$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft File: elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json) Hash identifier: +p2I02d/bDj6YLpCZls1gQqtlgY5Q4hkITo20lBnRLM= Subject key identifier: 9F:D0:B4:4D:9E:53:25:3C:B4:C4:21:0B:BF:33:F6:CD:99:33:29:01 Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft Manifest number: 07A1 Signing time: Thu 18 Sep 2025 21:45:22 +0000 Manifest this update: Thu 18 Sep 2025 21:45:21 +0000 Manifest next update: Thu 25 Sep 2025 21:45:21 +0000 Files and hashes: 1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: oJ3fePMNe+BE4yrmErqH971SFrbpqb+lgou1MIN/Iok=) 2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: d4sd7UZZo9a+uPHZX7tMr/i70JRLudIGa9+mnphuZB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Validity Not Before: Sep 18 21:45:21 2025 GMT Not After : Sep 25 21:45:21 2025 GMT Subject: CN=68cc7d72-b42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:63:8b:d8:90:a4:9d:f7:56:06:74:c9:9d: 36:bc:74:97:44:d5:91:61:99:0c:31:af:39:81:7c: 59:11:3f:26:61:17:be:8b:68:f1:a0:bf:a4:ab:0b: c7:f1:f2:4f:37:fb:10:c9:48:7d:d1:9c:d1:b8:6f: 5e:92:e1:88:03:4d:b6:cf:b5:8f:be:0f:37:8c:02: b7:d6:44:b0:a4:de:71:b3:d1:66:6f:43:e9:85:ac: 36:d0:53:44:70:65:d6:79:1e:db:9d:0c:78:ac:76: 98:26:c3:19:ba:de:bc:d4:1c:13:18:b7:65:7c:14: f4:fe:16:49:6c:00:3d:9f:04:55:0d:9b:dd:b9:b7: 2c:b7:4d:f1:d2:16:15:8e:ab:3c:67:5f:a5:dc:97: ae:90:c8:50:5c:f8:bd:11:d7:f9:3b:aa:0f:6d:78: cf:ce:16:08:a6:52:f9:0f:5d:e5:fc:ab:8e:1a:1f: 83:14:24:fc:d1:64:71:79:5b:fc:72:d6:2e:c5:ef: 10:e2:c0:84:51:37:6a:52:7b:5d:5c:8a:9e:e8:f9: 11:8d:4a:c4:d5:ce:7d:50:31:8f:f1:12:02:e9:cf: 23:fc:59:f5:82:a1:75:f6:57:ba:95:af:9a:4f:2a: 5d:fc:89:12:85:50:db:5c:8e:14:3b:39:3a:ba:46: ac:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D0:B4:4D:9E:53:25:3C:B4:C4:21:0B:BF:33:F6:CD:99:33:29:01 X509v3 Authority Key Identifier: keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:bb:c5:58:5a:cb:13:7d:d8:a1:7d:d3:e2:75:fd:90:06:4c: 37:b7:a6:a7:cd:37:35:d8:89:ca:6d:1a:03:61:80:94:5c:ac: cc:40:08:b1:ac:09:34:9d:65:f9:3b:76:bd:96:0a:83:0f:08: a7:54:f3:06:f4:e1:a6:1a:0c:6f:fd:19:1b:1d:8b:17:6d:2c: 06:da:e6:76:55:86:13:f4:fe:ad:bc:a5:7f:10:90:4e:04:96: 05:2d:53:69:7d:2a:33:d7:3e:83:98:0e:6e:2a:e5:ae:43:f8: 5a:e4:2c:20:65:b6:63:97:21:b0:c6:92:3b:7f:34:91:c0:e5: 11:be:b2:d7:74:67:ec:87:94:8f:e5:38:cc:aa:48:81:12:92: 11:5b:72:aa:d6:90:14:c0:20:55:fe:55:f6:9a:36:67:33:c3: d0:32:8e:7f:b8:63:3c:35:56:bc:60:78:68:21:93:1f:53:ac: de:ca:09:10:1f:a5:25:90:19:19:2c:34:ba:1b:57:54:2d:0d: 3a:88:16:29:32:87:bc:fa:51:ed:5a:f9:c4:17:7b:78:9d:d6: 10:e0:15:36:be:2f:a2:a8:22:eb:1c:ab:b1:f2:2f:1b:e8:8b: 9e:88:9f:9e:36:04:b8:5c:79:cd:5f:c9:dc:7d:ce:56:bb:30: 56:4f:e5:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGODcxMTAvBgNVBAUTKDdBNTQ3NDEyM0M1NDg4MTdFMjVGMzQ4NENDMjZCNjBC MDY0MUJENjkwHhcNMjUwOTE4MjE0NTIxWhcNMjUwOTI1MjE0NTIxWjAYMRYwFAYD VQQDEw02OGNjN2Q3Mi1iNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArA5ji9iQpJ33VgZ0yZ02vHSXRNWRYZkMMa85gXxZET8mYRe+i2jxoL+kqwvH 8fJPN/sQyUh90ZzRuG9ekuGIA022z7WPvg83jAK31kSwpN5xs9Fmb0Pphaw20FNE cGXWeR7bnQx4rHaYJsMZut681BwTGLdlfBT0/hZJbAA9nwRVDZvdubcst03x0hYV jqs8Z1+l3JeukMhQXPi9Edf5O6oPbXjPzhYIplL5D13l/KuOGh+DFCT80WRxeVv8 ctYuxe8Q4sCEUTdqUntdXIqe6PkRjUrE1c59UDGP8RIC6c8j/Fn1gqF19le6la+a Typd/IkShVDbXI4UOzk6ukasawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/QtE2e UyU8tMQhC78z9s2ZMykBMB8GA1UdIwQYMBaAFHpUdBI8VIgX4l80hMwmtgsGQb1p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9CMUNENzFGMDI2 ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlCZmlYelNFekNhMkN3WkJ2 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsUjBFanhVaUJmaVh6U0V6Q2EyQ3daQnZXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY4Ny9CMUNENzFGMDI2ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlC ZmlYelNFekNhMkN3WkJ2V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCu8VYWssTfdihfdPidf2QBkw3t6anzTc12InKbRoDYYCUXKzMQAix rAk0nWX5O3a9lgqDDwinVPMG9OGmGgxv/RkbHYsXbSwG2uZ2VYYT9P6tvKV/EJBO BJYFLVNpfSoz1z6DmA5uKuWuQ/ha5CwgZbZjlyGwxpI7fzSRwOURvrLXdGfsh5SP 5TjMqkiBEpIRW3Kq1pAUwCBV/lX2mjZnM8PQMo5/uGM8NVa8YHhoIZMfU6zeygkQ H6UlkBkZLDS6G1dULQ06iBYpMoe8+lHtWvnEF3t4ndYQ4BU2vi+iqCLrHKux8i8b 6IueiJ+eNgS4XHnNX8ncfc5WuzBWT+XA -----END CERTIFICATE-----Generated at Fri Sep 19 07:13:29 2025 by rpki-client