$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: 0o+fVLJnSUfmghy+eBLBTTUaINaQwflDgwAe7THKOHc= Subject key identifier: 56:D6:7D:1E:B1:AC:5A:61:13:D8:43:87:76:56:46:D5:54:A3:99:33 Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0D5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0D38 Signing time: Fri 18 Jul 2025 18:13:52 +0000 Manifest this update: Fri 18 Jul 2025 18:13:51 +0000 Manifest next update: Fri 25 Jul 2025 18:13:51 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: ghLIBA8N1NcQsVvTz1zmaQaip7w782COss1WdHs/Zj4=) 2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: Y+E2Zw8cSibO88OVDC2atGI8LaONXqL9mkfjf3pS0hw=) 3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: J4Hv1naBopBVbkvmkR77VLmGUJiYmVXkbO9FW9SSP/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3423 (0xd5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: Jul 18 18:13:51 2025 GMT Not After : Jul 25 18:13:51 2025 GMT Subject: CN=687a8ee0-dba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:e7:85:a3:bc:7e:1c:e4:6e:34:8a:d4:9d: be:61:57:ed:3f:b5:6b:42:50:d5:12:0c:60:47:27: fe:97:bf:7e:3c:d4:e3:ab:57:d8:d7:8f:bf:b9:0e: 75:35:c7:8c:56:e5:55:f6:38:7b:cb:7e:33:d7:b8: c9:d1:1b:8d:2f:51:e2:2d:a7:b8:c2:e6:72:ec:21: 5c:9c:67:8c:dd:8e:25:44:31:ee:25:fc:d6:75:0e: 95:8d:c8:f7:7a:53:bb:4d:fd:4c:19:bb:5c:4e:f9: 3a:0f:eb:11:4c:cf:d7:e4:e6:d8:d1:e1:f2:85:41: 8d:9d:4a:0b:61:dd:2b:a6:e6:a7:46:03:cc:b6:8e: c6:03:f2:a1:d4:d0:44:b0:ad:e3:5d:6a:0b:73:cf: ad:88:53:b8:6b:20:e5:4a:a0:3c:d8:9c:4e:9f:10: 39:8f:ec:8f:d9:f8:3d:da:22:33:1a:89:39:09:52: 07:1d:2c:ea:71:e1:32:a1:bb:45:1d:62:1c:c8:90: ce:38:ab:67:e6:a5:50:98:6e:6d:1e:fb:dc:3b:a4: 19:6b:80:70:39:15:e5:32:c3:22:37:4b:e6:f3:92: 28:44:07:94:3d:33:c4:62:8b:00:a7:5a:58:36:36: 53:88:75:0c:fb:75:18:c2:7f:43:1d:b3:a9:e5:fe: b7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D6:7D:1E:B1:AC:5A:61:13:D8:43:87:76:56:46:D5:54:A3:99:33 X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:cd:1f:ea:36:b6:3b:70:82:30:89:b9:37:4a:f9:52:5b:ed: 08:7b:d6:81:9c:28:64:f7:66:8e:7f:8b:62:af:fc:3c:cb:51: 9a:eb:6d:43:2d:a8:d5:25:bb:fd:f3:f7:dc:58:9a:3a:eb:d3: ee:b5:0e:42:2d:19:7a:ce:86:95:c9:1a:84:ba:4d:44:af:17: 00:50:e1:01:bb:15:3f:e6:1b:3c:ec:7f:41:8e:02:5f:64:ea: ec:75:ea:0d:2b:d9:c3:55:b5:ca:f8:5f:b9:2b:25:20:ef:0d: 8c:40:8c:33:0f:27:78:88:f3:ea:22:56:29:ba:e6:73:4b:d0: 41:88:15:76:7a:00:32:c0:e9:31:42:3b:4f:fe:4a:84:40:eb: 75:6d:e5:58:b6:d8:ce:1e:bc:9f:01:a8:06:e5:85:b0:9c:4c: 8b:d6:eb:31:05:a5:d2:2c:cc:7f:5b:90:3f:d1:b6:3e:4e:99: 2d:a7:16:cd:03:ad:7b:da:82:94:10:5e:66:78:ed:96:f9:28: 31:11:ef:09:e1:98:ff:c3:1a:21:fd:31:2e:ab:d9:24:9f:3c: bc:10:5b:8c:28:0b:31:f0:d3:e4:ca:80:c9:30:39:38:09:cd: 10:f6:0b:ef:a4:97:ab:16:f4:ac:55:9c:80:81:77:c2:03:90: e7:85:da:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjUwNzE4MTgxMzUxWhcNMjUwNzI1MTgxMzUxWjAYMRYwFAYD VQQDEw02ODdhOGVlMC1kYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkrnhaO8fhzkbjSK1J2+YVftP7VrQlDVEgxgRyf+l79+PNTjq1fY14+/uQ51 NceMVuVV9jh7y34z17jJ0RuNL1HiLae4wuZy7CFcnGeM3Y4lRDHuJfzWdQ6Vjcj3 elO7Tf1MGbtcTvk6D+sRTM/X5ObY0eHyhUGNnUoLYd0rpuanRgPMto7GA/Kh1NBE sK3jXWoLc8+tiFO4ayDlSqA82JxOnxA5j+yP2fg92iIzGok5CVIHHSzqceEyobtF HWIcyJDOOKtn5qVQmG5tHvvcO6QZa4BwORXlMsMiN0vm85IoRAeUPTPEYosAp1pY NjZTiHUM+3UYwn9DHbOp5f63JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbWfR6x rFphE9hDh3ZWRtVUo5kzMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3zR/qNrY7cIIwibk3SvlSW+0Ie9aBnChk92aOf4tir/w8y1Ga621D LajVJbv98/fcWJo669PutQ5CLRl6zoaVyRqEuk1ErxcAUOEBuxU/5hs87H9BjgJf ZOrsdeoNK9nDVbXK+F+5KyUg7w2MQIwzDyd4iPPqIlYpuuZzS9BBiBV2egAywOkx QjtP/kqEQOt1beVYttjOHryfAagG5YWwnEyL1usxBaXSLMx/W5A/0bY+TpktpxbN A6172oKUEF5meO2W+SgxEe8J4Zj/wxoh/TEuq9kknzy8EFuMKAsx8NPkyoDJMDk4 Cc0Q9gvvpJerFvSsVZyAgXfCA5DnhdoK -----END CERTIFICATE-----Generated at Sun Jul 20 16:30:39 2025 by rpki-client