$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: ev3eWG6sAIfrAv9d6HUDDkK8y1Dk8WzH39OHv+5K9ME= Subject key identifier: 91:6F:A7:3C:94:6F:40:06:10:C6:CA:CB:4A:01:F3:9A:F6:E8:26:02 Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 0214 Signing time: Fri 25 Jul 2025 02:37:45 +0000 Manifest this update: Fri 25 Jul 2025 02:37:44 +0000 Manifest next update: Fri 01 Aug 2025 02:37:44 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: Dh1ETmaLs9Q7NKKD4DUHCQb8V7ULtoXTO8IRoe8gLOQ=) 2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=) 3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=) 4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 02:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: Jul 25 02:37:44 2025 GMT Not After : Aug 1 02:37:44 2025 GMT Subject: CN=6882edf8-3f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:86:60:e4:2c:fc:b7:c1:07:dc:21:62:ff:d6: fc:56:81:b2:67:28:cf:39:63:68:35:23:61:f7:09: 65:07:6b:b5:09:b8:67:4e:4c:5e:c6:6c:68:f6:3a: 2e:c0:f2:aa:e8:c2:6e:19:39:70:bb:95:e0:46:f7: f7:f7:7e:e4:33:39:e8:66:3d:4b:77:94:f6:8d:ea: 49:cf:08:77:e3:8e:33:90:6d:93:8b:84:e8:af:9c: 57:a6:d9:03:bb:d3:9e:0f:b2:fa:a8:40:04:ea:71: 15:7b:c5:c5:0b:01:ce:ec:a0:84:46:70:20:e9:9e: f1:b9:86:a0:b0:b4:9b:67:f9:49:42:c3:42:9b:2d: b2:37:17:fb:f3:8c:e4:91:13:56:5b:ab:79:be:5a: 80:29:23:27:ed:d4:e2:0d:3a:81:f0:eb:c2:da:7a: 7a:e4:6d:86:ce:41:75:26:59:a6:22:0b:57:3f:11: 99:2a:b0:2d:5d:16:7e:31:36:7b:20:0f:e1:12:b8: e1:f2:db:d9:26:3f:c6:be:85:f5:71:03:31:83:ae: ae:06:fc:05:d4:b6:46:f9:8c:02:db:58:74:cb:7c: ad:47:f1:bf:57:64:64:da:e7:71:e9:f8:80:ab:60: ef:51:d8:76:8c:a0:1a:27:81:90:01:ac:a0:74:f5: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6F:A7:3C:94:6F:40:06:10:C6:CA:CB:4A:01:F3:9A:F6:E8:26:02 X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:da:79:02:d0:df:bb:f4:80:b7:5c:4b:04:f7:4d:e2:35:21: 0c:2b:fc:e3:8b:6d:34:2b:50:52:34:6e:d6:71:51:f2:5b:b0: 95:09:7e:86:82:53:ec:2c:e1:69:23:f1:5b:f9:1d:ff:a0:dd: 5d:b7:ed:68:4d:8e:5f:a0:ef:ba:3c:13:9e:80:81:39:70:3e: ba:bf:9b:04:ee:29:16:74:80:2d:ec:cf:59:50:f2:0d:99:5f: 89:7f:ce:29:00:11:04:aa:af:e9:87:1b:ae:14:ce:f9:bd:1c: 08:9b:c0:76:cf:64:ba:51:70:af:cc:a9:3d:8b:e7:3e:bc:fc: 67:f8:9f:c4:10:2d:06:b9:32:33:f4:a4:21:1c:05:93:66:19: dd:df:7e:51:27:ff:9b:95:86:a5:17:e0:f9:b6:ce:5d:17:b0: 26:2c:d6:78:35:da:74:b4:89:75:41:20:d7:c1:68:44:8f:87: 83:e9:20:87:96:2b:64:1b:65:45:d5:6b:4d:fe:07:33:67:11: 15:28:48:02:e0:f9:ad:e1:67:10:db:49:39:92:4b:5c:88:bd: ed:71:20:b4:7a:ec:ad:99:62:d6:4e:38:38:8c:ca:fc:b5:3d: d3:2e:7b:8e:e4:65:16:45:a1:a2:88:55:d0:50:4b:89:59:a8: d1:3e:6c:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjUwNzI1MDIzNzQ0WhcNMjUwODAxMDIzNzQ0WjAYMRYwFAYD VQQDEw02ODgyZWRmOC0zZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4Zg5Cz8t8EH3CFi/9b8VoGyZyjPOWNoNSNh9wllB2u1CbhnTkxexmxo9jou wPKq6MJuGTlwu5XgRvf3937kMznoZj1Ld5T2jepJzwh3444zkG2Ti4Tor5xXptkD u9OeD7L6qEAE6nEVe8XFCwHO7KCERnAg6Z7xuYagsLSbZ/lJQsNCmy2yNxf784zk kRNWW6t5vlqAKSMn7dTiDTqB8OvC2np65G2GzkF1JlmmIgtXPxGZKrAtXRZ+MTZ7 IA/hErjh8tvZJj/GvoX1cQMxg66uBvwF1LZG+YwC21h0y3ytR/G/V2Rk2udx6fiA q2DvUdh2jKAaJ4GQAaygdPUEcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFvpzyU b0AGEMbKy0oB85r26CYCMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH2nkC0N+79IC3XEsE903iNSEMK/zji200K1BSNG7WcVHyW7CVCX6G glPsLOFpI/Fb+R3/oN1dt+1oTY5foO+6PBOegIE5cD66v5sE7ikWdIAt7M9ZUPIN mV+Jf84pABEEqq/phxuuFM75vRwIm8B2z2S6UXCvzKk9i+c+vPxn+J/EEC0GuTIz 9KQhHAWTZhnd335RJ/+blYalF+D5ts5dF7AmLNZ4Ndp0tIl1QSDXwWhEj4eD6SCH litkG2VF1WtN/gczZxEVKEgC4Pmt4WcQ20k5kktciL3tcSC0euytmWLWTjg4jMr8 tT3TLnuO5GUWRaGiiFXQUEuJWajRPmzZ -----END CERTIFICATE-----Generated at Fri Jul 25 05:25:01 2025 by rpki-client