$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft File: E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json) Hash identifier: KSafaRzyJPxCflUQ3pJWNxw+JZNNUVMfhvo7tBQXarg= Subject key identifier: 50:ED:9F:7D:5C:12:6B:29:3B:B6:88:D9:E0:67:A4:90:7D:E2:6E:47 Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E Certificate issuer: /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E Certificate serial: 04A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft Manifest number: 049B Signing time: Thu 21 Aug 2025 00:05:56 +0000 Manifest this update: Thu 21 Aug 2025 00:05:56 +0000 Manifest next update: Thu 28 Aug 2025 00:05:56 +0000 Files and hashes: 1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: IBAffdNYEtI7Dg1vKPsor8WF6VI/xYYvc4wKaFi1rPc=) 2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: N6UdB/vsoDQh8PeESm7VPxFgrUH9sp1ez29ivoqCJVw=) 3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: u4T6c6+EeGnanbuuwAq6FQjgSX9l5ijgis5wFYw/MM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1187 (0x4a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E Validity Not Before: Aug 21 00:05:56 2025 GMT Not After : Aug 28 00:05:56 2025 GMT Subject: CN=68a662e4-0e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c9:99:43:ff:e8:7a:f2:2d:01:90:41:87:ef: 84:2d:d8:b7:c2:20:9c:c9:a7:cf:ad:d2:57:09:8a: 89:8b:28:ce:17:28:52:37:ae:0e:22:37:e1:93:cd: 06:a9:23:e2:0f:b5:02:ef:b3:e7:2f:db:ae:71:71: 13:d6:98:7e:a1:a6:b2:b3:22:0a:07:6d:1f:b8:03: 7e:ee:1b:2c:fe:a5:c5:1c:ae:7a:2a:12:5a:c9:dc: ee:3c:cd:49:4a:cb:9f:2a:5c:87:46:c3:e8:f2:a4: 98:0a:ff:7d:82:90:e2:7e:ec:35:2b:33:e2:e5:07: 29:f8:9a:fe:1f:39:37:1f:c5:0a:3a:8c:4a:92:fe: 11:8f:07:19:df:c7:23:fb:37:3c:a1:0b:8d:ce:ec: e4:1d:a8:b2:02:0e:b4:95:6e:cd:19:96:0b:39:bc: de:f7:37:55:dd:3d:21:08:b3:d9:76:16:df:6f:68: 99:a7:47:64:97:c4:57:ee:da:30:8b:ad:ae:a8:34: cc:12:c2:ae:11:01:11:ae:b2:8e:23:06:71:93:f9: b1:f5:c2:81:81:0b:c3:e1:da:ed:83:7b:f6:ae:45: 3d:8e:7a:f7:65:b6:9b:2e:f2:a4:11:c2:29:61:b7: ee:de:e3:41:38:45:6b:53:9e:8d:83:12:cb:b3:f5: ca:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:ED:9F:7D:5C:12:6B:29:3B:B6:88:D9:E0:67:A4:90:7D:E2:6E:47 X509v3 Authority Key Identifier: keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c9:1c:28:5b:f3:7b:09:38:44:d9:e6:86:29:e3:a7:da:7d: 6f:9b:cb:50:5e:4b:7a:75:1a:3c:02:5e:c6:fb:65:44:71:a6: 51:b9:af:06:33:88:82:39:e9:e6:b5:d0:6b:da:48:a3:03:1f: 82:a5:6e:4d:df:7f:78:43:9a:d0:3b:03:ad:fd:7b:bc:7e:1d: 38:ef:a2:d4:03:d5:ad:7e:ac:0f:fe:59:61:c0:f7:fb:c4:97: 5b:00:61:fc:bd:db:c9:be:25:28:55:f2:b2:15:d0:60:36:d7: 12:ef:0f:cc:2d:45:cc:b9:83:29:a4:d6:db:85:a5:d3:db:35: 67:35:2e:60:c9:f4:34:10:c3:28:96:44:cd:81:9b:54:41:88: 07:00:36:32:02:d3:3e:51:43:74:f8:eb:ce:94:23:1e:4f:4c: b1:d9:f6:ac:db:4b:50:7a:50:59:45:8d:1d:b1:d1:19:9c:c2: 00:40:aa:91:c9:9c:4e:3e:f1:f1:5a:63:a2:e9:8c:dc:c4:86: f5:cf:6f:be:4a:0c:81:78:ce:3f:3d:38:6e:ae:ec:04:d2:90: 6e:d5:87:1d:82:8a:5c:74:16:34:b9:2a:ed:a4:a3:c8:ef:aa: 86:66:07:1c:d6:09:a6:43:f1:ed:77:19:48:9f:f9:c7:53:1e: 4e:df:5c:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDQTMxMTAvBgNVBAUTKDEzQjk0Q0FENTU5RTIwRkJCMzBFMDg5N0ExNDA2NjZC Mjc0MEFGMUUwHhcNMjUwODIxMDAwNTU2WhcNMjUwODI4MDAwNTU2WjAYMRYwFAYD VQQDEw02OGE2NjJlNC0wZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cmZQ//oevItAZBBh++ELdi3wiCcyafPrdJXCYqJiyjOFyhSN64OIjfhk80G qSPiD7UC77PnL9uucXET1ph+oaaysyIKB20fuAN+7hss/qXFHK56KhJaydzuPM1J SsufKlyHRsPo8qSYCv99gpDifuw1KzPi5Qcp+Jr+Hzk3H8UKOoxKkv4RjwcZ38cj +zc8oQuNzuzkHaiyAg60lW7NGZYLObze9zdV3T0hCLPZdhbfb2iZp0dkl8RX7tow i62uqDTMEsKuEQERrrKOIwZxk/mx9cKBgQvD4drtg3v2rkU9jnr3ZbabLvKkEcIp Ybfu3uNBOEVrU56NgxLLs/XKNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDtn31c EmspO7aI2eBnpJB94m5HMB8GA1UdIwQYMBaAFBO5TK1VniD7sw4Il6FAZmsnQK8e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0NBMy80MUI5MTBBODQ3 OEYxMUVDOUI1NjIyMkFDNEY5QUUwMi9FN2xNclZXZUlQdXpEZ2lYb1VCbWF5ZEFy eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3bE1yVldlSVB1ekRnaVhvVUJtYXlkQXJ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0NBMy80MUI5MTBBODQ3OEYxMUVDOUI1NjIyMkFDNEY5QUUwMi9FN2xNclZXZUlQ dXpEZ2lYb1VCbWF5ZEFyeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcyRwoW/N7CThE2eaGKeOn2n1vm8tQXkt6dRo8Al7G+2VEcaZRua8G M4iCOenmtdBr2kijAx+CpW5N3394Q5rQOwOt/Xu8fh0476LUA9WtfqwP/llhwPf7 xJdbAGH8vdvJviUoVfKyFdBgNtcS7w/MLUXMuYMppNbbhaXT2zVnNS5gyfQ0EMMo lkTNgZtUQYgHADYyAtM+UUN0+OvOlCMeT0yx2fas20tQelBZRY0dsdEZnMIAQKqR yZxOPvHxWmOi6YzcxIb1z2++SgyBeM4/PThuruwE0pBu1YcdgopcdBY0uSrtpKPI 76qGZgcc1gmmQ/HtdxlIn/nHUx5O31yY -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:02 2025 by rpki-client