$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft File: ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft (raw, json) Hash identifier: 8wWuyAsYkJiquPGWQgmYyfj1149xlhO36YlTGm8rCIM= Subject key identifier: 6D:BA:92:FE:62:83:98:02:F6:96:E3:65:BE:9A:11:77:09:8F:FE:35 Authority key identifier: 7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D Certificate issuer: /CN=A91E782F/serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft Manifest number: BE Signing time: Sat 19 Jul 2025 06:03:46 +0000 Manifest this update: Sat 19 Jul 2025 06:03:46 +0000 Manifest next update: Sat 26 Jul 2025 06:03:46 +0000 Files and hashes: 1: ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl (hash: hCJCdDPIXqzKAtXakGIOxuKOZYrCWhXVIjNn/vEQs7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=7A9FF864C50318067130588E6DBA928BA1C03A5D Validity Not Before: Jul 19 06:03:46 2025 GMT Not After : Jul 26 06:03:46 2025 GMT Subject: CN=687b3542-c0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:59:10:6b:35:e7:2f:d3:44:30:f5:9f:fe: 3c:bd:ca:ce:84:10:28:7a:cb:a2:7e:3a:99:25:0d: e9:e0:ce:05:5f:f2:b1:0e:b6:c1:ef:b5:41:bf:70: 9b:50:f0:24:fe:2d:3d:9c:bf:68:e4:31:62:95:fa: 92:08:e8:07:e2:3f:b8:ee:aa:19:43:b7:56:f3:49: 4b:dd:76:6f:0d:83:c5:51:05:e2:a8:bd:69:42:52: 17:cf:b5:13:db:51:7c:fc:95:64:e9:73:40:07:fc: c4:5b:34:71:55:20:38:74:35:16:9e:5c:13:58:f6: c0:1c:4d:34:69:f5:d7:d1:55:69:98:6e:d5:08:22: 86:ce:a4:83:85:ae:8f:11:64:2a:d1:38:6b:3a:db: b5:71:1d:8c:ce:e7:81:e2:57:dd:f7:5f:a4:f4:39: d5:4a:b3:7c:64:d5:ce:b8:b8:2a:34:5d:82:0f:01: e8:1f:ba:fb:c0:30:00:b4:94:5e:09:7a:81:6a:c1: 0b:f7:db:dd:7f:57:d0:61:88:c0:e6:66:57:0f:16: 99:fc:4c:d6:36:15:5b:99:90:4b:76:f1:66:ec:1e: e5:da:46:c3:e6:66:07:ae:83:f4:1c:5c:8f:13:de: a8:66:a6:35:b7:65:a3:2c:b5:47:0a:35:0d:1d:4d: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BA:92:FE:62:83:98:02:F6:96:E3:65:BE:9A:11:77:09:8F:FE:35 X509v3 Authority Key Identifier: keyid:7A:9F:F8:64:C5:03:18:06:71:30:58:8E:6D:BA:92:8B:A1:C0:3A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep_4ZMUDGAZxMFiObbqSi6HAOl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/764CA2D0407011EFBDA9D66FC4F9AE02/ep_4ZMUDGAZxMFiObbqSi6HAOl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:30:f0:e0:f1:13:c4:90:9c:29:29:8b:2c:ee:6c:da:56:7e: ea:19:01:a0:28:b7:e7:c9:7f:4d:72:96:72:11:89:af:2f:cc: fa:1f:04:09:d1:ae:8c:78:75:99:da:47:0d:9a:69:bc:69:fa: 27:55:c1:66:0c:78:0a:d1:87:1d:90:b9:16:77:73:f7:80:d1: 1c:8a:90:70:73:71:43:17:b6:30:db:8c:b0:0a:10:dc:c8:1a: d4:e0:db:6a:23:a5:af:9c:6e:32:6a:b2:99:a5:d1:ce:ab:33: 70:90:8f:48:3b:c4:ba:b1:fc:02:96:75:9d:6b:4c:76:41:3b: ff:d5:1c:b1:fa:64:9b:6a:b9:bd:6d:22:bf:0f:4f:fe:7d:e5: 66:2e:df:f2:a6:e5:0c:a2:3b:98:cd:d8:23:ba:fb:e8:31:6f: 36:45:28:f2:12:80:c8:c0:2a:3a:8c:04:6c:5a:90:c4:d9:71: 5a:d1:43:aa:b0:17:2e:a2:c8:3f:a8:c6:1c:49:8b:db:90:a9: fc:86:7d:ad:2b:b2:a3:d6:8a:61:70:83:ac:af:85:71:f8:5b: 9c:2c:2f:a2:4e:6c:bc:d2:dd:e9:2c:f0:f6:e0:20:1e:69:64: 6c:92:72:a1:d0:20:79:d1:1f:85:df:b3:2e:d1:92:8c:4d:60: 70:5c:86:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKDdBOUZGODY0QzUwMzE4MDY3MTMwNTg4RTZEQkE5MjhC QTFDMDNBNUQwHhcNMjUwNzE5MDYwMzQ2WhcNMjUwNzI2MDYwMzQ2WjAYMRYwFAYD VQQDEw02ODdiMzU0Mi1jMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApehZEGs15y/TRDD1n/48vcrOhBAoesuifjqZJQ3p4M4FX/KxDrbB77VBv3Cb UPAk/i09nL9o5DFilfqSCOgH4j+47qoZQ7dW80lL3XZvDYPFUQXiqL1pQlIXz7UT 21F8/JVk6XNAB/zEWzRxVSA4dDUWnlwTWPbAHE00afXX0VVpmG7VCCKGzqSDha6P EWQq0ThrOtu1cR2MzueB4lfd91+k9DnVSrN8ZNXOuLgqNF2CDwHoH7r7wDAAtJRe CXqBasEL99vdf1fQYYjA5mZXDxaZ/EzWNhVbmZBLdvFm7B7l2kbD5mYHroP0HFyP E96oZqY1t2WjLLVHCjUNHU2i6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG26kv5i g5gC9pbjZb6aEXcJj/41MB8GA1UdIwQYMBaAFHqf+GTFAxgGcTBYjm26kouhwDpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi83NjRDQTJEMDQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdBWnhNRmlPYmJxU2k2SEFP bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwXzRaTVVER0FaeE1GaU9iYnFTaTZIQU9sMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzgyRi83NjRDQTJEMDQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi9lcF80Wk1VREdB WnhNRmlPYmJxU2k2SEFPbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkMPDg8RPEkJwpKYss7mzaVn7qGQGgKLfnyX9NcpZyEYmvL8z6HwQJ 0a6MeHWZ2kcNmmm8afonVcFmDHgK0YcdkLkWd3P3gNEcipBwc3FDF7Yw24ywChDc yBrU4NtqI6WvnG4yarKZpdHOqzNwkI9IO8S6sfwClnWda0x2QTv/1Ryx+mSbarm9 bSK/D0/+feVmLt/ypuUMojuYzdgjuvvoMW82RSjyEoDIwCo6jARsWpDE2XFa0UOq sBcuosg/qMYcSYvbkKn8hn2tK7Kj1ophcIOsr4Vx+FucLC+iTmy80t3pLPD24CAe aWRsknKh0CB50R+F37Mu0ZKMTWBwXIYe -----END CERTIFICATE-----Generated at Sun Jul 20 06:27:23 2025 by rpki-client