$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft File: eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json) Hash identifier: d5DzE3riHsYbrjFrAOR1AEGipb1Dd0JmMNr0rG3Wyc8= Subject key identifier: 45:6C:23:52:D1:C0:22:EA:73:00:D1:1C:A1:68:53:5C:6F:2B:9A:59 Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft Manifest number: 41 Signing time: Sat 19 Jul 2025 07:44:03 +0000 Manifest this update: Sat 19 Jul 2025 07:44:03 +0000 Manifest next update: Sat 26 Jul 2025 07:44:03 +0000 Files and hashes: 1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: SORMaSJac+uJAoO7NcV9zvsRLXujZELsg55dcw20ZDg=) 2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: vF2hPrjWnGE1wVLs/Ml1OeBVYR8W6IECJw4qVwfrJO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Validity Not Before: Jul 19 07:44:03 2025 GMT Not After : Jul 26 07:44:03 2025 GMT Subject: CN=687b4cc3-ebd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:d3:61:9c:b8:16:5a:7d:c0:f3:5f:bf:48: 01:3d:4f:7c:4f:90:b7:0f:a3:58:7e:fc:74:ab:ab: b2:55:2b:a4:33:ea:43:de:ff:c5:e7:24:69:00:c5: 3e:d6:cb:d2:a9:d6:fd:90:93:70:5e:1c:a6:67:60: 41:0b:2d:69:45:cf:d2:47:f6:81:ca:c2:be:93:43: 26:8d:b9:6a:b0:c7:31:34:a5:85:62:21:c0:e2:70: ce:cb:09:bd:5d:3d:24:7e:65:1a:c9:af:87:44:a5: 62:97:6d:4b:ba:bd:0d:b4:55:2d:27:02:e3:9a:97: 73:3b:9f:09:42:6f:fe:98:33:1c:b0:62:ad:04:a4: 7d:1d:c9:78:65:d4:80:24:6b:db:13:f6:70:fa:53: df:1a:ff:0c:f6:16:a5:4f:63:fe:e5:5b:e3:01:4c: 7a:f2:f6:ab:fb:f8:4c:2d:07:0d:74:d5:96:8c:f2: 7c:b9:cd:db:fe:b8:34:10:73:85:7d:64:44:41:d3: f6:08:d3:84:69:42:a3:e2:3c:2c:0d:dc:27:33:54: 85:f5:dc:b8:7d:4f:a5:13:30:5f:92:fd:74:96:31: 45:d2:51:af:8e:70:e9:8c:82:4a:ba:0a:a8:2b:39: 6d:a9:e7:f8:b8:41:cf:03:53:b6:97:99:c0:a8:4b: 97:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6C:23:52:D1:C0:22:EA:73:00:D1:1C:A1:68:53:5C:6F:2B:9A:59 X509v3 Authority Key Identifier: keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:9c:e9:1e:b4:c5:7b:fe:b5:c9:10:99:b1:75:ea:35:f2:58: eb:a7:ad:fd:fc:27:9e:7e:a2:c9:ce:bd:73:15:ac:70:33:e6: 36:1e:34:a9:bd:6d:52:d0:0a:ba:06:52:06:46:0e:c2:54:97: 9c:21:a1:05:42:3b:0e:c3:8b:34:00:67:20:84:5a:2b:34:d9: e7:f2:97:0d:f1:46:11:9e:3b:0a:07:65:85:ce:b3:83:00:41: c2:53:3b:c6:17:e1:98:ae:ea:c6:0b:41:b0:f4:f0:fe:32:d0: 83:17:69:28:63:dc:7c:1a:43:3d:91:18:82:a7:dd:83:ac:a2: d4:85:80:6d:d7:6e:e7:56:6b:bb:38:9e:c4:72:87:71:14:ea: ed:6f:9a:d4:5a:52:6d:da:77:f7:52:a1:df:01:3e:8f:cb:f7: 64:50:11:d7:45:00:6c:21:1b:c6:c9:78:68:96:1f:1b:95:2e: 52:ff:e2:0f:a6:62:de:3b:dc:30:08:13:b9:7a:28:bc:e6:34: 1d:c6:c0:32:0e:97:18:fd:70:71:98:36:26:76:77:f7:5c:dc: ec:bc:8f:c5:e3:62:75:09:c4:61:88:13:3f:ae:56:d2:2d:a4: c6:8a:f1:b9:e2:cb:1a:cd:a6:e6:ca:f6:af:4e:aa:20:0a:03: 1e:4b:4d:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzhGNTExMC8GA1UEBRMoNzk1NjhBMzhFQ0RCNjE3RTY3OEMwOEE2Q0M0M0M0RDY1 MDJDRUM2MjAeFw0yNTA3MTkwNzQ0MDNaFw0yNTA3MjYwNzQ0MDNaMBgxFjAUBgNV BAMTDTY4N2I0Y2MzLWViZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsHdNhnLgWWn3A81+/SAE9T3xPkLcPo1h+/HSrq7JVK6Qz6kPe/8XnJGkAxT7W y9Kp1v2Qk3BeHKZnYEELLWlFz9JH9oHKwr6TQyaNuWqwxzE0pYViIcDicM7LCb1d PSR+ZRrJr4dEpWKXbUu6vQ20VS0nAuOal3M7nwlCb/6YMxywYq0EpH0dyXhl1IAk a9sT9nD6U98a/wz2FqVPY/7lW+MBTHry9qv7+EwtBw101ZaM8ny5zdv+uDQQc4V9 ZERB0/YI04RpQqPiPCwN3CczVIX13Lh9T6UTMF+S/XSWMUXSUa+OcOmMgkq6Cqgr OW2p5/i4Qc8DU7aXmcCoS5ddAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURWwjUtHA IupzANEcoWhTXG8rmlkwHwYDVR0jBBgwFoAUeVaKOOzbYX5njAimzEPE1lAs7GIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0U4MDI4MTlFMDI1 QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1bmpBaW16RVBFMWxBczdH SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVZhS09PemJZWDVuakFpbXpFUEUxbEFzN0dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OEY1L0U4MDI4MTlFMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1 bmpBaW16RVBFMWxBczdHSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANSc6R60xXv+tckQmbF16jXyWOunrf38J55+osnOvXMVrHAz5jYeNKm9 bVLQCroGUgZGDsJUl5whoQVCOw7DizQAZyCEWis02efylw3xRhGeOwoHZYXOs4MA QcJTO8YX4Ziu6sYLQbD08P4y0IMXaShj3HwaQz2RGIKn3YOsotSFgG3XbudWa7s4 nsRyh3EU6u1vmtRaUm3ad/dSod8BPo/L92RQEddFAGwhG8bJeGiWHxuVLlL/4g+m Yt473DAIE7l6KLzmNB3GwDIOlxj9cHGYNiZ2d/dc3Oy8j8XjYnUJxGGIEz+uVtIt pMaK8bniyxrNpubK9q9OqiAKAx5LTVA= -----END CERTIFICATE-----Generated at Sun Jul 20 10:19:12 2025 by rpki-client