$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft File: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft (raw, json) Hash identifier: IqUqMgUm9srvLEtPlL/cbP/dySfeIAQcmAtOUrkqjXM= Subject key identifier: 6B:5E:60:88:B9:8E:80:30:AB:BB:BB:CA:C9:04:86:D6:CE:67:1B:1D Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Certificate serial: 0A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft Manifest number: 0A0A Signing time: Fri 18 Jul 2025 20:04:37 +0000 Manifest this update: Fri 18 Jul 2025 20:04:36 +0000 Manifest next update: Fri 25 Jul 2025 20:04:36 +0000 Files and hashes: 1: E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl (hash: RIxY9sRM/aKQX7Ibbynp+1iZU/5EBypejqWq2S5f0Bo=) 2: 722D43AC7A5A11EABD77E486C4F9AE02.roa (hash: dz0lDVUdbKurIPgLKnTIK+TUvk2MtsrFSHr5aV4oHoA=) 3: E4EFE6905ECB11ECA9B55A3BC4F9AE02.roa (hash: ACLukHzl4iP7lAUKq3zWaW1x17F+UkqOsay4tSs+0D0=) 4: A1C764027A5B11EA98745A0EC4F9AE02.roa (hash: WPHw7kNP0n6c5UltUwmrIvy70bAxnVBFcfWA6in4LsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2592 (0xa20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74 Validity Not Before: Jul 18 20:04:36 2025 GMT Not After : Jul 25 20:04:36 2025 GMT Subject: CN=687aa8d4-a443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:75:3c:f0:a0:74:a0:ca:35:9f:d3:f1:5c: 65:07:79:a9:53:e4:3c:3b:7b:a8:67:07:f9:ab:08: 21:ce:21:9a:b7:16:ee:f4:92:93:43:43:56:5c:a1: e5:8a:54:89:18:0e:00:76:fc:9c:a5:cd:bf:53:0e: 25:73:d9:af:68:65:22:01:db:34:4f:9b:cf:2f:4d: 11:10:8b:91:0d:69:c2:02:3a:b1:f6:d1:e1:45:fb: ca:db:51:a3:21:c3:39:c0:3c:44:40:98:09:59:9d: 90:81:c0:84:3f:00:46:73:fe:e9:d3:ad:4e:81:07: 16:17:54:ea:0e:fd:0f:59:cc:31:bc:d3:1d:93:a0: 6f:e9:e0:47:e4:f6:8a:67:37:31:d8:41:34:67:b2: 45:53:3e:44:2c:b8:04:c6:39:90:4f:38:f9:07:65: a1:97:25:f9:22:40:56:ab:86:c4:92:44:24:d9:86: 4e:c6:f2:36:a8:c3:30:a8:e1:1a:e7:f4:c2:63:2d: 1d:23:92:6b:e1:e5:b1:f7:36:fa:1f:51:10:b6:4c: 3d:76:d1:24:71:16:99:f6:2e:63:f8:c4:a1:e9:53: 9f:ed:eb:3f:6c:4b:63:43:3a:8a:bd:a7:40:e0:1f: b9:b9:54:e2:b2:d4:f0:cb:c4:19:15:9c:db:10:d2: fa:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5E:60:88:B9:8E:80:30:AB:BB:BB:CA:C9:04:86:D6:CE:67:1B:1D X509v3 Authority Key Identifier: keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:ee:30:d2:77:08:30:86:db:7a:49:df:e8:1e:44:f2:f3:e0: cc:4f:ff:2b:c4:37:56:29:c3:09:d4:c1:a6:f3:54:4a:2e:09: 09:d3:51:16:1b:e1:55:55:49:a3:1a:7b:8b:01:eb:e1:46:1c: ba:a8:e8:2a:da:44:cc:37:b4:53:48:9b:00:0c:24:e6:d8:0e: eb:f7:76:24:40:ef:84:5f:93:63:29:af:8a:88:08:02:a3:9b: 6d:d1:0a:65:74:8c:9d:05:d6:c3:25:ba:c7:0b:5f:dc:32:32: b6:b8:4c:d1:e9:45:ff:4a:67:9c:11:d2:26:21:55:30:dd:91: a1:18:0a:96:57:bd:c1:0d:62:b1:29:bb:8b:8d:51:c9:b4:5b: d5:e0:8b:7d:74:f0:03:0f:3d:cc:ab:ed:4c:2b:e9:54:ce:fc: 53:bb:77:a1:d1:90:a9:2f:68:57:d2:7d:13:d5:52:b7:66:f3: 3c:74:86:5a:a2:b6:da:c4:92:9f:54:7e:21:28:54:7e:d4:6d: 90:6a:64:c8:1e:86:ba:09:1f:19:a3:0a:79:49:92:5a:00:80: f6:61:fc:0e:3d:fa:fc:f8:8e:84:8a:f8:7d:ae:74:12:00:56: f4:08:93:af:67:e8:f3:73:c6:b0:50:cd:8b:9b:88:af:ff:88: 80:f1:51:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx Q0M5NkJBNzQwHhcNMjUwNzE4MjAwNDM2WhcNMjUwNzI1MjAwNDM2WjAYMRYwFAYD VQQDEw02ODdhYThkNC1hNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+V1PPCgdKDKNZ/T8VxlB3mpU+Q8O3uoZwf5qwghziGatxbu9JKTQ0NWXKHl ilSJGA4Advycpc2/Uw4lc9mvaGUiAds0T5vPL00REIuRDWnCAjqx9tHhRfvK21Gj IcM5wDxEQJgJWZ2QgcCEPwBGc/7p061OgQcWF1TqDv0PWcwxvNMdk6Bv6eBH5PaK Zzcx2EE0Z7JFUz5ELLgExjmQTzj5B2WhlyX5IkBWq4bEkkQk2YZOxvI2qMMwqOEa 5/TCYy0dI5Jr4eWx9zb6H1EQtkw9dtEkcRaZ9i5j+MSh6VOf7es/bEtjQzqKvadA 4B+5uVTistTwy8QZFZzbENL6XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGteYIi5 joAwq7u7yskEhtbOZxsdMB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1 blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTlENi85RTY2RjUxMjdBNTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3 YnM1Y3MxVzR4MWNjeVd1blEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV7jDSdwgwhtt6Sd/oHkTy8+DMT/8rxDdWKcMJ1MGm81RKLgkJ01EW G+FVVUmjGnuLAevhRhy6qOgq2kTMN7RTSJsADCTm2A7r93YkQO+EX5NjKa+KiAgC o5tt0QpldIydBdbDJbrHC1/cMjK2uEzR6UX/SmecEdImIVUw3ZGhGAqWV73BDWKx KbuLjVHJtFvV4It9dPADDz3Mq+1MK+lUzvxTu3eh0ZCpL2hX0n0T1VK3ZvM8dIZa orbaxJKfVH4hKFR+1G2QamTIHoa6CR8Zowp5SZJaAID2YfwOPfr8+I6Eivh9rnQS AFb0CJOvZ+jzc8awUM2Lm4iv/4iA8VEp -----END CERTIFICATE-----Generated at Sun Jul 20 01:56:12 2025 by rpki-client