$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft File: elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json) Hash identifier: QC7JYT2m0v0nd7Ot2pQVofXwpd+w6J7gYr84V2gv9cg= Subject key identifier: 00:EF:11:BA:54:4A:F2:BB:53:F3:B0:FB:55:CD:0B:85:5A:85:BE:58 Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Certificate serial: 0775 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft Manifest number: 0764 Signing time: Fri 30 May 2025 21:52:46 +0000 Manifest this update: Fri 30 May 2025 21:52:45 +0000 Manifest next update: Fri 06 Jun 2025 21:52:45 +0000 Files and hashes: 1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: 0ACFi3Yg8YN8F/TmrHsNBhILjPHph4uokp4lEgIA3mo=) 2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: N5rp+wOVUON+v7kAB8u9Xt4nLHS1jUGQrfJ3N9lLpxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:52:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1909 (0x775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Validity Not Before: May 30 21:52:45 2025 GMT Not After : Jun 6 21:52:45 2025 GMT Subject: CN=683a28ae-cd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:15:10:c7:0e:63:08:98:55:5d:d7:60:9b:4b: 52:3c:9a:62:df:2b:78:92:34:b6:3e:71:71:d3:99: 1d:69:10:9f:3c:6a:57:96:90:89:0e:18:4d:64:f6: 59:0a:10:ed:22:0b:e1:19:66:f6:e0:a3:79:8c:8b: a5:33:62:a1:55:ff:ec:dc:d1:80:08:6b:4f:8d:2f: 1a:df:d0:7c:e4:83:ef:b8:a5:79:e7:56:3b:e5:bc: 15:46:56:3a:eb:7e:26:27:2a:8f:1e:25:9c:ed:ca: 16:35:8a:ff:80:3f:cf:d2:63:8d:1e:c8:51:ee:3d: 6c:5c:5c:bd:7b:94:3d:1d:dc:12:af:67:9d:71:77: 10:18:78:bd:0e:47:70:19:a9:8d:71:6f:21:12:41: 51:f1:63:53:52:21:a3:55:21:62:50:0d:d2:fd:e2: 66:20:58:20:de:1a:15:75:e3:1d:58:8a:2c:62:a8: 4f:18:a5:ec:0f:93:5d:bd:76:f5:88:8a:3f:09:af: 43:e6:b4:28:38:60:bf:7a:51:8d:d1:8e:e3:7a:fd: 42:0b:a5:4d:6f:41:dd:93:18:a5:98:19:82:2f:bf: 71:98:7a:0b:d8:30:3f:17:01:8b:29:e4:b8:6b:f0: 13:1f:a8:57:23:c3:b5:f2:1c:b6:33:95:64:57:82: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EF:11:BA:54:4A:F2:BB:53:F3:B0:FB:55:CD:0B:85:5A:85:BE:58 X509v3 Authority Key Identifier: keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:87:e0:de:1f:d9:6b:8a:d0:62:8a:0f:39:c7:b3:55:91:a7: 25:39:d2:bf:38:29:e2:8d:4d:c6:4a:1a:db:95:e9:aa:64:ff: 9f:fd:fd:a9:20:80:c4:f5:ce:58:bb:c6:35:9f:19:32:6e:dd: 25:6d:c9:7d:55:ae:3f:fe:01:86:56:6c:82:34:02:f9:2d:28: 2e:af:ba:9c:c3:a1:6e:5e:66:60:65:9d:d2:94:46:1f:7a:1f: c5:e1:7d:28:52:f7:47:92:8b:e7:91:41:b6:59:8c:9c:69:12: 23:6c:a2:b3:e0:8a:97:03:4e:28:32:c1:b8:14:03:7e:93:54: b4:87:90:00:11:4d:d6:30:b2:ca:1b:26:33:1b:f0:af:2d:e0: cc:74:f5:4b:b2:b0:16:94:d7:c8:e9:de:eb:b7:1e:34:08:9c: 50:f1:4b:03:85:29:39:89:b4:e3:f4:78:7e:30:e4:f1:48:5c: e5:92:ba:29:29:b2:a0:72:34:48:24:23:57:40:f1:89:fd:0b: 26:0f:22:0d:c8:42:5f:e8:40:6c:5e:82:ff:69:19:91:7f:00: 5b:28:93:de:0b:23:6d:a5:9a:0a:2e:84:ed:7e:4a:2c:6d:7f: b8:76:f5:e2:7e:c2:1b:d5:f2:b7:a3:81:a9:84:ef:6d:57:bd: 4e:3f:ae:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGODcxMTAvBgNVBAUTKDdBNTQ3NDEyM0M1NDg4MTdFMjVGMzQ4NENDMjZCNjBC MDY0MUJENjkwHhcNMjUwNTMwMjE1MjQ1WhcNMjUwNjA2MjE1MjQ1WjAYMRYwFAYD VQQDEw02ODNhMjhhZS1jZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xUQxw5jCJhVXddgm0tSPJpi3yt4kjS2PnFx05kdaRCfPGpXlpCJDhhNZPZZ ChDtIgvhGWb24KN5jIulM2KhVf/s3NGACGtPjS8a39B85IPvuKV551Y75bwVRlY6 634mJyqPHiWc7coWNYr/gD/P0mONHshR7j1sXFy9e5Q9HdwSr2edcXcQGHi9Dkdw GamNcW8hEkFR8WNTUiGjVSFiUA3S/eJmIFgg3hoVdeMdWIosYqhPGKXsD5NdvXb1 iIo/Ca9D5rQoOGC/elGN0Y7jev1CC6VNb0HdkxilmBmCL79xmHoL2DA/FwGLKeS4 a/ATH6hXI8O18hy2M5VkV4Ix6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADvEbpU SvK7U/Ow+1XNC4Vahb5YMB8GA1UdIwQYMBaAFHpUdBI8VIgX4l80hMwmtgsGQb1p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9CMUNENzFGMDI2 ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlCZmlYelNFekNhMkN3WkJ2 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsUjBFanhVaUJmaVh6U0V6Q2EyQ3daQnZXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY4Ny9CMUNENzFGMDI2ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlC ZmlYelNFekNhMkN3WkJ2V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPh+DeH9lritBiig85x7NVkaclOdK/OCnijU3GShrblemqZP+f/f2p IIDE9c5Yu8Y1nxkybt0lbcl9Va4//gGGVmyCNAL5LSgur7qcw6FuXmZgZZ3SlEYf eh/F4X0oUvdHkovnkUG2WYycaRIjbKKz4IqXA04oMsG4FAN+k1S0h5AAEU3WMLLK GyYzG/CvLeDMdPVLsrAWlNfI6d7rtx40CJxQ8UsDhSk5ibTj9Hh+MOTxSFzlkrop KbKgcjRIJCNXQPGJ/QsmDyINyEJf6EBsXoL/aRmRfwBbKJPeCyNtpZoKLoTtfkos bX+4dvXifsIb1fK3o4GphO9tV71OP67C -----END CERTIFICATE-----Generated at Sat May 31 17:40:57 2025 by rpki-client