$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft File: e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft (raw, json) Hash identifier: RNrXUqc288UBzwNSFhFUbEOBio82ot2sMw2+xwEOFRE= Subject key identifier: 7F:F6:90:72:93:90:D0:F5:03:D8:D8:FD:85:4F:CC:4E:C5:1D:A0:88 Authority key identifier: 7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5 Certificate issuer: /CN=A91A5EF2/serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5 Certificate serial: 0655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft Manifest number: 064A Signing time: Mon 30 Jun 2025 22:58:59 +0000 Manifest this update: Mon 30 Jun 2025 22:58:59 +0000 Manifest next update: Mon 07 Jul 2025 22:58:59 +0000 Files and hashes: 1: e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl (hash: +1QKZj4U5CsvS+qdISXhqlM1pNDAO2ZBxUk6sFj7jEM=) 2: BC56EB8EA21811ED94424B59C4F9AE02.roa (hash: CnCawUsQtxE6gdOQrKIQ65eTD+z0tUhxmLZpOOZFkv0=) 3: 3520A4C0DDA711EBA436967CC4F9AE02.roa (hash: TACWMKsVmIF+DWEhLbG6Mmy8oK2ZJgn16SR/MDsvAC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1621 (0x655) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EF2, serialNumber=7BF180CEAC476DBD18392910FA22DAA1EF5BA6D5 Validity Not Before: Jun 30 22:58:59 2025 GMT Not After : Jul 7 22:58:59 2025 GMT Subject: CN=686316b3-856e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:cd:d0:a3:1d:66:8a:a4:e5:29:9b:0f:d8: c0:f0:e8:f1:91:13:24:14:f3:97:7d:90:43:67:ea: 8d:2d:35:44:dd:79:ad:b7:32:34:66:98:71:e8:8b: ae:d4:bc:f9:d1:d0:1a:db:c6:8d:28:e2:b6:10:d4: 3a:14:c6:2a:0a:46:68:11:c4:f6:03:7e:7c:f4:41: 08:fa:3b:df:94:a7:e6:ba:62:14:9a:5b:56:ae:b5: da:c5:f3:79:f2:af:9c:4d:e7:06:78:36:6d:84:bf: 66:64:13:21:57:b4:55:79:c9:ab:d4:1f:da:8b:d2: a6:c4:10:4e:d3:82:3e:a3:cc:a2:b1:48:4a:94:59: 08:28:ce:f5:d2:f9:c7:00:5e:cf:1b:93:fa:05:ac: 36:d6:55:15:84:c9:27:28:54:2e:69:82:f5:59:a7: 0c:cf:f1:7c:71:98:da:a4:96:b5:c6:86:ff:67:25: cf:99:59:73:18:ed:49:60:e2:10:cb:13:91:36:d6: ca:dc:46:07:65:57:cc:4e:a7:1f:f6:ad:1b:bc:ce: 77:af:2b:b1:6e:c2:33:2f:57:f5:9c:ce:ca:a4:2a: 84:d2:7b:ba:dd:21:e5:55:ed:f8:63:90:44:af:a9: 94:ce:95:48:3e:d3:7f:4e:4a:48:9a:13:82:9b:57: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F6:90:72:93:90:D0:F5:03:D8:D8:FD:85:4F:CC:4E:C5:1D:A0:88 X509v3 Authority Key Identifier: keyid:7B:F1:80:CE:AC:47:6D:BD:18:39:29:10:FA:22:DA:A1:EF:5B:A6:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e_GAzqxHbb0YOSkQ-iLaoe9bptU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EF2/DA47E560944811EBA5AE3609C4F9AE02/e_GAzqxHbb0YOSkQ-iLaoe9bptU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:85:14:de:cf:eb:82:8b:38:44:46:65:c5:be:c3:86:37:51: bf:45:d7:b6:99:4e:a7:79:e9:82:67:5f:82:89:88:de:50:43: 3b:0b:f9:70:d5:da:07:50:d8:00:5f:b9:44:98:a0:44:05:b1: 4c:a0:ea:7e:65:61:f9:48:52:79:75:86:78:a7:b2:ba:3a:85: 23:c3:04:62:bd:20:f6:cc:aa:5d:55:9f:48:52:b6:3c:e8:6f: e2:59:7f:7f:96:77:d1:e0:15:c8:ad:4f:75:45:73:22:33:12: 42:9b:37:e5:37:b3:65:74:f8:a9:2b:f5:88:e8:ad:81:c4:54: 1a:50:4a:d5:70:9e:7f:96:02:fd:90:ed:4d:15:39:ec:a7:27: c9:44:11:85:24:66:d0:aa:09:1c:4b:ed:d3:0c:80:1b:c0:44: b9:bf:a0:2a:4b:10:27:d0:92:d0:66:27:50:36:02:cd:2d:9f: f9:fd:02:7d:86:d3:06:c9:8c:f3:88:12:0c:6d:15:ed:3d:92: 49:e3:05:b1:79:e7:e5:fc:41:fe:08:90:0f:09:6a:64:2b:7b: 90:5a:68:e6:84:8d:c6:9d:37:46:47:b4:6d:1d:a9:bc:7a:bb: a1:fb:92:01:bc:19:1a:12:9a:a9:ab:fa:67:e7:2c:39:5a:f8: 0a:81:f0:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFRjIxMTAvBgNVBAUTKDdCRjE4MENFQUM0NzZEQkQxODM5MjkxMEZBMjJEQUEx RUY1QkE2RDUwHhcNMjUwNjMwMjI1ODU5WhcNMjUwNzA3MjI1ODU5WjAYMRYwFAYD VQQDEw02ODYzMTZiMy04NTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MTN0KMdZoqk5SmbD9jA8OjxkRMkFPOXfZBDZ+qNLTVE3XmttzI0Zphx6Iuu 1Lz50dAa28aNKOK2ENQ6FMYqCkZoEcT2A3589EEI+jvflKfmumIUmltWrrXaxfN5 8q+cTecGeDZthL9mZBMhV7RVecmr1B/ai9KmxBBO04I+o8yisUhKlFkIKM710vnH AF7PG5P6Baw21lUVhMknKFQuaYL1WacMz/F8cZjapJa1xob/ZyXPmVlzGO1JYOIQ yxORNtbK3EYHZVfMTqcf9q0bvM53ryuxbsIzL1f1nM7KpCqE0nu63SHlVe34Y5BE r6mUzpVIPtN/TkpImhOCm1cseQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/2kHKT kND1A9jY/YVPzE7FHaCIMB8GA1UdIwQYMBaAFHvxgM6sR229GDkpEPoi2qHvW6bV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVGMi9EQTQ3RTU2MDk0 NDgxMUVCQTVBRTM2MDlDNEY5QUUwMi9lX0dBenF4SGJiMFlPU2tRLWlMYW9lOWJw dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VfR0F6cXhIYmIwWU9Ta1EtaUxhb2U5YnB0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVGMi9EQTQ3RTU2MDk0NDgxMUVCQTVBRTM2MDlDNEY5QUUwMi9lX0dBenF4SGJi MFlPU2tRLWlMYW9lOWJwdFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbhRTez+uCizhERmXFvsOGN1G/Rde2mU6neemCZ1+CiYjeUEM7C/lw 1doHUNgAX7lEmKBEBbFMoOp+ZWH5SFJ5dYZ4p7K6OoUjwwRivSD2zKpdVZ9IUrY8 6G/iWX9/lnfR4BXIrU91RXMiMxJCmzflN7NldPipK/WI6K2BxFQaUErVcJ5/lgL9 kO1NFTnspyfJRBGFJGbQqgkcS+3TDIAbwES5v6AqSxAn0JLQZidQNgLNLZ/5/QJ9 htMGyYzziBIMbRXtPZJJ4wWxeefl/EH+CJAPCWpkK3uQWmjmhI3GnTdGR7RtHam8 eruh+5IBvBkaEpqpq/pn5yw5WvgKgfAR -----END CERTIFICATE-----Generated at Tue Jul 1 14:27:08 2025 by rpki-client