$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: 6Qm8U2NJ2i5wtQPvtUAObdzCKCcBYpIKMbwW+oNg2G8= Subject key identifier: 6C:49:EB:E8:6A:35:EC:BA:02:1A:4D:BA:3A:C4:92:A4:9D:28:B7:5C Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0D79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0D52 Signing time: Sat 06 Sep 2025 18:09:58 +0000 Manifest this update: Sat 06 Sep 2025 18:09:58 +0000 Manifest next update: Sat 13 Sep 2025 18:09:58 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: O5mPPTAYaILqhzgmPqStoYduMLcxRzYFrX3ujaG4QRc=) 2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: Y+E2Zw8cSibO88OVDC2atGI8LaONXqL9mkfjf3pS0hw=) 3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: J4Hv1naBopBVbkvmkR77VLmGUJiYmVXkbO9FW9SSP/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3449 (0xd79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: Sep 6 18:09:58 2025 GMT Not After : Sep 13 18:09:58 2025 GMT Subject: CN=68bc78f6-e106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:fe:f9:4c:37:81:84:69:a9:91:a8:ec:33: e6:17:8e:8a:31:ca:a0:80:d9:68:d0:0c:86:ee:03: 53:d4:31:18:19:7d:06:c1:79:07:13:d8:70:c4:36: 34:bd:6c:a9:f4:e8:c8:f9:6b:49:48:ff:b2:39:b9: 29:ff:8e:d1:49:76:ab:dc:7b:b2:95:f7:31:50:d1: 94:c9:5e:96:0f:90:41:3f:25:0a:9e:5d:49:27:a5: 57:61:6c:8e:d3:d9:19:9e:3a:a5:03:e3:46:1e:21: 9f:64:ab:a6:bb:d7:3e:97:51:2a:04:8d:33:c3:25: 30:a0:f7:af:47:a0:43:7f:f7:74:39:69:7e:d5:7a: 32:07:e9:d2:67:93:92:12:55:06:2f:5d:c4:11:e4: f6:f5:80:8b:ea:fe:62:9c:05:b8:70:aa:02:d7:87: ac:11:86:f0:1b:4a:d9:6b:47:bd:a9:87:5e:5f:19: d3:58:84:bc:f1:be:3b:71:1f:41:09:b1:f5:41:cf: 93:cb:c0:1e:95:66:22:c4:94:88:ce:cd:9d:f4:7e: 1c:ab:61:6f:25:2f:94:3b:d8:9c:f3:46:2e:dd:10: 4d:11:e0:29:09:67:c5:ee:18:18:01:fe:36:2b:a9: 12:b2:f4:8b:34:01:8e:3d:ba:aa:b2:32:cc:45:66: 79:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:49:EB:E8:6A:35:EC:BA:02:1A:4D:BA:3A:C4:92:A4:9D:28:B7:5C X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f7:2c:98:4d:bd:16:b9:76:00:a4:4e:61:fb:20:14:46:c6: f4:92:92:46:2d:08:29:1c:80:7b:a7:b9:6e:cc:7a:a0:7a:b4: c4:79:8d:e8:13:22:2d:a2:fd:25:81:97:05:0d:bc:9f:81:dd: 8e:8a:dc:e9:be:52:c5:34:2c:44:97:4b:83:c7:e3:2a:86:95: ba:96:30:7e:71:c5:54:b6:ec:45:dc:a3:1e:26:4d:a1:8a:c5: f3:87:09:79:25:1a:3f:f0:ee:90:12:26:9d:3f:9d:b4:64:0f: 5c:4d:c3:47:ae:dc:0e:ed:20:69:49:23:9f:9f:f0:8f:52:b4: 2b:83:c7:2b:83:e8:7f:63:f8:c0:f5:a7:8e:75:c4:49:78:e5: 34:df:cd:55:96:80:a8:76:e7:66:1d:d1:2e:82:8d:bf:57:a4: b8:cb:60:14:a4:44:e6:04:04:cc:e3:72:f5:49:a7:4a:21:10: da:26:a0:e5:87:30:fd:fe:4b:0e:04:c3:b6:1e:b7:51:17:97: 5f:a1:c7:e7:e8:26:28:4b:9a:18:b5:e8:31:fe:82:4a:f1:a8: b7:e0:ab:e0:81:ee:a7:39:6f:da:f2:f2:ca:d3:02:15:b3:2b: e2:64:17:87:ce:59:43:b9:51:46:b1:09:5c:1f:d9:ab:f1:31: c9:98:4e:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjUwOTA2MTgwOTU4WhcNMjUwOTEzMTgwOTU4WjAYMRYwFAYD VQQDEw02OGJjNzhmNi1lMTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdX++Uw3gYRpqZGo7DPmF46KMcqggNlo0AyG7gNT1DEYGX0GwXkHE9hwxDY0 vWyp9OjI+WtJSP+yObkp/47RSXar3HuylfcxUNGUyV6WD5BBPyUKnl1JJ6VXYWyO 09kZnjqlA+NGHiGfZKumu9c+l1EqBI0zwyUwoPevR6BDf/d0OWl+1XoyB+nSZ5OS ElUGL13EEeT29YCL6v5inAW4cKoC14esEYbwG0rZa0e9qYdeXxnTWIS88b47cR9B CbH1Qc+Ty8AelWYixJSIzs2d9H4cq2FvJS+UO9ic80Yu3RBNEeApCWfF7hgYAf42 K6kSsvSLNAGOPbqqsjLMRWZ5wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxJ6+hq Ney6AhpNujrEkqSdKLdcMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa9yyYTb0WuXYApE5h+yAURsb0kpJGLQgpHIB7p7luzHqgerTEeY3o EyItov0lgZcFDbyfgd2OitzpvlLFNCxEl0uDx+MqhpW6ljB+ccVUtuxF3KMeJk2h isXzhwl5JRo/8O6QEiadP520ZA9cTcNHrtwO7SBpSSOfn/CPUrQrg8crg+h/Y/jA 9aeOdcRJeOU0381VloCodudmHdEugo2/V6S4y2AUpETmBATM43L1SadKIRDaJqDl hzD9/ksOBMO2HrdRF5dfocfn6CYoS5oYtegx/oJK8ai34Kvgge6nOW/a8vLK0wIV syviZBeHzllDuVFGsQlcH9mr8THJmE5l -----END CERTIFICATE-----Generated at Mon Sep 8 17:40:28 2025 by rpki-client