$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json) Hash identifier: xfisQ14E6GMavx0Oslvd2mv/IRpHGHTqhW3eCOb/S7s= Subject key identifier: 5B:7D:67:AE:76:09:2C:F7:7D:57:35:AB:B9:8D:63:4E:D1:8D:61:9D Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft Manifest number: 0C83 Signing time: Fri 18 Jul 2025 18:26:39 +0000 Manifest this update: Fri 18 Jul 2025 18:26:39 +0000 Manifest next update: Fri 25 Jul 2025 18:26:39 +0000 Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: BiLMOZaO06I39iKT3RAiIblZGIcJnQnl8qmybVrulRI=) 2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: IFWas/rgHa7uSrgJAOPof+Srn7iqSkG+8jyeDB/7tHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Validity Not Before: Jul 18 18:26:39 2025 GMT Not After : Jul 25 18:26:39 2025 GMT Subject: CN=687a91df-cd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:8a:98:ce:f7:f3:d2:01:d4:d2:2b:dd:35: cd:c9:84:30:ef:4d:10:48:d4:dc:59:c7:a5:ef:ee: ea:33:a7:69:e1:22:a9:32:9a:fc:02:83:13:ac:2a: 6f:74:62:81:b5:3d:9f:df:c8:25:dc:d8:0e:9b:67: c3:7b:cd:af:0d:48:ff:c7:de:ca:0f:ba:70:a8:79: ce:b6:c8:e2:33:a3:fc:be:f6:10:e4:e4:ad:87:eb: 2b:a1:5d:7e:5d:11:cd:b5:79:b8:69:1a:e0:1c:51: ec:fb:30:fd:b9:99:b6:df:07:46:f9:c6:d5:31:db: 80:8e:e3:2a:34:90:e7:67:3a:fe:c0:2c:e4:60:e1: e5:b3:1e:53:10:0a:a0:3f:0b:1f:2b:b0:30:bf:0a: 74:81:f6:49:9e:ae:f0:07:f8:10:48:d1:10:a5:d0: 04:96:96:60:a0:d2:1f:e6:0f:ee:94:d2:85:7d:51: 70:6c:9d:88:a8:c0:b2:e6:22:35:a8:87:7d:88:5a: 1a:ab:72:fb:ac:a9:e8:88:3b:53:2e:2d:13:08:25: 5f:74:3a:82:97:99:c5:44:df:74:58:37:fc:d6:4a: bd:fa:c1:86:a2:33:b0:c8:b4:a7:e6:df:58:65:e0: 07:3b:67:04:c6:f1:46:95:ce:01:4e:58:14:99:d6: 2b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7D:67:AE:76:09:2C:F7:7D:57:35:AB:B9:8D:63:4E:D1:8D:61:9D X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:4b:0b:7e:20:46:ce:c5:13:d0:de:86:af:be:07:cf:ea:8e: 8b:d4:bb:11:b0:02:28:92:e4:ad:f8:8f:eb:15:dd:9d:9d:26: ff:a9:54:b8:e0:14:a3:f2:e0:67:b7:37:69:41:79:31:a7:c3: 47:48:cf:50:17:bc:3f:e0:9b:2d:5a:91:28:6d:48:b9:03:62: 0b:13:cf:6c:61:81:fb:32:25:fa:87:96:13:a4:ca:23:a8:2c: 8e:fc:d7:19:ad:14:91:fd:51:c3:b6:ad:1b:e4:99:31:d7:58: 9b:8b:8c:35:54:b7:66:50:8e:a4:f1:5c:02:87:a2:02:61:b2: d5:93:d9:64:c7:f6:6e:fc:1b:f2:3a:14:14:3e:c3:73:18:d4: 8f:a3:c9:83:9c:fb:f4:c7:56:a9:74:19:66:c4:56:f2:12:9f: 14:8f:6f:c5:0b:e2:03:6b:85:b8:7a:71:ce:cb:17:6f:73:7b: 42:33:5a:94:7e:89:bf:a5:10:30:43:fb:a8:98:b8:e3:54:b2: 19:4c:60:e7:f3:9e:45:c8:62:ab:cc:8b:92:e8:a8:06:f1:0f: 11:f2:7a:44:1a:9f:8a:00:44:c0:b7:93:ec:54:71:1a:11:06: 71:02:64:15:dd:ed:95:52:d6:8b:e2:81:4f:3f:c7:6b:eb:6c: b0:e7:e5:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjUwNzE4MTgyNjM5WhcNMjUwNzI1MTgyNjM5WjAYMRYwFAYD VQQDEw02ODdhOTFkZi1jZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmaiKmM7389IB1NIr3TXNyYQw700QSNTcWcel7+7qM6dp4SKpMpr8AoMTrCpv dGKBtT2f38gl3NgOm2fDe82vDUj/x97KD7pwqHnOtsjiM6P8vvYQ5OSth+sroV1+ XRHNtXm4aRrgHFHs+zD9uZm23wdG+cbVMduAjuMqNJDnZzr+wCzkYOHlsx5TEAqg PwsfK7Awvwp0gfZJnq7wB/gQSNEQpdAElpZgoNIf5g/ulNKFfVFwbJ2IqMCy5iI1 qId9iFoaq3L7rKnoiDtTLi0TCCVfdDqCl5nFRN90WDf81kq9+sGGojOwyLSn5t9Y ZeAHO2cExvFGlc4BTlgUmdYrWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFt9Z652 CSz3fVc1q7mNY07RjWGdMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2 OWN4Tk83dldXTjZqa3l5NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtSwt+IEbOxRPQ3oavvgfP6o6L1LsRsAIokuSt+I/rFd2dnSb/qVS4 4BSj8uBntzdpQXkxp8NHSM9QF7w/4JstWpEobUi5A2ILE89sYYH7MiX6h5YTpMoj qCyO/NcZrRSR/VHDtq0b5Jkx11ibi4w1VLdmUI6k8VwCh6ICYbLVk9lkx/Zu/Bvy OhQUPsNzGNSPo8mDnPv0x1apdBlmxFbyEp8Uj2/FC+IDa4W4enHOyxdvc3tCM1qU fom/pRAwQ/uomLjjVLIZTGDn855FyGKrzIuS6KgG8Q8R8npEGp+KAETAt5PsVHEa EQZxAmQV3e2VUtaL4oFPP8dr62yw5+VK -----END CERTIFICATE-----Generated at Sun Jul 20 04:10:10 2025 by rpki-client