$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: 2DFZLO7rmkejeGZvIfqBumguRU90QjFFMidWnRfXr2g= Subject key identifier: E7:7B:A9:D5:84:E8:25:CE:7E:FB:4C:BB:43:50:52:16:7C:BE:05:40 Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 05C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 05BC Signing time: Wed 02 Jul 2025 23:25:29 +0000 Manifest this update: Wed 02 Jul 2025 23:25:29 +0000 Manifest next update: Wed 09 Jul 2025 23:25:29 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: GH6mWoKIQf/iv+kjOj0Tj8xsVaj4W2CPfe9aKdLxlFU=) 2: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: 2FiQQsbz3nt2u/cekKkmnmxwVKcgAmIxkizQKnpeMp0=) 3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: dJlRsSYRiHAfXA1Nnt7jiiGzcupZLCHRX4H/d6aCfuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1477 (0x5c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Jul 2 23:25:29 2025 GMT Not After : Jul 9 23:25:29 2025 GMT Subject: CN=6865bfe9-b541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:52:ac:1b:15:9c:66:3c:bf:c5:bd:c3:53: 77:c6:7f:6e:d5:ca:3e:ab:3f:43:76:34:f1:6a:48: 15:e1:20:94:1b:f5:1f:40:b9:82:87:6e:e2:ec:f0: 86:6b:4a:69:b9:36:6b:4c:6c:bd:15:35:22:3a:32: 5b:c6:ed:f3:50:da:10:b0:59:5d:31:8c:3a:e0:06: f8:94:45:a4:74:36:8f:89:4a:6c:3f:fd:c7:b6:a8: 6d:c6:20:2c:cb:9c:dc:ed:c4:ba:47:e6:93:77:97: 0b:98:68:66:ae:77:68:a3:5a:3b:30:d1:11:4d:aa: 6d:07:f0:24:b3:64:1c:3d:3f:eb:e7:d5:f2:d8:1f: 78:95:f2:72:3c:ea:03:65:fd:97:ff:b8:de:c6:5b: 53:e6:7e:95:ac:56:cb:e8:c9:b5:be:31:4b:24:b5: 72:7c:74:9f:9c:c2:a4:31:c6:dc:4c:a5:6f:4e:be: b6:a1:83:e3:01:24:2e:5d:5f:53:1e:4f:64:6c:0d: 11:72:58:27:5a:2c:81:b7:9b:11:c5:74:5a:93:89: a3:c1:aa:32:49:2a:61:27:8a:01:83:4f:b3:a6:78: 4c:e4:76:1d:9a:4b:81:eb:ec:10:03:a6:32:70:78: 8c:9e:b0:55:df:22:7b:f1:5b:98:67:f4:69:5b:cf: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7B:A9:D5:84:E8:25:CE:7E:FB:4C:BB:43:50:52:16:7C:BE:05:40 X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:ff:32:20:c7:1b:85:c8:3a:f1:62:31:c9:3a:e4:fd:cb:17: 0c:eb:e8:19:a1:5e:59:61:70:af:48:46:df:60:df:0a:f1:77: 6f:2c:87:95:af:e1:32:3a:d7:15:e8:d3:58:dd:a2:96:aa:8a: 56:09:35:29:9c:e7:1e:16:41:0d:06:2a:08:6c:9f:0e:47:0d: 10:48:28:e0:d2:68:90:82:95:2a:77:71:1b:e7:5d:7f:fd:c4: 96:d7:df:2b:27:be:85:6c:02:f3:cc:e5:03:0e:40:4d:39:85: df:26:50:bd:08:91:13:d9:49:51:49:0b:71:2f:57:1b:46:19: 6c:f6:e2:3e:e3:70:21:f2:e8:16:40:63:38:83:62:2e:33:68: 03:c3:af:af:ad:40:c7:1e:e8:8f:3d:cd:78:98:9b:fa:b2:d9: f1:3d:6b:74:6d:ff:f5:ff:25:f4:1c:c6:ac:97:49:0b:c1:91: d1:55:3e:4a:51:9f:ff:10:c6:96:68:7e:54:f9:fb:5a:84:30: f7:65:d7:92:c0:01:11:a0:01:46:82:d8:af:8e:60:ea:e7:82: 3b:22:97:6f:b5:5e:8d:1a:ac:82:c4:10:92:08:fb:2c:d5:ea: 83:43:4d:50:48:d2:a7:28:0a:f7:91:cd:ba:59:5a:39:a5:db: 6b:4a:f2:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjUwNzAyMjMyNTI5WhcNMjUwNzA5MjMyNTI5WjAYMRYwFAYD VQQDEw02ODY1YmZlOS1iNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOpSrBsVnGY8v8W9w1N3xn9u1co+qz9DdjTxakgV4SCUG/UfQLmCh27i7PCG a0ppuTZrTGy9FTUiOjJbxu3zUNoQsFldMYw64Ab4lEWkdDaPiUpsP/3HtqhtxiAs y5zc7cS6R+aTd5cLmGhmrndoo1o7MNERTaptB/Aks2QcPT/r59Xy2B94lfJyPOoD Zf2X/7jexltT5n6VrFbL6Mm1vjFLJLVyfHSfnMKkMcbcTKVvTr62oYPjASQuXV9T Hk9kbA0RclgnWiyBt5sRxXRak4mjwaoySSphJ4oBg0+zpnhM5HYdmkuB6+wQA6Yy cHiMnrBV3yJ78VuYZ/RpW88fTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOd7qdWE 6CXOfvtMu0NQUhZ8vgVAMB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo/zIgxxuFyDrxYjHJOuT9yxcM6+gZoV5ZYXCvSEbfYN8K8XdvLIeV r+EyOtcV6NNY3aKWqopWCTUpnOceFkENBioIbJ8ORw0QSCjg0miQgpUqd3Eb511/ /cSW198rJ76FbALzzOUDDkBNOYXfJlC9CJET2UlRSQtxL1cbRhls9uI+43Ah8ugW QGM4g2IuM2gDw6+vrUDHHuiPPc14mJv6stnxPWt0bf/1/yX0HMasl0kLwZHRVT5K UZ//EMaWaH5U+ftahDD3ZdeSwAERoAFGgtivjmDq54I7IpdvtV6NGqyCxBCSCPss 1eqDQ01QSNKnKAr3kc26WVo5pdtrSvJd -----END CERTIFICATE-----Generated at Thu Jul 3 11:00:50 2025 by rpki-client