$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft File: ElYBj-blOMQA9j_H4SHDpwHy3qk.mft (raw, json) Hash identifier: iy82QFqCdgyWNFJRa3U4QshM9fsOAGk6xGPN0xrNUa4= Subject key identifier: C2:B4:3A:73:F9:C4:1B:A0:72:CC:1C:72:03:D8:45:04:A8:74:E1:E4 Authority key identifier: 12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9 Certificate issuer: /CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9 Certificate serial: 09FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft Manifest number: 09F6 Signing time: Tue 22 Jul 2025 20:08:07 +0000 Manifest this update: Tue 22 Jul 2025 20:08:06 +0000 Manifest next update: Tue 29 Jul 2025 20:08:06 +0000 Files and hashes: 1: ElYBj-blOMQA9j_H4SHDpwHy3qk.crl (hash: evrVHNKDcLfBu7Bf+Ae65z8EstzoyvbpLCX/gU2SV5M=) 2: 542CA96A0B1911EB92F1EB12C4F9AE02.roa (hash: h8TCOQAYkMWzOV4xPaOkVqyIiRzREyWEnJXkzl12ups=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2558 (0x9fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9 Validity Not Before: Jul 22 20:08:06 2025 GMT Not After : Jul 29 20:08:06 2025 GMT Subject: CN=687fefa7-c5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:c6:2c:ed:97:6a:0a:57:5c:2f:47:d8:f4: 9e:2e:c3:55:31:66:bc:33:2d:d9:6d:0a:15:96:86: 64:1f:5a:4a:a7:f8:42:31:32:b9:b0:22:36:47:36: d1:16:66:23:bb:c4:58:13:28:8c:2f:34:bd:62:33: 5a:e8:36:50:70:df:35:a2:71:cc:0c:8a:96:b6:38: 3d:50:10:7b:f4:c7:30:19:ec:07:0e:7a:11:27:82: 68:f2:40:ca:40:91:b1:ff:d9:b9:d2:e7:40:da:df: 73:9d:5b:8f:eb:3e:d2:9d:ff:a8:09:fb:da:2a:5d: 82:bc:28:dd:06:af:c8:c6:16:80:b4:55:e8:f6:bc: b9:44:65:d6:22:c3:5f:2d:48:70:75:e0:b3:4d:75: 82:92:84:7e:2b:1f:64:62:d7:ff:d2:90:5f:6e:c3: 39:de:13:73:af:f7:8d:43:7a:86:fb:e5:e1:11:43: 86:28:43:2a:d7:49:44:9b:4f:8c:76:8a:0c:1d:bf: 63:24:0b:74:6d:b4:a2:33:a0:96:07:c8:e2:af:bf: f6:14:63:0c:ca:ba:3c:36:aa:ed:d0:89:98:e0:85: 4a:be:4d:b7:1f:9d:76:2f:bd:3d:95:25:49:cf:72: 4a:5a:cf:77:a1:35:04:e6:ce:f0:94:67:a9:48:49: 74:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B4:3A:73:F9:C4:1B:A0:72:CC:1C:72:03:D8:45:04:A8:74:E1:E4 X509v3 Authority Key Identifier: keyid:12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:01:aa:f6:a0:a0:11:7e:d9:11:c0:87:60:10:b9:37:da:ea: a8:25:a4:c2:98:2d:a0:06:5a:c1:3a:cf:6c:c0:fa:48:7c:de: 5e:b8:8f:50:88:87:6e:42:47:91:e5:73:03:92:a0:db:e8:9a: 3f:a4:81:58:d9:32:1d:f8:37:29:ee:76:7e:2c:84:07:59:3f: 40:af:a6:4a:3b:64:2c:ae:9e:24:c8:71:89:18:7a:f1:55:41: c4:63:7b:44:22:be:90:4b:38:3e:0d:93:3a:7b:9e:d2:89:d1: fe:b7:cf:72:89:0c:73:1f:f6:76:e9:30:5b:78:c4:f7:99:f0: ce:d3:3c:51:ba:b4:f0:4a:0c:b6:bc:32:a1:9b:51:5c:d4:aa: e3:75:2d:a8:b5:d6:36:a5:94:f4:15:b4:58:15:03:cc:0f:4a: 93:cc:b7:0c:eb:e0:ff:e3:70:c6:26:24:d0:44:92:06:6e:a2: b0:32:93:ce:10:b8:c1:1e:84:87:81:91:d3:01:ba:ba:bc:d4: 54:0b:1b:a1:80:4a:fa:97:11:23:85:ba:98:b6:6a:7d:ab:06: ae:20:2b:cb:93:4a:f4:5d:a8:f4:4b:68:e8:cf:b7:b0:1e:38: f2:9b:54:c7:d9:f8:70:35:88:4f:c0:30:3c:21:be:ed:08:7a: 6c:81:c8:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDEyNTYwMThGRTZFNTM4QzQwMEY2M0ZDN0UxMjFDM0E3 MDFGMkRFQTkwHhcNMjUwNzIyMjAwODA2WhcNMjUwNzI5MjAwODA2WjAYMRYwFAYD VQQDEw02ODdmZWZhNy1jNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03vGLO2XagpXXC9H2PSeLsNVMWa8My3ZbQoVloZkH1pKp/hCMTK5sCI2RzbR FmYju8RYEyiMLzS9YjNa6DZQcN81onHMDIqWtjg9UBB79McwGewHDnoRJ4Jo8kDK QJGx/9m50udA2t9znVuP6z7Snf+oCfvaKl2CvCjdBq/IxhaAtFXo9ry5RGXWIsNf LUhwdeCzTXWCkoR+Kx9kYtf/0pBfbsM53hNzr/eNQ3qG++XhEUOGKEMq10lEm0+M dooMHb9jJAt0bbSiM6CWB8jir7/2FGMMyro8Nqrt0ImY4IVKvk23H512L709lSVJ z3JKWs93oTUE5s7wlGepSEl0aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMK0OnP5 xBugcswccgPYRQSodOHkMB8GA1UdIwQYMBaAFBJWAY/m5TjEAPY/x+Ehw6cB8t6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81QzhDQjRENjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9FbFlCai1ibE9NUUE5al9INFNIRHB3SHkz cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VsWUJqLWJsT01RQTlqX0g0U0hEcHdIeTNxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81QzhDQjRENjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9FbFlCai1ibE9N UUE5al9INFNIRHB3SHkzcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxAar2oKARftkRwIdgELk32uqoJaTCmC2gBlrBOs9swPpIfN5euI9Q iIduQkeR5XMDkqDb6Jo/pIFY2TId+Dcp7nZ+LIQHWT9Ar6ZKO2Qsrp4kyHGJGHrx VUHEY3tEIr6QSzg+DZM6e57SidH+t89yiQxzH/Z26TBbeMT3mfDO0zxRurTwSgy2 vDKhm1Fc1KrjdS2otdY2pZT0FbRYFQPMD0qTzLcM6+D/43DGJiTQRJIGbqKwMpPO ELjBHoSHgZHTAbq6vNRUCxuhgEr6lxEjhbqYtmp9qwauICvLk0r0Xaj0S2joz7ew Hjjym1TH2fhwNYhPwDA8Ib7tCHpsgchi -----END CERTIFICATE-----Generated at Thu Jul 24 14:42:28 2025 by rpki-client