$ rpki-client -vvf rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft File: _vE6uFK4kquii39LJSVwiZZNdms.mft (raw, json) Hash identifier: rQo70YjZLetjN3M0mEYY0hoia9un+RCxNPPiXGx/l3E= Subject key identifier: 66:03:E2:E9:20:F9:2E:34:96:9F:09:C5:1B:92:22:28:B1:41:50:30 Authority key identifier: FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B Certificate issuer: /CN=A91B66C5/serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B Certificate serial: 0A24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft Manifest number: 0A1A Signing time: Thu 24 Jul 2025 19:57:29 +0000 Manifest this update: Thu 24 Jul 2025 19:57:29 +0000 Manifest next update: Thu 31 Jul 2025 19:57:29 +0000 Files and hashes: 1: _vE6uFK4kquii39LJSVwiZZNdms.crl (hash: 9XoEU96JbedbATHZ5U2kIXYc93sDDUVj53ZCwKe1UO8=) 2: 503D2222018111EBB0502527C4F9AE02.roa (hash: LQT0TO6GObYdNEXY2zITFA+60OyJn4ApFTpeHBpwqn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2596 (0xa24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B66C5, serialNumber=FEF13AB852B892ABA28B7F4B25257089964D766B Validity Not Before: Jul 24 19:57:29 2025 GMT Not After : Jul 31 19:57:29 2025 GMT Subject: CN=68829029-2ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:87:29:d1:71:88:58:26:4a:bb:96:06:6d:13: 4e:9a:06:bf:a9:4f:02:13:29:b6:f2:1e:35:ec:fa: 2b:32:cb:9b:10:36:d9:51:97:de:42:86:c8:4f:0b: 90:6b:d8:ad:b8:74:1e:96:ed:e2:09:b3:c7:38:b5: 93:4d:47:6f:4c:0e:4d:84:27:cc:5c:f8:bb:1b:d5: e3:32:23:ac:e0:f0:7c:2b:96:73:a6:02:b7:9e:96: aa:67:fd:7e:61:71:18:2f:3b:85:01:51:0c:06:bc: ca:62:f8:87:12:4a:e9:49:b8:f1:57:4f:aa:21:6a: 8e:30:b1:4f:d2:2a:e3:61:40:48:31:0c:f8:6a:69: 91:5c:a3:ec:c6:e3:17:15:ef:4e:a4:64:ee:f7:cc: 3b:ec:29:14:9a:6f:ac:19:9f:4a:af:18:74:4a:9b: 4e:1e:38:d1:3b:8d:b3:64:5e:50:16:f6:4f:36:cc: 55:c4:2f:02:03:a2:87:fc:65:4b:8a:dc:33:30:eb: 85:9e:02:3d:fd:5b:d8:1c:b2:4c:26:1b:29:19:f7: 85:d4:4a:7b:42:ac:97:a3:98:da:ca:19:ba:27:fa: bb:ac:4b:92:8b:5f:14:fe:1f:c1:4e:52:8d:50:c2: b7:71:1f:02:b4:d0:11:25:04:32:b3:17:0b:59:a2: 17:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:03:E2:E9:20:F9:2E:34:96:9F:09:C5:1B:92:22:28:B1:41:50:30 X509v3 Authority Key Identifier: keyid:FE:F1:3A:B8:52:B8:92:AB:A2:8B:7F:4B:25:25:70:89:96:4D:76:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vE6uFK4kquii39LJSVwiZZNdms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B66C5/A2CD354E77EE11EAA5D00C28C4F9AE02/_vE6uFK4kquii39LJSVwiZZNdms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:87:8d:b1:37:40:04:e5:a7:35:6b:48:4c:09:b9:a2:4c:4d: 72:dd:56:b6:59:49:23:1f:b7:5e:d5:de:96:bc:39:ef:9c:98: 2c:03:1c:3a:ba:d4:b2:e7:31:89:e1:7e:44:ba:16:84:5a:38: 16:08:3e:d9:68:1e:9e:e6:51:12:70:40:92:80:98:96:c6:0a: 5d:e7:55:b7:ac:c9:0a:54:bc:53:83:cb:ce:e6:d6:a8:71:f7: 8b:32:9e:b9:f4:3d:56:47:12:d6:d0:e6:16:0d:c5:1b:84:36: 35:8d:99:73:14:a1:bd:1c:dc:9e:53:ed:19:6c:97:85:2f:34: 69:49:65:d7:c0:f5:10:37:20:db:c7:4d:71:83:c3:a3:3c:29: dc:75:bf:87:0c:c7:69:a2:b8:e3:8d:cc:31:47:30:af:c8:41: ae:e6:b5:5d:87:af:71:75:29:f5:bb:4b:8d:e3:af:18:80:e3: bd:52:3b:61:7b:55:4f:92:c1:e4:7c:bc:35:c6:fe:bb:fa:17: 45:87:77:38:a0:a5:93:eb:6f:05:6d:1c:dd:f2:dc:87:36:cd: a5:fd:90:28:81:4c:54:9e:b6:06:95:2e:b8:b2:ed:05:3d:b1: 5e:15:51:4e:85:5e:80:67:2a:bd:e1:03:db:e6:6f:dc:b7:4c: 89:f3:ad:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY2QzUxMTAvBgNVBAUTKEZFRjEzQUI4NTJCODkyQUJBMjhCN0Y0QjI1MjU3MDg5 OTY0RDc2NkIwHhcNMjUwNzI0MTk1NzI5WhcNMjUwNzMxMTk1NzI5WjAYMRYwFAYD VQQDEw02ODgyOTAyOS0yYWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Icp0XGIWCZKu5YGbRNOmga/qU8CEym28h417PorMsubEDbZUZfeQobITwuQ a9ituHQelu3iCbPHOLWTTUdvTA5NhCfMXPi7G9XjMiOs4PB8K5ZzpgK3npaqZ/1+ YXEYLzuFAVEMBrzKYviHEkrpSbjxV0+qIWqOMLFP0irjYUBIMQz4ammRXKPsxuMX Fe9OpGTu98w77CkUmm+sGZ9Krxh0SptOHjjRO42zZF5QFvZPNsxVxC8CA6KH/GVL itwzMOuFngI9/VvYHLJMJhspGfeF1Ep7QqyXo5jayhm6J/q7rEuSi18U/h/BTlKN UMK3cR8CtNARJQQysxcLWaIXKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYD4ukg +S40lp8JxRuSIiixQVAwMB8GA1UdIwQYMBaAFP7xOrhSuJKroot/SyUlcImWTXZr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjZDNS9BMkNEMzU0RTc3 RUUxMUVBQTVEMDBDMjhDNEY5QUUwMi9fdkU2dUZLNGtxdWlpMzlMSlNWd2laWk5k bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192RTZ1Rks0a3F1aWkzOUxKU1Z3aVpaTmRtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjZDNS9BMkNEMzU0RTc3RUUxMUVBQTVEMDBDMjhDNEY5QUUwMi9fdkU2dUZLNGtx dWlpMzlMSlNWd2laWk5kbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsh42xN0AE5ac1a0hMCbmiTE1y3Va2WUkjH7de1d6WvDnvnJgsAxw6 utSy5zGJ4X5EuhaEWjgWCD7ZaB6e5lEScECSgJiWxgpd51W3rMkKVLxTg8vO5tao cfeLMp659D1WRxLW0OYWDcUbhDY1jZlzFKG9HNyeU+0ZbJeFLzRpSWXXwPUQNyDb x01xg8OjPCncdb+HDMdporjjjcwxRzCvyEGu5rVdh69xdSn1u0uN468YgOO9Ujth e1VPksHkfLw1xv67+hdFh3c4oKWT628FbRzd8tyHNs2l/ZAogUxUnrYGlS64su0F PbFeFVFOhV6AZyq94QPb5m/ct0yJ862W -----END CERTIFICATE-----Generated at Sat Jul 26 15:17:32 2025 by rpki-client