$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: uI3a604BmE4mSaWwahTMBKayeIcTB5oiQGNDb2ooh/8= Subject key identifier: BE:AA:96:AA:FC:A6:02:48:7B:80:F9:0C:0C:0D:07:C0:3E:79:FF:AA Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 022C Signing time: Tue 09 Sep 2025 02:14:59 +0000 Manifest this update: Tue 09 Sep 2025 02:14:59 +0000 Manifest next update: Tue 16 Sep 2025 02:14:59 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: Wjq5lgXQ50j2Yr6fvuwJdYkP5viOQXBF1daRvyLy5N4=) 2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=) 3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=) 4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: Sep 9 02:14:59 2025 GMT Not After : Sep 16 02:14:59 2025 GMT Subject: CN=68bf8da3-7c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:1f:bc:27:cf:12:e5:1e:18:d8:32:6e:c6: 4b:77:00:43:5d:1c:c6:14:1b:b8:d6:26:24:5a:e6: ee:4a:a4:ee:2f:1d:09:80:69:3a:21:75:60:7e:bb: c8:54:84:f7:26:e1:45:6a:e5:a4:6d:69:76:f9:62: 1c:6b:8e:29:34:50:48:c2:5c:7f:14:f9:2a:c9:48: d5:7e:43:2a:25:5b:ee:70:6b:2f:64:52:1a:7a:03: 69:ef:ad:89:c3:ff:9e:94:7f:68:da:20:34:30:57: 0a:1d:3a:93:fa:3d:a0:dd:fd:ee:1f:64:37:a4:cb: 0f:cd:90:be:3f:e2:89:29:3a:36:8c:ad:bb:c5:8e: eb:0e:34:ff:ac:a0:62:89:f6:9f:b1:64:91:eb:8d: e2:c4:f3:54:8c:e2:d2:ec:3b:cf:62:94:01:1e:d7: 5c:f8:6e:cc:66:ba:c0:96:70:5c:50:0f:67:86:af: a7:20:65:85:99:50:a6:ed:a6:86:8f:87:c3:21:c7: d3:5b:0d:d1:14:82:a5:8f:0e:7e:9c:f8:ec:a0:3d: 2d:98:65:f3:5e:d1:ae:9d:6f:26:73:74:97:70:a2: 46:93:3d:ed:d1:2c:43:d2:53:67:bf:3b:ab:ac:1d: 48:5d:39:b0:fb:62:e1:a2:0d:3a:9b:57:86:f9:89: 45:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AA:96:AA:FC:A6:02:48:7B:80:F9:0C:0C:0D:07:C0:3E:79:FF:AA X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:5b:57:3f:62:ae:d1:5c:bb:82:86:e6:b9:42:e9:84:82:58: 23:2f:38:72:d0:17:6e:4d:29:29:61:9d:a8:3d:64:1e:e6:55: 8d:2f:0b:6b:6a:22:e9:66:a5:02:61:74:f3:b2:30:f2:8d:7b: 16:e7:9a:9e:c3:5b:9c:45:6b:38:af:c7:f8:ed:96:95:6f:3a: bc:5e:5b:4c:57:0a:ee:30:de:ed:ab:8c:0b:77:b3:82:0c:a5: 19:9f:28:cd:e5:b7:98:05:20:d9:9f:41:c5:d9:c2:b5:be:e4: e3:6e:b0:47:0d:b9:70:86:1d:82:73:28:1e:61:e8:89:d3:33: 0e:9b:50:88:48:4e:86:c3:05:19:ad:f6:41:68:4a:67:de:80: 0f:23:b5:b7:f2:a4:83:8c:4e:7d:9a:cf:68:9b:cc:cf:af:c3: b5:d1:24:ff:c0:a9:64:f4:d3:61:cb:c7:05:45:dd:8a:59:38: 2c:03:dc:7b:a4:33:93:7c:38:1a:5e:64:e1:e2:84:3c:35:06: 2a:51:62:16:3e:4a:97:17:65:34:90:40:33:0b:a9:50:94:ea: 4f:3e:12:54:38:3c:09:e5:a1:e8:3e:d4:cb:52:09:a7:8a:f4: a6:19:9e:b3:e4:d4:82:17:8d:21:5b:3d:b9:ee:8e:df:f9:d8: 29:d7:61:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjUwOTA5MDIxNDU5WhcNMjUwOTE2MDIxNDU5WjAYMRYwFAYD VQQDEw02OGJmOGRhMy03Yzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz80fvCfPEuUeGNgybsZLdwBDXRzGFBu41iYkWubuSqTuLx0JgGk6IXVgfrvI VIT3JuFFauWkbWl2+WIca44pNFBIwlx/FPkqyUjVfkMqJVvucGsvZFIaegNp762J w/+elH9o2iA0MFcKHTqT+j2g3f3uH2Q3pMsPzZC+P+KJKTo2jK27xY7rDjT/rKBi ifafsWSR643ixPNUjOLS7DvPYpQBHtdc+G7MZrrAlnBcUA9nhq+nIGWFmVCm7aaG j4fDIcfTWw3RFIKljw5+nPjsoD0tmGXzXtGunW8mc3SXcKJGkz3t0SxD0lNnvzur rB1IXTmw+2Lhog06m1eG+YlFwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6qlqr8 pgJIe4D5DAwNB8A+ef+qMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARW1c/Yq7RXLuChua5QumEglgjLzhy0BduTSkpYZ2oPWQe5lWNLwtr aiLpZqUCYXTzsjDyjXsW55qew1ucRWs4r8f47ZaVbzq8XltMVwruMN7tq4wLd7OC DKUZnyjN5beYBSDZn0HF2cK1vuTjbrBHDblwhh2CcygeYeiJ0zMOm1CISE6GwwUZ rfZBaEpn3oAPI7W38qSDjE59ms9om8zPr8O10ST/wKlk9NNhy8cFRd2KWTgsA9x7 pDOTfDgaXmTh4oQ8NQYqUWIWPkqXF2U0kEAzC6lQlOpPPhJUODwJ5aHoPtTLUgmn ivSmGZ6z5NSCF40hWz257o7f+dgp12G2 -----END CERTIFICATE-----Generated at Thu Sep 11 00:17:01 2025 by rpki-client