$ rpki-client -vvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft File: EDki63fZQHF8gZ4oyWZGKUgLvOU.mft (raw, json) Hash identifier: 1LvOro7LNW8HEnDrH16iNj65pZvUa7MFbnQ0h8EswvM= Subject key identifier: 5C:5A:DF:91:80:21:39:F3:15:E1:01:B2:B8:59:2B:75:20:72:06:ED Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5 Certificate issuer: /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft Manifest number: 43 Signing time: Sun 29 Jun 2025 06:29:42 +0000 Manifest this update: Sun 29 Jun 2025 06:29:42 +0000 Manifest next update: Sun 06 Jul 2025 06:29:42 +0000 Files and hashes: 1: EDki63fZQHF8gZ4oyWZGKUgLvOU.crl (hash: cGzy+1IJ6GZc0GZkhBOw9Y44xa7/9rMnHzFc7JjPkmY=) 2: 17D98518FD6911EFA889E84DC4F9AE02.roa (hash: TAYiLVNUfBDudM++NA0KlcXDtTA+39+D4En0/M5r2I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A030C, serialNumber=103922EB77D940717C819E28C9664629480BBCE5 Validity Not Before: Jun 29 06:29:42 2025 GMT Not After : Jul 6 06:29:42 2025 GMT Subject: CN=6860dd56-92ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:c6:89:cc:42:a4:30:a3:2c:ef:71:ff:5d: ca:4e:f6:01:4a:88:50:25:b1:4a:04:15:96:55:b2: c4:39:69:9f:c7:a9:36:af:9f:a6:9d:b1:fc:be:c9: 63:14:1c:43:57:e8:26:fd:f4:09:64:4f:24:df:c8: 31:e7:bc:e0:44:54:3c:a5:9a:d8:70:de:8b:bf:ba: 2e:a3:82:14:40:dd:34:97:97:d0:6d:1d:da:2b:76: 7e:e6:fe:99:dc:97:0b:ae:b8:61:a1:65:23:9d:c3: 54:6b:be:f4:b3:a1:f1:ee:cc:5d:61:04:ea:c1:46: 30:74:12:e1:74:19:3b:e2:4f:e9:be:79:66:03:08: c0:47:1e:5d:b5:07:90:bf:18:46:85:17:d4:b7:2c: af:c8:35:3a:17:7d:51:f9:44:9d:e3:47:00:d7:e6: d5:6d:4f:83:22:72:2d:39:50:98:d8:1c:53:9f:6d: 7f:4c:72:5c:6d:41:6b:5e:29:78:2e:8f:0e:c6:d2: 72:a8:5b:33:33:ef:85:a4:56:2f:c9:aa:91:16:c4: 96:d3:29:15:d7:19:e7:68:06:43:73:a9:f6:dc:68: 0f:4a:79:42:aa:56:0a:3a:38:6b:9d:73:8d:bb:53: e1:e1:a6:28:26:f3:a3:8c:d3:40:b5:c2:88:51:e1: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5A:DF:91:80:21:39:F3:15:E1:01:B2:B8:59:2B:75:20:72:06:ED X509v3 Authority Key Identifier: keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:1e:e6:9d:a9:05:8e:7c:b8:fb:83:d2:e1:cd:83:b4:cf:08: 87:ac:1b:74:70:1b:51:b3:b5:b8:a4:34:cb:6e:5a:57:ee:1c: 3b:14:2a:4b:f6:02:f0:f3:a2:80:d1:78:52:c7:68:e9:b3:6c: 0d:cc:44:0c:50:28:20:6f:25:cf:ca:a8:2c:d9:a2:e9:9b:c4: 40:8e:0c:6a:06:38:b8:bb:be:03:c2:56:ff:1a:52:b0:ab:9c: f0:7e:df:40:24:00:30:79:c6:24:cb:ce:dd:2f:69:2d:80:fe: 01:14:2e:49:eb:22:2d:d5:e3:ab:50:29:d7:73:41:02:5e:65: 00:65:37:a1:ae:8c:92:39:d9:d0:d3:34:1b:74:d6:01:7b:df: ad:d7:fc:58:4f:20:fd:d6:2d:b3:a6:9d:be:9e:a0:22:ad:3c: ea:f0:bc:e0:66:0c:b4:aa:3b:91:05:cb:a9:a9:a6:1f:07:cd: 42:8d:64:06:a0:1d:6a:97:f2:e1:8e:72:03:9f:90:8d:33:8d: b9:71:78:57:61:61:05:a0:ad:d6:ab:c6:a8:d6:35:8c:af:48: eb:6a:84:19:44:1f:49:6b:a6:fa:49:a3:97:37:ba:75:8b:0e: fc:de:b5:02:90:5b:18:ff:e1:1c:4c:d3:60:22:16:6b:f6:bf: 97:90:ea:6c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDMwQzExMC8GA1UEBRMoMTAzOTIyRUI3N0Q5NDA3MTdDODE5RTI4Qzk2NjQ2Mjk0 ODBCQkNFNTAeFw0yNTA2MjkwNjI5NDJaFw0yNTA3MDYwNjI5NDJaMBgxFjAUBgNV BAMTDTY4NjBkZDU2LTkyZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJDsaJzEKkMKMs73H/XcpO9gFKiFAlsUoEFZZVssQ5aZ/HqTavn6adsfy+yWMU HENX6Cb99AlkTyTfyDHnvOBEVDylmthw3ou/ui6jghRA3TSXl9BtHdordn7m/pnc lwuuuGGhZSOdw1RrvvSzofHuzF1hBOrBRjB0EuF0GTviT+m+eWYDCMBHHl21B5C/ GEaFF9S3LK/INToXfVH5RJ3jRwDX5tVtT4Mici05UJjYHFOfbX9MclxtQWteKXgu jw7G0nKoWzMz74WkVi/JqpEWxJbTKRXXGedoBkNzqfbcaA9KeUKqVgo6OGudc427 U+Hhpigm86OM00C1wohR4YDjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXFrfkYAh OfMV4QGyuFkrdSByBu0wHwYDVR0jBBgwFoAUEDki63fZQHF8gZ4oyWZGKUgLvOUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwMzBDL0E3MDM2NzAwRjQ3 NjExRUZCRTQ2NkQ3RkM0RjlBRTAyL0VEa2k2M2ZaUUhGOGdaNG95V1pHS1VnTHZP VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRURraTYzZlpRSEY4Z1o0b3lXWkdLVWdMdk9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw MzBDL0E3MDM2NzAwRjQ3NjExRUZCRTQ2NkQ3RkM0RjlBRTAyL0VEa2k2M2ZaUUhG OGdaNG95V1pHS1VnTHZPVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHke5p2pBY58uPuD0uHNg7TPCIesG3RwG1GztbikNMtuWlfuHDsUKkv2 AvDzooDReFLHaOmzbA3MRAxQKCBvJc/KqCzZoumbxECODGoGOLi7vgPCVv8aUrCr nPB+30AkADB5xiTLzt0vaS2A/gEULknrIi3V46tQKddzQQJeZQBlN6GujJI52dDT NBt01gF7363X/FhPIP3WLbOmnb6eoCKtPOrwvOBmDLSqO5EFy6mpph8HzUKNZAag HWqX8uGOcgOfkI0zjblxeFdhYQWgrdarxqjWNYyvSOtqhBlEH0lrpvpJo5c3unWL DvzetQKQWxj/4RxM02AiFmv2v5eQ6mw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:50:13 2025 by rpki-client