$ rpki-client -vvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft File: _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json) Hash identifier: wJzG9DnMa7fGjB1XXlZRHw/MgR0Q5FmJj0d2AFcJXmo= Subject key identifier: C3:FB:76:4E:82:21:DE:CF:7E:F8:2C:10:F7:93:4F:2A:83:3B:20:60 Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8 Certificate issuer: /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft Manifest number: 013D Signing time: Mon 21 Jul 2025 04:32:50 +0000 Manifest this update: Mon 21 Jul 2025 04:32:50 +0000 Manifest next update: Mon 28 Jul 2025 04:32:50 +0000 Files and hashes: 1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: HenFwLy5/yNDRjFAHFr/p4M33VTBWYVqB5oTg+mCKi4=) 2: AA02862E890C11EE87862551C4F9AE02.roa (hash: iEIKCf+XGWrseL7l7p29L+eQtWAuRRnnoodUimUnIC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8 Validity Not Before: Jul 21 04:32:50 2025 GMT Not After : Jul 28 04:32:50 2025 GMT Subject: CN=687dc2f2-b86d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:8f:24:8d:60:79:b7:74:ab:3f:d8:74:c8: 0f:81:e0:3c:b5:5a:1c:76:fc:1d:07:c2:34:37:81: 42:97:29:6c:61:80:18:c9:64:f2:02:ae:0c:bf:d0: 1a:f0:96:37:ee:52:6b:1e:80:bb:f0:ac:d0:02:67: b2:8d:4e:31:ef:27:8d:b5:34:6f:c6:c5:a3:75:2f: e7:b1:8b:0f:c2:bb:58:14:b7:2a:4a:37:fa:a6:95: 91:9d:21:4c:a9:db:b2:64:23:7b:e1:1e:77:5b:82: 5b:66:8a:59:96:c3:de:44:f1:ff:8a:17:a7:f6:4f: 30:e7:e1:92:ae:43:4f:e8:92:f2:c8:09:82:fa:1a: c0:4a:ae:96:34:12:85:47:92:47:cc:2c:d0:56:56: 62:4d:fd:49:5d:89:ea:47:2b:05:21:6a:55:9e:7c: bc:dd:88:a1:aa:73:16:92:13:7d:d0:85:ab:c0:31: dd:ed:c2:b3:e5:a2:b2:79:6f:ed:36:c5:fe:16:2e: 63:df:73:94:78:c8:d0:0e:00:2a:d8:3e:58:9c:a9: 10:e4:28:fc:06:a5:33:98:95:a2:a7:40:37:19:6a: 90:66:fd:e2:17:a5:8b:b5:6d:53:70:c2:9a:00:51: ad:ca:1c:15:91:25:a2:78:10:f8:88:d4:b9:80:e1: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FB:76:4E:82:21:DE:CF:7E:F8:2C:10:F7:93:4F:2A:83:3B:20:60 X509v3 Authority Key Identifier: keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:db:97:df:c4:3a:cc:2f:52:d8:b1:3c:dc:d8:09:a8:e7:70: 67:41:39:71:e6:ae:b5:1d:3c:9d:f5:04:43:8a:0e:15:86:4f: 18:7b:99:53:50:35:dc:f9:e9:22:b3:77:5f:93:8e:a9:68:eb: 9b:a0:02:ca:94:62:23:ea:aa:d8:68:93:5e:68:f4:85:f8:11: ea:8d:7a:f6:0f:3f:19:a6:6e:a8:79:6d:ff:e7:b4:0c:78:eb: e0:d3:7a:bc:c1:02:f9:74:18:cb:f7:9d:98:67:2a:69:21:e9: a6:f9:c1:10:32:c5:11:08:f9:2b:4a:02:60:30:08:3c:9c:21: 88:67:d2:80:2f:f9:ee:e3:6e:c1:72:95:a1:3a:43:50:ef:d0: 45:72:ef:87:ea:46:51:a0:51:26:a6:ff:0c:37:0a:a2:d5:37: b5:02:3b:f4:37:8d:1b:ce:98:b5:33:e6:3c:17:93:03:4f:e9: 89:36:7c:e6:1e:37:06:6f:a5:f9:d4:cd:d5:dd:3b:ed:d3:95: dd:ec:6a:3f:a7:6c:21:14:77:bc:6e:93:f3:9d:22:5e:1d:56: 01:d6:ce:5a:b7:40:2d:6b:a0:d4:8e:86:db:a1:5a:2e:68:45: 18:02:db:8b:82:e5:39:9c:57:54:da:8b:23:0d:10:82:81:90: ff:bf:87:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3QjUxMTAvBgNVBAUTKEZERTgxQ0E3Njk1RTk0QTkwQkZERkQ4M0YxMUE3NzM0 NjMwODE3RTgwHhcNMjUwNzIxMDQzMjUwWhcNMjUwNzI4MDQzMjUwWjAYMRYwFAYD VQQDEw02ODdkYzJmMi1iODZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2r6PJI1gebd0qz/YdMgPgeA8tVocdvwdB8I0N4FClylsYYAYyWTyAq4Mv9Aa 8JY37lJrHoC78KzQAmeyjU4x7yeNtTRvxsWjdS/nsYsPwrtYFLcqSjf6ppWRnSFM qduyZCN74R53W4JbZopZlsPeRPH/ihen9k8w5+GSrkNP6JLyyAmC+hrASq6WNBKF R5JHzCzQVlZiTf1JXYnqRysFIWpVnny83YihqnMWkhN90IWrwDHd7cKz5aKyeW/t NsX+Fi5j33OUeMjQDgAq2D5YnKkQ5Cj8BqUzmJWip0A3GWqQZv3iF6WLtW1TcMKa AFGtyhwVkSWieBD4iNS5gOF/+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP7dk6C Id7PfvgsEPeTTyqDOyBgMB8GA1UdIwQYMBaAFP3oHKdpXpSpC/39g/EadzRjCBfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjdCNS8wRjE5NEVBRTg5 MEMxMUVFOURGNzJDNTBDNEY5QUUwMi9fZWdjcDJsZWxLa0xfZjJEOFJwM05HTUlG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19lZ2NwMmxlbEtrTF9mMkQ4UnAzTkdNSUYtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjdCNS8wRjE5NEVBRTg5MEMxMUVFOURGNzJDNTBDNEY5QUUwMi9fZWdjcDJsZWxL a0xfZjJEOFJwM05HTUlGLWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/25ffxDrML1LYsTzc2Amo53BnQTlx5q61HTyd9QRDig4Vhk8Ye5lT UDXc+ekis3dfk46paOuboALKlGIj6qrYaJNeaPSF+BHqjXr2Dz8Zpm6oeW3/57QM eOvg03q8wQL5dBjL952YZyppIemm+cEQMsURCPkrSgJgMAg8nCGIZ9KAL/nu427B cpWhOkNQ79BFcu+H6kZRoFEmpv8MNwqi1Te1Ajv0N40bzpi1M+Y8F5MDT+mJNnzm HjcGb6X51M3V3Tvt05Xd7Go/p2whFHe8bpPznSJeHVYB1s5at0Ata6DUjobboVou aEUYAtuLguU5nFdU2osjDRCCgZD/v4eC -----END CERTIFICATE-----Generated at Mon Jul 21 12:49:02 2025 by rpki-client