$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: qZ1nVNRHBNcnjGeUHNhWBrI2TfKmMli1GEbP0A0965U= Subject key identifier: 49:BA:CF:3C:0B:B3:B3:97:2B:EC:B0:6D:86:29:34:6D:D1:E7:5B:2A Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 0717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 0717 Signing time: Fri 04 Jul 2025 20:59:57 +0000 Manifest this update: Fri 04 Jul 2025 20:59:56 +0000 Manifest next update: Fri 11 Jul 2025 20:59:56 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: CLtdVfLlMCSfFHN0bgm8eZm+sqigLXPO2Hg/hlHqego=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: Jul 4 20:59:56 2025 GMT Not After : Jul 11 20:59:56 2025 GMT Subject: CN=686840cc-e603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:ac:46:c7:58:52:85:c2:25:5c:06:e0:97: 85:54:d2:f2:41:4c:43:58:4a:ad:18:22:cf:07:10: d7:c4:1a:10:c9:a9:63:f8:c3:e4:0c:c4:5b:1d:5b: 1c:70:9a:24:eb:6e:d3:85:0a:68:1c:0a:b1:9d:be: d7:c7:cf:bc:97:87:13:09:f8:c3:b7:80:6f:0e:48: 2e:13:94:1c:2d:13:34:f8:4c:8a:df:0b:73:2d:a0: d0:42:a8:bb:9d:fc:c5:dd:13:96:2c:76:9d:ce:3b: fc:4c:cf:fa:d8:07:07:20:4a:13:a1:aa:5e:20:05: 7f:c4:ca:ac:b4:11:56:08:1c:9b:81:7a:bb:de:51: 31:35:20:38:07:34:0b:b6:74:9d:69:87:f8:0a:e5: da:a8:b3:9e:ee:54:e5:52:2c:d3:24:36:9b:16:bf: ac:5e:42:84:f5:b9:c0:e7:c9:71:c4:8e:71:5f:c3: 12:ea:c4:ec:5a:a9:c5:41:83:cc:55:ae:a7:d1:2b: a4:05:2e:ac:93:3e:9a:cc:00:a0:46:6e:bc:2d:97: 01:43:8a:67:a0:88:eb:c3:21:b1:a5:e0:bc:7e:46: 74:c8:ae:6a:08:bb:7c:79:85:29:e0:2e:55:43:5c: 96:7e:83:64:38:09:a2:d9:e5:09:e2:63:28:41:eb: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BA:CF:3C:0B:B3:B3:97:2B:EC:B0:6D:86:29:34:6D:D1:E7:5B:2A X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:38:7b:c4:05:00:a3:fe:41:56:d8:15:db:a6:5a:4c:de:d5: 54:2e:2c:02:58:78:00:71:3d:f5:fd:6c:e0:c3:e3:9c:85:aa: ba:c3:8c:11:6d:80:28:1a:0d:8f:ff:78:b2:5a:ad:1c:fb:ae: 87:c5:73:47:c9:6a:15:2c:27:24:41:71:df:86:c8:d5:5e:fe: 40:98:a7:23:55:f9:56:29:a8:7b:3e:9d:92:e3:77:2f:cf:8d: 9a:af:42:4c:36:6d:e4:8c:07:13:89:1e:be:ab:c7:8d:cd:92: e9:22:25:6d:c6:6c:3d:6b:a8:80:60:21:49:d9:a3:50:79:15: 33:c2:a4:25:82:eb:e6:02:80:e8:6c:3a:84:1d:be:f8:8c:01: 04:c8:b4:57:70:8c:a6:89:d3:20:a1:5c:e7:c9:b7:5c:57:29: 40:99:a6:c5:75:06:62:f8:58:b8:03:5e:2e:cc:da:a7:80:7d: bc:50:95:82:b7:fa:97:46:24:74:f0:24:ea:47:78:57:f4:70: bc:f0:1a:07:81:f9:58:5c:1b:d3:59:4b:b6:c7:c3:16:f6:4e: 12:dd:e9:13:31:84:6e:a9:00:3a:c5:98:ac:1d:6a:97:93:96: ad:3f:67:ae:b7:c3:9e:89:9a:4a:01:dc:c3:c4:4e:be:2f:2a: 8c:f1:4d:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjUwNzA0MjA1OTU2WhcNMjUwNzExMjA1OTU2WjAYMRYwFAYD VQQDEw02ODY4NDBjYy1lNjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhKsRsdYUoXCJVwG4JeFVNLyQUxDWEqtGCLPBxDXxBoQyalj+MPkDMRbHVsc cJok627ThQpoHAqxnb7Xx8+8l4cTCfjDt4BvDkguE5QcLRM0+EyK3wtzLaDQQqi7 nfzF3ROWLHadzjv8TM/62AcHIEoToapeIAV/xMqstBFWCBybgXq73lExNSA4BzQL tnSdaYf4CuXaqLOe7lTlUizTJDabFr+sXkKE9bnA58lxxI5xX8MS6sTsWqnFQYPM Va6n0SukBS6skz6azACgRm68LZcBQ4pnoIjrwyGxpeC8fkZ0yK5qCLt8eYUp4C5V Q1yWfoNkOAmi2eUJ4mMoQetclwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEm6zzwL s7OXK+ywbYYpNG3R51sqMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDOHvEBQCj/kFW2BXbplpM3tVULiwCWHgAcT31/Wzgw+Ochaq6w4wR bYAoGg2P/3iyWq0c+66HxXNHyWoVLCckQXHfhsjVXv5AmKcjVflWKah7Pp2S43cv z42ar0JMNm3kjAcTiR6+q8eNzZLpIiVtxmw9a6iAYCFJ2aNQeRUzwqQlguvmAoDo bDqEHb74jAEEyLRXcIymidMgoVznybdcVylAmabFdQZi+Fi4A14uzNqngH28UJWC t/qXRiR08CTqR3hX9HC88BoHgflYXBvTWUu2x8MW9k4S3ekTMYRuqQA6xZisHWqX k5atP2eut8OeiZpKAdzDxE6+LyqM8U2u -----END CERTIFICATE-----Generated at Sun Jul 6 01:28:24 2025 by rpki-client