$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft File: EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json) Hash identifier: nNT8Xz5SrmgtqdBSom3cqhVpYSsPSRs08Vsb+u64VlE= Subject key identifier: 40:65:07:0C:59:06:5F:86:2F:48:F1:5A:9D:AC:37:F2:B6:95:3B:C8 Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 Certificate issuer: /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft Manifest number: 038F Signing time: Sat 07 Jun 2025 00:51:53 +0000 Manifest this update: Sat 07 Jun 2025 00:51:53 +0000 Manifest next update: Sat 14 Jun 2025 00:51:53 +0000 Files and hashes: 1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: SbOe4q0JNqzZ7O6qC7xfGAW7NKFn2m8XZYZjZTLKass=) 2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 00:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04 Validity Not Before: Jun 7 00:51:53 2025 GMT Not After : Jun 14 00:51:53 2025 GMT Subject: CN=68438d29-1b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5f:ca:15:65:8f:63:6d:4b:eb:9a:79:e9:0e: 9b:24:16:8b:25:5a:99:66:b0:c0:e3:ce:53:15:59: 9f:39:20:e7:09:0d:6d:97:5c:9a:90:f7:54:4d:d9: c5:1a:4a:07:12:03:8e:7a:14:32:2d:64:d6:5b:89: c4:fe:f0:3a:a3:b7:ff:40:cd:19:c3:00:90:99:80: be:b6:61:25:52:0a:2d:11:00:56:e4:59:04:82:aa: 42:63:27:07:13:a0:0a:44:1b:f4:1e:fb:5a:74:5f: b7:3f:9a:bc:9a:9c:b9:7c:d5:cb:7d:fa:33:d0:3c: 6d:be:72:07:a7:e0:87:d3:80:c0:ee:bd:91:42:5f: d1:aa:42:5c:75:e6:af:93:1c:be:07:dd:1c:a0:60: d1:ac:ce:03:0f:2c:a1:e5:4b:83:e0:b3:75:aa:a4: e4:28:92:73:92:ff:8f:6d:34:fb:c2:be:c0:95:4a: c3:0e:5f:db:42:90:a3:4f:e2:28:42:07:5d:b6:f9: 15:5f:95:0b:ad:a8:10:9a:d2:d9:b9:bc:ab:53:ed: 0f:c8:04:c1:9f:0d:b1:1a:a2:c8:c7:45:92:16:77: 68:30:67:5a:31:07:7f:53:3b:89:c7:e2:26:df:73: cb:55:75:14:45:bf:ac:d1:e6:ad:f6:3b:9e:c8:29: 72:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:65:07:0C:59:06:5F:86:2F:48:F1:5A:9D:AC:37:F2:B6:95:3B:C8 X509v3 Authority Key Identifier: keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:5b:46:e1:e8:5f:a7:12:6f:69:74:86:6e:9a:f5:f8:37:78: a4:6f:43:d8:69:b5:e6:e7:94:05:fc:6f:fb:c5:2e:47:63:a9: a1:e2:2c:50:90:f0:fd:4c:f1:16:45:41:0c:ef:e4:6f:50:74: 3e:f3:17:4e:f3:48:91:f3:41:e8:e1:dd:86:6c:40:76:b4:58: f2:63:a1:53:0f:19:c2:96:d8:ee:d6:d5:ca:bc:c2:1d:30:32: d3:31:3f:c6:e1:c4:b4:52:de:87:82:cb:59:23:4b:10:55:79: 1a:fa:e3:fd:24:ad:44:5b:f4:d9:d1:4d:f5:cb:9f:00:6a:52: 6c:60:06:54:43:10:39:8e:ee:12:90:93:fd:c1:08:9d:2a:ce: c8:70:ec:f7:c7:59:3a:11:6d:1b:38:f9:b6:29:cf:59:e2:7f: 42:c7:04:d7:a9:95:83:85:28:47:97:fa:a3:b7:a8:d1:28:f0: 2e:34:bf:7b:da:61:9b:29:e1:7e:01:3c:f9:3a:c2:d3:06:f7: a3:06:da:e1:f5:fd:c7:4e:98:8d:b1:60:fd:e2:a6:ab:a4:8d: 1b:8e:46:19:d3:5c:af:ab:2b:12:41:0f:01:2f:53:c7:34:15: ad:d2:6e:8e:f3:4b:cd:7a:05:65:66:3a:87:1c:e1:23:2d:36: ee:00:d4:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4 N0Y1QkZFMDQwHhcNMjUwNjA3MDA1MTUzWhcNMjUwNjE0MDA1MTUzWjAYMRYwFAYD VQQDEw02ODQzOGQyOS0xYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyV/KFWWPY21L65p56Q6bJBaLJVqZZrDA485TFVmfOSDnCQ1tl1yakPdUTdnF GkoHEgOOehQyLWTWW4nE/vA6o7f/QM0ZwwCQmYC+tmElUgotEQBW5FkEgqpCYycH E6AKRBv0HvtadF+3P5q8mpy5fNXLffoz0DxtvnIHp+CH04DA7r2RQl/RqkJcdeav kxy+B90coGDRrM4DDyyh5UuD4LN1qqTkKJJzkv+PbTT7wr7AlUrDDl/bQpCjT+Io QgddtvkVX5ULragQmtLZubyrU+0PyATBnw2xGqLIx0WSFndoMGdaMQd/UzuJx+Im 33PLVXUURb+s0eat9jueyCly4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBlBwxZ Bl+GL0jxWp2sN/K2lTvIMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHW0bh6F+nEm9pdIZumvX4N3ikb0PYabXm55QF/G/7xS5HY6mh4ixQ kPD9TPEWRUEM7+RvUHQ+8xdO80iR80Ho4d2GbEB2tFjyY6FTDxnCltju1tXKvMId MDLTMT/G4cS0Ut6HgstZI0sQVXka+uP9JK1EW/TZ0U31y58AalJsYAZUQxA5ju4S kJP9wQidKs7IcOz3x1k6EW0bOPm2Kc9Z4n9CxwTXqZWDhShHl/qjt6jRKPAuNL97 2mGbKeF+ATz5OsLTBvejBtrh9f3HTpiNsWD94qarpI0bjkYZ01yvqysSQQ8BL1PH NBWt0m6O80vNegVlZjqHHOEjLTbuANQz -----END CERTIFICATE-----Generated at Sat Jun 7 12:26:51 2025 by rpki-client