$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: L04DuUgUzDqdZ+yQNi+bw0D+D+iQ0ff9fgVUOxFLs74= Subject key identifier: 67:C4:85:E2:DB:CA:D4:45:1E:65:05:35:5E:98:0E:6B:8E:4B:24:17 Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 01C6 Signing time: Sat 19 Jul 2025 03:06:09 +0000 Manifest this update: Sat 19 Jul 2025 03:06:08 +0000 Manifest next update: Sat 26 Jul 2025 03:06:08 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: fhA3lU7AW7Bvjy8BndUsurG0NuOITl5Yxbsz9gMjcBw=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Jul 19 03:06:08 2025 GMT Not After : Jul 26 03:06:08 2025 GMT Subject: CN=687b0ba0-3ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7b:4e:dc:f5:2d:e9:6e:ee:e8:3c:92:9f:e1: 94:f5:38:92:30:2e:90:03:93:2a:9c:28:af:37:36: c4:cf:ed:4f:06:1c:9d:b4:35:c6:e1:c3:a7:ee:a8: 7b:8d:d0:26:a1:41:eb:d0:89:39:96:ce:02:47:1b: 1c:ff:ab:69:43:ef:ae:b4:dc:d7:91:84:5a:af:7b: 4c:23:93:03:95:8d:c2:16:6a:c5:85:bb:d2:55:e8: 2d:9a:8e:a2:52:43:ec:61:a4:58:a3:57:75:9d:5f: fe:79:92:b9:b9:e8:10:12:48:50:c6:ae:8d:10:69: fc:31:9b:cd:79:d4:9a:20:9a:80:54:1f:ac:3c:15: 5d:a2:bc:10:b6:79:1a:bd:8e:33:33:42:36:46:49: 85:74:bd:d5:e2:23:f0:09:a3:b7:07:05:de:e3:c6: d6:8c:bf:f8:fc:e0:b0:ac:a6:58:1a:44:c8:98:bf: 05:a7:33:5b:c6:37:97:a7:8f:47:43:50:1d:7d:68: 23:27:d9:52:fb:e2:24:b9:49:53:e9:2b:e5:4e:e3: f5:dd:3a:57:2f:7f:7c:74:19:fc:cd:69:6f:fd:db: 84:63:d4:50:2d:09:60:38:20:41:61:b0:d0:ee:3b: cc:52:12:55:31:65:82:0e:13:20:6b:a5:4d:e4:1c: b6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C4:85:E2:DB:CA:D4:45:1E:65:05:35:5E:98:0E:6B:8E:4B:24:17 X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:59:be:fb:59:43:b0:59:90:aa:3f:3f:c9:97:61:38:91:26: c4:3a:a7:08:71:dd:4d:a6:1a:0c:42:c0:0a:1d:21:fd:c8:58: cf:aa:d7:41:91:49:79:85:29:ba:7e:f6:84:a1:37:20:e1:12: 3d:1b:e4:2b:c4:24:37:e1:5b:25:8e:d7:aa:6b:ca:ca:e0:71: a7:e5:94:8d:d0:98:85:10:dc:c0:b8:b8:40:2a:6b:5a:b9:9b: 23:e8:e6:c1:1e:2f:2e:ec:f7:d1:b8:2a:43:9b:b7:3d:6a:af: 8a:8e:7b:dd:0b:ba:58:85:8d:b8:10:07:c0:fc:e8:06:8d:19: 52:ab:d8:e5:3b:10:d2:76:05:ab:6b:46:d5:0c:12:22:c2:af: 9f:db:eb:8c:f6:54:fe:19:b7:f7:91:a0:ec:db:69:09:f8:7f: fa:d6:c7:a7:92:28:63:ba:38:4e:0b:73:11:9c:27:d0:b8:50: 3d:97:f7:4f:17:32:35:96:24:93:14:78:44:83:a0:d2:a9:1f: e0:db:99:66:1a:3b:2d:e9:9a:ae:11:43:19:cb:c3:24:c4:62: 4a:ef:03:c5:9a:bf:56:47:dd:09:14:99:53:a6:6d:c9:c4:8b: bb:b7:d4:05:29:e0:d3:fd:55:b2:ad:85:3d:02:05:04:77:73: e3:a8:0e:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjUwNzE5MDMwNjA4WhcNMjUwNzI2MDMwNjA4WjAYMRYwFAYD VQQDEw02ODdiMGJhMC0zZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3tO3PUt6W7u6DySn+GU9TiSMC6QA5MqnCivNzbEz+1PBhydtDXG4cOn7qh7 jdAmoUHr0Ik5ls4CRxsc/6tpQ++utNzXkYRar3tMI5MDlY3CFmrFhbvSVegtmo6i UkPsYaRYo1d1nV/+eZK5uegQEkhQxq6NEGn8MZvNedSaIJqAVB+sPBVdorwQtnka vY4zM0I2RkmFdL3V4iPwCaO3BwXe48bWjL/4/OCwrKZYGkTImL8FpzNbxjeXp49H Q1AdfWgjJ9lS++IkuUlT6SvlTuP13TpXL398dBn8zWlv/duEY9RQLQlgOCBBYbDQ 7jvMUhJVMWWCDhMga6VN5By2aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfEheLb ytRFHmUFNV6YDmuOSyQXMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmWb77WUOwWZCqPz/Jl2E4kSbEOqcIcd1NphoMQsAKHSH9yFjPqtdB kUl5hSm6fvaEoTcg4RI9G+QrxCQ34Vsljteqa8rK4HGn5ZSN0JiFENzAuLhAKmta uZsj6ObBHi8u7PfRuCpDm7c9aq+KjnvdC7pYhY24EAfA/OgGjRlSq9jlOxDSdgWr a0bVDBIiwq+f2+uM9lT+Gbf3kaDs22kJ+H/61senkihjujhOC3MRnCfQuFA9l/dP FzI1liSTFHhEg6DSqR/g25lmGjst6ZquEUMZy8MkxGJK7wPFmr9WR90JFJlTpm3J xIu7t9QFKeDT/VWyrYU9AgUEd3PjqA4R -----END CERTIFICATE-----Generated at Sun Jul 20 19:02:03 2025 by rpki-client