$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft File: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json) Hash identifier: i15yFJArxPmlzJouc3/E/02J3YJu22RaMq66h8RPcFQ= Subject key identifier: F5:64:39:AE:08:09:3D:D8:62:BC:41:D6:2F:86:2B:70:AD:8F:93:1B Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 Certificate issuer: /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft Manifest number: 021B Signing time: Tue 09 Sep 2025 02:07:48 +0000 Manifest this update: Tue 09 Sep 2025 02:07:48 +0000 Manifest next update: Tue 16 Sep 2025 02:07:47 +0000 Files and hashes: 1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: hpqjWdOJJ2h5546zxziZwBqKmdpXUV+y3cBH5gf5VZ8=) 2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: SUpV5MPTH/BMBi71c7spbVUHkBTzCZVpxBmfHqDrVmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Validity Not Before: Sep 9 02:07:48 2025 GMT Not After : Sep 16 02:07:47 2025 GMT Subject: CN=68bf8bf4-5e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:37:ae:25:51:d5:4c:31:60:21:1e:9e:ea:b8: f2:a4:16:8e:f9:90:14:84:0a:5f:fd:59:b5:3b:f1: 6e:44:69:58:b6:c8:2e:e0:05:22:0c:b7:d1:1f:d0: 97:87:f2:79:9f:f3:e5:d1:01:96:ce:16:e9:da:3d: 99:cd:3c:78:17:f7:0a:69:8f:57:2f:e0:01:70:85: 5c:c4:f0:bf:4b:3e:55:ac:93:a5:a6:42:1d:01:74: 39:6e:55:4d:2c:04:f6:c5:10:91:8f:bc:b0:8e:d2: b2:de:49:31:24:32:a7:39:8b:61:d8:8f:1a:56:d7: cb:a6:e4:bc:59:4f:05:40:b1:9b:f0:77:4f:ff:34: f0:3d:fc:55:88:65:09:ed:17:20:b8:ef:62:f5:0d: 34:24:49:31:20:9b:b2:e3:e6:1d:77:ef:2c:ab:4f: 08:75:be:f0:be:55:e4:2c:37:4d:af:ec:dc:79:89: ab:b1:15:6e:06:e5:89:22:8a:61:8a:d4:61:5d:18: db:b7:65:6c:c3:25:a1:f0:eb:9b:b3:3b:fd:dc:01: e7:35:0b:9d:a3:4e:b2:76:bb:d9:0b:4a:e2:68:b8: d7:3d:4a:a3:23:8b:f2:d9:51:57:c1:82:5a:34:c2: cf:63:07:48:5b:6c:d0:78:d1:85:1e:bf:84:29:ee: dc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:64:39:AE:08:09:3D:D8:62:BC:41:D6:2F:86:2B:70:AD:8F:93:1B X509v3 Authority Key Identifier: keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:78:b7:5f:50:ec:90:86:26:f4:6f:6b:52:af:00:7a:43:11: ab:4a:d5:a7:18:ae:88:83:ad:0f:c8:66:bb:66:c6:4c:cd:c1: 8a:a3:89:4d:ad:e6:5a:25:18:aa:52:0f:21:be:91:0b:39:07: c2:b5:43:15:99:5a:ed:fa:97:ca:40:2e:cf:e1:00:47:04:59: d0:29:f4:3b:b6:03:a4:6f:83:80:8d:12:2f:70:93:8c:9f:79: f8:71:c7:c0:e3:e7:f0:d8:a8:7d:f7:94:10:dd:e0:80:8c:17: 39:34:2a:b5:cb:ed:b1:de:a8:8a:79:75:dd:3e:f6:6c:60:97: 8f:93:41:7a:0c:f0:fd:28:85:5f:40:c4:71:b1:89:06:5e:00: 04:5b:d1:68:e6:13:e8:9a:2b:48:b0:c1:85:ce:85:b1:f6:1a: 1c:2c:df:be:bc:b5:d2:a5:0c:a8:ca:e8:ef:3f:60:36:52:26: a2:37:be:28:c7:b4:11:fa:fc:21:c4:44:22:fe:88:26:d1:43: 29:9e:4f:87:f0:e4:ed:b7:25:28:e0:77:d3:c7:9f:a7:41:1a: e7:30:b2:75:31:31:2e:b0:d5:fa:b3:2f:df:17:26:c6:ed:9f: c1:5a:d9:c9:fe:69:f9:79:20:c7:1f:9e:a2:79:da:df:37:4b: c0:d9:5d:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDEzQjI3RkQ0NjI0OEY0QTczM0Q5MjQ2NTFDOTQwQ0I3 RjFBMzA2MDkwHhcNMjUwOTA5MDIwNzQ4WhcNMjUwOTE2MDIwNzQ3WjAYMRYwFAYD VQQDEw02OGJmOGJmNC01ZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTeuJVHVTDFgIR6e6rjypBaO+ZAUhApf/Vm1O/FuRGlYtsgu4AUiDLfRH9CX h/J5n/Pl0QGWzhbp2j2ZzTx4F/cKaY9XL+ABcIVcxPC/Sz5VrJOlpkIdAXQ5blVN LAT2xRCRj7ywjtKy3kkxJDKnOYth2I8aVtfLpuS8WU8FQLGb8HdP/zTwPfxViGUJ 7RcguO9i9Q00JEkxIJuy4+Ydd+8sq08Idb7wvlXkLDdNr+zceYmrsRVuBuWJIoph itRhXRjbt2VswyWh8Oubszv93AHnNQudo06ydrvZC0riaLjXPUqjI4vy2VFXwYJa NMLPYwdIW2zQeNGFHr+EKe7cVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPVkOa4I CT3YYrxB1i+GK3Ctj5MbMB8GA1UdIwQYMBaAFBOyf9RiSPSnM9kkZRyUDLfxowYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zRUY3RTlCQzU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlLY3oyU1JsSEpRTXRfR2pC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Sl8xR0pJOUtjejJTUmxISlFNdF9HakJnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zRUY3RTlCQzU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlL Y3oyU1JsSEpRTXRfR2pCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQeLdfUOyQhib0b2tSrwB6QxGrStWnGK6Ig60PyGa7ZsZMzcGKo4lN reZaJRiqUg8hvpELOQfCtUMVmVrt+pfKQC7P4QBHBFnQKfQ7tgOkb4OAjRIvcJOM n3n4ccfA4+fw2Kh995QQ3eCAjBc5NCq1y+2x3qiKeXXdPvZsYJePk0F6DPD9KIVf QMRxsYkGXgAEW9Fo5hPomitIsMGFzoWx9hocLN++vLXSpQyoyujvP2A2UiaiN74o x7QR+vwhxEQi/ogm0UMpnk+H8OTttyUo4HfTx5+nQRrnMLJ1MTEusNX6sy/fFybG 7Z/BWtnJ/mn5eSDHH56iedrfN0vA2V3E -----END CERTIFICATE-----Generated at Tue Sep 9 13:20:50 2025 by rpki-client