$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json) Hash identifier: BWCW5bQe1OdwuCW0gmhtkaqZ8l8OgNYQhGqSgXPV9nE= Subject key identifier: F2:DE:F4:E2:84:AF:B4:A6:76:A2:B0:45:AB:E5:3B:1C:93:48:2D:8A Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft Manifest number: 0C70 Signing time: Fri 18 Jul 2025 18:33:46 +0000 Manifest this update: Fri 18 Jul 2025 18:33:46 +0000 Manifest next update: Fri 25 Jul 2025 18:33:46 +0000 Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: fDZ7Xu4G5N9+XqQtLtsGp0PymNT23nSFhorQbkwyg9A=) 2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: Xn8UFabkBh7C11XTNFuqVWX0DQ3YtKdO4oP8X6zIrEU=) 3: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: wQzyXgNB8e39dNmdtHKa5IWJxgKdAoXLBNvYY5X5/EU=) 4: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: ZW4D52b/QqoUPTvkPyb0ztzXgPBkyyW+b1SqWMCRNR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Validity Not Before: Jul 18 18:33:46 2025 GMT Not After : Jul 25 18:33:46 2025 GMT Subject: CN=687a938a-4b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:13:43:52:25:77:2a:32:95:ce:c2:bb:14: 4e:9a:52:44:ee:43:b2:53:38:56:13:1d:ab:69:4a: c3:75:5f:8e:30:fc:19:7e:92:f9:ad:6a:86:24:3c: 0f:e3:41:1a:90:9c:78:c4:af:f6:a4:b3:8e:d3:76: b3:46:f2:bd:4a:f2:70:7a:a1:1c:57:bb:70:da:57: 33:86:f1:89:5b:2d:cc:42:1a:17:c5:a2:8a:3e:12: 19:c8:30:02:57:3f:b0:73:b3:c5:1f:6b:a4:fd:71: 39:98:a9:4a:c2:74:d5:ec:39:46:04:6e:54:19:1f: 91:10:cb:dc:20:aa:b9:38:1e:ff:18:d1:ba:83:e4: a7:2e:39:f9:c8:83:e8:64:8e:d5:7e:a9:41:10:6e: c2:18:41:07:c8:da:c6:98:71:b8:35:ed:b9:e7:ff: 6f:82:04:5f:75:64:0f:ff:f6:d7:16:63:0b:57:27: 0d:10:5a:70:b5:1e:bb:21:6c:3e:da:00:06:3b:67: 37:bf:01:07:0f:95:17:9f:a2:fe:93:e6:9a:5d:71: 8d:a5:07:70:ef:7e:1b:d4:0f:71:48:1e:d1:f3:e9: 19:3d:b1:38:3c:93:ae:0a:03:9e:6d:e0:d1:6a:e8: 6e:7e:20:8d:56:61:4c:42:9e:df:a8:b6:8e:77:f5: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DE:F4:E2:84:AF:B4:A6:76:A2:B0:45:AB:E5:3B:1C:93:48:2D:8A X509v3 Authority Key Identifier: keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:8d:5b:cd:98:c7:8d:06:3c:d7:4f:46:67:a5:d5:87:01:1d: 78:c4:c5:ec:d9:60:d5:3f:09:77:3b:40:81:14:59:33:13:3f: 79:81:76:bd:80:21:00:14:e1:c0:02:99:35:37:60:0a:9f:22: 15:80:89:a1:9b:c1:8c:23:55:fa:51:5b:4d:0e:22:e5:bd:83: 28:64:cf:8c:67:ef:aa:6a:d3:a3:2d:62:1f:b1:a4:0d:56:92: 48:69:16:0c:13:e2:08:40:32:d7:00:f6:98:ff:28:06:30:cf: 96:2d:fa:12:8c:2c:cc:52:51:ee:4c:e6:05:84:8b:71:cb:fa: 3e:33:08:61:57:64:27:52:25:71:8d:87:4e:92:60:b2:db:d6: 9f:4d:d0:c7:e1:ad:d7:0c:80:6d:2e:fb:74:93:be:65:2b:63: 66:c8:ac:79:73:14:de:4e:b9:ef:c1:e4:70:a6:21:bd:0d:af: 2b:17:43:9f:fa:d7:5c:9c:7a:43:0b:ca:96:7d:45:09:43:a7: 41:1b:7f:b0:3f:f6:d2:f3:37:a1:0f:d0:4c:dd:8c:c6:24:f9: b6:26:fa:2f:56:c1:09:d3:8d:d1:b7:29:21:5a:34:58:10:48: 5a:26:15:0c:fb:b3:95:b9:94:35:50:f2:5c:16:de:4c:0e:a1: 6b:4c:80:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKDEzNTVENTE4N0QyRTYzRDdFNkQ0OTA3OEQ4RTcxRkEw NTFDNDU2RTMwHhcNMjUwNzE4MTgzMzQ2WhcNMjUwNzI1MTgzMzQ2WjAYMRYwFAYD VQQDEw02ODdhOTM4YS00YjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtesTQ1Ildyoylc7CuxROmlJE7kOyUzhWEx2raUrDdV+OMPwZfpL5rWqGJDwP 40EakJx4xK/2pLOO03azRvK9SvJweqEcV7tw2lczhvGJWy3MQhoXxaKKPhIZyDAC Vz+wc7PFH2uk/XE5mKlKwnTV7DlGBG5UGR+REMvcIKq5OB7/GNG6g+SnLjn5yIPo ZI7VfqlBEG7CGEEHyNrGmHG4Ne255/9vggRfdWQP//bXFmMLVycNEFpwtR67IWw+ 2gAGO2c3vwEHD5UXn6L+k+aaXXGNpQdw734b1A9xSB7R8+kZPbE4PJOuCgOebeDR auhufiCNVmFMQp7fqLaOd/VxDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLe9OKE r7SmdqKwRavlOxyTSC2KMB8GA1UdIwQYMBaAFBNV1Rh9LmPX5tSQeNjnH6BRxFbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS82MzI2NTBGODA1 MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5Zm0xSkI0Mk9jZm9GSEVW dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UxWFZHSDB1WTlmbTFKQjQyT2Nmb0ZIRVZ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS82MzI2NTBGODA1MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5 Zm0xSkI0Mk9jZm9GSEVWdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRjVvNmMeNBjzXT0ZnpdWHAR14xMXs2WDVPwl3O0CBFFkzEz95gXa9 gCEAFOHAApk1N2AKnyIVgImhm8GMI1X6UVtNDiLlvYMoZM+MZ++qatOjLWIfsaQN VpJIaRYME+IIQDLXAPaY/ygGMM+WLfoSjCzMUlHuTOYFhItxy/o+MwhhV2QnUiVx jYdOkmCy29afTdDH4a3XDIBtLvt0k75lK2NmyKx5cxTeTrnvweRwpiG9Da8rF0Of +tdcnHpDC8qWfUUJQ6dBG3+wP/bS8zehD9BM3YzGJPm2JvovVsEJ043RtykhWjRY EEhaJhUM+7OVuZQ1UPJcFt5MDqFrTIDt -----END CERTIFICATE-----Generated at Sun Jul 20 07:56:51 2025 by rpki-client