$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft File: ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json) Hash identifier: aAihU83ARJyQQyTFkOzV9ii4j4Inyg9YBREozShX87o= Subject key identifier: 13:73:86:0F:8E:9F:D4:66:42:40:04:73:42:D0:0A:2D:EF:31:E7:3D Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 Certificate issuer: /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Certificate serial: 0B13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft Manifest number: 0B04 Signing time: Tue 22 Jul 2025 19:37:17 +0000 Manifest this update: Tue 22 Jul 2025 19:37:17 +0000 Manifest next update: Tue 29 Jul 2025 19:37:17 +0000 Files and hashes: 1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: OK1G29YbEpZmW1D+pMgfJuqT6gJg/1Fi3jmN5jb04fk=) 2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: x6v+AqgjPFRVX68ne0JC+xRgXtO5WMJX4uQIZ5czHsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2835 (0xb13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2 Validity Not Before: Jul 22 19:37:17 2025 GMT Not After : Jul 29 19:37:17 2025 GMT Subject: CN=687fe86d-7f5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6b:f1:b1:ce:06:d6:5f:0f:45:42:01:a2:4f: 34:6b:95:f1:d4:0f:ca:7b:93:8f:0f:6d:e4:d6:a6: 69:cf:ad:3e:44:a4:ea:6b:a1:f8:ef:ca:51:4a:26: 76:9c:9c:e5:25:05:75:ec:9a:0a:db:4d:7e:72:0c: 3d:6a:41:f1:11:26:68:97:47:87:55:13:87:66:f9: 15:b0:8b:5c:f3:d1:05:b8:ca:4f:ec:06:e5:2b:26: c1:ba:9b:6a:da:3d:96:9f:49:38:72:91:95:c8:71: 37:8b:3e:2e:a2:7b:57:38:44:92:e9:ef:6f:2f:ad: 58:cb:52:69:e0:7d:3c:e0:75:7b:ac:24:fe:bd:03: 24:bd:b2:1e:89:1b:7a:da:aa:8a:50:16:89:7a:9a: ea:86:c1:9a:c0:35:05:bb:f5:36:30:6e:76:76:06: e3:30:b8:9d:7b:12:f5:30:34:57:f0:72:91:d3:5e: 3e:5f:c7:83:e2:e3:31:31:25:fa:bf:e5:d1:ef:66: 79:f2:10:cb:cb:30:e8:4f:3e:60:bf:ad:98:4d:e7: 62:ef:e5:07:81:ad:3c:95:41:9f:9f:91:de:b9:8e: 7f:d9:4e:b4:fe:a9:6d:38:1b:2a:3f:36:dc:7a:4a: 38:19:c6:bf:3d:69:c9:b6:16:4d:e2:89:df:49:29: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:73:86:0F:8E:9F:D4:66:42:40:04:73:42:D0:0A:2D:EF:31:E7:3D X509v3 Authority Key Identifier: keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:94:6c:07:87:54:5f:70:95:97:62:fc:c1:03:80:c2:64:7c: 55:96:97:97:cc:c8:99:1b:61:b8:34:eb:cc:09:f9:26:32:29: c9:78:79:61:1b:12:5d:29:68:02:48:9b:32:a7:a2:46:b7:86: b6:02:de:76:8a:56:cb:64:13:a9:ff:cd:53:4d:b3:0e:bd:82: f5:d4:be:98:11:d5:f5:18:6f:c0:d4:f1:00:ac:46:fa:16:b0: 13:6f:e5:b7:f6:cf:e3:3a:82:a4:08:c5:cb:64:07:c4:c0:ae: 43:e4:b6:72:99:5f:5d:fb:ff:7d:00:e6:01:16:77:f7:f0:cf: 2c:56:c6:6f:49:5c:07:26:ef:79:f5:d4:75:7d:9f:a9:fc:3d: d4:c1:6c:03:6d:92:0a:c3:90:48:b1:3f:d4:5f:48:21:e2:91: 67:e1:1d:92:83:55:bf:f5:03:ea:b7:ff:02:17:f4:b3:d0:ce: 46:45:17:97:b3:bc:91:8c:96:ed:4d:5c:66:27:07:ff:23:70: 4a:03:07:17:a9:60:ae:f1:fe:3d:7e:99:d9:e3:8c:20:07:9e: 56:d7:74:17:df:50:ad:19:a1:5d:65:d7:02:54:f9:a9:38:f8: ba:b4:b6:be:5b:41:ba:9a:f3:30:33:43:99:a2:dd:fd:65:f5: ed:cd:e4:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3 MTkzQThCQzIwHhcNMjUwNzIyMTkzNzE3WhcNMjUwNzI5MTkzNzE3WjAYMRYwFAYD VQQDEw02ODdmZTg2ZC03ZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Gvxsc4G1l8PRUIBok80a5Xx1A/Ke5OPD23k1qZpz60+RKTqa6H478pRSiZ2 nJzlJQV17JoK201+cgw9akHxESZol0eHVROHZvkVsItc89EFuMpP7AblKybBuptq 2j2Wn0k4cpGVyHE3iz4uontXOESS6e9vL61Yy1Jp4H084HV7rCT+vQMkvbIeiRt6 2qqKUBaJeprqhsGawDUFu/U2MG52dgbjMLidexL1MDRX8HKR014+X8eD4uMxMSX6 v+XR72Z58hDLyzDoTz5gv62YTedi7+UHga08lUGfn5HeuY5/2U60/qltOBsqPzbc eko4Gca/PWnJthZN4onfSSkqkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNzhg+O n9RmQkAEc0LQCi3vMec9MB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5 N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi SmNNV2taTFN2YzF4azZpOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjlGwHh1RfcJWXYvzBA4DCZHxVlpeXzMiZG2G4NOvMCfkmMinJeHlh GxJdKWgCSJsyp6JGt4a2At52ilbLZBOp/81TTbMOvYL11L6YEdX1GG/A1PEArEb6 FrATb+W39s/jOoKkCMXLZAfEwK5D5LZymV9d+/99AOYBFnf38M8sVsZvSVwHJu95 9dR1fZ+p/D3UwWwDbZIKw5BIsT/UX0gh4pFn4R2Sg1W/9QPqt/8CF/Sz0M5GRReX s7yRjJbtTVxmJwf/I3BKAwcXqWCu8f49fpnZ44wgB55W13QX31CtGaFdZdcCVPmp OPi6tLa+W0G6mvMwM0OZot39ZfXtzeR0 -----END CERTIFICATE-----Generated at Wed Jul 23 06:27:23 2025 by rpki-client