$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft File: e8dWLzeFS9JjniQQ1nPld8v7MR8.mft (raw, json) Hash identifier: 1OffYF9gD4SSl6PibtsajMlZvkAoEZJcDFKcbnDt0bo= Subject key identifier: 3B:E1:35:F4:78:CD:AE:37:04:76:21:B6:14:A3:2F:34:7D:1D:16:9D Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F Certificate issuer: /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft Manifest number: 54 Signing time: Sat 19 Jul 2025 07:32:31 +0000 Manifest this update: Sat 19 Jul 2025 07:32:30 +0000 Manifest next update: Sat 26 Jul 2025 07:32:30 +0000 Files and hashes: 1: e8dWLzeFS9JjniQQ1nPld8v7MR8.crl (hash: C8evCR5N6eMROkcSfT06k6PGj2mZXFOJUOqTC9v8Bic=) 2: C6D4BDF8ECFC11EF9447031DC4F9AE02.roa (hash: vKvGvc7f1ooIQwok9o5vzvjlKuAVRyu9TkNTlmBt1ZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Validity Not Before: Jul 19 07:32:30 2025 GMT Not After : Jul 26 07:32:30 2025 GMT Subject: CN=687b4a0f-8e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:fd:b4:20:71:b3:56:ad:b0:88:9f:e9:a8: 14:30:d2:1c:1c:f3:4f:e3:cb:17:c2:b7:4e:bc:82: 93:9b:c2:19:4c:46:28:cd:af:a8:4a:a9:0a:5c:dc: cd:89:d0:7c:ac:f4:26:26:9a:0c:7d:f3:aa:00:8a: af:95:b2:86:c5:ee:76:82:14:90:83:a0:ca:57:aa: 99:c0:ff:f3:36:cb:b1:6e:c4:45:32:fd:d5:11:5a: 94:a2:3d:82:f9:41:cc:8e:c0:74:30:a6:a5:3f:ac: 7a:4b:01:8a:8b:33:53:b9:8d:8c:e1:61:73:f1:b7: f0:45:7c:6b:6f:dc:e9:48:be:45:7b:bc:c1:95:39: 89:4a:8f:89:67:10:e4:e9:0a:56:5c:2b:65:0e:c0: a9:e5:52:02:a0:6e:af:18:31:99:ca:9d:01:30:51: fb:47:4d:42:9f:99:57:77:27:67:85:39:78:c0:52: 91:a1:f5:cd:69:fe:f9:76:7e:dd:35:2d:0b:1b:a0: 8b:2d:69:31:5d:13:bc:ad:47:af:5f:58:88:f9:65: 20:cc:b4:2c:dd:7b:55:f0:e7:2d:85:02:b6:14:ed: 0f:1e:9e:75:43:f7:b5:10:85:b3:fd:be:4d:43:3a: 3a:91:43:83:14:7a:b8:a9:6e:dc:b1:a6:81:4b:3f: 65:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E1:35:F4:78:CD:AE:37:04:76:21:B6:14:A3:2F:34:7D:1D:16:9D X509v3 Authority Key Identifier: keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:3d:0b:bb:88:9d:46:f0:c8:19:06:a6:a1:41:9c:3a:9e:46: 81:88:cc:63:51:ed:03:db:b6:5a:11:f4:c9:a4:67:35:6c:3f: 90:a7:e1:18:27:5a:af:a7:62:b5:3a:90:c5:33:d6:cb:f6:ff: 35:a3:e0:23:90:ed:97:e3:ad:34:8c:d9:82:0a:f4:c3:ff:8a: d0:12:66:ac:b4:16:71:04:0f:5b:bf:c4:2a:87:47:24:7b:81: 5d:8d:64:27:5b:d0:5b:30:e4:a1:6f:7f:16:b0:7c:42:a7:d0: db:eb:af:ef:68:b6:ba:8d:03:ba:6e:52:80:d6:a8:a6:41:58: 6a:4e:fa:c6:6c:ec:19:fd:d8:d2:aa:ad:d5:0b:f4:3c:68:5d: b3:ff:c2:cc:d6:f0:15:39:c2:e8:f0:14:18:29:7f:98:34:91: 4e:b8:ba:b6:79:3a:b0:3a:1e:42:42:7c:30:a2:56:55:c8:b5: 40:26:10:cc:d0:24:ce:58:59:94:09:47:69:1c:57:c6:70:64: 67:25:5a:7c:01:8c:f2:1f:a8:e0:05:e8:ad:e2:ac:c7:06:d9: 5c:8e:27:99:e9:14:c2:78:8d:d3:a4:4c:a6:1f:e3:68:5c:43: 0c:54:ac:43:dd:eb:0b:ad:86:a1:cf:79:33:58:89:01:f4:f6: e1:ec:8d:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzZDMjExMC8GA1UEBRMoN0JDNzU2MkYzNzg1NEJEMjYzOUUyNDEwRDY3M0U1NzdD QkZCMzExRjAeFw0yNTA3MTkwNzMyMzBaFw0yNTA3MjYwNzMyMzBaMBgxFjAUBgNV BAMTDTY4N2I0YTBmLThlMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpo/20IHGzVq2wiJ/pqBQw0hwc80/jyxfCt068gpObwhlMRijNr6hKqQpc3M2J 0Hys9CYmmgx986oAiq+VsobF7naCFJCDoMpXqpnA//M2y7FuxEUy/dURWpSiPYL5 QcyOwHQwpqU/rHpLAYqLM1O5jYzhYXPxt/BFfGtv3OlIvkV7vMGVOYlKj4lnEOTp ClZcK2UOwKnlUgKgbq8YMZnKnQEwUftHTUKfmVd3J2eFOXjAUpGh9c1p/vl2ft01 LQsboIstaTFdE7ytR69fWIj5ZSDMtCzde1Xw5y2FArYU7Q8ennVD97UQhbP9vk1D OjqRQ4MUeripbtyxpoFLP2UZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO+E19HjN rjcEdiG2FKMvNH0dFp0wHwYDVR0jBBgwFoAUe8dWLzeFS9JjniQQ1nPld8v7MR8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzNkMyLzUwRkI5MDcwRUMz OTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlKam5pUVExblBsZDh2N01S OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZThkV0x6ZUZTOUpqbmlRUTFuUGxkOHY3TVI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz NkMyLzUwRkI5MDcwRUMzOTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlK am5pUVExblBsZDh2N01SOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJk9C7uInUbwyBkGpqFBnDqeRoGIzGNR7QPbtloR9MmkZzVsP5Cn4Rgn Wq+nYrU6kMUz1sv2/zWj4COQ7ZfjrTSM2YIK9MP/itASZqy0FnEED1u/xCqHRyR7 gV2NZCdb0Fsw5KFvfxawfEKn0Nvrr+9otrqNA7puUoDWqKZBWGpO+sZs7Bn92NKq rdUL9DxoXbP/wszW8BU5wujwFBgpf5g0kU64urZ5OrA6HkJCfDCiVlXItUAmEMzQ JM5YWZQJR2kcV8ZwZGclWnwBjPIfqOAF6K3irMcG2VyOJ5npFMJ4jdOkTKYf42hc QwxUrEPd6wuthqHPeTNYiQH09uHsja8= -----END CERTIFICATE-----Generated at Mon Jul 21 06:56:13 2025 by rpki-client