87:9b:04: f6:8d:12:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjUwOTE4MTc1MDE0WhcNMjUwOTI1MTc1MDE0WjAYMRYwFAYD VQQDEw02OGNjNDY1Ny1kNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06K9qqPlMkXtkzqbey7JolhPTwyxPiNPkkRJFjMIZY0pG8lPwWOU5rSI6Lev +eytu0xCQ5t5+kQoGLlDk8DyjXc3R0omCEtZ1KWS7Yv6pRSab/uOAhEGfliShH2G pQg4yOKTUCkxLw8YuwTNvtsaxTOUzSfXxtd0Pkm14WUB6SXXGtxPXRGyvWLU2rML YNReJJZ+ubyDAdAOwcXQVjX3mZLT8aaiG79ztNeiQDAExmxu1FfpIlYv58huuwjW BfRp4RgzQOtqp54sPuQM4pVhsOd3NnxV/8Q9MRjF+39Zx8CTwxgG8AMIRa7l97ZQ E+I7NEOIbeB/scNFZ73K492xvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFS/TVYG ZDXBvE5NfMn0P/qHZnkeMB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTYzNy85QkFFQTEzQTk3NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8y alBkaElGRmV5c1l1X2FQa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsUx8cNJ8VEGA7nlOGnGfEOwHWE6RvpU12PDgd7lXWseGyBUHpBcFn ADO6zxtI73jbW8lLWVjMuRUQjhbydDQSAIiFiC3NJaJ7mgLp7uwl6hz41CRixMDj UCI3h0pWpByKoJ8rt0Wc2a7yAXtTK77fB+h/HTahB3cJIuKA7p3IRpg/YVoz3TSJ GdgzGME5wzvCRP/CMM/kCZIhwsHepUSK1Hs5DI3JDDxm+rkI11H683aVLhBPrXqe /M8GV7wPzSgnvQuMDrbyM6okgsYmKuWsjUV3kaFYeNLro82WNjf8Wj+GFJL4exQi jMdZUALv4pmz7PGiEAKYzpeHmwT2jRJa -----END CERTIFICATE-----Generated at Thu Sep 18 23:52:26 2025 by rpki-client