$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft File: etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json) Hash identifier: sKm0N8TyYEyx2g4tcq/2RGH6KxdeLVXh+bsvy+PLgxA= Subject key identifier: 59:36:C0:06:32:64:F0:5C:21:25:EE:47:2A:BE:2D:00:FA:63:EA:76 Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B Certificate issuer: /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft Manifest number: 35 Signing time: Sat 19 Jul 2025 07:54:19 +0000 Manifest this update: Sat 19 Jul 2025 07:54:19 +0000 Manifest next update: Sat 26 Jul 2025 07:54:19 +0000 Files and hashes: 1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: FjCfv7iKYwxP6pp14Yj4+bFI6c8bCF/mcSY/WfJYgaM=) 2: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: k9SmP/i/EacapJo/9m72S70HfODKRHtE2FbOisDtRLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Validity Not Before: Jul 19 07:54:19 2025 GMT Not After : Jul 26 07:54:19 2025 GMT Subject: CN=687b4f2b-ef5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:85:24:f3:b0:28:eb:d7:13:66:8a:2e:17: 2d:45:91:24:cc:13:40:dc:ad:a4:54:59:0d:66:a2: c1:1a:a3:48:cc:80:36:03:59:42:0f:8f:2d:b8:5a: a7:2c:bd:5f:96:e6:d6:2e:ac:21:69:67:7c:e1:c4: 08:95:b7:08:98:c4:23:23:e3:a1:fe:67:91:e9:30: 54:9e:94:3f:44:10:b5:c8:89:ba:d0:dc:b9:09:b0: d6:ff:30:63:18:37:dd:bd:ae:62:aa:66:4e:15:90: 39:3b:5a:aa:9b:cd:c2:c7:2b:14:72:b0:50:cd:c3: a1:87:e5:b7:f0:9d:d1:4c:f3:30:5a:ec:30:27:a8: a9:47:78:d1:9b:42:94:44:0e:86:03:c9:9a:27:ce: 5d:6b:72:17:35:fd:e0:f1:12:ca:51:8c:4d:67:81: d9:47:df:a9:ae:6a:b5:02:b5:e9:9c:74:db:f3:49: ed:f2:cb:17:ea:07:b9:c5:16:0d:33:a2:86:3a:ba: ed:a0:20:47:2d:4a:2a:77:6d:7c:5d:e5:cd:46:10: 0c:22:77:f6:55:d6:63:22:fa:80:ec:d9:0d:fa:f2: fd:19:b1:9d:e2:bc:33:75:7e:ff:57:04:b0:b4:ae: 98:86:c9:72:ab:46:b2:33:94:04:7e:9a:34:8a:c5: 6c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:36:C0:06:32:64:F0:5C:21:25:EE:47:2A:BE:2D:00:FA:63:EA:76 X509v3 Authority Key Identifier: keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:6b:90:98:31:f1:b3:00:de:8f:64:7b:fe:61:87:32:06:0a: 86:de:93:83:76:95:1c:ed:cf:31:2d:0d:02:3c:a7:7f:9d:72: 2e:56:3c:ad:a2:b9:45:18:7f:fc:e7:3e:66:b5:41:58:5a:d5: ee:ae:d4:33:e9:88:21:c1:2d:51:c7:85:97:20:11:fe:88:8d: 09:25:03:81:86:37:c2:01:29:c7:55:3a:ba:85:53:68:b3:8e: fb:dc:d6:b6:a9:cf:66:94:be:58:c4:45:a6:e4:76:19:59:18: 16:52:b2:08:71:07:66:c7:5f:ad:bc:40:49:49:8c:44:ed:11: 41:57:d9:6c:06:71:b8:22:48:26:3a:ef:d8:5c:fd:f4:05:b2: a2:96:ea:2d:19:3c:1c:15:45:60:6f:a3:3c:0b:c2:81:95:10: 6c:61:dd:0c:fd:f1:08:a6:f0:f6:8b:f0:3d:55:9e:41:09:76: 83:cf:5f:27:55:9d:6e:7f:24:6e:e1:62:1c:d2:31:94:25:71: 8e:73:95:c1:de:9f:53:81:66:38:46:7e:87:92:c7:3c:f8:fd: 89:53:aa:ff:d4:9d:51:50:6d:a7:38:d5:34:4c:43:4d:22:10: fa:db:4a:d6:27:dc:98:7c:83:0b:0a:19:10:9a:7f:59:a5:f1: 1d:96:4e:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0NCMTExMC8GA1UEBRMoN0FENzlFRUIzQjkyODM1NEQ5NTBEQzZFNEY4QkVDQ0Iy NUMyRkM0QjAeFw0yNTA3MTkwNzU0MTlaFw0yNTA3MjYwNzU0MTlaMBgxFjAUBgNV BAMTDTY4N2I0ZjJiLWVmNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM7YUk87Ao69cTZoouFy1FkSTME0DcraRUWQ1mosEao0jMgDYDWUIPjy24Wqcs vV+W5tYurCFpZ3zhxAiVtwiYxCMj46H+Z5HpMFSelD9EELXIibrQ3LkJsNb/MGMY N929rmKqZk4VkDk7WqqbzcLHKxRysFDNw6GH5bfwndFM8zBa7DAnqKlHeNGbQpRE DoYDyZonzl1rchc1/eDxEspRjE1ngdlH36muarUCtemcdNvzSe3yyxfqB7nFFg0z ooY6uu2gIEctSip3bXxd5c1GEAwid/ZV1mMi+oDs2Q368v0ZsZ3ivDN1fv9XBLC0 rpiGyXKrRrIzlAR+mjSKxWz5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWTbABjJk 8FwhJe5HKr4tAPpj6nYwHwYDVR0jBBgwFoAUetee6zuSg1TZUNxuT4vsyyXC/Esw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQ0IxLzJEODQzNjk4MTY4 NjExRjA4OTE2OTg1QkM0RjlBRTAyL2V0ZWU2enVTZzFUWlVOeHVUNHZzeXlYQ19F cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXRlZTZ6dVNnMVRaVU54dVQ0dnN5eVhDX0VzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz Q0IxLzJEODQzNjk4MTY4NjExRjA4OTE2OTg1QkM0RjlBRTAyL2V0ZWU2enVTZzFU WlVOeHVUNHZzeXlYQ19Fcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANFrkJgx8bMA3o9ke/5hhzIGCobek4N2lRztzzEtDQI8p3+dci5WPK2i uUUYf/znPma1QVha1e6u1DPpiCHBLVHHhZcgEf6IjQklA4GGN8IBKcdVOrqFU2iz jvvc1rapz2aUvljERabkdhlZGBZSsghxB2bHX628QElJjETtEUFX2WwGcbgiSCY6 79hc/fQFsqKW6i0ZPBwVRWBvozwLwoGVEGxh3Qz98Qim8PaL8D1VnkEJdoPPXydV nW5/JG7hYhzSMZQlcY5zlcHen1OBZjhGfoeSxzz4/YlTqv/UnVFQbac41TRMQ00i EPrbStYn3Jh8gwsKGRCaf1ml8R2WTkE= -----END CERTIFICATE-----Generated at Sun Jul 20 07:03:41 2025 by rpki-client