$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft File: evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json) Hash identifier: gJe4HprILYuKopO5opJWQwYbojZpet9QeguGLiJ8ZaI= Subject key identifier: 31:25:CE:F1:41:69:CE:E6:11:B7:F6:BC:F1:AE:A2:F9:DF:89:43:A5 Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft Manifest number: 0209 Signing time: Thu 03 Jul 2025 02:39:00 +0000 Manifest this update: Thu 03 Jul 2025 02:38:59 +0000 Manifest next update: Thu 10 Jul 2025 02:38:59 +0000 Files and hashes: 1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: 6b0OsgBs96iji2SsMPT6OICFhKtQjtmTPGCzrH207N4=) 2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=) 3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=) 4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22 Validity Not Before: Jul 3 02:38:59 2025 GMT Not After : Jul 10 02:38:59 2025 GMT Subject: CN=6865ed44-2db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:07:22:9f:4e:80:75:27:1a:93:17:dd:cd: 74:95:8c:3f:c8:a7:d6:06:eb:79:a8:30:f1:3d:ba: 62:f7:8c:9a:24:06:3b:04:4d:92:3c:ff:59:3b:25: e6:48:ca:08:22:b2:3a:2e:56:d8:a1:a3:22:e3:f3: 05:68:14:bd:e8:cc:8e:a4:97:02:4c:73:5e:d2:ee: 2c:85:41:dd:87:d8:f2:28:ec:33:e6:0e:fd:82:56: 36:fb:77:89:f2:e9:16:be:04:38:fa:2f:72:08:0c: 5e:57:35:75:15:8f:13:18:07:d7:ea:59:99:42:88: f2:35:97:09:0d:85:75:76:d5:a8:c1:55:68:91:69: 8e:91:3e:60:73:98:37:f7:50:95:86:b5:48:98:8e: 79:8a:ad:2c:c6:27:f8:1a:89:8f:e0:78:4c:04:a2: 5e:3e:ed:e7:59:86:1d:2e:20:72:75:c9:b3:3d:b0: 38:4a:4d:20:34:57:d3:87:60:fc:d2:71:04:78:5f: 5f:e3:9f:12:18:4e:48:e9:f6:a4:56:d0:79:13:c7: 7f:9a:87:c9:77:28:4e:c1:b5:bb:5a:79:73:bd:1c: 0c:a2:6d:cb:5a:33:a9:b8:6f:92:ce:1b:12:7a:08: d8:c6:3a:1a:f1:2c:df:b6:60:eb:d1:e5:f8:28:a5: b8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:25:CE:F1:41:69:CE:E6:11:B7:F6:BC:F1:AE:A2:F9:DF:89:43:A5 X509v3 Authority Key Identifier: keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:8c:d1:10:f3:30:0a:41:02:e3:5d:30:db:46:21:cc:bd:01: c6:23:31:0c:ee:a7:e4:3d:19:10:a1:61:08:ee:2f:26:c1:7b: f2:0c:02:48:bc:9e:f3:c8:f2:4f:be:66:e7:1c:a5:c3:91:1f: b3:ce:33:fb:2e:c8:82:90:5b:30:56:68:63:f6:3f:3e:5d:7f: 6b:16:f6:cb:e3:03:0f:6c:4c:ab:78:a8:f1:5b:7c:2e:05:71: 58:93:fa:7e:b1:eb:34:4c:f1:b6:37:4e:56:6d:0e:60:17:fa: 70:6e:6c:fb:8a:2b:4b:fd:d2:4e:3f:51:07:fe:32:e0:60:19: 78:51:28:6a:13:1a:c3:e6:25:0c:56:68:a8:e1:8c:33:8b:ef: b8:b1:d7:90:73:ce:a3:ce:71:ab:d2:47:16:6b:07:96:bf:41: b9:cd:72:da:9a:11:68:a1:e5:b7:ab:fd:e8:9c:b4:dc:dd:70: f5:7a:ab:d5:63:92:a8:f9:c3:e0:21:5b:9c:55:00:6c:de:f6: 60:e7:2d:a5:d6:3e:37:a5:39:58:b3:f3:e0:33:3f:f0:45:0a: 2c:b1:b8:1b:a6:73:3e:25:e9:98:af:5f:a6:b4:a9:b5:46:02: a8:31:91:1e:f7:d6:de:92:8c:26:24:5b:59:fc:6c:b6:12:1d: 9d:55:8c:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx NDdCODhBMjIwHhcNMjUwNzAzMDIzODU5WhcNMjUwNzEwMDIzODU5WjAYMRYwFAYD VQQDEw02ODY1ZWQ0NC0yZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1kHIp9OgHUnGpMX3c10lYw/yKfWBut5qDDxPbpi94yaJAY7BE2SPP9ZOyXm SMoIIrI6LlbYoaMi4/MFaBS96MyOpJcCTHNe0u4shUHdh9jyKOwz5g79glY2+3eJ 8ukWvgQ4+i9yCAxeVzV1FY8TGAfX6lmZQojyNZcJDYV1dtWowVVokWmOkT5gc5g3 91CVhrVImI55iq0sxif4GomP4HhMBKJePu3nWYYdLiBydcmzPbA4Sk0gNFfTh2D8 0nEEeF9f458SGE5I6fakVtB5E8d/mofJdyhOwbW7WnlzvRwMom3LWjOpuG+SzhsS egjYxjoa8SzftmDr0eX4KKW4oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDElzvFB ac7mEbf2vPGuovnfiUOlMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4 MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmjNEQ8zAKQQLjXTDbRiHMvQHGIzEM7qfkPRkQoWEI7i8mwXvyDAJI vJ7zyPJPvmbnHKXDkR+zzjP7LsiCkFswVmhj9j8+XX9rFvbL4wMPbEyreKjxW3wu BXFYk/p+ses0TPG2N05WbQ5gF/pwbmz7iitL/dJOP1EH/jLgYBl4UShqExrD5iUM Vmio4Ywzi++4sdeQc86jznGr0kcWaweWv0G5zXLamhFooeW3q/3onLTc3XD1eqvV Y5Ko+cPgIVucVQBs3vZg5y2l1j43pTlYs/PgMz/wRQossbgbpnM+JemYr1+mtKm1 RgKoMZEe99bekowmJFtZ/Gy2Eh2dVYyy -----END CERTIFICATE-----Generated at Thu Jul 3 07:11:09 2025 by rpki-client