$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: VIUEMUQa5Wr059eaZ0D25l3z3nX/7sr/v364OAYpYt4= Subject key identifier: D8:E4:A7:A3:79:4F:BE:CF:77:E0:9E:FB:3C:EF:87:B3:CB:D5:5C:30 Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0CCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0CC7 Signing time: Fri 22 Aug 2025 18:14:19 +0000 Manifest this update: Fri 22 Aug 2025 18:14:18 +0000 Manifest next update: Fri 29 Aug 2025 18:14:18 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: sXKo9PYroYGWPuq8RuI3urLtS5uxiGsnqcGPRIA9BLQ=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: Wbd4SNbG7n2IN5fFqW7xiw4LueCafFj4BsRNKFvE840=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3279 (0xccf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: Aug 22 18:14:18 2025 GMT Not After : Aug 29 18:14:18 2025 GMT Subject: CN=68a8b37a-40ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:82:d0:01:4b:3f:a5:3f:a7:44:79:ff:1d:e8: f8:c5:57:74:a6:fe:ee:e5:af:f7:4f:4f:c4:92:9b: 2e:4f:88:1c:56:8a:8f:88:83:8c:43:7d:8b:91:b3: 64:b2:b5:9f:a8:01:7d:f7:04:45:ef:5b:b3:58:92: c7:1c:da:d0:25:d9:a4:89:77:3e:ce:a7:4e:37:89: ea:12:76:9d:84:7b:74:51:4a:f1:25:24:33:ea:e2: 2e:21:bc:ae:34:33:49:ff:97:d9:04:1b:ea:a0:9f: 13:a3:48:74:1a:0a:cd:29:7b:87:de:2c:25:43:bc: cf:e5:fe:16:c3:0b:e2:7c:0f:3f:ca:3c:b3:44:cc: a2:b2:26:0f:da:13:bb:31:09:db:80:fd:d0:7f:f7: 3a:0f:dd:d6:5b:90:d2:87:63:b4:97:a4:a2:3a:ba: d8:7b:e6:1b:8c:4d:0d:97:22:c3:6b:f6:25:89:e5: f9:66:e7:e3:7c:99:39:7a:33:37:b8:69:22:c8:fc: 05:5e:07:2c:4d:a1:88:71:23:d1:60:f6:d3:d1:8f: 69:69:d0:1d:05:b8:80:8d:9d:01:e2:79:48:74:4e: 34:1e:0e:a0:bc:e0:be:6f:0f:15:9c:cd:d5:17:5d: 5e:72:52:1b:e8:d4:dd:c1:7c:03:99:a4:ff:9b:4c: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E4:A7:A3:79:4F:BE:CF:77:E0:9E:FB:3C:EF:87:B3:CB:D5:5C:30 X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6b:f1:74:49:49:fb:6b:8e:e7:e1:3d:de:e3:9b:31:a4:b6: b5:20:71:d1:0b:c5:d6:9b:d4:7d:70:50:b5:8e:d5:ec:21:87: b4:58:dd:c8:f2:73:e8:ef:d3:4e:bd:3c:d7:6a:34:4f:55:0d: 64:65:d5:6a:be:22:38:55:a1:04:e9:33:94:e0:92:f3:4d:d9: 27:08:35:51:a8:0e:cb:b5:1d:59:d6:c9:5f:76:5a:ab:52:90: ff:93:80:b7:87:d1:1d:90:d3:b3:e5:cb:34:fc:b9:1d:f8:18: 17:1f:89:f2:a4:be:75:21:64:b9:d0:0f:35:19:73:01:20:8f: bc:63:80:44:9c:fd:44:ed:d0:5f:cc:08:9d:9c:20:26:f5:d0: 37:cf:2f:66:ce:f8:b2:93:61:e9:d8:63:cb:c4:c2:8d:21:88: df:3e:45:65:30:fb:35:9c:fa:34:8b:21:42:34:39:7d:e2:0c: 72:58:42:86:64:f5:8f:f8:da:ac:b0:2c:9f:6f:2c:ff:06:0b: 82:52:4b:cd:33:8b:6d:bb:7d:dd:fa:0d:da:61:04:28:ae:95: 6a:ff:72:c6:1b:7c:be:77:ca:7c:e8:92:28:83:87:cd:f4:0b: 86:ad:4f:2c:51:c1:6d:5f:6b:c2:82:5d:0b:17:1e:aa:c8:55: f0:04:6c:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjUwODIyMTgxNDE4WhcNMjUwODI5MTgxNDE4WjAYMRYwFAYD VQQDEw02OGE4YjM3YS00MGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoLQAUs/pT+nRHn/Hej4xVd0pv7u5a/3T0/EkpsuT4gcVoqPiIOMQ32LkbNk srWfqAF99wRF71uzWJLHHNrQJdmkiXc+zqdON4nqEnadhHt0UUrxJSQz6uIuIbyu NDNJ/5fZBBvqoJ8To0h0GgrNKXuH3iwlQ7zP5f4WwwvifA8/yjyzRMyisiYP2hO7 MQnbgP3Qf/c6D93WW5DSh2O0l6SiOrrYe+YbjE0NlyLDa/YlieX5ZufjfJk5ejM3 uGkiyPwFXgcsTaGIcSPRYPbT0Y9padAdBbiAjZ0B4nlIdE40Hg6gvOC+bw8VnM3V F11eclIb6NTdwXwDmaT/m0zmmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjkp6N5 T77Pd+Ce+zzvh7PL1VwwMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMa/F0SUn7a47n4T3e45sxpLa1IHHRC8XWm9R9cFC1jtXsIYe0WN3I 8nPo79NOvTzXajRPVQ1kZdVqviI4VaEE6TOU4JLzTdknCDVRqA7LtR1Z1slfdlqr UpD/k4C3h9EdkNOz5cs0/Lkd+BgXH4nypL51IWS50A81GXMBII+8Y4BEnP1E7dBf zAidnCAm9dA3zy9mzviyk2Hp2GPLxMKNIYjfPkVlMPs1nPo0iyFCNDl94gxyWEKG ZPWP+NqssCyfbyz/BguCUkvNM4ttu33d+g3aYQQorpVq/3LGG3y+d8p86JIog4fN 9AuGrU8sUcFtX2vCgl0LFx6qyFXwBGwX -----END CERTIFICATE-----Generated at Sat Aug 23 21:22:55 2025 by rpki-client