$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: auqeE2KtgcfJQ3otrCCPie0LM+p0wPle7dXD8YLGYzk= Subject key identifier: 88:45:C6:F4:4F:5D:A4:2E:AB:E3:33:16:0C:A0:B1:92:12:7A:56:F5 Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0F8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0F85 Signing time: Fri 18 Jul 2025 17:42:28 +0000 Manifest this update: Fri 18 Jul 2025 17:42:27 +0000 Manifest next update: Fri 25 Jul 2025 17:42:27 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: 7Zo46YQO8s3HYOThCVF/emhxw9iu0V+bnkOb89itUeY=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3980 (0xf8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: Jul 18 17:42:27 2025 GMT Not After : Jul 25 17:42:27 2025 GMT Subject: CN=687a8783-0f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:70:9f:b3:45:25:86:5f:45:bd:d3:17:f7:2f: 44:6a:78:3e:17:c1:5d:5e:5f:ba:6d:88:54:94:5f: 96:dd:bd:85:8f:0d:b7:4e:9e:77:75:35:34:d1:b5: ba:5d:ab:ee:08:d4:b4:7e:b8:76:cb:c5:00:b0:26: de:d7:8d:cb:67:b8:55:2b:5f:a3:cf:92:50:ae:ef: 96:22:f0:7a:b5:6b:9d:05:c4:44:51:1d:a2:06:77: 2b:63:c5:e2:46:1b:2a:2e:62:a2:b2:1d:10:e3:92: 89:e5:04:86:f5:ed:d0:75:fb:5e:74:75:32:e8:77: f1:ac:58:ff:97:2b:9f:88:8c:18:d9:43:97:1b:f6: 18:27:09:a0:8f:36:97:00:a3:da:d0:e9:40:cc:52: 7c:e7:67:d8:8a:70:f0:4d:3c:0d:4c:a2:ed:a6:49: d0:e8:eb:08:c5:41:0e:48:58:d7:32:68:53:b5:9a: 81:9d:7a:d2:6c:7d:ac:01:67:da:1e:e1:47:ab:8e: 40:22:ab:fb:79:b4:96:91:af:46:d4:46:8c:05:f2: 5d:b0:0f:78:ff:68:e8:aa:84:97:2b:28:cc:62:8f: 0c:2a:37:c4:b0:30:f8:1f:00:81:84:fe:e1:c7:e5: d2:04:79:ee:a7:01:91:78:e9:15:be:f9:96:38:c7: f8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:45:C6:F4:4F:5D:A4:2E:AB:E3:33:16:0C:A0:B1:92:12:7A:56:F5 X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:2a:f4:21:b7:b8:82:ad:32:8e:a6:a8:b0:c5:bb:d7:50:b8: 63:66:63:f4:48:54:fc:51:23:2a:fc:9b:46:31:0d:7b:c2:06: 63:ab:c6:bd:61:e5:b9:83:67:78:b5:3d:dd:8a:30:24:15:15: b7:01:39:bf:6c:ae:40:1a:7c:aa:1c:88:9f:16:f0:a5:a1:c1: 35:79:64:63:c5:b3:c3:31:6e:45:87:d5:f9:15:7d:12:b8:6b: 97:25:2c:26:c8:a7:03:fa:2c:39:d1:9e:c6:45:a8:9c:46:e8: 10:d4:0b:c2:49:aa:ab:73:a1:8d:d5:d6:a9:0b:f0:fd:40:83: 26:30:03:fb:23:e3:a8:87:3d:d6:c1:be:03:86:e4:e9:79:a1: 33:21:af:e4:22:b7:8d:05:99:61:62:ce:12:89:c9:91:8b:10: a5:a6:a5:52:ee:45:82:af:f4:56:20:26:c3:a0:28:f5:2b:a6: e7:79:bb:b9:08:5b:a3:12:12:b2:4d:2b:26:69:98:a1:62:75: 19:3f:f8:0d:3f:e4:e7:cc:64:5c:53:ec:55:4a:46:18:fc:11: 12:fe:5a:ed:18:2e:92:95:cc:1c:c9:6d:bd:28:4d:83:fa:64: 95:35:62:f3:7b:33:1d:8b:c2:22:2a:5a:a1:b0:e9:ce:72:45: a4:0a:db:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUwNzE4MTc0MjI3WhcNMjUwNzI1MTc0MjI3WjAYMRYwFAYD VQQDEw02ODdhODc4My0wZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HCfs0Ulhl9FvdMX9y9Eang+F8FdXl+6bYhUlF+W3b2Fjw23Tp53dTU00bW6 XavuCNS0frh2y8UAsCbe143LZ7hVK1+jz5JQru+WIvB6tWudBcREUR2iBncrY8Xi RhsqLmKish0Q45KJ5QSG9e3QdftedHUy6HfxrFj/lyufiIwY2UOXG/YYJwmgjzaX AKPa0OlAzFJ852fYinDwTTwNTKLtpknQ6OsIxUEOSFjXMmhTtZqBnXrSbH2sAWfa HuFHq45AIqv7ebSWka9G1EaMBfJdsA94/2joqoSXKyjMYo8MKjfEsDD4HwCBhP7h x+XSBHnupwGReOkVvvmWOMf4TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhFxvRP XaQuq+MzFgygsZISelb1MB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChKvQht7iCrTKOpqiwxbvXULhjZmP0SFT8USMq/JtGMQ17wgZjq8a9 YeW5g2d4tT3dijAkFRW3ATm/bK5AGnyqHIifFvClocE1eWRjxbPDMW5Fh9X5FX0S uGuXJSwmyKcD+iw50Z7GRaicRugQ1AvCSaqrc6GN1dapC/D9QIMmMAP7I+Oohz3W wb4DhuTpeaEzIa/kIreNBZlhYs4SicmRixClpqVS7kWCr/RWICbDoCj1K6bnebu5 CFujEhKyTSsmaZihYnUZP/gNP+TnzGRcU+xVSkYY/BES/lrtGC6SlcwcyW29KE2D +mSVNWLzezMdi8IiKlqhsOnOckWkCtv6 -----END CERTIFICATE-----Generated at Sun Jul 20 06:18:38 2025 by rpki-client