$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft File: EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json) Hash identifier: Esu5GhVV+pLmjU2XGEDJVxzc/Fx64YJjb0nhjXKQ4cg= Subject key identifier: 12:B4:B8:40:00:43:E3:27:F3:B6:5B:27:12:BF:CF:7E:1C:E4:42:EE Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A Certificate issuer: /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft Manifest number: 0116 Signing time: Sat 19 Jul 2025 05:06:10 +0000 Manifest this update: Sat 19 Jul 2025 05:06:09 +0000 Manifest next update: Sat 26 Jul 2025 05:06:09 +0000 Files and hashes: 1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: GbeloIRyOjrdKZ/8NemoPBuHhQlNnuGJQoIoxbTqCU4=) 2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: YLouRJayszJ+YXIZjA0nYlRHirFmGMZNUS3tAUGchSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Validity Not Before: Jul 19 05:06:09 2025 GMT Not After : Jul 26 05:06:09 2025 GMT Subject: CN=687b27c1-abc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:c0:5a:66:7f:a8:e5:af:a3:d7:f9:a5:1c: 9c:5c:af:4c:b8:98:50:72:70:61:46:f0:2c:2b:d6: e3:87:1d:4e:a5:4f:fd:19:25:35:5c:a8:8e:e3:46: bb:42:46:55:f2:81:38:ab:80:9d:8c:95:90:fb:1e: ae:f1:b4:03:56:7c:a7:5a:65:20:69:bb:3a:40:8b: f2:44:2e:86:09:74:59:1b:a0:33:0d:3b:85:e4:66: 71:9a:9e:52:75:d7:8a:91:93:b8:d4:92:f7:19:45: d5:22:11:3d:25:3c:de:ba:9f:4a:bb:ce:13:73:d6: 06:51:d0:11:8d:1b:51:ef:56:d6:f9:e1:30:b2:49: ae:6e:7c:54:68:db:33:d5:69:23:ae:20:73:73:ac: ba:79:07:1a:7e:67:81:1a:47:34:bb:16:8b:da:88: 27:69:7c:7c:90:0f:f8:e1:d3:80:62:a9:66:f6:b6: a4:f8:30:af:a3:a2:c9:fd:dc:df:bd:31:89:d8:bd: 90:d1:2c:6f:b7:82:9b:ee:b3:2f:4a:8d:0b:e2:0c: 2a:93:64:9f:1f:c3:5c:43:57:66:bf:41:6e:9c:e7: c0:6e:dc:a1:cd:78:37:36:7b:4c:3f:04:46:49:83: 6c:0b:1f:3f:5f:51:a7:3b:40:0f:f2:45:c1:a3:d7: a7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B4:B8:40:00:43:E3:27:F3:B6:5B:27:12:BF:CF:7E:1C:E4:42:EE X509v3 Authority Key Identifier: keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:24:88:75:99:31:e1:70:59:4d:30:2b:69:cf:e1:e5:3a:62: f9:7c:70:21:ec:69:05:70:2c:e8:49:df:30:27:4a:fd:59:9a: 29:87:77:ba:ee:29:83:b4:18:2e:48:5f:fb:81:86:4f:0f:08: 1d:9f:e5:ad:4a:70:f8:15:bb:fa:ba:40:e0:d0:33:16:40:26: b2:a5:99:cb:ac:c4:4e:76:16:7d:b2:0a:fe:c9:26:b2:2b:b0: ce:cf:6e:f4:15:e7:63:ef:0b:ef:2e:6d:73:66:0d:a7:37:a8: 9f:8f:3f:b6:e2:32:e3:ef:f1:85:e8:cf:ec:ca:4a:e1:6c:59: 15:d7:3b:23:65:e3:2f:1b:9e:24:8c:5e:b8:ba:36:0c:8f:17: 06:9f:cb:7c:52:e0:7e:54:c8:92:5c:41:f9:f3:10:cc:9f:45: af:31:ae:ee:82:71:0b:96:96:1f:d2:43:43:28:70:d3:c7:75: b8:01:6b:1f:9e:d7:6d:80:22:0c:ae:a3:ca:d3:a1:dc:02:eb: 68:d1:74:f1:51:62:80:0c:ce:96:0c:13:45:e8:12:f5:88:4b: 39:56:a1:87:96:5d:df:08:38:d1:98:fe:4b:01:07:78:c3:92: b7:b8:5d:19:42:47:8a:02:43:8c:b6:b8:53:4f:fc:fb:e5:a7: d8:0c:13:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKDExNUE0MTYwQzg1NTU0N0Q5RTMxMEM2MEQzRDA4OENC QkM5QTk5MkEwHhcNMjUwNzE5MDUwNjA5WhcNMjUwNzI2MDUwNjA5WjAYMRYwFAYD VQQDEw02ODdiMjdjMS1hYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZbAWmZ/qOWvo9f5pRycXK9MuJhQcnBhRvAsK9bjhx1OpU/9GSU1XKiO40a7 QkZV8oE4q4CdjJWQ+x6u8bQDVnynWmUgabs6QIvyRC6GCXRZG6AzDTuF5GZxmp5S ddeKkZO41JL3GUXVIhE9JTzeup9Ku84Tc9YGUdARjRtR71bW+eEwskmubnxUaNsz 1WkjriBzc6y6eQcafmeBGkc0uxaL2ognaXx8kA/44dOAYqlm9rak+DCvo6LJ/dzf vTGJ2L2Q0Sxvt4Kb7rMvSo0L4gwqk2SfH8NcQ1dmv0FunOfAbtyhzXg3NntMPwRG SYNsCx8/X1GnO0AP8kXBo9enDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBK0uEAA Q+Mn87ZbJxK/z34c5ELuMB8GA1UdIwQYMBaAFBFaQWDIVVR9njEMYNPQiMu8mpkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC9GRUNBNzUwNkJF N0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZIMmVNUXhnMDlDSXk3eWFt U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VWcEJZTWhWVkgyZU1ReGcwOUNJeTd5YW1Tby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC9GRUNBNzUwNkJFN0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZI MmVNUXhnMDlDSXk3eWFtU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCJIh1mTHhcFlNMCtpz+HlOmL5fHAh7GkFcCzoSd8wJ0r9WZoph3e6 7imDtBguSF/7gYZPDwgdn+WtSnD4Fbv6ukDg0DMWQCaypZnLrMROdhZ9sgr+ySay K7DOz270Fedj7wvvLm1zZg2nN6ifjz+24jLj7/GF6M/sykrhbFkV1zsjZeMvG54k jF64ujYMjxcGn8t8UuB+VMiSXEH58xDMn0WvMa7ugnELlpYf0kNDKHDTx3W4AWsf ntdtgCIMrqPK06HcAuto0XTxUWKADM6WDBNF6BL1iEs5VqGHll3fCDjRmP5LAQd4 w5K3uF0ZQkeKAkOMtrhTT/z75afYDBO0 -----END CERTIFICATE-----Generated at Sun Jul 20 06:47:44 2025 by rpki-client