$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft File: dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json) Hash identifier: KVp1Zt8YPz8kZq2D1YEljds818lSc3GXUbJu4UAmKb4= Subject key identifier: E2:9E:82:95:11:32:5A:EB:28:96:FC:7A:FF:91:34:E9:0F:0D:77:EA Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F Certificate issuer: /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Certificate serial: 05ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft Manifest number: 05E7 Signing time: Fri 18 Jul 2025 23:17:48 +0000 Manifest this update: Fri 18 Jul 2025 23:17:47 +0000 Manifest next update: Fri 25 Jul 2025 23:17:47 +0000 Files and hashes: 1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: ZiNZFSgjQLU4bPZTR5nriAjJwqj19xswlu6Yipb4LHg=) 2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: YxPwMr4MBHxV8GdUwwcGZ9ThhhxxM846OSPi1905C3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1517 (0x5ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F Validity Not Before: Jul 18 23:17:47 2025 GMT Not After : Jul 25 23:17:47 2025 GMT Subject: CN=687ad61c-7fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:42:23:b1:94:8a:3e:cf:70:f1:2e:af:43: 56:be:0d:6d:c9:26:a2:71:1f:62:57:fc:07:6a:9e: ec:5f:ba:c6:d9:04:4a:51:ea:e9:60:d7:aa:6c:ed: 2b:47:fd:de:bb:d9:48:13:e2:85:91:76:9d:d5:3a: ae:2a:39:96:58:9e:6f:68:f1:7a:e9:78:19:6f:43: 2d:2d:db:57:76:95:4f:4c:ec:bd:3a:6b:fb:fc:62: 52:42:c2:7b:d6:89:fc:ba:9a:c4:b6:30:cf:11:6c: 52:2c:3f:19:5d:0f:39:10:5c:cf:60:fe:b8:37:ef: 6d:0c:11:2f:82:b1:d7:86:4c:f9:f2:73:b0:a2:0a: 16:ee:c6:a6:bb:dc:fa:98:e4:0a:b0:33:f8:da:f7: e3:54:0f:d6:33:0e:91:dc:03:8c:6b:27:75:af:ae: 6f:be:b6:de:65:f5:52:06:2d:70:87:53:47:b4:5d: 07:c5:a7:70:e2:df:70:ec:9f:e2:db:3a:5c:9e:70: 68:d5:df:b3:0b:dd:0f:0f:9a:2e:c6:76:70:de:df: ba:3e:16:cc:49:e8:72:be:92:22:06:f9:cb:24:a6: d7:be:33:6a:8c:8d:99:3a:1e:22:84:1e:21:7a:ed: 14:5e:e3:b4:c5:97:78:2d:ce:40:e6:e0:72:ae:00: 34:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9E:82:95:11:32:5A:EB:28:96:FC:7A:FF:91:34:E9:0F:0D:77:EA X509v3 Authority Key Identifier: keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3c:65:49:29:1a:43:9f:3d:ee:f1:95:29:0b:45:0b:a8:57: 21:68:10:c4:13:2a:4d:74:a1:d0:27:d2:52:82:b8:03:27:84: e2:15:ee:16:d7:4f:0b:5f:a9:48:9e:ad:77:6e:29:cb:bf:3b: 89:2a:39:b6:20:01:3e:5a:ad:d0:30:9c:ed:9f:00:a7:8d:a7: 8f:c3:93:cb:66:d6:a4:bb:d3:0a:2c:4f:57:a4:00:bc:b4:e7: ff:36:20:7b:6d:f8:e2:57:2b:cb:6a:36:b8:e3:9f:20:49:37: 07:17:f5:81:95:ce:40:a7:23:17:94:a5:2c:3d:78:43:fb:e1: 33:8b:f3:ba:2a:9d:fc:2d:57:f6:55:88:7b:b8:0b:50:09:dc: c1:7e:14:ab:82:1d:6c:8e:f8:36:69:53:8b:bb:d1:d0:76:58: 4e:7c:45:20:81:8b:05:13:57:d3:ba:d0:86:24:78:26:9a:39: 20:f0:71:cc:c7:c0:b6:ac:30:c0:6b:cd:e4:7a:c9:81:36:f3: 89:30:96:8d:c2:08:02:19:62:4e:26:cb:fc:16:8f:3a:17:e6: 36:3f:b6:3b:3e:ce:d4:2f:17:93:48:2f:00:67:93:50:a6:e6: 5c:05:20:eb:2f:20:bc:a3:10:bd:40:e5:ae:71:37:dd:e0:13: f5:c4:5c:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQUYxMTAvBgNVBAUTKDc0NDgwRjM3QzRCNjU3NjJBOEZEODFCQzdFREJFQkRF NkM4MTY0NUYwHhcNMjUwNzE4MjMxNzQ3WhcNMjUwNzI1MjMxNzQ3WjAYMRYwFAYD VQQDEw02ODdhZDYxYy03ZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUFCI7GUij7PcPEur0NWvg1tySaicR9iV/wHap7sX7rG2QRKUerpYNeqbO0r R/3eu9lIE+KFkXad1TquKjmWWJ5vaPF66XgZb0MtLdtXdpVPTOy9Omv7/GJSQsJ7 1on8uprEtjDPEWxSLD8ZXQ85EFzPYP64N+9tDBEvgrHXhkz58nOwogoW7samu9z6 mOQKsDP42vfjVA/WMw6R3AOMayd1r65vvrbeZfVSBi1wh1NHtF0Hxadw4t9w7J/i 2zpcnnBo1d+zC90PD5ouxnZw3t+6PhbMSehyvpIiBvnLJKbXvjNqjI2ZOh4ihB4h eu0UXuO0xZd4Lc5A5uByrgA03QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKegpUR MlrrKJb8ev+RNOkPDXfqMB8GA1UdIwQYMBaAFHRIDzfEtldiqP2BvH7b695sgWRf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBRi84Q0I4NTQ1NkJE MUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYyS29fWUc4ZnR2cjNteUJa RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RFZ1BOOFMyVjJLb19ZRzhmdHZyM215QlpGOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFBRi84Q0I4NTQ1NkJEMUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYy S29fWUc4ZnR2cjNteUJaRjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArPGVJKRpDnz3u8ZUpC0ULqFchaBDEEypNdKHQJ9JSgrgDJ4TiFe4W 108LX6lInq13binLvzuJKjm2IAE+Wq3QMJztnwCnjaePw5PLZtaku9MKLE9XpAC8 tOf/NiB7bfjiVyvLaja4458gSTcHF/WBlc5ApyMXlKUsPXhD++Ezi/O6Kp38LVf2 VYh7uAtQCdzBfhSrgh1sjvg2aVOLu9HQdlhOfEUggYsFE1fTutCGJHgmmjkg8HHM x8C2rDDAa83kesmBNvOJMJaNwggCGWJOJsv8Fo86F+Y2P7Y7Ps7ULxeTSC8AZ5NQ puZcBSDrLyC8oxC9QOWucTfd4BP1xFxu -----END CERTIFICATE-----Generated at Sun Jul 20 06:14:53 2025 by rpki-client