$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: VJA70FYOeMbk4whzgicNAzpPzOV5XzZeGiGnxIIUFFg= Subject key identifier: 9C:F6:DC:6A:53:93:43:98:AD:C7:1B:63:7D:2C:86:64:61:24:EF:D8 Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 251E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 251E Signing time: Fri 18 Jul 2025 14:49:01 +0000 Manifest this update: Fri 18 Jul 2025 14:49:01 +0000 Manifest next update: Fri 25 Jul 2025 14:49:01 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: Hw5QYuwX6+H6MOKCnlrmqqr0P3J5+sKPXLjHVxcIiws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9502 (0x251e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: Jul 18 14:49:01 2025 GMT Not After : Jul 25 14:49:01 2025 GMT Subject: CN=687a5edd-2477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:e4:e1:e4:1e:b6:10:17:a6:8c:aa:5c:35: 37:32:c0:a4:07:fc:2d:d0:1c:fd:dc:a1:1e:4e:bb: 18:6a:fe:93:74:c2:a8:5b:26:fb:ab:e0:ad:5d:23: ef:50:e7:f3:92:8f:5e:5e:a9:77:64:c5:58:44:0a: fa:22:66:1a:25:fc:48:e0:6f:be:7d:cc:90:4b:36: 57:28:d6:d7:ab:b2:02:89:ac:21:35:85:06:ed:5d: 59:2f:81:ea:6b:d8:e4:27:af:47:a6:e6:de:eb:30: 0f:83:ca:8d:d3:76:b3:52:a2:c4:be:90:6d:6c:69: 17:be:36:6e:e4:70:a9:e5:b7:f7:1b:c8:ca:3a:7e: f8:7d:21:ae:99:c8:89:ab:d9:f9:10:05:5d:b0:35: e0:0c:40:b6:2e:86:d4:1d:58:63:ac:02:0e:67:0c: 4e:67:a5:76:15:cf:9e:0b:88:2a:ab:c4:b1:91:3f: 1e:cc:a1:fc:8f:07:b5:40:07:bb:74:3e:a9:be:ef: f5:86:34:b0:d7:a4:c9:69:d1:b3:86:c9:40:c9:03: fe:7c:59:fa:67:3a:5c:0f:ea:9a:bb:5b:bb:0c:54: 0c:28:cf:f4:8b:02:a1:2f:cb:3e:ea:91:b1:a3:a9: 13:8f:9f:f4:55:c1:d5:f1:06:9b:66:4e:60:03:90: 60:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F6:DC:6A:53:93:43:98:AD:C7:1B:63:7D:2C:86:64:61:24:EF:D8 X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:22:2a:f1:f5:62:23:da:97:50:a4:13:6a:e8:e3:ea:01:74: cd:a0:3a:4f:b9:c8:25:db:a0:10:b8:ac:e2:24:af:97:8f:32: 2f:f5:a9:36:70:6b:a2:19:91:75:92:b9:d2:ea:56:2b:21:6f: ba:65:25:98:b4:73:40:4b:de:97:84:5a:03:ec:f7:cc:88:29: 0c:e0:12:db:9e:a8:21:6c:21:61:d4:96:b1:12:d3:68:a3:22: a9:89:14:98:db:aa:2c:8e:36:58:7a:6f:ef:52:42:a4:9a:f9: fe:2f:dc:6f:da:df:1f:99:f0:bc:61:8f:73:6f:16:0e:93:6e: 78:5b:aa:dd:28:51:b6:06:dd:e8:54:53:e8:60:af:93:d2:34: 64:7f:7d:e9:45:ed:c8:f0:da:57:9c:37:b5:6c:48:07:c4:54: b1:c6:64:a7:1d:58:b6:50:a9:5b:c1:ae:b1:d6:0e:d8:5c:a3: e6:63:14:be:26:74:60:94:82:75:b0:61:a4:9f:02:1e:1e:b6: 33:9e:99:e2:47:2e:86:89:1e:50:79:8e:84:77:3d:eb:1c:dd: bf:80:61:76:7b:7e:ce:07:f4:ce:12:e6:9e:0b:99:a6:be:34: f8:68:9e:ad:bd:4c:6d:0b:1e:eb:08:90:07:1e:a2:b2:aa:d6: ea:c5:00:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjUwNzE4MTQ0OTAxWhcNMjUwNzI1MTQ0OTAxWjAYMRYwFAYD VQQDEw02ODdhNWVkZC0yNDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOvk4eQethAXpoyqXDU3MsCkB/wt0Bz93KEeTrsYav6TdMKoWyb7q+CtXSPv UOfzko9eXql3ZMVYRAr6ImYaJfxI4G++fcyQSzZXKNbXq7ICiawhNYUG7V1ZL4Hq a9jkJ69Hpube6zAPg8qN03azUqLEvpBtbGkXvjZu5HCp5bf3G8jKOn74fSGumciJ q9n5EAVdsDXgDEC2LobUHVhjrAIOZwxOZ6V2Fc+eC4gqq8SxkT8ezKH8jwe1QAe7 dD6pvu/1hjSw16TJadGzhslAyQP+fFn6ZzpcD+qau1u7DFQMKM/0iwKhL8s+6pGx o6kTj5/0VcHV8QabZk5gA5BgzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz23GpT k0OYrccbY30shmRhJO/YMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlIirx9WIj2pdQpBNq6OPqAXTNoDpPucgl26AQuKziJK+XjzIv9ak2 cGuiGZF1krnS6lYrIW+6ZSWYtHNAS96XhFoD7PfMiCkM4BLbnqghbCFh1JaxEtNo oyKpiRSY26osjjZYem/vUkKkmvn+L9xv2t8fmfC8YY9zbxYOk254W6rdKFG2Bt3o VFPoYK+T0jRkf33pRe3I8NpXnDe1bEgHxFSxxmSnHVi2UKlbwa6x1g7YXKPmYxS+ JnRglIJ1sGGknwIeHrYznpniRy6GiR5QeY6Edz3rHN2/gGF2e37OB/TOEuaeC5mm vjT4aJ6tvUxtCx7rCJAHHqKyqtbqxQDb -----END CERTIFICATE-----Generated at Sun Jul 20 11:45:34 2025 by rpki-client