$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft File: EvkubHLmyiXAdQVbSP43tlq24FI.mft (raw, json) Hash identifier: JUXHm2JjyE+YCrahdsQM2ERSXZR+nSZXqwhdfX4j4Fg= Subject key identifier: 9C:5E:7E:02:B1:F5:19:A4:E1:B9:61:90:10:B8:20:7A:CD:EF:50:AF Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 Certificate issuer: /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Certificate serial: 12F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft Manifest number: 12CE Signing time: Sat 26 Jul 2025 17:07:50 +0000 Manifest this update: Sat 26 Jul 2025 17:07:49 +0000 Manifest next update: Sat 02 Aug 2025 17:07:49 +0000 Files and hashes: 1: EvkubHLmyiXAdQVbSP43tlq24FI.crl (hash: Fv7yaOix43WFfxRtHeYa85jmRuABsQnKTIwIkfdm19w=) 2: D67D6C12D09611ECAE4FA90AC4F9AE02.roa (hash: ohfZG59sEvFb3B98TJzWsPWyWdsfQxGqekH2JoxH6gQ=) 3: D5BE6FF6D09611ECAE4FA90AC4F9AE02.roa (hash: QtJIcs1O/DIjF/Awmfs8kNbcOWbla/g4nCBWN3yn5TE=) 4: 2AD29284D22A11E8B6E99987C4F9AE02.roa (hash: 3q5R1J4djCmGk92jrHGge8u1JnUcb5OYOxif13zqZng=) 5: D82E5F1ADBC211E99D686940C4F9AE02.roa (hash: At2TYBc2mB9m2KMar1RnpPwLIC3piw2pCnJKYNvU7DI=) 6: 8ECD16D0CE7211ED84D09A78C4F9AE02.roa (hash: T7RO7bDELeuxgYKkuydZy/+SJnNf8qDQvOpkzhWcvjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 17:07:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4854 (0x12f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6006, serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Validity Not Before: Jul 26 17:07:49 2025 GMT Not After : Aug 2 17:07:49 2025 GMT Subject: CN=68850b65-0d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:d5:b4:ae:ed:e6:94:b4:22:bc:e0:08:3e: 66:e5:f1:c2:0e:b0:e5:28:1a:97:0b:c6:90:89:46: 79:29:67:84:48:76:de:07:8c:5a:e3:f7:af:4d:61: 31:73:1a:46:49:fc:66:e8:b1:9e:f7:3e:87:df:06: 49:aa:09:37:84:f8:dc:e0:63:48:7d:e6:67:1a:84: b8:85:6d:d6:bf:9e:f2:16:9e:37:11:fc:fc:57:e6: d3:5c:3e:8f:4a:cb:5c:b0:e5:08:fe:79:8b:f1:c9: 30:37:35:e9:17:96:da:f8:4a:51:f8:e0:a0:00:d6: 77:6d:56:f5:4c:69:32:5f:1b:76:14:1e:17:bd:c8: df:1c:3f:85:7c:48:97:b4:7a:ef:df:e4:75:73:f8: 4f:fb:bb:76:49:e6:2a:95:78:95:1c:ad:e2:29:66: 8d:eb:b2:a5:af:9f:cc:1d:94:25:3d:66:b9:94:db: ca:4e:77:37:8e:bd:f0:98:89:ea:91:1c:c4:00:c2: 3b:7d:55:10:71:ae:bd:48:46:d0:34:8f:c1:e3:a8: 78:d2:7e:88:66:78:65:b3:7b:d7:be:30:ed:86:40: 29:d8:63:1c:32:63:92:79:90:60:08:21:cf:1f:fc: d2:ff:29:d7:2d:5a:48:84:2b:f3:bc:25:e2:7f:93: 4d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5E:7E:02:B1:F5:19:A4:E1:B9:61:90:10:B8:20:7A:CD:EF:50:AF X509v3 Authority Key Identifier: keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:1c:61:04:b4:93:79:3a:7e:66:3a:74:6e:5a:46:f0:f5:8f: d4:f7:8c:7b:2e:5f:01:a1:ad:eb:b4:50:41:04:61:00:40:e0: cf:d7:8d:b6:89:73:4e:47:34:c6:45:6c:d0:82:2d:01:3f:99: f7:af:ae:f0:4d:91:ce:36:d9:f4:a3:9b:0f:30:0a:41:5b:10: 32:13:ac:7c:d8:a6:00:5e:d0:98:9d:1d:9c:74:3c:19:90:57: 0a:94:f4:66:d0:e2:f1:59:b9:2f:07:49:ba:cf:a6:bf:64:25: 76:09:c0:e9:9b:3f:e8:22:85:7d:aa:55:35:2f:69:29:9d:b8: d7:14:0a:87:f6:b1:e3:68:54:f7:16:ff:26:02:59:9e:1f:b5: 5c:01:bd:a0:ea:fa:1c:25:da:ed:33:a1:54:0e:d9:ee:c3:b3: e0:fd:ba:e4:db:b6:57:64:44:1a:1e:17:ab:bb:f8:d0:02:5a: af:c5:c7:b2:8e:7f:9b:24:87:a8:79:9f:55:e0:2e:f9:40:5a: df:b1:2d:9e:b0:f6:99:a4:24:79:c5:31:3c:c5:b7:b5:8d:1a: 89:72:09:5d:cc:cc:91:81:1b:4c:97:c6:46:4f:06:15:cf:4e: 7f:b2:aa:f9:8b:d0:66:2e:23:12:ff:07:36:d3:a3:64:08:4d: 57:e3:1e:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYwMDYxMTAvBgNVBAUTKDEyRjkyRTZDNzJFNkNBMjVDMDc1MDU1QjQ4RkUzN0I2 NUFCNkUwNTIwHhcNMjUwNzI2MTcwNzQ5WhcNMjUwODAyMTcwNzQ5WjAYMRYwFAYD VQQDEw02ODg1MGI2NS0wZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfnVtK7t5pS0IrzgCD5m5fHCDrDlKBqXC8aQiUZ5KWeESHbeB4xa4/evTWEx cxpGSfxm6LGe9z6H3wZJqgk3hPjc4GNIfeZnGoS4hW3Wv57yFp43Efz8V+bTXD6P SstcsOUI/nmL8ckwNzXpF5ba+EpR+OCgANZ3bVb1TGkyXxt2FB4XvcjfHD+FfEiX tHrv3+R1c/hP+7t2SeYqlXiVHK3iKWaN67Klr5/MHZQlPWa5lNvKTnc3jr3wmInq kRzEAMI7fVUQca69SEbQNI/B46h40n6IZnhls3vXvjDthkAp2GMcMmOSeZBgCCHP H/zS/ynXLVpIhCvzvCXif5NNgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxefgKx 9Rmk4blhkBC4IHrN71CvMB8GA1UdIwQYMBaAFBL5Lmxy5solwHUFW0j+N7ZatuBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjAwNi9FNEZERTQ2QUMz RTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlpWEFkUVZiU1A0M3RscTI0 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V2a3ViSExteWlYQWRRVmJTUDQzdGxxMjRGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjAwNi9FNEZERTQ2QUMzRTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlp WEFkUVZiU1A0M3RscTI0RkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXHGEEtJN5On5mOnRuWkbw9Y/U94x7Ll8Boa3rtFBBBGEAQODP1422 iXNORzTGRWzQgi0BP5n3r67wTZHONtn0o5sPMApBWxAyE6x82KYAXtCYnR2cdDwZ kFcKlPRm0OLxWbkvB0m6z6a/ZCV2CcDpmz/oIoV9qlU1L2kpnbjXFAqH9rHjaFT3 Fv8mAlmeH7VcAb2g6vocJdrtM6FUDtnuw7Pg/brk27ZXZEQaHheru/jQAlqvxcey jn+bJIeoeZ9V4C75QFrfsS2esPaZpCR5xTE8xbe1jRqJcgldzMyRgRtMl8ZGTwYV z05/sqr5i9BmLiMS/wc206NkCE1X4x5D -----END CERTIFICATE-----Generated at Sun Jul 27 15:45:49 2025 by rpki-client