$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json) Hash identifier: bwvlZGz6Vz9VcYXvP78yMzRaDtEBZ21kK7gtnV2kpGI= Subject key identifier: 5E:E5:3F:86:FF:07:0B:D9:7B:D9:81:D3:3D:7F:E4:50:C8:20:D6:CF Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 Certificate issuer: /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft Manifest number: BD Signing time: Thu 03 Jul 2025 06:01:36 +0000 Manifest this update: Thu 03 Jul 2025 06:01:36 +0000 Manifest next update: Thu 10 Jul 2025 06:01:36 +0000 Files and hashes: 1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: N9CA8+QinNSovDpcN2hyLkfizd+OYutWVdhhhzm9NYg=) 2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: fcp/kSCKLyceNrAoRX8L9CBT7OWwtj1KK81m97wM7rw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Validity Not Before: Jul 3 06:01:36 2025 GMT Not After : Jul 10 06:01:36 2025 GMT Subject: CN=68661cc0-6d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f9:cf:68:70:4a:31:eb:31:bf:b4:88:2d:f2: 87:6a:ef:ae:67:e4:49:2d:5e:65:18:a9:19:26:9a: 33:ac:4a:d3:1d:72:9e:92:02:d1:f5:97:9b:4a:ec: b2:d6:2f:58:ee:c7:5c:8e:da:d7:58:30:a7:00:23: 9f:cb:c1:bf:67:cc:87:91:bf:4f:ab:72:bf:b6:eb: 93:60:84:8a:6d:b4:05:03:cd:75:6a:64:06:a3:0a: db:47:04:3a:b5:ff:dc:2d:70:15:25:46:36:dd:52: 35:3d:a4:b0:a3:d9:13:4b:3c:53:75:bb:79:dd:b8: 4a:24:df:fb:40:36:e2:f6:ec:10:f0:1b:7c:5d:f4: 03:85:78:84:a1:64:93:3f:b7:6f:70:5d:92:87:df: d8:dd:92:79:a1:47:96:38:f3:c9:c5:a7:4b:76:b4: 6c:85:41:6c:8e:02:15:96:0a:4a:14:5e:14:b4:ec: 7b:b2:d8:16:bb:4a:91:77:e1:9d:ca:8b:c8:96:b6: 6e:8a:da:ea:d7:7f:89:a4:20:ee:de:ca:b7:a5:b4: d2:b3:8c:47:30:d6:a4:7b:7a:db:e8:ba:8b:23:bd: e1:a3:bc:87:c8:17:67:d7:84:8a:7a:13:7c:7c:83: ad:92:3a:a1:f7:86:46:ae:c2:96:7f:39:68:c4:92: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E5:3F:86:FF:07:0B:D9:7B:D9:81:D3:3D:7F:E4:50:C8:20:D6:CF X509v3 Authority Key Identifier: keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ae:d9:e1:21:cd:9d:47:97:2f:b5:ad:ff:ac:27:25:89:92: b4:10:d2:3a:04:5e:ec:26:cb:50:15:39:6a:ad:69:9e:7b:fe: 99:30:98:09:7c:44:c2:2b:ee:02:ac:cd:7e:94:8e:dc:ce:30: 50:48:4a:bb:3f:79:e3:0b:a5:c1:f8:f6:13:db:5d:0b:79:0b: 88:35:f2:90:b4:18:76:f1:fe:10:48:27:7d:44:39:21:63:92: 73:d1:cc:bf:2b:93:26:c3:f4:1a:9d:fc:a4:95:20:d9:03:1d: b2:2b:4a:52:f9:fe:ee:0c:6f:96:51:ac:41:65:e1:99:d5:56: 29:14:1c:2d:65:c1:9d:17:e7:dd:5e:2c:7f:67:df:a0:a5:a3: f6:47:3c:b1:8a:1f:16:db:5e:c7:c1:28:f7:ac:29:01:d9:9b: 94:67:e2:87:5f:c7:35:a2:01:17:fa:93:f8:a1:e6:46:5b:33: 0d:47:8a:f8:08:04:83:e7:6a:8f:74:bb:9d:e7:c9:2b:c0:03: f0:db:2c:ae:05:89:9f:d5:5a:94:22:69:1c:e9:f8:35:b5:7d: 72:7e:da:91:97:93:d9:1a:61:ef:e5:21:f6:9b:b9:c9:ca:15: a8:61:5f:28:bd:db:a7:2b:56:8c:53:40:ce:5b:ee:05:c4:ab: 59:f9:98:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0RjAxMTAvBgNVBAUTKDEzNDZGNjVENjI5RkZGOTM2QjBGQzRDRjEyNzUwOUI2 ODJFOEUzRTQwHhcNMjUwNzAzMDYwMTM2WhcNMjUwNzEwMDYwMTM2WjAYMRYwFAYD VQQDEw02ODY2MWNjMC02ZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8fnPaHBKMesxv7SILfKHau+uZ+RJLV5lGKkZJpozrErTHXKekgLR9ZebSuyy 1i9Y7sdcjtrXWDCnACOfy8G/Z8yHkb9Pq3K/tuuTYISKbbQFA811amQGowrbRwQ6 tf/cLXAVJUY23VI1PaSwo9kTSzxTdbt53bhKJN/7QDbi9uwQ8Bt8XfQDhXiEoWST P7dvcF2Sh9/Y3ZJ5oUeWOPPJxadLdrRshUFsjgIVlgpKFF4UtOx7stgWu0qRd+Gd yovIlrZuitrq13+JpCDu3sq3pbTSs4xHMNake3rb6LqLI73ho7yHyBdn14SKehN8 fIOtkjqh94ZGrsKWfzloxJIc6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7lP4b/ BwvZe9mB0z1/5FDIINbPMB8GA1UdIwQYMBaAFBNG9l1in/+Taw/EzxJ1CbaC6OPk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzRGMC8wRDQ2Q0JFODM0 MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81TnJEOFRQRW5VSnRvTG80 LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UwYjJYV0tmXzVOckQ4VFBFblVKdG9MbzQtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzRGMC8wRDQ2Q0JFODM0MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81 TnJEOFRQRW5VSnRvTG80LVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbrtnhIc2dR5cvta3/rCcliZK0ENI6BF7sJstQFTlqrWmee/6ZMJgJ fETCK+4CrM1+lI7czjBQSEq7P3njC6XB+PYT210LeQuINfKQtBh28f4QSCd9RDkh Y5Jz0cy/K5Mmw/QanfyklSDZAx2yK0pS+f7uDG+WUaxBZeGZ1VYpFBwtZcGdF+fd Xix/Z9+gpaP2Rzyxih8W217HwSj3rCkB2ZuUZ+KHX8c1ogEX+pP4oeZGWzMNR4r4 CASD52qPdLud58krwAPw2yyuBYmf1VqUImkc6fg1tX1yftqRl5PZGmHv5SH2m7nJ yhWoYV8ovdunK1aMU0DOW+4FxKtZ+Zg8 -----END CERTIFICATE-----Generated at Fri Jul 4 08:02:02 2025 by rpki-client