$ rpki-client -vvf rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft File: eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft (raw, json) Hash identifier: /wTGOmJ5ggJ4vvEo3CLQl3CY7xWqxeY2iZ4NyXbFH70= Subject key identifier: 29:B2:73:D1:6E:FE:65:BC:45:94:F9:29:57:11:EE:78:E0:19:DE:A9 Authority key identifier: 78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 Certificate issuer: /CN=A91A495C/serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Certificate serial: 0D53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft Manifest number: 0D2E Signing time: Wed 02 Jul 2025 18:17:22 +0000 Manifest this update: Wed 02 Jul 2025 18:17:22 +0000 Manifest next update: Wed 09 Jul 2025 18:17:22 +0000 Files and hashes: 1: eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl (hash: TJX707bVrQahGsZkM7/cFTbkUTD45rZA3w6KtwBVrNI=) 2: 9F12E3A025A511EE87132E45C4F9AE02.roa (hash: bGVPdIvZlYGFNzxT3y5YSA5PehaGI7Seiy7YCZdX9Sg=) 3: 055A1A7A05FC11EFB61A7767C4F9AE02.roa (hash: +In7lqAfHKKuHVBt4b296chjrd7RaFgigBnxlxSxJ4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A495C, serialNumber=78BEDBEDC0459B900C282892F13B1782A9560429 Validity Not Before: Jul 2 18:17:22 2025 GMT Not After : Jul 9 18:17:22 2025 GMT Subject: CN=686577b2-0410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:69:20:db:a1:cb:31:f6:fc:5b:e5:b7:88: bd:56:83:e4:8c:51:4b:c0:7e:e7:a6:a5:ee:a9:d4: 13:62:c5:3b:c7:e5:16:38:a8:14:c8:c5:00:b7:ad: a0:1a:33:0e:88:90:c7:96:66:31:ef:c4:66:e0:f3: f1:3d:9e:7e:1e:69:d9:d4:48:a3:9e:3f:2a:8f:45: a9:1f:34:ba:53:af:4f:ba:bb:4b:8d:44:2e:16:a0: 4a:cf:36:e9:f2:32:b9:ba:5b:48:bf:6b:f9:a4:7d: 63:df:06:d3:0e:9e:d6:10:ad:7a:34:8e:0b:2d:ae: 0a:13:2c:5f:ad:49:12:1e:d2:bc:6a:5a:56:af:1c: 61:44:81:79:23:73:7e:da:f3:12:72:02:91:a6:78: a2:e4:93:20:bf:e4:9b:bc:72:85:29:46:48:2d:19: 1e:c4:5e:f9:d6:02:e2:72:fa:a8:03:8a:92:0a:d8: 66:76:30:e6:55:5c:5e:9b:9f:53:d9:fd:db:07:78: 65:b6:5c:ad:26:50:0c:b5:b0:ef:75:b6:ef:ee:e4: 69:70:e4:d3:ae:0a:a3:45:e7:90:9d:bc:5e:95:ab: c2:e7:7d:1b:83:54:29:e0:1f:77:37:45:82:fe:f6: 41:ec:31:84:8b:e7:79:bc:fa:93:fc:b8:6e:3e:4b: b0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B2:73:D1:6E:FE:65:BC:45:94:F9:29:57:11:EE:78:E0:19:DE:A9 X509v3 Authority Key Identifier: keyid:78:BE:DB:ED:C0:45:9B:90:0C:28:28:92:F1:3B:17:82:A9:56:04:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eL7b7cBFm5AMKCiS8TsXgqlWBCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A495C/55918004E2AD11E9B4A27546C4F9AE02/eL7b7cBFm5AMKCiS8TsXgqlWBCk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:02:15:8c:10:7f:fd:5e:07:12:04:63:46:8c:74:eb:df:f9: 17:b0:8b:bb:a2:9b:d1:db:a5:82:54:83:e6:97:91:89:5b:f0: 4b:ed:8e:e4:2e:f1:2f:af:6e:17:1d:c3:86:ba:c3:88:0b:42: a4:d2:ea:4a:72:c7:d8:37:f9:06:01:3c:a1:80:2d:1f:c3:d8: f5:bb:2f:34:c4:8c:da:94:a4:41:c0:4f:49:47:4f:c9:e2:e5: 7d:94:f9:8b:dd:53:18:8e:82:97:a0:3c:26:ec:12:ce:47:5a: 8b:70:56:fe:c6:8a:eb:e7:a4:de:2f:04:7f:a9:5f:07:73:c4: 49:c2:70:96:a8:35:56:08:14:37:92:4b:42:e3:13:c5:02:b2: 78:79:02:02:55:fa:a0:94:dc:6c:14:0b:2c:02:dc:06:02:e6: bb:9a:14:b9:cc:18:c3:92:cc:a5:37:48:0e:85:5f:de:34:80: dc:56:90:ff:fe:bc:f4:0b:2f:96:c1:d4:46:6d:e2:b9:92:8b: 3f:f3:35:16:7d:d5:34:18:cc:8c:5c:cd:3c:79:c2:7f:3b:b3: 32:ca:11:05:f0:3a:e4:34:51:7f:fa:24:78:a6:c5:e6:93:88: 6e:4a:15:df:5e:fc:45:b9:2a:07:59:bc:31:71:63:8b:c1:26: 11:ec:8f:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ5NUMxMTAvBgNVBAUTKDc4QkVEQkVEQzA0NTlCOTAwQzI4Mjg5MkYxM0IxNzgy QTk1NjA0MjkwHhcNMjUwNzAyMTgxNzIyWhcNMjUwNzA5MTgxNzIyWjAYMRYwFAYD VQQDEw02ODY1NzdiMi0wNDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5ppINuhyzH2/Fvlt4i9VoPkjFFLwH7npqXuqdQTYsU7x+UWOKgUyMUAt62g GjMOiJDHlmYx78Rm4PPxPZ5+HmnZ1Eijnj8qj0WpHzS6U69PurtLjUQuFqBKzzbp 8jK5ultIv2v5pH1j3wbTDp7WEK16NI4LLa4KEyxfrUkSHtK8alpWrxxhRIF5I3N+ 2vMScgKRpnii5JMgv+SbvHKFKUZILRkexF751gLicvqoA4qSCthmdjDmVVxem59T 2f3bB3hltlytJlAMtbDvdbbv7uRpcOTTrgqjReeQnbxelavC530bg1Qp4B93N0WC /vZB7DGEi+d5vPqT/LhuPkuwlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmyc9Fu /mW8RZT5KVcR7njgGd6pMB8GA1UdIwQYMBaAFHi+2+3ARZuQDCgokvE7F4KpVgQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDk1Qy81NTkxODAwNEUy QUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01QU1LQ2lTOFRzWGdxbFdC Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VMN2I3Y0JGbTVBTUtDaVM4VHNYZ3FsV0JDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDk1Qy81NTkxODAwNEUyQUQxMUU5QjRBMjc1NDZDNEY5QUUwMi9lTDdiN2NCRm01 QU1LQ2lTOFRzWGdxbFdCQ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwAhWMEH/9XgcSBGNGjHTr3/kXsIu7opvR26WCVIPml5GJW/BL7Y7k LvEvr24XHcOGusOIC0Kk0upKcsfYN/kGATyhgC0fw9j1uy80xIzalKRBwE9JR0/J 4uV9lPmL3VMYjoKXoDwm7BLOR1qLcFb+xorr56TeLwR/qV8Hc8RJwnCWqDVWCBQ3 kktC4xPFArJ4eQICVfqglNxsFAssAtwGAua7mhS5zBjDksylN0gOhV/eNIDcVpD/ /rz0Cy+WwdRGbeK5kos/8zUWfdU0GMyMXM08ecJ/O7MyyhEF8DrkNFF/+iR4psXm k4huShXfXvxFuSoHWbwxcWOLwSYR7I8v -----END CERTIFICATE-----Generated at Fri Jul 4 07:06:58 2025 by rpki-client