$ rpki-client -vvf rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft File: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft (raw, json) Hash identifier: 2x2IM8FVZK63RrDTX45hdigTEnr4tBjrKBQvrLNhi4s= Subject key identifier: EB:BF:03:01:5F:D2:EB:D3:F4:FE:16:0B:08:E8:4E:C8:1D:E6:34:2F Authority key identifier: A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD Certificate issuer: /CN=A91A995E/serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft Manifest number: 4C Signing time: Fri 25 Jul 2025 07:44:06 +0000 Manifest this update: Fri 25 Jul 2025 07:44:05 +0000 Manifest next update: Fri 01 Aug 2025 07:44:05 +0000 Files and hashes: 1: pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl (hash: xbbnq3aDT0FLGGmL+FbtqH3x3uY+XSp2knl3d1mGsos=) 2: B3E4D03621B111F089CE216DC4F9AE02.roa (hash: VCQENYwleJhQRqqUILKpkln6ADdmKoB6HviWfuCE7i4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 07:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A995E, serialNumber=A5EBDF983919C60F622F34EF8FC521E72489D1CD Validity Not Before: Jul 25 07:44:05 2025 GMT Not After : Aug 1 07:44:05 2025 GMT Subject: CN=688335c6-3876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:72:ef:62:96:4d:57:3b:7e:7c:15:c5:62: 3f:da:17:b5:c4:ce:5c:72:08:54:f6:73:18:44:49: 88:64:52:ed:3e:c4:a8:32:ba:0a:b2:e3:67:b4:b4: 3b:8a:d5:32:23:9f:76:60:68:2e:a4:17:b4:1d:27: c8:cc:e5:a2:1e:11:66:bb:80:de:57:cf:f5:97:b3: e2:62:f2:46:cf:e0:b1:bc:e6:d5:9c:b6:e3:4a:7a: a5:42:40:2d:37:60:60:7b:23:28:83:06:44:d1:2d: da:3d:e7:03:56:f1:1d:63:f6:03:dd:8a:8c:92:5b: 48:9a:85:df:c5:d5:b6:78:24:6f:d2:40:34:8a:48: 71:ee:93:dd:07:15:8f:dd:6e:56:61:f0:88:d0:0b: a4:e8:b2:72:d2:8c:3a:2f:a1:48:8a:df:b7:2c:8b: 65:bb:79:09:1a:96:6d:df:ab:39:a3:b5:22:c9:f0: a5:f7:9c:03:8b:e9:91:59:8d:61:d9:87:e1:f2:20: d7:d1:ef:cd:07:18:52:2e:17:47:94:57:e2:21:cf: 7b:81:f4:27:88:dc:0a:60:8f:08:5e:d6:ff:74:77: df:86:e0:5b:13:d7:38:15:d5:50:0c:cf:92:42:b7: ff:61:86:47:b0:89:72:52:32:64:83:a6:bc:1b:29: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BF:03:01:5F:D2:EB:D3:F4:FE:16:0B:08:E8:4E:C8:1D:E6:34:2F X509v3 Authority Key Identifier: keyid:A5:EB:DF:98:39:19:C6:0F:62:2F:34:EF:8F:C5:21:E7:24:89:D1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A995E/37BB5F82FA6211EF95555C0EC4F9AE02/pevfmDkZxg9iLzTvj8Uh5ySJ0c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:81:39:a0:0e:6f:f8:90:82:b1:23:95:41:b5:3a:96:21:a7: 61:ee:01:9b:64:1b:94:fa:a6:c4:3c:91:e8:9a:b4:85:95:c1: 70:d9:24:b2:08:b9:48:0f:77:fd:70:b9:80:2e:fb:d8:31:f9: 14:80:ba:55:77:e2:81:85:ee:60:6e:76:88:ab:bd:fa:f7:ed: 01:a1:99:cb:c6:c3:82:11:a8:a6:f0:1e:a2:09:08:b8:b3:5f: 3a:ac:c2:d3:c7:57:8c:64:8d:0a:1b:ea:5c:a1:91:f9:83:97: 2b:d2:af:ef:2a:cb:cb:b9:c9:a1:98:9d:c3:de:4c:50:b2:f4: 61:a9:e2:c0:55:b7:f7:54:9a:ff:4c:77:6d:b9:d3:b8:05:e1: f7:ac:dd:fa:7a:18:f0:00:9b:57:d4:36:aa:ce:fe:df:63:7f: f4:d2:5f:28:91:69:e5:bc:d0:b1:17:83:10:b2:f8:02:13:68: 13:63:dc:43:8b:c9:3e:45:5e:53:e0:74:f2:d6:a0:48:6a:76: 4b:6c:fe:39:89:ec:3d:87:94:79:f4:3b:87:d6:bb:3b:d7:ae: a4:54:ab:0e:f1:91:2b:29:1c:ec:5b:dd:81:96:76:18:bd:ab: be:4d:bc:2c:25:e8:f7:e2:62:82:93:0c:5a:86:3a:c1:9c:b5: 66:6f:c7:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTk1RTExMC8GA1UEBRMoQTVFQkRGOTgzOTE5QzYwRjYyMkYzNEVGOEZDNTIxRTcy NDg5RDFDRDAeFw0yNTA3MjUwNzQ0MDVaFw0yNTA4MDEwNzQ0MDVaMBgxFjAUBgNV BAMTDTY4ODMzNWM2LTM4NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/wXLvYpZNVzt+fBXFYj/aF7XEzlxyCFT2cxhESYhkUu0+xKgyugqy42e0tDuK 1TIjn3ZgaC6kF7QdJ8jM5aIeEWa7gN5Xz/WXs+Ji8kbP4LG85tWctuNKeqVCQC03 YGB7IyiDBkTRLdo95wNW8R1j9gPdioySW0iahd/F1bZ4JG/SQDSKSHHuk90HFY/d blZh8IjQC6TosnLSjDovoUiK37csi2W7eQkalm3fqzmjtSLJ8KX3nAOL6ZFZjWHZ h+HyINfR780HGFIuF0eUV+Ihz3uB9CeI3Apgjwhe1v90d9+G4FsT1zgV1VAMz5JC t/9hhkewiXJSMmSDprwbKR4ZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU678DAV/S 69P0/hYLCOhOyB3mNC8wHwYDVR0jBBgwFoAUpevfmDkZxg9iLzTvj8Uh5ySJ0c0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OTVFLzM3QkI1RjgyRkE2 MjExRUY5NTU1NUMwRUM0RjlBRTAyL3BldmZtRGtaeGc5aUx6VHZqOFVoNXlTSjBj MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGV2Zm1Ea1p4ZzlpTHpUdmo4VWg1eVNKMGMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 OTVFLzM3QkI1RjgyRkE2MjExRUY5NTU1NUMwRUM0RjlBRTAyL3BldmZtRGtaeGc5 aUx6VHZqOFVoNXlTSjBjMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAASBOaAOb/iQgrEjlUG1OpYhp2HuAZtkG5T6psQ8keiatIWVwXDZJLII uUgPd/1wuYAu+9gx+RSAulV34oGF7mBudoirvfr37QGhmcvGw4IRqKbwHqIJCLiz XzqswtPHV4xkjQob6lyhkfmDlyvSr+8qy8u5yaGYncPeTFCy9GGp4sBVt/dUmv9M d22507gF4fes3fp6GPAAm1fUNqrO/t9jf/TSXyiRaeW80LEXgxCy+AITaBNj3EOL yT5FXlPgdPLWoEhqdkts/jmJ7D2HlHn0O4fWuzvXrqRUqw7xkSspHOxb3YGWdhi9 q75NvCwl6PfiYoKTDFqGOsGctWZvxwU= -----END CERTIFICATE-----Generated at Sat Jul 26 05:45:44 2025 by rpki-client