$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft File: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json) Hash identifier: 89NkyeDX8jGTwpGu0w9E42wIVPcjkSpmvYJOJ6fCmWo= Subject key identifier: BE:F5:B4:0D:08:E1:85:32:2E:EF:DD:37:34:8B:92:54:D1:EA:94:AC Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 Certificate issuer: /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft Manifest number: 91 Signing time: Sat 19 Jul 2025 06:39:28 +0000 Manifest this update: Sat 19 Jul 2025 06:39:27 +0000 Manifest next update: Sat 26 Jul 2025 06:39:27 +0000 Files and hashes: 1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: XA+S3cRHTEI3IM3EzNJZJqpv9DkpfDdDkBKFWd6cZcY=) 2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: kBrZwIHTbaSnaE7XdLULllQIjEnMuSEphHZrV4DhNKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3 Validity Not Before: Jul 19 06:39:27 2025 GMT Not After : Jul 26 06:39:27 2025 GMT Subject: CN=687b3da0-f98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:c8:4f:21:32:b0:c5:dc:d0:98:b9:77:de: 6d:19:f9:7f:3d:44:05:09:20:92:d3:79:82:c6:62: 35:f4:3a:43:ae:f1:ce:60:ec:cb:40:01:3b:c6:be: 06:5b:81:59:bf:4e:3f:fc:7b:2a:cd:35:9e:13:3b: 4a:72:2c:4c:dc:ec:59:01:7c:40:1c:3a:b9:49:d7: 12:2d:17:56:f9:09:c9:a1:e3:af:cb:49:be:0e:2a: 38:ab:b5:d3:27:97:6a:44:d0:aa:17:ca:fe:fb:2f: 12:b8:42:05:2d:a9:9c:21:94:48:be:c1:91:4b:7d: f8:3d:d4:8f:13:58:fb:98:a7:03:f5:1c:5e:f4:25: 32:57:10:59:c5:2c:4d:71:ff:c1:e0:8b:86:b7:47: c0:d6:b9:2f:85:ef:7f:aa:5f:d5:23:d5:fa:13:3f: e7:cc:94:64:ca:1d:0b:2d:d9:7e:3b:f7:3d:f1:ec: ca:42:d9:4a:a6:d6:23:a2:ed:2c:8d:3b:0c:e6:e4: 44:2d:95:5b:3d:20:a5:e5:37:12:6c:d1:1a:07:77: 43:33:3f:a4:e8:61:2a:b1:95:22:a5:30:52:b3:17: 48:16:46:d9:31:56:fd:22:70:fa:a2:b0:c4:87:36: 74:3c:63:b1:60:d9:99:43:39:45:c5:08:4e:b6:9a: 3a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F5:B4:0D:08:E1:85:32:2E:EF:DD:37:34:8B:92:54:D1:EA:94:AC X509v3 Authority Key Identifier: keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b4:da:08:ee:a8:b7:fe:34:54:56:73:df:e8:8b:0e:41:f1: 92:d6:47:c1:c0:a9:dd:c2:d4:e4:d5:49:86:56:cc:f2:39:b4: 3e:f5:15:5d:25:61:cb:92:40:15:c9:e9:ab:b9:85:4c:1d:48: ec:08:58:0a:19:2c:ac:73:65:09:33:eb:08:e1:db:76:b6:30: ae:92:6c:63:44:38:6f:46:e8:d3:8a:2b:7a:17:5e:ba:0f:23: 90:56:a5:29:5e:57:c0:35:2c:8a:63:f4:b6:66:90:be:1c:fc: 29:32:f1:9b:ac:43:4e:bb:c3:66:38:c4:c7:09:e0:44:d0:b3: ad:0a:20:60:b7:70:3a:23:42:ca:ea:1c:28:d4:65:15:1a:07: 64:14:c7:f1:9b:1a:de:f6:c3:21:14:47:f8:df:94:66:1a:a1: a3:52:98:86:bc:5c:06:b3:35:8a:31:99:9c:84:bc:4d:96:69: 51:11:51:65:32:d3:cf:68:f8:3e:24:41:73:02:a5:d9:f8:eb: a9:57:53:29:9e:64:e7:65:fa:cf:e5:a4:80:8a:a9:ce:3e:64: 9b:fc:ca:43:7d:ef:3e:ef:fa:4d:e9:7f:57:22:58:13:f8:d6: bf:de:cb:43:f9:c7:2c:bf:fd:18:c3:60:19:14:10:b2:08:9c: d6:29:ef:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I2MzMxMTAvBgNVBAUTKDEzRDdBMTNCNDIzQkI2RTg3QTFBNzVCNzQ5M0YwQkMx OUQwQ0VBQTMwHhcNMjUwNzE5MDYzOTI3WhcNMjUwNzI2MDYzOTI3WjAYMRYwFAYD VQQDEw02ODdiM2RhMC1mOThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMPITyEysMXc0Ji5d95tGfl/PUQFCSCS03mCxmI19DpDrvHOYOzLQAE7xr4G W4FZv04//HsqzTWeEztKcixM3OxZAXxAHDq5SdcSLRdW+QnJoeOvy0m+Dio4q7XT J5dqRNCqF8r++y8SuEIFLamcIZRIvsGRS334PdSPE1j7mKcD9Rxe9CUyVxBZxSxN cf/B4IuGt0fA1rkvhe9/ql/VI9X6Ez/nzJRkyh0LLdl+O/c98ezKQtlKptYjou0s jTsM5uRELZVbPSCl5TcSbNEaB3dDMz+k6GEqsZUipTBSsxdIFkbZMVb9InD6orDE hzZ0PGOxYNmZQzlFxQhOtpo6/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL71tA0I 4YUyLu/dNzSLklTR6pSsMB8GA1UdIwQYMBaAFBPXoTtCO7boehp1t0k/C8GdDOqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjYzMy9EMEFCOTNFNDg2 RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1aDZHblczU1Q4THdaME02 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0U5ZWhPMEk3dHVoNkduVzNTVDhMd1owTTZxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjYzMy9EMEFCOTNFNDg2RDkxMUVGOEI4QkVCMUZDNEY5QUUwMi9FOWVoTzBJN3R1 aDZHblczU1Q4THdaME02cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQButNoI7qi3/jRUVnPf6IsOQfGS1kfBwKndwtTk1UmGVszyObQ+9RVd JWHLkkAVyemruYVMHUjsCFgKGSysc2UJM+sI4dt2tjCukmxjRDhvRujTiit6F166 DyOQVqUpXlfANSyKY/S2ZpC+HPwpMvGbrENOu8NmOMTHCeBE0LOtCiBgt3A6I0LK 6hwo1GUVGgdkFMfxmxre9sMhFEf435RmGqGjUpiGvFwGszWKMZmchLxNlmlREVFl MtPPaPg+JEFzAqXZ+OupV1MpnmTnZfrP5aSAiqnOPmSb/MpDfe8+7/pN6X9XIlgT +Na/3stD+ccsv/0Yw2AZFBCyCJzWKe8c -----END CERTIFICATE-----Generated at Sun Jul 20 07:54:19 2025 by rpki-client