$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft File: _eDYrIjb_GreZ9__WjrC7yZsXNw.mft (raw, json) Hash identifier: C+LnjL29/EJQjDEgekLnEIc/v531U2gURXD3tFsLd8I= Subject key identifier: BC:A4:47:24:E3:EC:D3:F0:D9:E2:07:7E:3B:21:A9:5C:08:14:1F:49 Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC Certificate issuer: /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft Manifest number: 26 Signing time: Mon 21 Jul 2025 07:59:22 +0000 Manifest this update: Mon 21 Jul 2025 07:59:21 +0000 Manifest next update: Mon 28 Jul 2025 07:59:21 +0000 Files and hashes: 1: _eDYrIjb_GreZ9__WjrC7yZsXNw.crl (hash: nHs59eUWwW5h8LJLDPF1+BtrEB76hJNzWLzBUJmZ9m4=) 2: 292A3CF0376511F0A9D2D035C4F9AE02.roa (hash: qQ/o26aFQ3fCsqKdZcgYj7qgKbMCzj8e65hKr1gdKM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Validity Not Before: Jul 21 07:59:21 2025 GMT Not After : Jul 28 07:59:21 2025 GMT Subject: CN=687df35a-cb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0a:c6:ad:77:6b:5f:26:4b:df:8b:0f:15:96: 00:e4:52:d3:34:0b:4b:48:10:86:d6:dc:37:c9:0d: 5d:33:50:e9:48:70:04:a4:76:19:8e:9f:61:33:e8: d6:24:2c:f9:60:91:63:71:36:b4:db:14:fe:6a:24: ae:cc:be:8f:cb:2d:6d:f8:9e:e4:d3:52:7e:8c:95: 30:74:88:31:fc:f6:47:d6:1e:26:7d:ff:60:ef:43: 0b:4e:12:b0:93:ce:f4:4e:4d:be:d4:f0:1c:cd:07: 18:3d:60:d4:6c:3f:18:7d:89:50:20:95:89:c8:30: 0c:0a:53:ae:b6:ab:69:08:43:e2:06:92:ad:b5:d0: f4:34:53:bf:dc:b2:64:81:7f:57:f3:68:b1:58:31: 44:6a:8f:56:47:76:22:72:69:c2:c0:59:3f:ce:0f: 68:17:6d:02:15:92:7f:7c:b9:36:ce:44:b7:df:54: 84:df:12:f5:a0:3a:96:4c:f9:8e:f9:bf:f4:c6:0c: cf:5a:67:7f:fd:4c:5f:49:0f:1b:69:5f:8c:ab:29: 8c:a5:27:89:5a:7b:70:b7:19:28:b9:52:8c:56:ed: 4e:c3:3d:4b:d8:d9:90:10:0f:7f:32:84:ea:9c:f9: 19:59:8a:4d:90:f7:9a:97:aa:47:9e:41:22:f1:e9: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A4:47:24:E3:EC:D3:F0:D9:E2:07:7E:3B:21:A9:5C:08:14:1F:49 X509v3 Authority Key Identifier: keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:8d:c6:13:60:b9:71:a9:2f:09:ab:06:e7:6f:23:eb:04:ed: 1f:53:02:74:1a:3a:9c:24:36:6d:95:41:0a:21:d7:cb:2f:db: b4:19:cd:5c:ad:bb:d3:0f:cb:85:b5:b2:b0:1f:30:ae:24:f8: 3e:0d:64:92:7c:98:3f:be:11:9a:f1:0f:2d:6e:2d:2c:9d:37: 76:5a:16:57:99:7f:24:48:08:51:1e:6a:80:bf:27:74:04:68: 56:ef:27:51:21:11:70:2e:04:25:da:59:e2:45:e6:e9:d6:27: cb:60:c7:7e:5e:fe:5e:d1:b3:43:00:20:b0:96:4c:6a:2b:9e: 0b:84:90:08:3f:b7:77:78:28:10:b4:3e:84:bd:41:0c:cd:13: 71:3b:c0:7f:51:84:1c:a5:40:62:1b:8a:04:2a:a0:84:14:3d: 36:b2:44:06:47:93:56:26:b5:67:a0:47:98:df:bc:a4:ec:73: 08:76:d5:03:a2:61:d9:59:ab:0d:9c:31:bc:54:ba:cf:e9:2e: 79:37:b8:7e:32:1f:68:a8:63:dc:f8:e2:0b:9c:9c:33:61:3c: a4:85:ff:75:1e:f9:45:8c:1b:4a:a7:45:c1:8e:11:59:38:6c: 4f:ba:7d:48:38:2d:2a:6a:a4:dd:34:53:6b:66:31:a2:23:86: d8:14:84:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0ZBMTExMC8GA1UEBRMoRkRFMEQ4QUM4OERCRkM2QURFNjdERkZGNUEzQUMyRUYy NjZDNUNEQzAeFw0yNTA3MjEwNzU5MjFaFw0yNTA3MjgwNzU5MjFaMBgxFjAUBgNV BAMTDTY4N2RmMzVhLWNiNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiCsatd2tfJkvfiw8VlgDkUtM0C0tIEIbW3DfJDV0zUOlIcASkdhmOn2Ez6NYk LPlgkWNxNrTbFP5qJK7Mvo/LLW34nuTTUn6MlTB0iDH89kfWHiZ9/2DvQwtOErCT zvROTb7U8BzNBxg9YNRsPxh9iVAglYnIMAwKU662q2kIQ+IGkq210PQ0U7/csmSB f1fzaLFYMURqj1ZHdiJyacLAWT/OD2gXbQIVkn98uTbORLffVITfEvWgOpZM+Y75 v/TGDM9aZ3/9TF9JDxtpX4yrKYylJ4lae3C3GSi5UoxW7U7DPUvY2ZAQD38yhOqc +RlZik2Q95qXqkeeQSLx6c3ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvKRHJOPs 0/DZ4gd+OyGpXAgUH0kwHwYDVR0jBBgwFoAU/eDYrIjb/GreZ9//WjrC7yZsXNww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3RkExL0JGOTA3NEUyMkZB MDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dyZVo5X19XanJDN3lac1hO dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2VEWXJJamJfR3JlWjlfX1dqckM3eVpzWE53LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 RkExL0JGOTA3NEUyMkZBMDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dy ZVo5X19XanJDN3lac1hOdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIKNxhNguXGpLwmrBudvI+sE7R9TAnQaOpwkNm2VQQoh18sv27QZzVyt u9MPy4W1srAfMK4k+D4NZJJ8mD++EZrxDy1uLSydN3ZaFleZfyRICFEeaoC/J3QE aFbvJ1EhEXAuBCXaWeJF5unWJ8tgx35e/l7Rs0MAILCWTGornguEkAg/t3d4KBC0 PoS9QQzNE3E7wH9RhBylQGIbigQqoIQUPTayRAZHk1YmtWegR5jfvKTscwh21QOi YdlZqw2cMbxUus/pLnk3uH4yH2ioY9z44gucnDNhPKSF/3Ue+UWMG0qnRcGOEVk4 bE+6fUg4LSpqpN00U2tmMaIjhtgUhLk= -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:45 2025 by rpki-client