$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft File: -E-7QV2aRUM2Lt9yZfU34s_5-CA.mft (raw, json) Hash identifier: WMcYLdZMRZ05F6B6rAyOzZMcMc6VBMFqnsxi9oX4THA= Subject key identifier: FE:F1:02:A7:4A:E3:F9:81:DD:FC:DB:3B:6F:B8:5F:57:8B:23:5B:1C Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft Manifest number: 013F Signing time: Mon 21 Jul 2025 04:27:38 +0000 Manifest this update: Mon 21 Jul 2025 04:27:37 +0000 Manifest next update: Mon 28 Jul 2025 04:27:37 +0000 Files and hashes: 1: -E-7QV2aRUM2Lt9yZfU34s_5-CA.crl (hash: bHFYYAnQJnZbPEkJoVnifzSQgJxN7GhJeRLg0b9YHS8=) 2: 254E9F807D4A11EEABBD1328C4F9AE02.roa (hash: D3pmccxd7HAcoRpNwl+DNJm+TOWT+mbBNl5xHiUaFnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6, serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: Jul 21 04:27:37 2025 GMT Not After : Jul 28 04:27:37 2025 GMT Subject: CN=687dc1ba-ceb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:83:41:cd:64:a9:86:80:11:6a:46:cc:d4: f0:73:44:3e:87:34:bb:ab:ff:69:66:02:42:6a:56: 0b:8a:7f:81:04:3c:4a:74:02:fe:c4:5d:f5:6c:42: d9:2c:74:82:66:59:17:4d:dd:28:b7:e9:95:47:a2: 9b:d9:35:f7:5a:21:9a:40:cb:f1:2f:0c:22:4f:63: bc:13:a8:df:86:f5:40:26:cb:94:6e:3b:1d:81:e2: b9:23:06:66:4c:04:75:07:8e:5f:1b:75:10:91:7d: a1:54:56:4d:90:c5:49:34:ed:e4:04:ff:e4:24:59: b4:6c:0e:17:1a:d7:e4:21:91:ff:ec:b2:e1:4e:28: 99:13:0d:d8:0c:e0:0b:ea:55:05:8b:69:29:09:ed: 67:9d:39:60:2f:eb:bf:f5:2e:e3:cb:aa:e6:11:fb: bb:25:e2:84:0b:02:ab:3f:af:a3:7a:f0:4e:cf:3a: 92:39:38:b6:3e:1a:70:2a:57:bd:3a:e0:81:de:50: 6d:8d:dc:e0:91:a5:b7:0e:04:54:8f:69:08:55:46: 0f:5d:1f:19:46:68:66:d7:86:d5:b7:02:81:1a:39: 3b:a5:ab:aa:87:b5:9e:20:35:e9:31:19:56:6a:09: b4:17:2e:11:3a:5c:89:4d:75:c0:98:48:8b:1b:31: a4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F1:02:A7:4A:E3:F9:81:DD:FC:DB:3B:6F:B8:5F:57:8B:23:5B:1C X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:77:9f:56:29:93:ac:9d:b8:c4:c5:d0:65:c8:6b:86:eb:a3: f5:cb:e7:2e:fa:2d:bc:4c:37:e3:bd:05:fe:17:de:51:0a:0a: a5:c3:de:f2:07:d7:18:36:45:5c:1f:14:37:e6:f5:58:14:5b: 7f:7b:2b:91:53:9a:95:a3:1b:f9:79:39:2f:21:4b:f7:f1:5d: 0a:8e:2c:a7:6c:96:6e:fa:4b:6a:11:0d:78:48:49:9f:49:f3: 36:dd:16:27:f5:54:f8:4b:1b:78:0f:7d:06:1e:8a:74:ff:c6: 97:7a:78:a7:08:c8:37:bc:7d:2c:ff:62:84:4f:01:24:89:0c: d5:e3:2a:1f:da:18:12:42:ad:21:2d:75:81:0a:a4:5e:db:93: fe:3c:28:a6:14:15:cb:8e:2c:be:a5:2e:1d:78:5b:ac:ab:6c: 19:0d:e5:05:ba:31:5e:a3:60:54:64:70:df:5e:e9:cb:32:c6: dc:f3:f9:11:bf:33:38:5b:94:26:59:4c:b1:d9:0f:f1:cc:cd: f7:01:dc:c2:15:2f:e1:df:4f:38:27:d7:6e:7f:70:14:35:a9: ac:50:83:55:3e:58:69:65:c0:2c:44:a2:1c:1d:ee:a7:8e:48: 0e:15:42:28:a5:e6:6b:99:fc:8c:e9:85:77:fa:3b:59:cb:66: a1:a8:68:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNEQzYxMTAvBgNVBAUTKEY4NEZCQjQxNUQ5QTQ1NDMzNjJFREY3MjY1RjUzN0Uy Q0ZGOUY4MjAwHhcNMjUwNzIxMDQyNzM3WhcNMjUwNzI4MDQyNzM3WjAYMRYwFAYD VQQDEw02ODdkYzFiYS1jZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvluDQc1kqYaAEWpGzNTwc0Q+hzS7q/9pZgJCalYLin+BBDxKdAL+xF31bELZ LHSCZlkXTd0ot+mVR6Kb2TX3WiGaQMvxLwwiT2O8E6jfhvVAJsuUbjsdgeK5IwZm TAR1B45fG3UQkX2hVFZNkMVJNO3kBP/kJFm0bA4XGtfkIZH/7LLhTiiZEw3YDOAL 6lUFi2kpCe1nnTlgL+u/9S7jy6rmEfu7JeKECwKrP6+jevBOzzqSOTi2PhpwKle9 OuCB3lBtjdzgkaW3DgRUj2kIVUYPXR8ZRmhm14bVtwKBGjk7pauqh7WeIDXpMRlW agm0Fy4ROlyJTXXAmEiLGzGk7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7xAqdK 4/mB3fzbO2+4X1eLI1scMB8GA1UdIwQYMBaAFPhPu0FdmkVDNi7fcmX1N+LP+fgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0RDNi84MDEyOEVDODdE NDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJVTTJMdDl5WmZVMzRzXzUt Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0RDNi84MDEyOEVDODdENDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJV TTJMdDl5WmZVMzRzXzUtQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKd59WKZOsnbjExdBlyGuG66P1y+cu+i28TDfjvQX+F95RCgqlw97y B9cYNkVcHxQ35vVYFFt/eyuRU5qVoxv5eTkvIUv38V0KjiynbJZu+ktqEQ14SEmf SfM23RYn9VT4Sxt4D30GHop0/8aXeninCMg3vH0s/2KETwEkiQzV4yof2hgSQq0h LXWBCqRe25P+PCimFBXLjiy+pS4deFusq2wZDeUFujFeo2BUZHDfXunLMsbc8/kR vzM4W5QmWUyx2Q/xzM33AdzCFS/h3084J9duf3AUNamsUINVPlhpZcAsRKIcHe6n jkgOFUIopeZrmfyM6YV3+jtZy2ahqGh2 -----END CERTIFICATE-----Generated at Mon Jul 21 05:51:46 2025 by rpki-client