$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft File: EnvYBqI30MrekRgrn8cmZZvi73E.mft (raw, json) Hash identifier: fV5wNB1keqAt5TDsXQnTFBstUvZGlvSKXTuIj9xuu/s= Subject key identifier: 78:0C:2C:BE:EE:C2:4C:25:7F:D5:42:CE:90:00:3A:C4:12:1C:5C:0B Authority key identifier: 12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71 Certificate issuer: /CN=A91D3876/serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71 Certificate serial: 063A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft Manifest number: 0634 Signing time: Fri 30 May 2025 22:55:37 +0000 Manifest this update: Fri 30 May 2025 22:55:36 +0000 Manifest next update: Fri 06 Jun 2025 22:55:36 +0000 Files and hashes: 1: EnvYBqI30MrekRgrn8cmZZvi73E.crl (hash: e8CyRfcJDPzbEasSDgY0XUHEQFNQgwGz0hklj/DO0I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.crl rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1594 (0x63a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3876, serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71 Validity Not Before: May 30 22:55:36 2025 GMT Not After : Jun 6 22:55:36 2025 GMT Subject: CN=683a3769-3340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:f4:a3:f0:09:4b:23:d1:85:ae:dc:b1:0b: 23:62:73:ed:6e:ad:22:b4:31:2c:1f:1f:fb:7e:0d: 57:3c:98:86:b7:53:6b:cb:30:97:3d:77:f3:ce:bf: 0c:eb:9f:b7:58:bd:f5:89:c1:85:9b:f7:df:3e:8e: b4:e0:68:99:68:32:95:24:23:d6:de:55:fe:10:91: 39:e7:d2:ef:9d:88:d5:f1:6f:4d:ab:a5:c5:9c:25: 13:6a:e7:76:13:36:66:a1:8e:23:3c:b5:08:8a:6b: 5e:de:ef:79:6a:5b:a9:1a:34:c4:7b:61:4b:11:85: f9:2c:63:b0:03:61:d3:54:4c:3e:89:0c:6a:56:86: 20:aa:d7:4c:46:6c:bf:e7:24:e7:6d:a8:b0:51:44: 5f:3c:c5:d1:56:ca:9f:93:73:bd:0f:4c:a7:00:e6: d5:be:8b:b1:dd:26:93:0d:d8:5c:13:17:a0:e5:25: cc:6a:41:7d:5d:ad:e1:97:fd:b1:f7:94:60:09:0d: e8:84:38:29:65:60:0a:6b:34:25:a0:d6:6c:b3:22: fb:c3:2c:17:48:b6:6a:15:99:b1:82:4a:5c:ac:b0: 12:10:76:96:86:6b:0c:3d:b6:b6:9a:54:60:12:8c: 5e:1a:20:88:1d:4d:39:cf:3c:bb:31:7a:93:07:3c: 42:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0C:2C:BE:EE:C2:4C:25:7F:D5:42:CE:90:00:3A:C4:12:1C:5C:0B X509v3 Authority Key Identifier: keyid:12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:e5:f4:c4:17:e6:a3:4c:06:b0:a9:5b:7c:41:b0:a6:e9:a1: 5e:6f:44:ff:3a:74:78:27:ff:fd:bc:5a:ad:3e:09:d7:5d:06: d8:76:a5:ff:45:9e:ff:74:e3:ac:41:b5:37:5d:f3:0e:0d:98: 20:7a:d6:e2:56:0f:12:e1:a4:8d:85:75:1a:ea:c0:75:a3:ae: bc:27:b7:67:0b:06:40:48:7e:f9:38:be:a1:99:d7:a9:7e:a3: 95:49:33:38:9b:45:6b:68:b1:ff:72:28:04:b5:1a:11:33:e2: 7b:a5:11:7f:22:d9:0a:e0:d7:3f:65:35:c8:2f:45:27:d1:85: 21:d1:b3:af:cf:ae:10:a5:da:a1:8a:b4:6d:fa:69:cd:4e:bb: 4e:f0:cb:6f:74:78:c4:45:65:7a:e0:ac:40:50:d4:ae:06:4a: 08:92:7c:6c:76:a8:df:a8:c7:cf:b7:e7:d1:6a:bf:11:5d:26: b4:42:eb:04:ca:fe:d8:77:80:74:75:97:55:d6:d0:cc:2d:16: 99:b0:72:16:eb:57:12:47:c8:af:de:a9:7b:17:16:2f:a5:1f: a5:1e:22:f0:19:6f:59:7e:43:ba:5e:87:4f:e3:d6:43:ff:e8: f5:6a:31:19:9b:c0:db:e0:cf:ab:ce:a3:ac:aa:c4:d4:da:a2: 0f:02:66:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM4NzYxMTAvBgNVBAUTKDEyN0JEODA2QTIzN0QwQ0FERTkxMTgyQjlGQzcyNjY1 OUJFMkVGNzEwHhcNMjUwNTMwMjI1NTM2WhcNMjUwNjA2MjI1NTM2WjAYMRYwFAYD VQQDEw02ODNhMzc2OS0zMzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyo/0o/AJSyPRha7csQsjYnPtbq0itDEsHx/7fg1XPJiGt1NryzCXPXfzzr8M 65+3WL31icGFm/ffPo604GiZaDKVJCPW3lX+EJE559LvnYjV8W9Nq6XFnCUTaud2 EzZmoY4jPLUIimte3u95alupGjTEe2FLEYX5LGOwA2HTVEw+iQxqVoYgqtdMRmy/ 5yTnbaiwUURfPMXRVsqfk3O9D0ynAObVvoux3SaTDdhcExeg5SXMakF9Xa3hl/2x 95RgCQ3ohDgpZWAKazQloNZssyL7wywXSLZqFZmxgkpcrLASEHaWhmsMPba2mlRg EoxeGiCIHU05zzy7MXqTBzxCUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgMLL7u wkwlf9VCzpAAOsQSHFwLMB8GA1UdIwQYMBaAFBJ72AaiN9DK3pEYK5/HJmWb4u9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzg3Ni8yNjJGN0FDQTk3 NzIxMUVCQkY2QTUzNjhDNEY5QUUwMi9FbnZZQnFJMzBNcmVrUmdybjhjbVpadmk3 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VudllCcUkzME1yZWtSZ3JuOGNtWlp2aTczRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mzg3Ni8yNjJGN0FDQTk3NzIxMUVCQkY2QTUzNjhDNEY5QUUwMi9FbnZZQnFJMzBN cmVrUmdybjhjbVpadmk3M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM5fTEF+ajTAawqVt8QbCm6aFeb0T/OnR4J//9vFqtPgnXXQbYdqX/ RZ7/dOOsQbU3XfMODZggetbiVg8S4aSNhXUa6sB1o668J7dnCwZASH75OL6hmdep fqOVSTM4m0VraLH/cigEtRoRM+J7pRF/ItkK4Nc/ZTXIL0Un0YUh0bOvz64Qpdqh irRt+mnNTrtO8MtvdHjERWV64KxAUNSuBkoIknxsdqjfqMfPt+fRar8RXSa0QusE yv7Yd4B0dZdV1tDMLRaZsHIW61cSR8iv3ql7FxYvpR+lHiLwGW9ZfkO6XodP49ZD /+j1ajEZm8Db4M+rzqOsqsTU2qIPAmbE -----END CERTIFICATE-----Generated at Sat May 31 17:45:05 2025 by rpki-client