$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft File: e38qjYSvvYwzKp9LTmcJs65_CvY.mft (raw, json) Hash identifier: IQ3z+gegY9y249hqLC1pkqwLiSF6jZkDOjHNrmW+QMQ= Subject key identifier: AB:26:33:78:68:77:39:21:27:61:60:E7:17:69:27:F7:7C:FD:7A:DF Authority key identifier: 7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6 Certificate issuer: /CN=A91656C7/serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft Manifest number: 17 Signing time: Tue 01 Jul 2025 08:52:06 +0000 Manifest this update: Tue 01 Jul 2025 08:52:06 +0000 Manifest next update: Tue 08 Jul 2025 08:52:06 +0000 Files and hashes: 1: e38qjYSvvYwzKp9LTmcJs65_CvY.crl (hash: n+6X1jp1hrinvNjZEFg8zYRvoF7zbt/+fl5LtGX4fuk=) 2: 0930CE00408411F0A6916727C4F9AE02.roa (hash: RmPJ00Uips89e1P+AW2N3rLdF8Pmzlx8rWyUZVnX0RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:52:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91656C7, serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6 Validity Not Before: Jul 1 08:52:06 2025 GMT Not After : Jul 8 08:52:06 2025 GMT Subject: CN=6863a1b6-a114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:53:bd:5d:c4:1d:1b:4e:cd:f1:97:ff:17:7f: 64:a7:99:ac:9f:8a:64:01:dd:e8:1b:58:e1:c6:ed: 19:99:67:bd:a4:c3:ef:74:2f:cb:10:67:80:ae:e0: 38:16:b0:e3:2c:3d:4e:b7:a3:fa:57:bc:19:c8:dc: a0:71:4f:98:cd:34:8a:93:1b:7d:4e:fb:ef:2d:c6: 9c:d4:b0:76:be:d2:fb:58:0c:53:aa:5c:38:57:99: 2d:ab:9f:4a:2e:05:32:3d:bf:7c:a3:fe:c4:84:39: 5d:17:e0:48:6c:38:37:a1:98:4f:c2:53:85:b7:9f: a1:40:b6:14:ba:8a:fe:2c:10:e4:ad:f3:69:72:0c: 1a:f3:47:40:26:44:6d:64:57:75:71:3d:7c:3f:73: 95:54:fc:85:97:dc:e7:aa:5d:5d:76:88:4b:48:75: 17:bc:fe:30:42:14:a6:21:3a:9b:fe:79:42:eb:d8: 6a:65:d3:2a:3b:2e:a1:91:a7:bd:67:d8:c4:f0:7d: d0:cd:5a:44:0a:24:29:00:f1:b8:59:28:c0:fc:cd: 52:93:10:46:c1:bd:5b:9d:76:0e:da:2d:70:11:34: 82:cc:07:74:e1:ea:cf:ba:f6:28:c9:8a:3f:54:78: 9e:39:ee:3d:39:b0:7e:d9:0c:8c:cb:4f:a9:cb:00: 34:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:26:33:78:68:77:39:21:27:61:60:E7:17:69:27:F7:7C:FD:7A:DF X509v3 Authority Key Identifier: keyid:7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:16:63:51:9a:a7:fd:98:02:53:62:e7:5f:98:94:41:6b:99: d2:eb:26:ce:bc:5b:82:73:b2:c6:0e:a6:f4:28:bf:87:78:af: 95:e4:48:db:0f:52:35:f4:37:2b:ed:bb:01:01:8b:cd:e6:4b: 0d:91:f5:ac:47:7f:ce:be:b7:36:35:c6:19:22:dd:38:c3:5e: dd:7c:17:3e:51:cf:b2:69:40:93:d5:67:3a:1f:26:02:9b:a5: 2a:85:cf:d4:ad:7e:64:f0:3a:a5:eb:1c:36:47:c7:96:99:78: 73:cb:03:55:af:a5:15:38:e6:b9:d7:3b:ab:8a:f7:59:11:e6: 7b:cc:78:82:26:b4:7b:49:f0:18:57:76:c6:84:64:b8:78:6a: 99:4e:b8:ec:bc:1c:fb:a4:48:63:eb:ec:b5:7b:5e:3c:6c:24: 5b:3d:65:1f:66:3c:9f:3b:79:6b:9e:b0:a3:8e:b9:98:86:79: b7:bf:22:38:4c:fd:f6:24:20:6c:c1:30:dd:92:37:86:2c:56: 03:81:cc:47:0c:76:3d:fb:68:ca:cd:33:2f:dd:ec:d1:50:55: 5d:80:ae:da:02:5d:92:0e:7f:79:5d:15:00:ad:4c:9b:4c:60: 90:8a:de:cd:39:8a:28:5f:71:ca:03:5f:c8:ad:60:31:b1:13: 23:cc:1a:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTZDNzExMC8GA1UEBRMoN0I3RjJBOEQ4NEFGQkQ4QzMzMkE5RjRCNEU2NzA5QjNB RTdGMEFGNjAeFw0yNTA3MDEwODUyMDZaFw0yNTA3MDgwODUyMDZaMBgxFjAUBgNV BAMTDTY4NjNhMWI2LWExMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjU71dxB0bTs3xl/8Xf2SnmayfimQB3egbWOHG7RmZZ72kw+90L8sQZ4Cu4DgW sOMsPU63o/pXvBnI3KBxT5jNNIqTG31O++8txpzUsHa+0vtYDFOqXDhXmS2rn0ou BTI9v3yj/sSEOV0X4EhsODehmE/CU4W3n6FAthS6iv4sEOSt82lyDBrzR0AmRG1k V3VxPXw/c5VU/IWX3OeqXV12iEtIdRe8/jBCFKYhOpv+eULr2Gpl0yo7LqGRp71n 2MTwfdDNWkQKJCkA8bhZKMD8zVKTEEbBvVuddg7aLXARNILMB3Th6s+69ijJij9U eJ457j05sH7ZDIzLT6nLADTbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqyYzeGh3 OSEnYWDnF2kn93z9et8wHwYDVR0jBBgwFoAUe38qjYSvvYwzKp9LTmcJs65/CvYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NkM3LzU0NTEzMjRBNDA4 MzExRjA4QjAzQUI2NUM0RjlBRTAyL2UzOHFqWVN2dll3ektwOUxUbWNKczY1X0N2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTM4cWpZU3Z2WXd6S3A5TFRtY0pzNjVfQ3ZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NkM3LzU0NTEzMjRBNDA4MzExRjA4QjAzQUI2NUM0RjlBRTAyL2UzOHFqWVN2dll3 ektwOUxUbWNKczY1X0N2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJMWY1Gap/2YAlNi51+YlEFrmdLrJs68W4JzssYOpvQov4d4r5XkSNsP UjX0NyvtuwEBi83mSw2R9axHf86+tzY1xhki3TjDXt18Fz5Rz7JpQJPVZzofJgKb pSqFz9StfmTwOqXrHDZHx5aZeHPLA1WvpRU45rnXO6uK91kR5nvMeIImtHtJ8BhX dsaEZLh4aplOuOy8HPukSGPr7LV7XjxsJFs9ZR9mPJ87eWuesKOOuZiGebe/IjhM /fYkIGzBMN2SN4YsVgOBzEcMdj37aMrNMy/d7NFQVV2ArtoCXZIOf3ldFQCtTJtM YJCK3s05iihfccoDX8itYDGxEyPMGvk= -----END CERTIFICATE-----Generated at Tue Jul 1 18:57:42 2025 by rpki-client