$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: kCbBALblkjpGe9Gg1OIHn9RsFBpQh9BM0lT9MqdBfjU= Subject key identifier: E9:37:44:52:DB:F6:FB:64:8A:1F:43:FC:1F:CC:A3:C0:64:33:F5:20 Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 09C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 09C3 Signing time: Fri 18 Jul 2025 20:13:43 +0000 Manifest this update: Fri 18 Jul 2025 20:13:42 +0000 Manifest next update: Fri 25 Jul 2025 20:13:42 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: 0OddB2ZXl19E6K9LLAqXXBPoSE2j4/aF+KpGgIKTWBk=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: n5P347FiAUuKhxz5D51UBzZC3yGrF18WlVG2Rg0oGrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2505 (0x9c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: Jul 18 20:13:42 2025 GMT Not After : Jul 25 20:13:42 2025 GMT Subject: CN=687aaaf6-704c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:b7:6c:2c:38:4d:9d:21:a8:c1:47:e1:33: 55:04:13:e2:ca:02:5a:bf:e5:0c:2c:e8:87:3a:95: 51:9b:2a:3c:78:f5:ac:20:bc:ec:07:c5:12:64:17: 34:a3:6f:f7:81:f5:23:d6:86:46:1c:09:9b:f7:8f: aa:ae:56:99:6a:3d:e3:6a:9d:8a:01:58:2e:81:cb: b2:de:45:ea:9f:38:c8:07:8e:57:18:c8:24:b3:6b: 3d:75:1a:06:fc:21:17:85:17:0c:8c:11:47:3d:2a: 26:63:5e:c6:83:aa:07:87:3f:00:8f:fd:51:0e:4d: b9:1c:6d:49:3e:65:72:de:bc:8b:68:32:9d:ea:33: 79:ad:ac:c2:85:0d:f3:40:75:20:42:aa:29:d5:f9: 2a:d3:52:38:29:b4:b0:76:75:ea:6b:25:c7:3a:5b: bd:0d:6d:01:ba:60:28:43:c8:0b:28:e3:9d:4e:e6: 8e:d7:9a:c4:60:73:a8:08:5a:2e:a5:76:bf:4e:31: c7:5a:09:06:a7:35:35:e0:20:08:29:06:4a:b2:33: 9d:54:6c:c1:c8:44:49:f6:92:2a:c5:d1:f1:17:d6: 51:7f:73:23:b4:ce:42:3b:8b:0c:ae:6b:c5:cf:3b: 52:af:b8:b4:a7:1d:26:19:c7:39:f0:48:37:ff:36: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:37:44:52:DB:F6:FB:64:8A:1F:43:FC:1F:CC:A3:C0:64:33:F5:20 X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:47:be:91:7d:3e:66:ce:cb:65:92:8d:e6:de:16:45:cc:cb: be:3d:d9:b6:fb:c3:9b:6a:ec:b8:ce:85:8b:df:60:7f:cc:b4: 67:71:ec:73:ee:df:35:68:f0:15:d4:5a:fa:93:59:b9:db:79: 6c:5a:31:52:58:eb:ae:5c:62:3d:e1:86:86:9d:3a:bb:9c:f5: 39:c3:f3:21:23:3d:d6:e1:e6:d5:54:fc:3e:b2:a0:d8:a1:af: b9:37:5d:72:6f:21:99:38:24:49:e8:60:5e:81:2a:b1:c8:bb: 92:83:19:48:83:31:57:e3:e7:7c:b8:10:73:87:b5:3c:e8:4f: f3:1d:3d:61:f1:52:1f:3f:75:e7:29:5c:40:ec:fc:68:a4:3a: f8:66:7a:51:8a:d1:61:84:58:01:58:b4:3c:16:e7:f2:a1:52: 1e:3f:2f:12:e8:e9:b7:19:e5:12:08:55:ec:04:52:e7:b6:5c: b1:16:28:51:f9:55:9f:a8:d1:2c:ea:1e:7a:7a:a0:25:37:8b: 93:08:e2:ca:65:3f:a9:0d:08:16:1c:ca:34:85:8a:d9:19:3d: 9e:5e:9e:5c:e8:20:b8:32:f7:27:58:e1:a3:8e:28:d2:37:e9: 7b:83:b2:5d:cf:d4:29:f5:c4:e2:de:e2:87:88:75:b3:fa:d6: 59:ce:c7:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjUwNzE4MjAxMzQyWhcNMjUwNzI1MjAxMzQyWjAYMRYwFAYD VQQDEw02ODdhYWFmNi03MDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuN63bCw4TZ0hqMFH4TNVBBPiygJav+UMLOiHOpVRmyo8ePWsILzsB8USZBc0 o2/3gfUj1oZGHAmb94+qrlaZaj3jap2KAVgugcuy3kXqnzjIB45XGMgks2s9dRoG /CEXhRcMjBFHPSomY17Gg6oHhz8Aj/1RDk25HG1JPmVy3ryLaDKd6jN5razChQ3z QHUgQqop1fkq01I4KbSwdnXqayXHOlu9DW0BumAoQ8gLKOOdTuaO15rEYHOoCFou pXa/TjHHWgkGpzU14CAIKQZKsjOdVGzByERJ9pIqxdHxF9ZRf3MjtM5CO4sMrmvF zztSr7i0px0mGcc58Eg3/zbiFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk3RFLb 9vtkih9D/B/Mo8BkM/UgMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmR76RfT5mzstlko3m3hZFzMu+Pdm2+8Obauy4zoWL32B/zLRncexz 7t81aPAV1Fr6k1m523lsWjFSWOuuXGI94YaGnTq7nPU5w/MhIz3W4ebVVPw+sqDY oa+5N11ybyGZOCRJ6GBegSqxyLuSgxlIgzFX4+d8uBBzh7U86E/zHT1h8VIfP3Xn KVxA7PxopDr4ZnpRitFhhFgBWLQ8FufyoVIePy8S6Om3GeUSCFXsBFLntlyxFihR +VWfqNEs6h56eqAlN4uTCOLKZT+pDQgWHMo0hYrZGT2eXp5c6CC4MvcnWOGjjijS N+l7g7Jdz9Qp9cTi3uKHiHWz+tZZzsct -----END CERTIFICATE-----Generated at Sun Jul 20 14:32:27 2025 by rpki-client