$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft File: elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json) Hash identifier: ZZnnWq2tK9cX81O5jY+/t/Cix73LZle46X2f1rsTeSE= Subject key identifier: 6E:4D:EC:47:D3:23:5D:E5:C2:0A:F5:6A:0B:C4:4F:13:DA:EA:4B:14 Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Certificate serial: 0796 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft Manifest number: 0783 Signing time: Tue 22 Jul 2025 21:52:52 +0000 Manifest this update: Tue 22 Jul 2025 21:52:52 +0000 Manifest next update: Tue 29 Jul 2025 21:52:52 +0000 Files and hashes: 1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: d+ozvOkgF4PWu0HAwf2XJn1y2/vrYbLXHpZ7zY/Bzng=) 2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: d4sd7UZZo9a+uPHZX7tMr/i70JRLudIGa9+mnphuZB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 21:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1942 (0x796) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Validity Not Before: Jul 22 21:52:52 2025 GMT Not After : Jul 29 21:52:52 2025 GMT Subject: CN=68800834-6bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:5b:87:87:c2:76:3c:78:06:54:c1:eb:a9: c3:1a:e7:a3:dd:41:d7:e3:91:ee:3b:78:09:5b:49: 90:d6:9c:54:20:79:82:00:48:e8:ba:28:57:ea:23: 60:d0:18:58:cf:c7:47:8f:7f:f5:d4:76:32:10:a2: 6b:09:a8:89:57:d9:24:5c:46:8e:d1:53:71:3e:1b: 47:44:93:3f:31:36:67:2a:fa:23:c9:21:90:22:2b: 95:6e:d7:c1:c0:6f:c6:1c:c5:37:e9:c4:dd:13:ca: de:cc:89:8f:70:e3:f2:e9:57:41:47:a4:5b:99:b5: 57:9f:63:ec:4c:9a:92:95:6a:f5:34:7e:1a:bf:5f: cd:c8:fc:08:c1:25:78:e5:25:e9:ed:f2:cb:38:9d: 8b:0b:ea:2d:d7:07:6c:cb:f1:a1:f9:c9:72:6e:61: 19:74:c4:2b:33:7f:b7:7f:84:e5:43:c5:2e:33:c1: 5e:1c:3a:5f:9f:95:e1:81:cf:a7:f6:67:73:6b:06: 67:ae:93:38:41:d5:29:2e:2a:0c:77:68:db:46:7c: a3:6d:d7:fe:a7:9c:67:71:f2:e1:6a:ee:79:eb:25: 2d:93:3d:86:ef:c2:38:17:6e:a1:bc:ed:d2:85:bf: 2f:6f:30:6d:9f:fb:2f:ef:79:c8:56:c1:86:6e:18: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4D:EC:47:D3:23:5D:E5:C2:0A:F5:6A:0B:C4:4F:13:DA:EA:4B:14 X509v3 Authority Key Identifier: keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:97:3c:85:cf:96:cd:37:da:81:0f:f0:27:00:18:cc:6d:61: 67:7c:5d:de:b0:3c:e8:26:f2:f3:5c:50:ab:ea:76:5d:0a:55: a0:e1:81:23:e1:88:85:1b:02:b6:1c:0a:b7:63:51:c6:01:8d: 0b:c7:a2:20:9e:ae:04:da:3f:d6:93:c9:dd:bc:8d:28:f5:c2: 56:f9:3a:49:f9:ba:1b:c3:fb:13:5a:01:68:24:02:fa:25:d0: 73:7d:71:df:48:04:24:ca:e5:5a:8b:e1:9f:b2:2a:b7:fd:6d: 06:ab:de:fd:47:0e:31:5a:7b:92:ed:be:db:4a:61:8c:36:c2: 39:23:6c:5e:a7:6c:5b:12:2b:af:3a:9c:d6:1d:b7:4d:7c:84: 41:81:26:ad:68:07:13:f0:f2:c8:78:28:2e:47:53:73:9e:cb: 76:a2:50:0b:5e:6a:4c:a2:6a:ed:bc:6d:12:32:ce:85:9d:35: eb:e6:88:da:5b:2c:b3:bf:04:52:40:a6:e7:3c:d3:c5:dd:2a: 95:1b:23:01:5b:b8:c7:20:b3:c8:ba:28:e6:bf:ef:80:8b:5c: 6f:6c:5a:b5:54:40:1a:07:3f:57:e2:79:23:10:03:b0:ef:73: 00:b9:45:cc:4f:76:80:ef:5f:ff:75:2f:05:95:e0:97:47:82: c3:46:08:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGODcxMTAvBgNVBAUTKDdBNTQ3NDEyM0M1NDg4MTdFMjVGMzQ4NENDMjZCNjBC MDY0MUJENjkwHhcNMjUwNzIyMjE1MjUyWhcNMjUwNzI5MjE1MjUyWjAYMRYwFAYD VQQDEw02ODgwMDgzNC02YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwdbh4fCdjx4BlTB66nDGuej3UHX45HuO3gJW0mQ1pxUIHmCAEjouihX6iNg 0BhYz8dHj3/11HYyEKJrCaiJV9kkXEaO0VNxPhtHRJM/MTZnKvojySGQIiuVbtfB wG/GHMU36cTdE8rezImPcOPy6VdBR6RbmbVXn2PsTJqSlWr1NH4av1/NyPwIwSV4 5SXp7fLLOJ2LC+ot1wdsy/Gh+clybmEZdMQrM3+3f4TlQ8UuM8FeHDpfn5Xhgc+n 9mdzawZnrpM4QdUpLioMd2jbRnyjbdf+p5xncfLhau556yUtkz2G78I4F26hvO3S hb8vbzBtn/sv73nIVsGGbhha2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5N7EfT I13lwgr1agvETxPa6ksUMB8GA1UdIwQYMBaAFHpUdBI8VIgX4l80hMwmtgsGQb1p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9CMUNENzFGMDI2 ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlCZmlYelNFekNhMkN3WkJ2 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsUjBFanhVaUJmaVh6U0V6Q2EyQ3daQnZXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY4Ny9CMUNENzFGMDI2ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlC ZmlYelNFekNhMkN3WkJ2V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBllzyFz5bNN9qBD/AnABjMbWFnfF3esDzoJvLzXFCr6nZdClWg4YEj 4YiFGwK2HAq3Y1HGAY0Lx6Ignq4E2j/Wk8ndvI0o9cJW+TpJ+bobw/sTWgFoJAL6 JdBzfXHfSAQkyuVai+Gfsiq3/W0Gq979Rw4xWnuS7b7bSmGMNsI5I2xep2xbEiuv OpzWHbdNfIRBgSataAcT8PLIeCguR1Nznst2olALXmpMomrtvG0SMs6FnTXr5oja WyyzvwRSQKbnPNPF3SqVGyMBW7jHILPIuijmv++Ai1xvbFq1VEAaBz9X4nkjEAOw 73MAuUXMT3aA71//dS8FleCXR4LDRggf -----END CERTIFICATE-----Generated at Thu Jul 24 00:27:56 2025 by rpki-client