$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json) Hash identifier: nVm64WCHh9FzJJcQP0nrK1jqhHb8MjHNHwtmj6IfjUw= Subject key identifier: 0C:C6:CA:E2:07:E7:B7:2E:D3:A9:0E:44:C1:67:E1:E0:53:76:8C:79 Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft Manifest number: 091B Signing time: Mon 30 Jun 2025 23:13:31 +0000 Manifest this update: Mon 30 Jun 2025 23:13:31 +0000 Manifest next update: Mon 07 Jul 2025 23:13:31 +0000 Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: 5y3/a7wlLvi/W+gKzX35UtmZzHJyPNGrFnyNqdecvDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Validity Not Before: Jun 30 23:13:31 2025 GMT Not After : Jul 7 23:13:31 2025 GMT Subject: CN=68631a1b-bdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:33:82:d7:6b:7e:bc:18:e1:8b:0d:61:b7: 36:26:90:20:f0:ee:58:30:e0:9a:6c:d5:5f:41:73: 59:39:6d:db:92:ba:c1:fb:fe:1d:a4:bd:6b:49:61: 5a:90:87:b4:16:bc:58:66:9f:46:28:06:59:53:6c: b9:2f:2f:4c:d6:d6:ec:5e:d3:d1:20:6f:97:16:32: 4e:48:9b:7e:50:50:1c:8f:1e:4e:79:81:a1:88:bb: e7:30:02:9c:ed:49:ff:c3:91:b3:16:92:ca:91:a5: 3e:27:0a:85:2c:6e:0f:79:37:05:ae:06:e6:86:dd: 38:a8:9a:57:43:52:02:f0:d7:7f:72:9a:25:14:43: 39:51:07:b8:5f:2a:c8:18:37:2f:b6:4c:2c:cc:4c: 66:8f:b3:9e:b2:86:36:96:e9:8f:c5:4c:de:e0:aa: 16:fa:d4:a3:46:97:b0:5d:4c:24:19:25:00:cd:40: e2:22:85:a3:e7:95:a2:40:7e:22:dd:19:ed:e4:e3: 8e:33:a0:3e:23:87:16:74:c9:ee:03:d0:f2:b1:ae: 4d:dd:e8:06:dc:13:75:b8:29:16:f0:4f:0a:78:9d: 3a:81:43:59:8b:81:9e:a6:75:4d:d8:71:3f:df:e5: dd:21:6b:7e:0e:9c:82:7f:25:31:7f:72:2b:c3:f7: dc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C6:CA:E2:07:E7:B7:2E:D3:A9:0E:44:C1:67:E1:E0:53:76:8C:79 X509v3 Authority Key Identifier: keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:4d:a7:9c:72:af:5f:27:5e:e2:91:77:42:94:e8:7d:99:9d: 59:93:07:52:84:9c:01:87:cc:cc:64:19:97:59:2f:85:4a:6f: d7:06:1f:5c:62:2d:b5:df:5f:0e:b4:f7:4c:58:c0:a5:f4:16: 2b:60:a6:4a:d9:73:08:69:1a:a3:9d:f9:5f:a8:0f:9c:37:2b: e6:6e:ea:73:17:8f:e5:97:8d:32:b8:2a:c3:78:fc:bc:09:51: 9b:eb:bb:e7:37:9b:ea:af:cd:cf:8f:e5:5e:79:19:ff:0a:ec: c1:68:5e:5b:d4:0b:86:24:65:df:be:95:3e:b5:c4:7e:6e:f9: a9:b9:b0:2c:b4:df:f5:04:be:f8:c3:fb:65:b9:c7:d9:14:c9: 91:8a:ae:b2:25:5d:b6:a9:3d:04:f6:69:e5:16:fe:6f:3b:a9: 7c:42:f8:d6:59:89:41:10:75:6f:45:b2:f5:54:f3:24:b7:cd: 1e:bb:8b:cc:31:ba:cc:d3:ba:8f:53:04:7e:60:ae:9a:0f:6e: 6f:f1:30:03:66:c9:35:16:5d:5b:1c:ee:a1:66:98:9b:b7:9a: 7d:9b:9e:ad:5c:b3:e9:93:2e:de:bf:9e:63:95:74:db:7e:71: 89:b9:9d:96:7b:33:a7:d7:12:89:15:3f:40:4d:6c:a4:26:b9: b3:3d:48:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz NjlDQkEwQjAwHhcNMjUwNjMwMjMxMzMxWhcNMjUwNzA3MjMxMzMxWjAYMRYwFAYD VQQDEw02ODYzMWExYi1iZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJYzgtdrfrwY4YsNYbc2JpAg8O5YMOCabNVfQXNZOW3bkrrB+/4dpL1rSWFa kIe0FrxYZp9GKAZZU2y5Ly9M1tbsXtPRIG+XFjJOSJt+UFAcjx5OeYGhiLvnMAKc 7Un/w5GzFpLKkaU+JwqFLG4PeTcFrgbmht04qJpXQ1IC8Nd/cpolFEM5UQe4XyrI GDcvtkwszExmj7OesoY2lumPxUze4KoW+tSjRpewXUwkGSUAzUDiIoWj55WiQH4i 3Rnt5OOOM6A+I4cWdMnuA9Dysa5N3egG3BN1uCkW8E8KeJ06gUNZi4GepnVN2HE/ 3+XdIWt+DpyCfyUxf3Irw/fcdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzGyuIH 57cu06kORMFn4eBTdox5MB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY Vl92TkFOM1IxMHcybkxvTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzTaeccq9fJ17ikXdClOh9mZ1ZkwdShJwBh8zMZBmXWS+FSm/XBh9c Yi21318OtPdMWMCl9BYrYKZK2XMIaRqjnflfqA+cNyvmbupzF4/ll40yuCrDePy8 CVGb67vnN5vqr83Pj+VeeRn/CuzBaF5b1AuGJGXfvpU+tcR+bvmpubAstN/1BL74 w/tlucfZFMmRiq6yJV22qT0E9mnlFv5vO6l8QvjWWYlBEHVvRbL1VPMkt80eu4vM MbrM07qPUwR+YK6aD25v8TADZsk1Fl1bHO6hZpibt5p9m56tXLPpky7ev55jlXTb fnGJuZ2WezOn1xKJFT9ATWykJrmzPUg8 -----END CERTIFICATE-----Generated at Wed Jul 2 12:37:23 2025 by rpki-client