$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: K3/3mnotyH69li4znt7OxxuqIpinSPxef0oWMFmTd0k= Subject key identifier: D6:FE:F6:37:60:B5:7E:F2:87:EB:7F:31:91:5D:22:6C:A9:72:AC:3C Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 0212 Signing time: Mon 21 Jul 2025 02:32:00 +0000 Manifest this update: Mon 21 Jul 2025 02:32:00 +0000 Manifest next update: Mon 28 Jul 2025 02:32:00 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: eNIeUI3ErAQeJAOmROom0HVzGCmf067FGIfruziZKcM=) 2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=) 3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=) 4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: Jul 21 02:32:00 2025 GMT Not After : Jul 28 02:32:00 2025 GMT Subject: CN=687da6a0-26be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c8:8d:1d:2d:12:b2:bf:85:89:c5:cd:93:3d: 18:01:3d:7e:df:10:ab:3d:5c:c7:ef:b2:80:29:5d: fc:4e:ce:ed:6c:37:bb:9f:d9:7b:fb:43:8a:40:8e: f5:c2:34:cf:93:dc:a4:d9:48:bf:47:ec:83:2b:20: a0:dd:e3:d7:94:ec:bf:2c:19:26:ca:cd:4e:f7:0c: f1:91:ed:94:6b:c5:2e:48:4c:e9:7b:3a:22:9f:99: 66:b9:30:c2:18:76:e9:ac:ac:bd:8b:72:07:35:66: bc:42:e9:be:c4:23:c9:c2:76:75:66:93:9c:34:b8: 13:87:f3:29:79:5b:8b:bd:a7:17:89:72:27:6a:38: 66:e3:74:f7:81:f3:c7:1b:3c:44:2d:a8:0c:02:6d: fe:ae:a9:01:9a:2b:58:0d:9d:ed:d4:82:da:40:2f: ba:9a:b0:78:7c:f2:24:08:6e:25:2c:8e:09:03:21: ae:c1:d0:93:55:47:ff:61:7a:dc:5d:0f:50:b1:04: 0c:6a:9c:b8:33:8b:b3:47:39:32:c4:f9:37:79:51: 95:da:6b:75:37:96:1d:49:f9:b6:e3:9a:5a:a7:7e: f5:8e:55:d1:f8:b6:aa:47:05:75:b6:78:a3:31:87: 46:6b:55:6c:c0:59:10:a2:97:46:9e:18:ee:0f:7f: 22:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FE:F6:37:60:B5:7E:F2:87:EB:7F:31:91:5D:22:6C:A9:72:AC:3C X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:d9:4f:85:9f:2c:c5:d6:26:5b:0a:2d:5c:32:41:9b:42:f9: 51:c5:c2:ad:be:be:df:da:1b:91:ca:79:f8:15:dd:8c:51:8f: 3d:aa:26:e4:88:c2:19:86:1f:7c:3e:22:f0:c2:32:e3:f7:e7: df:dd:30:d6:30:07:cd:3f:c4:19:a5:9c:dd:83:1f:ec:6a:da: 81:f4:45:75:84:25:ea:98:92:53:18:e0:2b:81:90:48:95:fc: 5e:e8:37:ed:03:fc:b2:16:96:2b:7b:bc:a3:5d:d6:1d:60:d9: c6:81:e5:fc:63:31:83:c6:12:1d:a0:8a:f7:d6:95:57:2c:6f: 68:09:7b:88:45:cc:58:dd:9b:af:ae:ad:96:20:f6:72:06:bd: 15:72:ee:db:5d:40:83:30:a5:88:8d:a7:43:c2:ab:d0:b7:c2: 70:e9:8c:df:65:ce:8f:56:42:1e:07:a4:2b:2f:f7:13:be:7f: 4a:0c:31:04:40:58:ef:17:ee:f3:04:20:59:58:65:be:77:d0: a2:eb:a7:36:ae:c8:53:96:dd:66:c6:92:69:57:aa:e4:71:c4: 77:62:b3:c5:ba:5c:32:6d:c8:b0:2e:48:cd:32:f7:89:d8:7f: c1:49:be:8f:7e:18:a4:23:22:da:ec:cf:fc:eb:a5:cf:47:63: 8e:d1:56:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjUwNzIxMDIzMjAwWhcNMjUwNzI4MDIzMjAwWjAYMRYwFAYD VQQDEw02ODdkYTZhMC0yNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38iNHS0Ssr+FicXNkz0YAT1+3xCrPVzH77KAKV38Ts7tbDe7n9l7+0OKQI71 wjTPk9yk2Ui/R+yDKyCg3ePXlOy/LBkmys1O9wzxke2Ua8UuSEzpezoin5lmuTDC GHbprKy9i3IHNWa8Qum+xCPJwnZ1ZpOcNLgTh/MpeVuLvacXiXInajhm43T3gfPH GzxELagMAm3+rqkBmitYDZ3t1ILaQC+6mrB4fPIkCG4lLI4JAyGuwdCTVUf/YXrc XQ9QsQQMapy4M4uzRzkyxPk3eVGV2mt1N5YdSfm245pap371jlXR+LaqRwV1tnij MYdGa1VswFkQopdGnhjuD38iLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNb+9jdg tX7yh+t/MZFdImypcqw8MB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD2U+FnyzF1iZbCi1cMkGbQvlRxcKtvr7f2huRynn4Fd2MUY89qibk iMIZhh98PiLwwjLj9+ff3TDWMAfNP8QZpZzdgx/satqB9EV1hCXqmJJTGOArgZBI lfxe6DftA/yyFpYre7yjXdYdYNnGgeX8YzGDxhIdoIr31pVXLG9oCXuIRcxY3Zuv rq2WIPZyBr0Vcu7bXUCDMKWIjadDwqvQt8Jw6YzfZc6PVkIeB6QrL/cTvn9KDDEE QFjvF+7zBCBZWGW+d9Ci66c2rshTlt1mxpJpV6rkccR3YrPFulwybciwLkjNMveJ 2H/BSb6PfhikIyLa7M/866XPR2OO0VbW -----END CERTIFICATE-----Generated at Wed Jul 23 02:14:59 2025 by rpki-client