$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: O0WUIEL6kcijwQ2YAkbHSA7lC6NKN1I9OD5KN9aYMf8= Subject key identifier: B0:7E:92:89:2F:3D:A4:63:EE:99:3B:65:72:28:0F:83:90:B0:18:7D Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 0885 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 0880 Signing time: Sun 20 Jul 2025 20:43:45 +0000 Manifest this update: Sun 20 Jul 2025 20:43:44 +0000 Manifest next update: Sun 27 Jul 2025 20:43:44 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: dQO9evVeMDzifEo4hU1FcAanOfX0xyPFBRnCp2AA6W8=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: cbktrrt4RsOUs9FstYccY602a8M1M48rOaYFq7f84Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2181 (0x885) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Jul 20 20:43:44 2025 GMT Not After : Jul 27 20:43:44 2025 GMT Subject: CN=687d5501-ed63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4e:14:a7:c9:94:54:62:e4:80:39:89:b1:c3: 69:70:8c:b2:fb:4d:59:61:5f:2b:65:49:ba:4a:bd: 75:d6:d4:53:8c:5d:1f:98:d0:99:3f:a8:c1:a1:41: 3c:35:19:ce:51:ba:c2:79:a0:d9:c8:bf:71:b8:cd: 9c:d1:76:b2:d4:68:05:84:8c:4e:a7:69:b4:4c:27: d6:c2:27:79:bf:22:e0:17:e3:12:44:78:ae:2d:86: 27:d6:11:72:f5:68:00:9b:cc:08:a7:02:fd:89:c8: 73:d4:e9:1a:b3:c2:ad:6b:68:71:e2:40:ff:ba:b0: d0:11:f2:5e:7f:11:ea:94:da:8b:a9:87:31:35:d5: d4:48:a1:48:fc:2a:20:d1:b0:74:2e:fd:60:d2:41: 5b:26:b3:83:72:01:7c:ae:5a:d2:cd:c8:28:a6:8a: 12:15:5b:8b:6d:0d:96:73:00:f7:40:a0:2a:51:cb: bd:55:aa:fc:ce:a0:94:d8:6d:9b:ac:46:c0:92:bc: c1:68:bc:12:cf:b7:e7:8b:3e:e9:93:51:7b:6c:7d: a9:c1:59:88:e2:d6:94:0a:dc:76:49:55:d3:c5:18: be:cf:4d:01:50:7c:cf:d5:6b:5a:d9:eb:03:fe:cc: 6f:e9:07:71:ae:01:1c:53:e8:b9:02:eb:ec:69:d1: 42:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7E:92:89:2F:3D:A4:63:EE:99:3B:65:72:28:0F:83:90:B0:18:7D X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:ba:40:be:ce:d9:e4:93:68:76:84:ae:cf:54:b5:99:ed:0d: 50:66:41:5c:f4:cb:00:d8:8a:bd:f8:6c:39:fb:1b:44:fd:48: bb:90:0d:fc:39:13:66:2e:0b:34:f3:06:88:a4:8c:e6:fe:2f: bb:11:59:9b:e4:a3:5e:90:eb:a7:2d:e9:e5:c5:69:67:51:10: 58:21:52:de:39:51:7a:b8:f3:74:28:de:8d:bf:c9:f1:3f:17: f9:df:ba:d2:b1:e1:43:2e:aa:27:70:16:4b:bd:e2:0a:2e:31: 73:83:58:a7:65:5f:61:18:0a:d0:d2:2e:35:75:10:9d:2a:fe: 83:11:fe:05:2a:fa:7c:0a:d8:79:87:af:12:73:ae:17:c5:00: 2c:53:ee:41:a1:5f:5c:fe:27:f9:07:a9:45:ba:ce:fe:cd:5e: fc:98:c6:9f:b5:c1:78:38:fa:60:41:70:7e:df:e2:88:50:1f: c5:ad:06:c2:24:50:aa:a4:ad:1b:81:f3:ed:20:c7:e8:e0:09: 2d:0f:dd:78:5e:aa:ed:64:5b:9a:09:09:6c:95:96:aa:ac:1c: 17:bf:a0:79:02:10:71:23:70:23:ec:04:ad:1e:f5:91:83:76: 19:66:54:ac:d2:bf:c2:b1:a5:ad:91:d3:23:6a:1f:8c:0d:d0: 36:25:61:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjUwNzIwMjA0MzQ0WhcNMjUwNzI3MjA0MzQ0WjAYMRYwFAYD VQQDEw02ODdkNTUwMS1lZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0U4Up8mUVGLkgDmJscNpcIyy+01ZYV8rZUm6Sr111tRTjF0fmNCZP6jBoUE8 NRnOUbrCeaDZyL9xuM2c0Xay1GgFhIxOp2m0TCfWwid5vyLgF+MSRHiuLYYn1hFy 9WgAm8wIpwL9ichz1Okas8Kta2hx4kD/urDQEfJefxHqlNqLqYcxNdXUSKFI/Cog 0bB0Lv1g0kFbJrODcgF8rlrSzcgopooSFVuLbQ2WcwD3QKAqUcu9Var8zqCU2G2b rEbAkrzBaLwSz7fniz7pk1F7bH2pwVmI4taUCtx2SVXTxRi+z00BUHzP1Wta2esD /sxv6QdxrgEcU+i5AuvsadFCAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLB+kokv PaRj7pk7ZXIoD4OQsBh9MB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGukC+ztnkk2h2hK7PVLWZ7Q1QZkFc9MsA2Iq9+Gw5+xtE/Ui7kA38 ORNmLgs08waIpIzm/i+7EVmb5KNekOunLenlxWlnURBYIVLeOVF6uPN0KN6Nv8nx Pxf537rSseFDLqoncBZLveIKLjFzg1inZV9hGArQ0i41dRCdKv6DEf4FKvp8Cth5 h68Sc64XxQAsU+5BoV9c/if5B6lFus7+zV78mMaftcF4OPpgQXB+3+KIUB/FrQbC JFCqpK0bgfPtIMfo4AktD914XqrtZFuaCQlslZaqrBwXv6B5AhBxI3Aj7AStHvWR g3YZZlSs0r/CsaWtkdMjah+MDdA2JWG/ -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:24 2025 by rpki-client