$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft File: EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft (raw, json) Hash identifier: gzMHHesb84/k7J+Jd4lwywRgDbQx9a8G5C9czXieCjQ= Subject key identifier: 2A:75:FF:3A:08:13:45:59:CD:E1:FD:AF:50:90:EE:90:C9:4F:8C:30 Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F Certificate issuer: /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Certificate serial: 1552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft Manifest number: 1515 Signing time: Fri 18 Jul 2025 16:57:36 +0000 Manifest this update: Fri 18 Jul 2025 16:57:35 +0000 Manifest next update: Fri 25 Jul 2025 16:57:35 +0000 Files and hashes: 1: EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl (hash: zFnJ05qCCqXIXfZPj47lgqwufH4gfnJfbJGb2DFCtks=) 2: F99707CEBAC511E9A77CDE7BC4F9AE02.roa (hash: 5uUW31UVlhS1EMeW8SdNyNqfE7foPIsbvKPSkNYxTTw=) 3: E7084A18E1FF11ED8291C918C4F9AE02.roa (hash: 825LdLpPgTmUB6Z/jlNKQqUyb06kFuccOU7CVvrtwj4=) 4: E80E94F8E1FF11ED8291C918C4F9AE02.roa (hash: sEzbj9zVcGYfQVtymkbJCAL7nuZefcCGjL2IRtqWF/o=) 5: 065737305C9511EDABB9FA49C4F9AE02.roa (hash: A9mSeJtqPQ5OLPMu8OwuZB0s+QUpXaZBGlbtc6BBl4M=) 6: E5E5AB76E1FF11ED8291C918C4F9AE02.roa (hash: uZ4XGMAryuNiLEYH4OkW1daYwrGTX1yw6VXfeQKddWo=) 7: E4C72AB2E1FF11ED8291C918C4F9AE02.roa (hash: evUrAmQOOHS6gFCNS5NNu+gRFX265k9Xi2+XGDvOjys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5458 (0x1552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F Validity Not Before: Jul 18 16:57:35 2025 GMT Not After : Jul 25 16:57:35 2025 GMT Subject: CN=687a7d00-2c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:04:66:10:f8:2e:97:de:fb:86:85:a1:aa: 2a:03:37:a8:8c:0c:9e:8b:ee:18:b8:b1:36:cf:8c: f3:84:04:7b:79:aa:15:0d:37:73:de:65:a3:ea:ec: bc:34:1c:67:35:ac:d3:cb:a8:d2:61:70:29:95:f3: 56:78:00:4f:a4:c9:c7:83:76:37:bf:3f:20:a1:02: bc:81:13:69:92:d2:19:08:4f:f5:98:2f:72:05:37: a4:c7:e9:17:58:83:b3:09:41:aa:39:83:12:87:e5: 61:26:fd:a8:ca:fb:68:3b:85:18:b7:50:fb:ce:e1: 56:2d:46:35:b4:18:aa:6c:56:d5:e7:28:b8:ba:92: 67:e1:46:4c:1a:b0:b0:f9:14:86:8f:2a:09:ff:71: a5:6c:01:9d:1b:61:b8:78:37:02:be:97:ff:bf:a7: 3b:84:d2:d2:89:9d:3e:88:22:21:c2:37:45:47:d7: ac:74:e9:46:29:11:64:de:41:33:77:16:6d:1b:06: fa:69:a2:17:01:b2:86:38:8d:8a:36:34:92:c4:91: 78:67:20:70:5e:54:a5:84:27:9f:23:9b:a4:2c:bf: 84:6e:aa:97:de:83:e5:f4:2f:df:2f:63:06:30:36: 51:b0:e0:4e:e2:24:1a:c2:8a:12:94:c7:bc:c7:e3: 4c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:75:FF:3A:08:13:45:59:CD:E1:FD:AF:50:90:EE:90:C9:4F:8C:30 X509v3 Authority Key Identifier: keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:20:14:58:18:de:41:12:f9:38:e7:98:58:a7:92:8f:54:fd: bd:1d:ff:e4:29:69:18:2d:83:18:bd:55:6e:73:32:cb:c4:d4: 4d:4b:09:7e:b5:0b:ba:8d:69:88:73:e2:ad:09:fe:71:79:86: d0:a8:c4:2e:29:df:3f:01:8f:de:36:88:11:71:1e:ae:68:ca: d0:90:34:b8:1e:a2:ff:19:f4:b3:1a:15:9b:b7:cb:63:d7:ef: 34:a5:36:40:f0:22:ed:8d:0b:20:5b:c6:82:73:b5:92:6e:0a: d4:2b:e4:0c:7e:01:4e:30:21:0d:9e:0f:94:ed:3b:fd:bb:8d: 77:85:44:2e:a8:96:48:4a:f3:ac:30:1e:a5:c0:a7:14:da:6a: 52:a4:f4:d5:fe:78:5f:4d:dc:19:a7:bf:16:93:65:14:83:46: 80:07:06:ca:82:8e:21:0b:c0:4a:70:84:e3:de:e1:86:be:e8: 60:94:2e:90:d4:ca:6f:b1:c5:4f:1e:d0:37:78:2f:66:b6:37: 61:7b:ff:5e:7b:19:b7:3e:95:27:bb:67:86:1b:a9:3d:2b:12: a1:9b:0f:9f:7f:1a:eb:88:e2:b0:78:b9:bb:a0:e1:3d:1d:89: 04:69:cf:86:3e:57:a3:85:b9:30:57:58:ce:12:55:ba:29:78: fa:69:cd:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE NEM2RDU3MUYwHhcNMjUwNzE4MTY1NzM1WhcNMjUwNzI1MTY1NzM1WjAYMRYwFAYD VQQDEw02ODdhN2QwMC0yYzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfkEZhD4Lpfe+4aFoaoqAzeojAyei+4YuLE2z4zzhAR7eaoVDTdz3mWj6uy8 NBxnNazTy6jSYXAplfNWeABPpMnHg3Y3vz8goQK8gRNpktIZCE/1mC9yBTekx+kX WIOzCUGqOYMSh+VhJv2oyvtoO4UYt1D7zuFWLUY1tBiqbFbV5yi4upJn4UZMGrCw +RSGjyoJ/3GlbAGdG2G4eDcCvpf/v6c7hNLSiZ0+iCIhwjdFR9esdOlGKRFk3kEz dxZtGwb6aaIXAbKGOI2KNjSSxJF4ZyBwXlSlhCefI5ukLL+EbqqX3oPl9C/fL2MG MDZRsOBO4iQawooSlMe8x+NMrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCp1/zoI E0VZzeH9r1CQ7pDJT4wwMB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2 NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlGQy84MTA0NUUzQTU2NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1R bXg5UE5KaE9uRGJVeHRWeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAIBRYGN5BEvk455hYp5KPVP29Hf/kKWkYLYMYvVVuczLLxNRNSwl+ tQu6jWmIc+KtCf5xeYbQqMQuKd8/AY/eNogRcR6uaMrQkDS4HqL/GfSzGhWbt8tj 1+80pTZA8CLtjQsgW8aCc7WSbgrUK+QMfgFOMCENng+U7Tv9u413hUQuqJZISvOs MB6lwKcU2mpSpPTV/nhfTdwZp78Wk2UUg0aABwbKgo4hC8BKcITj3uGGvuhglC6Q 1MpvscVPHtA3eC9mtjdhe/9eexm3PpUnu2eGG6k9KxKhmw+ffxrriOKweLm7oOE9 HYkEac+GPlejhbkwV1jOElW6KXj6ac1l -----END CERTIFICATE-----Generated at Sun Jul 20 12:15:46 2025 by rpki-client