$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json) Hash identifier: Mfa834KOUIOcLgc07DgR0nSJIIt/xTV8MqCDzk/cu5U= Subject key identifier: D8:6D:AB:1C:38:15:A8:E6:FB:CE:44:37:B5:E5:9A:3C:F5:C8:0E:08 Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0E2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft Manifest number: 0E1D Signing time: Tue 22 Jul 2025 17:58:59 +0000 Manifest this update: Tue 22 Jul 2025 17:58:59 +0000 Manifest next update: Tue 29 Jul 2025 17:58:59 +0000 Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: fRWFwubKV8Ueyy9J6kmlp7SNA1897R3Wz88V2/z2ULo=) 2: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: QWOTAeLgnWJFAAIChZL1m0e0kICN2c6Ng+tc3RXx8Yg=) 3: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: tRUYfW/mxJFIRHVM9QsIKc4UoKBg/TdEbDm54bKQfQg=) 4: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: agk9fTE0Dhy5dYc90EBQeapRa6cEZ8A1rQ5/CvNJ7LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3629 (0xe2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Jul 22 17:58:59 2025 GMT Not After : Jul 29 17:58:59 2025 GMT Subject: CN=687fd163-8d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0d:9e:f2:69:6a:d4:45:fb:41:3e:1c:e2:23: 2f:4c:73:91:37:c4:0f:8f:72:b6:74:de:7e:58:7a: 48:ea:ad:9b:5b:c6:df:cf:39:e5:80:e0:8a:82:60: 02:8c:d3:39:ec:bc:08:38:08:e1:71:4d:74:94:04: 29:e0:b6:17:0d:54:2f:66:f0:6b:40:57:42:03:a9: 16:c0:c1:d2:42:75:15:9a:36:97:36:67:6a:3c:01: 7c:26:38:9a:2f:c0:4b:00:10:72:c5:38:be:59:fe: ea:ae:28:99:5c:38:8c:52:ef:28:50:40:01:8b:a1: 6d:87:d1:76:59:10:ea:b5:13:95:9a:11:d4:d3:99: 4f:18:ef:ae:43:78:bd:44:c8:dc:e2:a6:d5:7c:8f: 95:2f:98:19:93:21:09:54:bb:13:f4:e1:18:89:c1: 6a:c6:6a:22:30:67:35:bd:cc:da:2a:26:b3:8b:06: 74:f2:dc:3e:c4:52:32:01:6d:3c:6b:fe:8c:f8:c9: 3e:be:8a:93:d3:09:fd:89:71:49:41:56:92:02:fc: e2:37:42:70:56:1b:47:af:25:bc:5f:48:0f:65:42: 56:19:cf:d6:86:99:36:69:0e:df:4e:f5:f7:2c:89: f0:42:8c:27:a5:ac:c0:3f:78:e1:38:d6:e4:ee:77: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6D:AB:1C:38:15:A8:E6:FB:CE:44:37:B5:E5:9A:3C:F5:C8:0E:08 X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:88:2f:8b:87:41:6a:99:0a:f1:8e:a8:75:f5:48:88:db:d9: ba:41:29:c1:21:cd:ab:bd:a2:35:e2:0d:af:01:08:da:3e:05: 6a:8c:f7:96:bd:06:69:27:a9:af:5a:e3:b2:b3:da:75:b4:a7: ef:40:ff:74:8d:f5:8b:a3:ad:b2:73:3f:37:bf:14:09:b3:3b: 14:61:53:f3:22:35:a9:1f:18:2f:cb:71:f3:3a:76:a6:d6:b4: dc:f0:a3:1f:5b:ce:06:60:ec:96:00:4a:10:0e:b1:fb:35:e3: 1b:99:fa:99:c3:7c:14:ed:c8:94:a6:87:5b:d9:89:22:d3:7f: c3:4a:ff:c9:96:cc:9b:45:ce:48:c6:9b:64:27:ed:8b:01:e1: b5:33:92:27:29:a7:dc:22:46:ac:36:9d:a2:80:ed:52:4e:51: db:a4:aa:f0:a5:ad:4b:f1:c4:5d:3e:f2:5e:40:ce:b9:ac:75: 0d:bb:7e:15:be:c6:bc:ae:17:1b:a5:fa:68:cd:b6:3d:45:80: 24:58:57:63:d6:49:29:3d:74:64:e6:dd:5c:35:23:44:a6:f6: 1e:fa:5e:39:af:e0:38:34:af:59:69:3f:21:67:d8:4e:fe:a9: 0a:c7:f6:fa:39:1a:1b:32:56:51:48:fd:c6:39:34:91:f6:70: b5:df:a3:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjUwNzIyMTc1ODU5WhcNMjUwNzI5MTc1ODU5WjAYMRYwFAYD VQQDEw02ODdmZDE2My04ZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQ2e8mlq1EX7QT4c4iMvTHORN8QPj3K2dN5+WHpI6q2bW8bfzznlgOCKgmAC jNM57LwIOAjhcU10lAQp4LYXDVQvZvBrQFdCA6kWwMHSQnUVmjaXNmdqPAF8Jjia L8BLABByxTi+Wf7qriiZXDiMUu8oUEABi6Fth9F2WRDqtROVmhHU05lPGO+uQ3i9 RMjc4qbVfI+VL5gZkyEJVLsT9OEYicFqxmoiMGc1vczaKiaziwZ08tw+xFIyAW08 a/6M+Mk+voqT0wn9iXFJQVaSAvziN0JwVhtHryW8X0gPZUJWGc/Whpk2aQ7fTvX3 LInwQownpazAP3jhONbk7nePgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhtqxw4 Fajm+85EN7Xlmjz1yA4IMB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTdCMi8zRUUzMjM1QUFFOTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENn RHhEelFRRVUwRUExZndEX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwiC+Lh0FqmQrxjqh19UiI29m6QSnBIc2rvaI14g2vAQjaPgVqjPeW vQZpJ6mvWuOys9p1tKfvQP90jfWLo62ycz83vxQJszsUYVPzIjWpHxgvy3HzOnam 1rTc8KMfW84GYOyWAEoQDrH7NeMbmfqZw3wU7ciUpodb2Yki03/DSv/JlsybRc5I xptkJ+2LAeG1M5InKafcIkasNp2igO1STlHbpKrwpa1L8cRdPvJeQM65rHUNu34V vsa8rhcbpfpozbY9RYAkWFdj1kkpPXRk5t1cNSNEpvYe+l45r+A4NK9ZaT8hZ9hO /qkKx/b6ORobMlZRSP3GOTSR9nC136Mn -----END CERTIFICATE-----Generated at Wed Jul 23 18:15:15 2025 by rpki-client