$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft File: M1EvnGdsMJ4181WPA7muZBm_dBU.mft (raw, json) Hash identifier: 06FOvcpCYqLifWXFXslJFMM2PLBMEqT6gLlegLrzpH8= Subject key identifier: D2:B6:D7:E6:E5:E7:03:A1:AB:A3:E1:9E:5E:1A:74:0D:7C:C1:A6:77 Authority key identifier: 33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15 Certificate issuer: /CN=A91CB763/serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft Manifest number: 01A1 Signing time: Mon 21 Jul 2025 03:22:38 +0000 Manifest this update: Mon 21 Jul 2025 03:22:38 +0000 Manifest next update: Mon 28 Jul 2025 03:22:38 +0000 Files and hashes: 1: M1EvnGdsMJ4181WPA7muZBm_dBU.crl (hash: DjxyH/4TAKagaMF4MC6/n7oe+Uh8ibnlppe+csCIyQg=) 2: 1FB8AA58E9AB11ED8B614C43C4F9AE02.roa (hash: oCS3tdZ6gguGFimJ8+AyVEXE/8R/Gcn35NJsKRSfeUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB763, serialNumber=33512F9C676C309E35F3558F03B9AE6419BF7415 Validity Not Before: Jul 21 03:22:38 2025 GMT Not After : Jul 28 03:22:38 2025 GMT Subject: CN=687db27e-c0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:de:ba:97:95:eb:72:f1:13:81:97:ae:b4: 51:32:71:c7:95:da:19:1a:82:8b:1e:6e:b5:b7:96: 54:6f:20:72:a2:27:bd:06:6e:a0:7e:45:59:97:a3: e5:01:da:23:69:7b:18:cd:a4:87:78:8f:cb:02:c9: f2:53:86:01:01:c9:7f:89:29:51:d1:4b:b6:f2:29: a4:24:42:a9:ff:dd:90:cb:9f:57:f3:15:53:e3:48: b7:87:9b:aa:fb:97:9f:af:5c:82:32:c0:53:99:c9: f9:1a:74:74:22:a0:e4:9c:38:14:a9:6c:0f:c3:74: b5:ad:37:a3:0c:15:92:2d:f7:c4:9b:ce:85:c1:86: 3c:23:58:90:bd:16:7c:23:22:76:23:96:4a:4c:8f: f8:88:a0:1e:7a:32:47:15:df:6f:8f:a7:4c:16:af: 9e:1c:36:5f:fb:7f:9e:63:2b:f4:f1:28:41:0e:69: 7b:95:d0:39:ed:a0:bd:90:81:e0:48:8d:78:68:33: b6:6e:90:0c:ae:61:4c:85:fa:9f:1d:e3:ca:a5:86: 86:8a:47:ca:e0:6b:35:86:e8:33:eb:f8:07:90:6a: 9e:c6:74:1b:88:7d:44:0d:43:ac:17:29:9a:23:b4: ea:2e:a6:1e:15:51:c5:7c:10:73:1d:95:8a:c2:78: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B6:D7:E6:E5:E7:03:A1:AB:A3:E1:9E:5E:1A:74:0D:7C:C1:A6:77 X509v3 Authority Key Identifier: keyid:33:51:2F:9C:67:6C:30:9E:35:F3:55:8F:03:B9:AE:64:19:BF:74:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M1EvnGdsMJ4181WPA7muZBm_dBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB763/8F021F88E9A711EDB1C6B141C4F9AE02/M1EvnGdsMJ4181WPA7muZBm_dBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:eb:63:cc:0b:41:e0:f4:e4:31:62:2e:42:a7:5d:f3:bf:5a: fb:36:f1:d2:d4:2d:f8:65:e8:49:16:30:57:98:21:8d:57:bb: 78:52:a2:a3:7d:39:5b:81:27:5b:12:d0:0d:b1:04:88:5d:fc: dc:93:22:75:ff:cd:4b:e4:ff:d9:4e:00:13:4c:3a:2c:29:f4: 8e:fb:7c:43:3d:0f:f3:51:9b:9d:7b:fc:c2:76:17:e5:27:84: b6:88:3d:60:04:5d:ae:8f:ab:49:e2:49:06:2f:50:82:03:66: e7:2b:4b:52:5b:8a:e6:07:04:db:1b:8b:05:30:ea:e6:db:dd: 9b:20:e9:37:04:b7:2a:89:92:4b:24:e8:76:57:c6:ad:2c:2f: cf:3c:86:84:f2:8c:c3:d7:68:73:57:07:89:99:d6:88:42:c3: ba:20:85:6d:b1:a2:8b:55:71:94:d2:fe:ac:c6:4e:41:53:c3: 6c:63:f4:3a:38:e0:ae:86:3a:06:5d:24:45:77:70:cd:fe:96: 30:b0:34:4e:88:b0:77:ec:4d:2b:00:6b:f0:98:ba:1c:09:0b: 53:f7:d1:83:e2:63:42:82:d0:d8:87:e2:4e:cb:3d:a2:71:47: 57:18:62:08:a6:16:46:c9:42:ba:7b:0c:3c:50:e0:26:11:ee: 32:72:44:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I3NjMxMTAvBgNVBAUTKDMzNTEyRjlDNjc2QzMwOUUzNUYzNTU4RjAzQjlBRTY0 MTlCRjc0MTUwHhcNMjUwNzIxMDMyMjM4WhcNMjUwNzI4MDMyMjM4WjAYMRYwFAYD VQQDEw02ODdkYjI3ZS1jMGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbXeupeV63LxE4GXrrRRMnHHldoZGoKLHm61t5ZUbyByoie9Bm6gfkVZl6Pl AdojaXsYzaSHeI/LAsnyU4YBAcl/iSlR0Uu28imkJEKp/92Qy59X8xVT40i3h5uq +5efr1yCMsBTmcn5GnR0IqDknDgUqWwPw3S1rTejDBWSLffEm86FwYY8I1iQvRZ8 IyJ2I5ZKTI/4iKAeejJHFd9vj6dMFq+eHDZf+3+eYyv08ShBDml7ldA57aC9kIHg SI14aDO2bpAMrmFMhfqfHePKpYaGikfK4Gs1hugz6/gHkGqexnQbiH1EDUOsFyma I7TqLqYeFVHFfBBzHZWKwnjwPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNK21+bl 5wOhq6Phnl4adA18waZ3MB8GA1UdIwQYMBaAFDNRL5xnbDCeNfNVjwO5rmQZv3QV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjc2My84RjAyMUY4OEU5 QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdkc01KNDE4MVdQQTdtdVpCbV9k QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00xRXZuR2RzTUo0MTgxV1BBN211WkJtX2RCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Qjc2My84RjAyMUY4OEU5QTcxMUVEQjFDNkIxNDFDNEY5QUUwMi9NMUV2bkdkc01K NDE4MVdQQTdtdVpCbV9kQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp62PMC0Hg9OQxYi5Cp13zv1r7NvHS1C34ZehJFjBXmCGNV7t4UqKj fTlbgSdbEtANsQSIXfzckyJ1/81L5P/ZTgATTDosKfSO+3xDPQ/zUZude/zCdhfl J4S2iD1gBF2uj6tJ4kkGL1CCA2bnK0tSW4rmBwTbG4sFMOrm292bIOk3BLcqiZJL JOh2V8atLC/PPIaE8ozD12hzVweJmdaIQsO6IIVtsaKLVXGU0v6sxk5BU8NsY/Q6 OOCuhjoGXSRFd3DN/pYwsDROiLB37E0rAGvwmLocCQtT99GD4mNCgtDYh+JOyz2i cUdXGGIIphZGyUK6eww8UOAmEe4yckQr -----END CERTIFICATE-----Generated at Tue Jul 22 12:29:36 2025 by rpki-client