$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json) Hash identifier: cpJatbZENCBKX27ThDBUk07mD757nKJGuFljh8BVSk0= Subject key identifier: 73:90:A4:81:F6:1F:F4:F9:FF:DB:57:F2:53:F3:1A:59:19:8C:07:51 Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft Manifest number: 0CDA Signing time: Fri 22 Aug 2025 18:15:44 +0000 Manifest this update: Fri 22 Aug 2025 18:15:44 +0000 Manifest next update: Fri 29 Aug 2025 18:15:44 +0000 Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: HS/MW0hxkgFw0D1mZRs4rUawZq7iWgqx8LiyreLqZvw=) 2: CD5B717E8AB811EDA3D4ED68C4F9AE02.roa (hash: XLP4ULkxYx27srGDokdT1/3ibgVd5Ja0S3t9A21I8Bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF Validity Not Before: Aug 22 18:15:44 2025 GMT Not After : Aug 29 18:15:44 2025 GMT Subject: CN=68a8b3d0-e639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f4:35:b2:e3:41:1b:fd:8a:78:6e:01:74:d9: 73:ea:4a:ff:1a:d7:d2:86:86:81:c2:5b:07:6e:96: fa:e5:26:b5:5a:b9:d3:cf:1e:21:d8:61:1f:f1:ee: ee:11:5d:a5:d7:f3:95:3f:18:d9:69:90:b8:cb:7b: a4:54:0f:30:8c:f2:02:38:f4:04:c4:4d:52:25:ea: 0e:dc:ac:b3:e1:12:c9:5c:de:c0:ef:47:a4:5e:a6: 3d:3f:26:39:00:86:7d:57:f8:69:eb:48:16:22:20: a7:45:ca:2f:07:a2:e6:53:0a:52:76:e8:f5:c5:98: 6c:b1:b6:8a:e6:5f:d0:5b:a1:8d:5b:57:aa:06:5e: 22:4a:42:f1:c3:83:8b:12:69:d5:ff:96:e9:87:e2: db:9b:08:c3:2f:fa:c3:4d:bb:07:59:a6:51:ff:e3: 2e:87:73:46:5d:23:95:ad:53:55:e3:d6:ff:77:08: 06:6c:52:76:83:19:74:94:80:db:4a:99:a5:b8:91: a7:90:e9:c9:47:5b:d7:85:29:4f:79:3a:7c:76:8c: 7e:9e:f8:70:20:e5:0a:5b:2f:47:7c:45:13:58:f2: e8:e5:79:f5:27:84:c7:bf:79:78:f9:a4:55:dc:a1: eb:a5:e2:03:02:c8:fe:e3:b7:c0:d5:b8:66:61:7f: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:90:A4:81:F6:1F:F4:F9:FF:DB:57:F2:53:F3:1A:59:19:8C:07:51 X509v3 Authority Key Identifier: keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3a:f4:85:cc:81:11:df:49:d4:ca:e3:90:cb:f1:f1:f8:be: ff:01:ad:39:b6:4a:95:3b:98:9f:3e:5c:f9:58:16:ec:2a:a2: 14:18:05:6f:8c:67:b4:28:4d:ba:65:b5:de:e6:10:e3:b4:eb: 79:4c:81:ea:ae:cd:29:c4:70:4e:48:c7:43:96:07:6f:8c:2c: e7:41:c9:8b:6f:64:93:7f:e4:09:0d:47:a9:c2:66:c7:5c:4b: 37:58:7d:35:dc:42:c0:8b:c6:0c:a8:db:ce:4f:a4:fd:9a:84: 38:4a:90:3c:db:a8:ed:16:9f:92:27:b2:0c:26:cc:38:c0:79: ee:cc:62:70:eb:70:23:c0:30:ba:f6:99:47:b9:e0:a1:9f:d4: 1e:5c:2a:0b:16:ff:2e:36:1b:0a:7a:d8:e6:71:d0:6a:6f:8f: 28:cf:17:7f:71:51:f7:eb:1f:c3:f1:17:28:fb:3c:e3:60:36: eb:94:3c:42:b6:8d:5d:15:22:c5:0d:65:ed:42:d0:2d:d0:96: 0a:fb:a5:9b:d0:f9:2c:76:aa:da:48:e3:76:8a:48:04:3b:a4: 96:21:30:96:5a:df:b3:3c:13:1e:f5:cb:d3:6d:6b:18:83:21: 42:a1:70:01:34:ea:22:4a:40:c0:fb:e1:42:e2:50:f1:09:10: 71:19:e4:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUzMDgxMTAvBgNVBAUTKDdCNTkwNTUyMTI4NDkxMDVBRDZGMzlFNTg4MUQ4NDJF NzA3NDM5QUYwHhcNMjUwODIyMTgxNTQ0WhcNMjUwODI5MTgxNTQ0WjAYMRYwFAYD VQQDEw02OGE4YjNkMC1lNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9PQ1suNBG/2KeG4BdNlz6kr/GtfShoaBwlsHbpb65Sa1WrnTzx4h2GEf8e7u EV2l1/OVPxjZaZC4y3ukVA8wjPICOPQExE1SJeoO3Kyz4RLJXN7A70ekXqY9PyY5 AIZ9V/hp60gWIiCnRcovB6LmUwpSduj1xZhssbaK5l/QW6GNW1eqBl4iSkLxw4OL EmnV/5bph+LbmwjDL/rDTbsHWaZR/+Muh3NGXSOVrVNV49b/dwgGbFJ2gxl0lIDb SpmluJGnkOnJR1vXhSlPeTp8dox+nvhwIOUKWy9HfEUTWPLo5Xn1J4THv3l4+aRV 3KHrpeIDAsj+47fA1bhmYX/H1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHOQpIH2 H/T5/9tX8lPzGlkZjAdRMB8GA1UdIwQYMBaAFHtZBVIShJEFrW855YgdhC5wdDmv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMwOC9BODE5MTRFMkY0 RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtRV3Riem5saUIyRUxuQjBP YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Uxa0ZVaEtFa1FXdGJ6bmxpQjJFTG5CME9hOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTMwOC9BODE5MTRFMkY0RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtR V3Riem5saUIyRUxuQjBPYTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwOvSFzIER30nUyuOQy/Hx+L7/Aa05tkqVO5ifPlz5WBbsKqIUGAVv jGe0KE26ZbXe5hDjtOt5TIHqrs0pxHBOSMdDlgdvjCznQcmLb2STf+QJDUepwmbH XEs3WH013ELAi8YMqNvOT6T9moQ4SpA826jtFp+SJ7IMJsw4wHnuzGJw63AjwDC6 9plHueChn9QeXCoLFv8uNhsKetjmcdBqb48ozxd/cVH36x/D8Rco+zzjYDbrlDxC to1dFSLFDWXtQtAt0JYK+6Wb0PksdqraSON2ikgEO6SWITCWWt+zPBMe9cvTbWsY gyFCoXABNOoiSkDA++FC4lDxCRBxGeQ8 -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:00 2025 by rpki-client