$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: 4iBUlHLk8CsimyyMlpBKidDGgLsOnzehCt/NPDqrEpI= Subject key identifier: 13:93:35:5F:B4:59:37:0C:78:36:AA:6C:E4:5B:7B:B0:A1:B1:6C:E4 Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0D71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0D4A Signing time: Fri 22 Aug 2025 18:09:44 +0000 Manifest this update: Fri 22 Aug 2025 18:09:43 +0000 Manifest next update: Fri 29 Aug 2025 18:09:43 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: jkkOC7+GhpMrteam5n665PEcP4nCsstJMFw52q9mNNM=) 2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: Y+E2Zw8cSibO88OVDC2atGI8LaONXqL9mkfjf3pS0hw=) 3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: J4Hv1naBopBVbkvmkR77VLmGUJiYmVXkbO9FW9SSP/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3441 (0xd71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: Aug 22 18:09:43 2025 GMT Not After : Aug 29 18:09:43 2025 GMT Subject: CN=68a8b268-2ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:64:41:da:9c:ce:f2:41:9a:04:83:47:2b: ed:fd:c3:9f:90:8b:79:12:c1:45:c8:76:95:6a:40: 74:df:fb:e1:f7:31:42:85:e9:9a:ca:df:e6:bf:3d: 06:e5:bf:a7:89:44:5b:fa:58:e3:3b:b4:04:1b:ae: 71:bb:93:dc:42:9c:30:9c:07:1c:a9:b5:10:d0:7e: 48:2a:4f:a2:20:8e:71:36:11:4d:6c:7c:5b:5b:52: 73:6c:3e:13:0b:5e:56:a5:12:09:ae:b8:9a:01:34: 82:32:70:11:78:a6:50:7c:e7:1a:13:af:63:8d:15: 7c:82:48:31:e3:59:24:ff:44:26:84:b0:45:f4:27: 4f:58:76:63:af:8a:c2:e9:fc:73:b8:e1:22:5a:78: 4d:bb:39:9d:2f:17:6b:23:71:fb:37:11:fb:c9:77: b4:f7:5c:b7:fa:3f:93:3f:db:96:3c:c3:00:1e:56: 71:e3:b4:ea:ac:41:43:51:94:05:db:7f:14:e6:61: aa:f5:00:60:f2:3d:cf:d2:e8:c8:d2:de:57:93:5f: f2:64:a3:5b:ac:7b:a9:95:fa:3f:bf:69:2f:53:48: 0c:51:73:75:62:bb:c8:29:47:66:01:72:ab:31:2d: b3:54:9c:7c:68:eb:da:e5:f0:2f:aa:5b:52:8c:27: 9f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:93:35:5F:B4:59:37:0C:78:36:AA:6C:E4:5B:7B:B0:A1:B1:6C:E4 X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:19:57:19:a8:ec:2e:cb:24:ec:5e:6b:98:00:c4:00:de:4a: 8b:90:7b:21:74:2b:67:5f:81:af:a6:f3:23:38:2d:be:a7:83: d9:90:a8:e0:f6:07:c7:1d:8a:c4:54:f3:f3:63:a6:78:72:f0: 40:bb:65:04:03:74:28:0b:9f:e3:a9:ac:15:60:ce:87:39:ef: 03:08:6e:19:29:34:b0:73:3e:59:35:0c:64:a1:03:50:62:a2: d0:de:f7:69:74:13:d3:bf:08:1a:e0:ff:03:a9:69:1a:77:b8: 66:0c:91:3c:8c:ac:63:62:1b:be:f9:3c:d9:1e:38:c4:22:65: 00:90:46:33:37:83:aa:c4:b2:12:58:ae:78:33:62:a6:71:6e: 6f:6b:93:96:cb:95:b2:3c:82:1d:37:44:8f:2b:e4:b4:01:5d: f8:76:7a:a6:e5:33:5c:b9:b1:ec:a2:43:62:9a:a8:26:e1:8a: 6f:47:5c:81:e9:d2:8f:f9:87:91:56:a4:19:6c:07:e5:3e:d0: 6e:a2:15:ca:2c:b0:f8:e7:dd:ba:9f:7b:7f:88:73:18:c3:b2: f8:d2:4c:53:b5:e4:56:c5:7f:4c:aa:38:37:c9:a2:2e:d3:6a: 49:42:66:f2:ca:42:db:90:e8:4a:60:99:c3:bd:13:8b:8f:da: 02:56:ba:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjUwODIyMTgwOTQzWhcNMjUwODI5MTgwOTQzWjAYMRYwFAYD VQQDEw02OGE4YjI2OC0yZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9BkQdqczvJBmgSDRyvt/cOfkIt5EsFFyHaVakB03/vh9zFChemayt/mvz0G 5b+niURb+ljjO7QEG65xu5PcQpwwnAccqbUQ0H5IKk+iII5xNhFNbHxbW1JzbD4T C15WpRIJrriaATSCMnAReKZQfOcaE69jjRV8gkgx41kk/0QmhLBF9CdPWHZjr4rC 6fxzuOEiWnhNuzmdLxdrI3H7NxH7yXe091y3+j+TP9uWPMMAHlZx47TqrEFDUZQF 238U5mGq9QBg8j3P0ujI0t5Xk1/yZKNbrHuplfo/v2kvU0gMUXN1YrvIKUdmAXKr MS2zVJx8aOva5fAvqltSjCefhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOTNV+0 WTcMeDaqbORbe7ChsWzkMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkGVcZqOwuyyTsXmuYAMQA3kqLkHshdCtnX4GvpvMjOC2+p4PZkKjg 9gfHHYrEVPPzY6Z4cvBAu2UEA3QoC5/jqawVYM6HOe8DCG4ZKTSwcz5ZNQxkoQNQ YqLQ3vdpdBPTvwga4P8DqWkad7hmDJE8jKxjYhu++TzZHjjEImUAkEYzN4OqxLIS WK54M2KmcW5va5OWy5WyPIIdN0SPK+S0AV34dnqm5TNcubHsokNimqgm4YpvR1yB 6dKP+YeRVqQZbAflPtBuohXKLLD45926n3t/iHMYw7L40kxTteRWxX9Mqjg3yaIu 02pJQmbyykLbkOhKYJnDvROLj9oCVrqs -----END CERTIFICATE-----Generated at Sun Aug 24 03:09:02 2025 by rpki-client