$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json) Hash identifier: 9jrQ6F9j0on6XjAwhaWOqYrnE6T3ra4oPS3Mv79/GdI= Subject key identifier: 6F:B0:D8:5C:68:A9:B2:CA:1D:48:13:01:F1:F6:C3:86:9B:3F:20:F3 Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF Certificate serial: 0CE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft Manifest number: 0CC8 Signing time: Fri 18 Jul 2025 18:19:56 +0000 Manifest this update: Fri 18 Jul 2025 18:19:55 +0000 Manifest next update: Fri 25 Jul 2025 18:19:55 +0000 Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: DZx3Fbg+TQTxpBDaq1Tn2ESNh0StSOCi3FPX/TD9dSs=) 2: CD5B717E8AB811EDA3D4ED68C4F9AE02.roa (hash: XLP4ULkxYx27srGDokdT1/3ibgVd5Ja0S3t9A21I8Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3301 (0xce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF Validity Not Before: Jul 18 18:19:55 2025 GMT Not After : Jul 25 18:19:55 2025 GMT Subject: CN=687a904b-cbcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:1c:b7:87:57:16:97:b5:83:2f:80:64:1e: 7b:a9:be:2a:57:31:75:bd:46:05:92:c3:06:39:42: 7c:4e:a2:d0:f7:32:f6:b6:46:b7:c5:2b:a6:c8:33: e6:45:51:84:2b:aa:db:5c:11:01:9f:7d:25:f2:08: 91:00:3d:66:d0:b1:a3:ea:f7:6c:1b:6d:46:d4:13: 5c:24:29:03:cb:97:ad:c5:f3:44:7c:65:28:cf:fd: 53:8d:b6:f3:0b:09:53:5f:4a:07:e9:cb:2b:63:8f: d9:f6:3d:57:29:ad:d3:04:c4:13:24:82:34:c5:22: 92:3b:45:15:96:cb:98:9a:0a:96:f6:7e:5a:31:d1: 77:c0:05:40:ca:32:30:47:6b:2a:54:99:38:64:62: 7f:60:dd:61:99:a3:a6:02:58:16:04:0a:16:e9:e1: 3e:8e:8f:2e:61:6a:96:66:27:00:35:1a:23:b8:f8: 02:5b:d3:58:d6:8c:0b:57:86:15:b9:03:9e:19:62: 1d:91:bf:7c:f0:e3:fc:8c:60:ec:81:26:2a:b6:16: ee:df:b1:92:cd:a4:6c:42:f1:a4:b7:d0:c9:13:01: 2b:b2:33:a8:91:19:e4:e1:0a:a0:1c:40:c5:02:64: df:76:d9:d5:ee:72:4c:38:cc:44:49:86:1e:a5:10: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B0:D8:5C:68:A9:B2:CA:1D:48:13:01:F1:F6:C3:86:9B:3F:20:F3 X509v3 Authority Key Identifier: keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:37:93:7b:5a:a8:78:04:ac:a5:c9:67:cc:15:f9:13:72:01: 9c:10:14:c1:65:1b:ca:0e:45:73:24:9c:56:e2:f5:0e:91:78: 81:36:01:fd:55:bf:74:16:69:eb:32:0e:52:b3:d1:12:90:5b: 50:87:1e:5f:a5:65:21:00:40:ad:00:6c:f8:1e:eb:02:b5:f9: d0:9e:6f:1b:b7:3e:a6:6c:15:9d:ca:f7:f2:95:4a:81:2f:c8: 83:13:ce:c9:fb:05:cb:9d:60:a8:83:db:50:42:2b:f1:23:07: 6b:74:8c:6e:83:50:e9:b0:6c:b8:89:21:c5:d9:47:3a:30:d4: 4f:dd:42:db:b0:2e:20:0c:45:22:f4:de:e1:96:a8:d9:d5:07: a3:36:77:97:cb:c9:a1:ba:95:ff:d9:bf:bb:8d:a1:31:bd:93: 30:a4:eb:9b:6f:f0:5c:a6:e4:6d:68:2d:2c:fc:be:72:bc:c4: dc:ed:20:3a:fa:b9:ac:bd:b8:32:fb:9b:d9:2b:c1:37:b1:63: 59:0a:8b:cf:38:da:40:5b:1e:1b:a0:d0:9c:f1:ab:b7:67:16: cf:0c:61:ef:0b:36:7a:3c:71:2f:9b:ac:0c:fa:5d:14:a4:c6: 92:e2:17:ff:00:60:ad:35:c5:b8:51:a2:f4:b4:8e:f5:0d:08: 51:c7:36:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMDgxMTAvBgNVBAUTKDdCNTkwNTUyMTI4NDkxMDVBRDZGMzlFNTg4MUQ4NDJF NzA3NDM5QUYwHhcNMjUwNzE4MTgxOTU1WhcNMjUwNzI1MTgxOTU1WjAYMRYwFAYD VQQDEw02ODdhOTA0Yi1jYmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKIct4dXFpe1gy+AZB57qb4qVzF1vUYFksMGOUJ8TqLQ9zL2tka3xSumyDPm RVGEK6rbXBEBn30l8giRAD1m0LGj6vdsG21G1BNcJCkDy5etxfNEfGUoz/1Tjbbz CwlTX0oH6csrY4/Z9j1XKa3TBMQTJII0xSKSO0UVlsuYmgqW9n5aMdF3wAVAyjIw R2sqVJk4ZGJ/YN1hmaOmAlgWBAoW6eE+jo8uYWqWZicANRojuPgCW9NY1owLV4YV uQOeGWIdkb988OP8jGDsgSYqthbu37GSzaRsQvGkt9DJEwErsjOokRnk4QqgHEDF AmTfdtnV7nJMOMxESYYepRAIqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG+w2Fxo qbLKHUgTAfH2w4abPyDzMB8GA1UdIwQYMBaAFHtZBVIShJEFrW855YgdhC5wdDmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMwOC9BODE5MTRFMkY0 RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtRV3Riem5saUIyRUxuQjBP YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Uxa0ZVaEtFa1FXdGJ6bmxpQjJFTG5CME9hOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMwOC9BODE5MTRFMkY0RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtR V3Riem5saUIyRUxuQjBPYTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPN5N7Wqh4BKylyWfMFfkTcgGcEBTBZRvKDkVzJJxW4vUOkXiBNgH9 Vb90FmnrMg5Ss9ESkFtQhx5fpWUhAECtAGz4HusCtfnQnm8btz6mbBWdyvfylUqB L8iDE87J+wXLnWCog9tQQivxIwdrdIxug1DpsGy4iSHF2Uc6MNRP3ULbsC4gDEUi 9N7hlqjZ1QejNneXy8mhupX/2b+7jaExvZMwpOubb/BcpuRtaC0s/L5yvMTc7SA6 +rmsvbgy+5vZK8E3sWNZCovPONpAWx4boNCc8au3ZxbPDGHvCzZ6PHEvm6wM+l0U pMaS4hf/AGCtNcW4UaL0tI71DQhRxzZX -----END CERTIFICATE-----Generated at Sun Jul 20 07:38:32 2025 by rpki-client