$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft File: EnvYBqI30MrekRgrn8cmZZvi73E.mft (raw, json) Hash identifier: H8evsCdANEJudl1v6l7h1dWS458cSVxLJoGtFraYoo4= Subject key identifier: 3E:CE:AE:39:4A:51:49:B3:5C:5C:61:EE:3C:26:9A:5D:7F:36:EF:16 Authority key identifier: 12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71 Certificate issuer: /CN=A91D3876/serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71 Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft Manifest number: 064E Signing time: Sun 20 Jul 2025 22:47:57 +0000 Manifest this update: Sun 20 Jul 2025 22:47:56 +0000 Manifest next update: Sun 27 Jul 2025 22:47:56 +0000 Files and hashes: 1: EnvYBqI30MrekRgrn8cmZZvi73E.crl (hash: fkA/Icu7H0aGCSI/Qjs0TlTZHxEDw8FeKNmzNkZzJBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.crl rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3876, serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71 Validity Not Before: Jul 20 22:47:56 2025 GMT Not After : Jul 27 22:47:56 2025 GMT Subject: CN=687d721c-aa58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:59:51:00:a1:f9:5e:14:7d:8d:39:79:56:ec: 5b:5f:82:1c:d5:ba:df:5d:21:5c:65:d8:76:38:93: d3:65:1f:07:0f:f4:c1:17:24:19:3e:a0:80:c8:b7: a3:fa:10:20:98:3b:54:b2:f6:90:31:ca:c9:3c:ae: ea:d0:86:87:d5:fe:cf:9a:e7:27:46:9a:dd:6c:27: 77:7f:84:c9:24:27:c3:c8:3b:1a:53:1a:bb:7f:83: 52:ca:43:9d:75:a9:0e:9a:1e:84:c3:b0:2b:a3:24: 19:ff:ba:66:5a:2c:e3:bd:14:c5:7d:af:7a:72:ec: e4:1e:1d:8b:3f:81:0e:d5:89:34:36:86:02:4a:bd: 52:66:dc:14:56:ad:e5:93:e5:ee:8e:f8:6d:3d:10: ab:ea:8f:0f:3a:6a:43:4a:ef:ad:0c:89:b6:eb:37: 59:55:ca:a9:6b:92:94:69:93:a9:0a:54:f3:7d:f2: 02:9d:f6:c5:22:4a:cf:ec:ea:cf:96:64:41:9d:47: 25:59:a7:63:e8:3d:44:1e:fd:d0:8b:65:38:d7:f9: 56:c0:fb:7e:e6:0a:d1:5d:93:5f:58:8d:44:bf:08: e9:5d:6c:34:2d:07:1e:40:1d:b4:14:56:47:dd:42: de:ff:48:9f:d8:7e:2c:fa:ae:fa:ae:d2:19:c4:20: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CE:AE:39:4A:51:49:B3:5C:5C:61:EE:3C:26:9A:5D:7F:36:EF:16 X509v3 Authority Key Identifier: keyid:12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:3a:48:ec:d1:7f:07:6c:8c:31:9b:25:40:b9:4a:14:ba:b1: 0b:6d:ce:cc:28:a8:db:3d:b6:30:b0:79:a8:0c:0e:c2:ce:c3: e3:93:98:67:ad:01:95:53:50:d2:38:62:45:09:53:f3:9f:c6: 31:af:94:c8:d8:98:d1:7e:26:2b:b4:07:87:a4:40:0a:af:89: e4:51:4c:e9:f3:96:4b:5b:39:da:aa:64:59:2b:98:74:34:69: 64:b3:f4:fb:e6:7f:8c:79:ac:21:1c:aa:a4:7b:c1:94:0d:95: 2b:24:ea:9d:75:0b:3f:5e:64:84:96:f1:3b:b6:35:3f:1c:1c: f1:73:c5:b2:f1:0d:30:8a:3a:21:95:74:93:80:6d:69:6b:cb: dd:df:7a:41:c1:49:77:1b:06:8d:22:66:83:3e:7f:ce:d7:94: c2:c7:30:f3:d9:c2:7a:09:36:7f:56:37:e6:32:df:db:6e:49: 83:1b:81:ff:22:59:94:72:d9:26:d3:6f:98:5d:46:22:5d:5a: 0c:d5:d6:d5:cb:2b:f1:e6:01:db:9c:e5:57:61:5c:1f:3e:4e: f2:44:08:00:b2:45:fe:82:25:18:d1:c7:99:52:75:de:23:a1: e6:af:c6:5d:bd:22:91:04:4b:00:0b:d3:81:83:1a:68:ae:54: 89:10:de:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM4NzYxMTAvBgNVBAUTKDEyN0JEODA2QTIzN0QwQ0FERTkxMTgyQjlGQzcyNjY1 OUJFMkVGNzEwHhcNMjUwNzIwMjI0NzU2WhcNMjUwNzI3MjI0NzU2WjAYMRYwFAYD VQQDEw02ODdkNzIxYy1hYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1lRAKH5XhR9jTl5VuxbX4Ic1brfXSFcZdh2OJPTZR8HD/TBFyQZPqCAyLej +hAgmDtUsvaQMcrJPK7q0IaH1f7PmucnRprdbCd3f4TJJCfDyDsaUxq7f4NSykOd dakOmh6Ew7AroyQZ/7pmWizjvRTFfa96cuzkHh2LP4EO1Yk0NoYCSr1SZtwUVq3l k+XujvhtPRCr6o8POmpDSu+tDIm26zdZVcqpa5KUaZOpClTzffICnfbFIkrP7OrP lmRBnUclWadj6D1EHv3Qi2U41/lWwPt+5grRXZNfWI1EvwjpXWw0LQceQB20FFZH 3ULe/0if2H4s+q76rtIZxCDUuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7OrjlK UUmzXFxh7jwmml1/Nu8WMB8GA1UdIwQYMBaAFBJ72AaiN9DK3pEYK5/HJmWb4u9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzg3Ni8yNjJGN0FDQTk3 NzIxMUVCQkY2QTUzNjhDNEY5QUUwMi9FbnZZQnFJMzBNcmVrUmdybjhjbVpadmk3 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VudllCcUkzME1yZWtSZ3JuOGNtWlp2aTczRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mzg3Ni8yNjJGN0FDQTk3NzIxMUVCQkY2QTUzNjhDNEY5QUUwMi9FbnZZQnFJMzBN cmVrUmdybjhjbVpadmk3M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlOkjs0X8HbIwxmyVAuUoUurELbc7MKKjbPbYwsHmoDA7CzsPjk5hn rQGVU1DSOGJFCVPzn8Yxr5TI2JjRfiYrtAeHpEAKr4nkUUzp85ZLWznaqmRZK5h0 NGlks/T75n+MeawhHKqke8GUDZUrJOqddQs/XmSElvE7tjU/HBzxc8Wy8Q0wijoh lXSTgG1pa8vd33pBwUl3GwaNImaDPn/O15TCxzDz2cJ6CTZ/VjfmMt/bbkmDG4H/ IlmUctkm02+YXUYiXVoM1dbVyyvx5gHbnOVXYVwfPk7yRAgAskX+giUY0ceZUnXe I6Hmr8ZdvSKRBEsAC9OBgxporlSJEN4S -----END CERTIFICATE-----Generated at Mon Jul 21 07:17:11 2025 by rpki-client