$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: cc1tmLqr50mP175P60JfFG7oS5/EreXXugJa/YzRhyk= Subject key identifier: FF:26:F5:8E:60:49:5C:CA:15:91:55:8A:EC:42:A4:EC:3C:F6:B1:54 Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 0213 Signing time: Wed 23 Jul 2025 02:42:18 +0000 Manifest this update: Wed 23 Jul 2025 02:42:18 +0000 Manifest next update: Wed 30 Jul 2025 02:42:18 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: h3V+JTD4SrTMGeB3z3rbF3hJ1n1hqMWQxDmGciTK/+k=) 2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=) 3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=) 4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 02:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: Jul 23 02:42:18 2025 GMT Not After : Jul 30 02:42:18 2025 GMT Subject: CN=68804c0a-a3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:26:b8:7e:fb:94:a7:08:8e:4d:f2:b6:34:68: 47:70:33:28:8d:b1:f0:b5:0c:bd:e6:cf:4e:55:a8: b0:04:01:88:44:15:a4:d7:92:74:0f:76:ea:cc:4f: 44:07:06:ca:77:53:7c:a9:5c:c0:86:7c:1f:03:71: 88:a5:d9:c3:6f:f1:59:76:29:8f:2d:a8:04:2a:7a: 5b:9f:91:76:9b:4c:76:bd:ae:e6:98:e0:37:73:03: cd:c9:f0:dc:c6:88:fe:0b:e2:8e:fc:88:cf:d4:1b: 4d:fb:31:f8:ef:ef:f1:fc:22:bc:51:d4:bc:71:3e: 95:52:97:98:bc:3a:3b:e4:be:fe:ec:55:66:1b:ff: 66:2b:bd:70:ad:cd:47:0d:6f:cb:da:5f:cf:a2:3f: d8:ed:65:5b:5a:fb:59:93:2a:7b:80:25:88:b5:fb: dd:d5:5b:3e:b7:7e:4f:a6:5e:e8:c4:6f:2b:a5:23: 00:4f:45:73:37:0b:2d:ac:66:9e:14:34:8d:a1:e8: 8b:e2:54:25:49:cb:0c:11:69:c7:55:8c:56:4a:5f: 3e:2b:72:86:5d:dc:52:15:11:e8:d5:27:14:1d:37: d8:36:2b:ec:11:0e:73:96:0b:e5:a5:35:ae:88:11: 19:13:66:7f:c4:87:57:68:43:7c:59:19:39:bb:20: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:26:F5:8E:60:49:5C:CA:15:91:55:8A:EC:42:A4:EC:3C:F6:B1:54 X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:45:83:43:ef:14:12:a5:04:d3:db:0c:03:ff:7c:aa:a8:f6: aa:fc:c2:ac:74:43:34:77:d1:fa:d1:60:8a:31:d5:41:29:e8: 39:8c:17:5b:94:15:33:76:ec:d1:d5:a4:bf:2a:a2:ad:5e:97: 9c:fa:48:de:88:e1:2b:55:d2:6c:88:f8:f4:bb:9c:6f:9d:e3: 01:ba:6e:a6:50:66:7b:61:d0:ec:80:dd:56:fe:36:b6:ee:39: a9:f7:d0:f5:82:ae:42:af:27:9f:9d:74:8c:36:7f:a0:13:d2: b2:e7:d1:c0:22:83:a1:75:37:20:02:f6:ba:f3:ff:db:b3:89: 9d:70:3a:c2:fe:16:37:c8:4b:7a:7e:58:18:89:86:a5:27:87: 73:a4:33:9f:af:05:07:fc:f0:30:9c:53:fd:fe:91:49:bb:f5: f0:ed:74:90:4b:22:f2:f0:29:69:60:e4:ce:81:79:fb:3f:f5: c6:69:cb:7a:d1:a6:ab:0a:a3:db:40:0b:c3:e3:c2:ef:34:29: 61:88:11:fb:c9:0a:68:a6:dc:69:9b:54:37:74:8c:b9:c4:e1: 68:3a:49:c0:23:4d:0b:ca:42:b0:a1:7a:81:6a:a9:12:bc:5e: b2:d5:75:bb:12:6e:98:59:bc:c7:1e:97:18:00:9d:a7:4a:0c: ec:d1:29:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjUwNzIzMDI0MjE4WhcNMjUwNzMwMDI0MjE4WjAYMRYwFAYD VQQDEw02ODgwNGMwYS1hM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvya4fvuUpwiOTfK2NGhHcDMojbHwtQy95s9OVaiwBAGIRBWk15J0D3bqzE9E BwbKd1N8qVzAhnwfA3GIpdnDb/FZdimPLagEKnpbn5F2m0x2va7mmOA3cwPNyfDc xoj+C+KO/IjP1BtN+zH47+/x/CK8UdS8cT6VUpeYvDo75L7+7FVmG/9mK71wrc1H DW/L2l/Poj/Y7WVbWvtZkyp7gCWItfvd1Vs+t35Ppl7oxG8rpSMAT0VzNwstrGae FDSNoeiL4lQlScsMEWnHVYxWSl8+K3KGXdxSFRHo1ScUHTfYNivsEQ5zlgvlpTWu iBEZE2Z/xIdXaEN8WRk5uyDpnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8m9Y5g SVzKFZFViuxCpOw89rFUMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5RYND7xQSpQTT2wwD/3yqqPaq/MKsdEM0d9H60WCKMdVBKeg5jBdb lBUzduzR1aS/KqKtXpec+kjeiOErVdJsiPj0u5xvneMBum6mUGZ7YdDsgN1W/ja2 7jmp99D1gq5CryefnXSMNn+gE9Ky59HAIoOhdTcgAva68//bs4mdcDrC/hY3yEt6 flgYiYalJ4dzpDOfrwUH/PAwnFP9/pFJu/Xw7XSQSyLy8ClpYOTOgXn7P/XGact6 0aarCqPbQAvD48LvNClhiBH7yQpoptxpm1Q3dIy5xOFoOknAI00LykKwoXqBaqkS vF6y1XW7Em6YWbzHHpcYAJ2nSgzs0Slb -----END CERTIFICATE-----Generated at Thu Jul 24 12:12:39 2025 by rpki-client