$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft File: 0Eyx4nFXho90821weRXZ1_CXyQg.mft (raw, json) Hash identifier: GOYNAGy+jyYZy2nnPadJrQUdaVM+0Ra0OXCvC2ka10U= Subject key identifier: 34:A8:1B:DE:0A:3F:6B:72:B6:5D:B4:28:1A:D5:C9:91:2D:1A:CC:E6 Authority key identifier: D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 Certificate issuer: /CN=A91D5AA8/serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft Manifest number: 01DC Signing time: Sat 19 Jul 2025 02:59:12 +0000 Manifest this update: Sat 19 Jul 2025 02:59:11 +0000 Manifest next update: Sat 26 Jul 2025 02:59:11 +0000 Files and hashes: 1: 0Eyx4nFXho90821weRXZ1_CXyQg.crl (hash: Kw99+EgLJk3dR/Qv+LzFZbIt/h5X4AOwNV8gn4cz+K8=) 2: 994AC0903E1E11EFB5BBDD3BC4F9AE02.roa (hash: xyd0ZZrH0VHNsmRtbjg/g57C4k5UyZ1DuB1/mljU4Qg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5AA8, serialNumber=D04CB1E27157868F74F36D707915D9D7F097C908 Validity Not Before: Jul 19 02:59:11 2025 GMT Not After : Jul 26 02:59:11 2025 GMT Subject: CN=687b09ff-beb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:60:cf:00:c1:91:81:db:bb:32:a8:3e:c5:01: 5f:d7:95:8a:a0:28:b6:7b:27:7a:f2:22:a8:52:10: c8:66:e3:e3:63:05:c9:91:a5:a0:aa:65:f4:37:b0: 4b:1e:b7:b0:9b:14:cb:a4:b6:94:d8:3c:d5:d2:b6: c0:be:cd:a4:b7:f0:cd:f5:44:18:38:28:f6:04:f6: 47:d0:a9:57:00:10:3e:13:a1:8d:70:eb:d8:7a:c7: 7a:7d:60:6f:d0:79:a4:32:87:b0:0f:d7:50:cd:03: 14:73:b6:cd:b7:67:f9:78:ea:55:60:7e:82:b2:9c: 8c:f5:6f:3d:d9:db:53:d6:f1:5b:35:11:ed:3b:41: ef:75:0d:83:21:ea:67:1e:66:29:6f:c1:8e:8a:3d: 4c:c0:d1:6b:f3:c1:a2:44:51:eb:dd:0a:17:4b:ad: f6:d4:a8:07:04:ef:07:c4:48:23:4b:0f:78:55:de: f3:2c:65:05:19:57:7e:ea:e3:5e:88:dd:5f:0a:80: 6e:65:bd:32:b5:78:ab:b4:18:96:07:f3:93:00:63: 69:ff:a3:51:9d:7e:2c:5c:d5:bc:a3:8d:d3:6b:5c: 02:3f:a3:a2:bc:23:4c:84:84:55:c9:db:c7:2c:66: 8f:90:1a:d9:9d:82:a0:78:4a:ff:f3:c1:d5:75:7f: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A8:1B:DE:0A:3F:6B:72:B6:5D:B4:28:1A:D5:C9:91:2D:1A:CC:E6 X509v3 Authority Key Identifier: keyid:D0:4C:B1:E2:71:57:86:8F:74:F3:6D:70:79:15:D9:D7:F0:97:C9:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Eyx4nFXho90821weRXZ1_CXyQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5AA8/2785991291EF11EDB06BAD1FC4F9AE02/0Eyx4nFXho90821weRXZ1_CXyQg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6a:74:9a:6e:42:ac:e6:88:5c:86:79:e7:99:3e:5c:f4:a1: 20:b0:3c:c0:0a:d8:30:54:94:d3:68:d7:10:b3:be:8d:49:b9: f0:84:1c:88:4f:a1:36:a0:15:09:0b:bc:e2:24:b9:49:73:fe: 16:8a:fe:c4:4e:de:7e:b6:d0:7a:25:5d:bb:9c:ed:01:5a:bb: 81:7b:f0:18:fd:52:a0:1e:5a:5c:1e:17:5c:33:74:dc:c0:0f: b1:a6:6d:e5:c7:d9:70:da:99:fc:da:20:56:3a:3d:6f:1f:1d: de:1e:82:00:dc:b5:43:4d:4d:a1:c2:20:8d:19:2b:70:d0:14: 96:0d:a6:6e:2c:b8:70:fd:6e:c6:08:a5:75:bc:f6:7a:d1:50: 27:de:64:4a:3d:20:13:ff:89:87:2e:09:41:87:cf:4f:03:c3: 3b:3b:3b:62:f7:23:0c:e1:dd:02:d0:d4:34:85:ab:3f:e0:88: 58:20:67:f7:da:fc:cf:71:a9:dc:00:10:c5:29:bf:b3:3d:5e: ab:93:91:2d:ec:08:0d:67:4b:d7:4d:08:51:b1:c3:42:1b:3b: 5e:e2:a9:5c:06:e1:6a:20:f1:af:6f:31:79:6e:ea:ff:0b:1b: 26:a9:0b:62:16:9a:b2:b3:52:04:8e:e7:c3:32:8e:9a:73:27: 5c:4c:5f:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVBQTgxMTAvBgNVBAUTKEQwNENCMUUyNzE1Nzg2OEY3NEYzNkQ3MDc5MTVEOUQ3 RjA5N0M5MDgwHhcNMjUwNzE5MDI1OTExWhcNMjUwNzI2MDI1OTExWjAYMRYwFAYD VQQDEw02ODdiMDlmZi1iZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumDPAMGRgdu7Mqg+xQFf15WKoCi2eyd68iKoUhDIZuPjYwXJkaWgqmX0N7BL HrewmxTLpLaU2DzV0rbAvs2kt/DN9UQYOCj2BPZH0KlXABA+E6GNcOvYesd6fWBv 0HmkMoewD9dQzQMUc7bNt2f5eOpVYH6CspyM9W892dtT1vFbNRHtO0HvdQ2DIepn HmYpb8GOij1MwNFr88GiRFHr3QoXS6321KgHBO8HxEgjSw94Vd7zLGUFGVd+6uNe iN1fCoBuZb0ytXirtBiWB/OTAGNp/6NRnX4sXNW8o43Ta1wCP6OivCNMhIRVydvH LGaPkBrZnYKgeEr/88HVdX9ogQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDSoG94K P2tytl20KBrVyZEtGszmMB8GA1UdIwQYMBaAFNBMseJxV4aPdPNtcHkV2dfwl8kI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUFBOC8yNzg1OTkxMjkx RUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhvOTA4MjF3ZVJYWjFfQ1h5 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBFeXg0bkZYaG85MDgyMXdlUlhaMV9DWHlRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUFBOC8yNzg1OTkxMjkxRUYxMUVEQjA2QkFEMUZDNEY5QUUwMi8wRXl4NG5GWGhv OTA4MjF3ZVJYWjFfQ1h5UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdanSabkKs5ohchnnnmT5c9KEgsDzACtgwVJTTaNcQs76NSbnwhByI T6E2oBUJC7ziJLlJc/4Wiv7ETt5+ttB6JV27nO0BWruBe/AY/VKgHlpcHhdcM3Tc wA+xpm3lx9lw2pn82iBWOj1vHx3eHoIA3LVDTU2hwiCNGStw0BSWDaZuLLhw/W7G CKV1vPZ60VAn3mRKPSAT/4mHLglBh89PA8M7Ozti9yMM4d0C0NQ0has/4IhYIGf3 2vzPcancABDFKb+zPV6rk5Et7AgNZ0vXTQhRscNCGzte4qlcBuFqIPGvbzF5bur/ CxsmqQtiFpqys1IEjufDMo6acydcTF8e -----END CERTIFICATE-----Generated at Sun Jul 20 06:26:03 2025 by rpki-client