$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: rBgCGIMs5jaPcrn6Ap98FVx/PJhDQYvQm/5E4yMSKAI= Subject key identifier: 99:11:AD:11:23:55:5C:87:C4:B0:04:86:25:C9:76:44:F0:26:B5:59 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 0380 Signing time: Sat 19 Jul 2025 01:16:52 +0000 Manifest this update: Sat 19 Jul 2025 01:16:51 +0000 Manifest next update: Sat 26 Jul 2025 01:16:51 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: fDrQ1i38Zht7nwbvvLHozw0apFRcRiDr6l5HP0xe2XQ=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Jul 19 01:16:51 2025 GMT Not After : Jul 26 01:16:51 2025 GMT Subject: CN=687af203-fde5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:5a:94:a7:a2:56:36:15:b5:cb:0a:8d:eb: 1c:90:2b:f3:e4:a7:4a:37:47:7b:68:dc:d7:f6:f1: f0:59:ec:9b:ae:2a:3c:57:a1:d9:34:97:02:04:aa: 35:c2:fc:d6:80:c8:a1:9a:4b:ee:3a:29:9a:cf:dd: bc:2b:52:4a:af:32:9a:60:7b:1a:d7:f0:3b:a9:d4: 05:db:c8:5f:2c:15:3c:8b:0b:b2:21:26:ff:f6:67: 44:2c:46:de:ed:11:d1:a3:58:9f:8b:06:ee:55:05: 74:37:7e:75:00:cd:32:f0:bd:f3:2c:e1:21:05:48: 0e:2a:6e:48:3e:ba:60:0b:05:94:7c:3b:1b:9a:4c: d7:ea:4c:17:25:37:0e:e5:34:c5:4f:a8:03:c9:8c: fe:78:5b:2d:8d:3b:93:b6:4c:60:b7:70:9d:74:4e: 24:62:65:8b:90:b5:e0:59:db:33:04:15:bc:ba:24: 3f:11:96:0e:df:d4:d3:cc:13:d1:9e:5a:fc:b2:4b: 66:a1:5d:cc:1e:e4:fa:b2:59:42:dc:ea:61:22:25: 54:a8:de:a6:c6:ce:1d:08:d9:4e:f2:46:f9:63:13: aa:ce:b4:15:2e:06:de:a5:cd:c8:8a:0b:b1:b3:d2: 26:6a:e9:0e:59:01:8a:a4:bb:1e:18:94:f8:cb:ed: d5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:11:AD:11:23:55:5C:87:C4:B0:04:86:25:C9:76:44:F0:26:B5:59 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:8a:b8:0c:a4:72:34:60:e0:0a:de:1c:0e:bc:18:3b:f3:1b: 8a:7e:72:45:82:60:24:aa:8a:6d:2f:b4:2b:c3:9a:0a:cd:d2: 2d:f5:51:dc:78:78:3a:cb:aa:5a:6f:46:ba:53:7c:51:3a:09: e2:a8:8e:98:ea:1f:5f:a2:35:ec:0c:ef:b5:ff:85:20:db:76: f7:df:60:5f:97:5b:19:2d:c8:2d:12:56:5e:2c:37:64:70:c4: 24:53:b8:fe:e8:85:44:74:d0:8c:4d:49:6f:e4:13:d4:3d:5c: eb:56:6b:75:85:3f:4d:32:f5:d1:65:4b:4d:eb:17:96:c6:36: a3:af:21:f4:32:2c:3e:ce:9f:67:1f:a5:ad:77:1c:47:9c:c4: 28:42:8f:66:45:80:e3:1e:a1:4f:68:f9:99:73:c5:42:1c:01: 92:ca:6b:6e:6c:41:a6:0f:90:f8:ee:ec:76:aa:66:7c:68:85: 95:6e:b9:b1:8f:5f:7f:0a:5c:c2:52:6f:3c:11:ba:58:76:de: 09:ae:89:ba:14:c3:68:8b:98:85:db:7c:4f:e2:14:e1:7f:85: e0:52:be:46:86:09:83:63:3a:ad:38:98:0a:80:47:65:6d:c7: 78:bf:66:dc:b4:cd:32:a8:7d:49:4c:86:b0:21:9f:c1:80:f6: 04:ce:ca:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjUwNzE5MDExNjUxWhcNMjUwNzI2MDExNjUxWjAYMRYwFAYD VQQDEw02ODdhZjIwMy1mZGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArT1alKeiVjYVtcsKjesckCvz5KdKN0d7aNzX9vHwWeybrio8V6HZNJcCBKo1 wvzWgMihmkvuOimaz928K1JKrzKaYHsa1/A7qdQF28hfLBU8iwuyISb/9mdELEbe 7RHRo1ifiwbuVQV0N351AM0y8L3zLOEhBUgOKm5IPrpgCwWUfDsbmkzX6kwXJTcO 5TTFT6gDyYz+eFstjTuTtkxgt3CddE4kYmWLkLXgWdszBBW8uiQ/EZYO39TTzBPR nlr8sktmoV3MHuT6sllC3OphIiVUqN6mxs4dCNlO8kb5YxOqzrQVLgbepc3Iigux s9ImaukOWQGKpLseGJT4y+3VzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkRrREj VVyHxLAEhiXJdkTwJrVZMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByirgMpHI0YOAK3hwOvBg78xuKfnJFgmAkqoptL7Qrw5oKzdIt9VHc eHg6y6pab0a6U3xROgniqI6Y6h9fojXsDO+1/4Ug23b332Bfl1sZLcgtElZeLDdk cMQkU7j+6IVEdNCMTUlv5BPUPVzrVmt1hT9NMvXRZUtN6xeWxjajryH0Miw+zp9n H6WtdxxHnMQoQo9mRYDjHqFPaPmZc8VCHAGSymtubEGmD5D47ux2qmZ8aIWVbrmx j19/ClzCUm88EbpYdt4Jrom6FMNoi5iF23xP4hThf4XgUr5GhgmDYzqtOJgKgEdl bcd4v2bctM0yqH1JTIawIZ/BgPYEzsow -----END CERTIFICATE-----Generated at Sun Jul 20 11:30:26 2025 by rpki-client