$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json) Hash identifier: wEJ7E4/FaKu+Sdw2VlV1j/2xE7QQFQgN+z8nvwDuVqQ= Subject key identifier: 76:71:F9:55:B5:54:67:0D:4C:E9:66:6A:DA:58:10:A5:1F:FB:E8:91 Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft Manifest number: BF Signing time: Sat 19 Jul 2025 06:05:03 +0000 Manifest this update: Sat 19 Jul 2025 06:05:03 +0000 Manifest next update: Sat 26 Jul 2025 06:05:03 +0000 Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: kSncFBU3gwOdLrw/q8OzJAp5W21VE2hi4D/PT962kNw=) 2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: GLbMFy1JbyAVM7u4jQAEv8xQTj/rbFbdkkf2ZQWfsOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Validity Not Before: Jul 19 06:05:03 2025 GMT Not After : Jul 26 06:05:03 2025 GMT Subject: CN=687b358f-0b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ac:1c:68:4a:1e:1f:cf:26:55:d6:47:b9:dc: 7e:29:b4:6f:07:ad:ef:a0:bd:0a:05:da:08:3e:b0: 8f:3b:a9:3e:67:c0:9f:d5:c1:98:3e:b1:3c:e1:c3: 34:9d:91:ad:c3:d0:0b:32:ad:c1:45:f2:73:b6:cf: 60:33:c3:e8:28:07:01:85:22:ef:29:77:ff:82:f2: 06:b7:a2:61:28:d0:8a:00:3a:52:67:4f:70:4e:cc: dd:f5:db:cf:b5:da:2b:68:f3:04:aa:dc:b8:40:bc: 2d:d9:d3:ed:03:59:26:a6:a5:bd:07:f4:80:70:2e: 85:19:4d:e6:a5:3e:e0:0d:80:3c:ee:71:b5:c9:ec: 1b:16:93:2f:3c:92:8a:76:5f:a7:7f:56:45:a1:d5: 5a:23:4c:b8:cc:e9:4a:46:8b:b4:39:ac:29:ba:1c: 93:5e:51:43:2e:39:c8:87:af:55:9a:f6:5f:2a:86: 14:bb:55:00:55:e4:e8:6a:f4:3b:80:7c:43:62:b5: 76:29:d2:88:03:e0:c8:45:1c:f1:00:f8:a6:76:c2: 56:85:36:b5:0d:0b:9e:dc:c4:cd:44:06:d9:75:26: e4:63:1e:37:a8:b2:5b:1f:e3:d0:90:ae:74:ec:a0: 0a:86:b8:7b:aa:c5:50:4c:58:54:dc:93:81:50:ce: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:71:F9:55:B5:54:67:0D:4C:E9:66:6A:DA:58:10:A5:1F:FB:E8:91 X509v3 Authority Key Identifier: keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:5a:c8:68:ed:b9:56:3c:46:18:98:41:18:5c:97:53:78:8a: 57:41:ee:2a:df:ce:91:17:d8:56:8f:1f:9f:f3:49:44:f5:2d: 64:cf:70:8e:4b:fc:e2:f2:87:a4:9b:a3:1a:b6:51:f9:7f:fa: 62:43:7e:6a:50:80:b4:ab:1f:38:06:0a:05:82:dc:13:77:a9: 64:b2:5d:12:63:51:0a:ae:a9:2d:ee:bd:7d:3b:47:9f:84:a4: b0:3c:a9:a8:db:c4:d7:74:ba:59:ad:a0:04:74:0f:bf:0c:4e: fe:26:4b:92:9d:d8:bb:b4:79:f2:76:b4:26:e4:1e:6b:d1:84: 67:3f:9e:93:9f:48:22:35:59:36:4b:f2:17:8c:44:99:68:fc: f2:a1:d0:b9:90:92:25:16:02:05:75:eb:47:86:d9:65:20:8c: 73:fe:b9:88:31:71:28:cd:ac:10:d8:53:d9:99:c9:0a:4e:01: 49:99:a7:ab:bc:5f:ee:05:63:ba:7f:a1:98:62:d8:54:86:9b: 01:cb:a5:44:e2:5b:53:df:da:45:72:05:ab:55:c7:11:23:9a: 64:13:47:c9:4a:b6:40:1f:0d:72:0b:11:d8:7f:d6:b0:af:ca: 91:bd:57:38:9e:f5:0d:0f:85:63:4a:d8:48:8c:81:a0:e0:cc: 32:32:15:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5 M0RFQTIzNzUwHhcNMjUwNzE5MDYwNTAzWhcNMjUwNzI2MDYwNTAzWjAYMRYwFAYD VQQDEw02ODdiMzU4Zi0wYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56wcaEoeH88mVdZHudx+KbRvB63voL0KBdoIPrCPO6k+Z8Cf1cGYPrE84cM0 nZGtw9ALMq3BRfJzts9gM8PoKAcBhSLvKXf/gvIGt6JhKNCKADpSZ09wTszd9dvP tdoraPMEqty4QLwt2dPtA1kmpqW9B/SAcC6FGU3mpT7gDYA87nG1yewbFpMvPJKK dl+nf1ZFodVaI0y4zOlKRou0OawpuhyTXlFDLjnIh69VmvZfKoYUu1UAVeToavQ7 gHxDYrV2KdKIA+DIRRzxAPimdsJWhTa1DQue3MTNRAbZdSbkYx43qLJbH+PQkK50 7KAKhrh7qsVQTFhU3JOBUM7g0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZx+VW1 VGcNTOlmatpYEKUf++iRMB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG amZ4S01vVkE4Yk9UM3FJM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUWsho7blWPEYYmEEYXJdTeIpXQe4q386RF9hWjx+f80lE9S1kz3CO S/zi8oekm6MatlH5f/piQ35qUIC0qx84BgoFgtwTd6lksl0SY1EKrqkt7r19O0ef hKSwPKmo28TXdLpZraAEdA+/DE7+JkuSndi7tHnydrQm5B5r0YRnP56Tn0giNVk2 S/IXjESZaPzyodC5kJIlFgIFdetHhtllIIxz/rmIMXEozawQ2FPZmckKTgFJmaer vF/uBWO6f6GYYthUhpsBy6VE4ltT39pFcgWrVccRI5pkE0fJSrZAHw1yCxHYf9aw r8qRvVc4nvUND4VjSthIjIGg4MwyMhX7 -----END CERTIFICATE-----Generated at Sun Jul 20 14:11:10 2025 by rpki-client