$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft File: elBsIXoxB45CF4FgOA3SyDko2S4.mft (raw, json) Hash identifier: JkTZKLb/9R60lFkpc+9vPEsPIIZq/YmebYTSmwLcyjM= Subject key identifier: FF:F9:66:F4:DB:D7:C5:37:F2:E6:11:D7:4C:A6:B2:D0:2D:F4:5D:9B Authority key identifier: 7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E Certificate issuer: /CN=A91A6DF8/serialNumber=7A506C217A31078E42178160380DD2C83928D92E Certificate serial: 0CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft Manifest number: 0CAC Signing time: Mon 30 Jun 2025 18:20:53 +0000 Manifest this update: Mon 30 Jun 2025 18:20:52 +0000 Manifest next update: Mon 07 Jul 2025 18:20:52 +0000 Files and hashes: 1: elBsIXoxB45CF4FgOA3SyDko2S4.crl (hash: iqkttM3qVd7bVxWmEFakhIAvPY4cEYENfuskx9OZz40=) 2: 07B85890C29D11EBBAF29939C4F9AE02.roa (hash: Wbd4SNbG7n2IN5fFqW7xiw4LueCafFj4BsRNKFvE840=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6DF8, serialNumber=7A506C217A31078E42178160380DD2C83928D92E Validity Not Before: Jun 30 18:20:52 2025 GMT Not After : Jul 7 18:20:52 2025 GMT Subject: CN=6862d585-516b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ec:4d:2e:46:8c:e9:e8:6f:30:52:28:0c:da: a2:88:76:2a:a4:1b:20:a8:a4:c8:b6:b0:e3:40:7b: 4e:9b:d5:7a:aa:d7:19:d1:61:92:1b:aa:e3:e8:d7: d6:1f:b7:4d:11:50:32:2f:63:9f:e5:4f:11:12:0b: 26:f4:26:27:fa:19:ea:ac:d5:9b:e2:25:43:73:de: 79:5b:06:8c:68:5d:df:35:97:8d:18:da:c3:c0:cb: a5:17:c0:1a:48:d0:0c:8e:5f:25:da:64:c7:ce:65: 60:e0:c8:17:48:5b:4f:90:8b:fc:8d:fe:75:08:12: 43:e7:78:99:93:fe:2b:a5:87:09:35:7a:e3:8b:42: 12:d0:30:25:c4:63:64:fe:72:c5:bd:2d:a3:ec:81: c3:70:26:85:77:1e:87:7d:10:70:2d:10:a2:3b:2c: 04:36:26:ca:ec:b3:53:a3:01:80:46:08:2e:3d:1a: a8:28:d8:34:fd:92:5a:c2:eb:08:87:eb:41:6b:2e: a0:6a:99:38:70:51:da:c7:cc:94:76:9d:47:6e:71: 07:ff:7f:97:41:da:4e:ce:cb:cf:a4:e2:5a:af:1b: 87:7e:2d:e8:c4:1c:19:ab:73:49:8f:8c:10:89:92: aa:88:1a:b4:25:d0:1e:30:a2:0e:9a:66:a8:96:84: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F9:66:F4:DB:D7:C5:37:F2:E6:11:D7:4C:A6:B2:D0:2D:F4:5D:9B X509v3 Authority Key Identifier: keyid:7A:50:6C:21:7A:31:07:8E:42:17:81:60:38:0D:D2:C8:39:28:D9:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elBsIXoxB45CF4FgOA3SyDko2S4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6DF8/7676F5DCF3CA11E9AABA537FC4F9AE02/elBsIXoxB45CF4FgOA3SyDko2S4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7c:fa:37:69:0e:8a:30:e5:22:28:8a:7b:f0:d1:19:5a:14: 1b:4a:33:de:f8:c8:ef:a6:f1:a3:cb:69:2f:52:96:10:14:56: 81:d0:a8:ee:7d:be:af:04:d4:d5:2d:68:12:a2:3e:aa:6f:bf: 1b:b9:ee:1b:0b:01:50:08:95:a6:ec:c2:23:2b:29:27:1e:df: b8:45:c0:ac:6a:e5:4c:9e:b2:85:b7:cd:4e:92:c7:85:3c:71: c0:da:47:64:d6:00:bb:ac:de:df:cb:df:c4:4c:49:a7:89:e3: a7:46:2f:0f:22:9d:0c:09:4e:c6:bc:39:91:15:8e:8e:b7:da: 4c:c0:e7:ef:7e:35:f0:dc:ae:9e:bc:b7:c1:88:58:f9:35:d9: de:73:bc:db:da:ec:54:55:a2:3d:a7:fe:11:f6:1a:57:5d:1f: 3f:84:e5:31:71:cf:81:ea:13:52:78:f9:b2:89:7c:d9:b3:c4: 4f:70:40:8a:ce:c5:e0:25:cc:91:1d:73:36:50:65:46:5a:1f: b5:98:fb:5a:00:ce:1a:0d:13:29:03:18:00:a8:e3:a9:b8:d7: bb:74:49:d0:5b:72:68:7d:ec:cc:04:91:5b:bc:7b:b8:4d:c2: 22:9a:05:92:ac:3c:49:1d:ef:7f:6b:43:5b:12:b8:ed:2d:89: 20:3f:0d:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZERjgxMTAvBgNVBAUTKDdBNTA2QzIxN0EzMTA3OEU0MjE3ODE2MDM4MEREMkM4 MzkyOEQ5MkUwHhcNMjUwNjMwMTgyMDUyWhcNMjUwNzA3MTgyMDUyWjAYMRYwFAYD VQQDEw02ODYyZDU4NS01MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4exNLkaM6ehvMFIoDNqiiHYqpBsgqKTItrDjQHtOm9V6qtcZ0WGSG6rj6NfW H7dNEVAyL2Of5U8REgsm9CYn+hnqrNWb4iVDc955WwaMaF3fNZeNGNrDwMulF8Aa SNAMjl8l2mTHzmVg4MgXSFtPkIv8jf51CBJD53iZk/4rpYcJNXrji0IS0DAlxGNk /nLFvS2j7IHDcCaFdx6HfRBwLRCiOywENibK7LNTowGARgguPRqoKNg0/ZJawusI h+tBay6gapk4cFHax8yUdp1HbnEH/3+XQdpOzsvPpOJarxuHfi3oxBwZq3NJj4wQ iZKqiBq0JdAeMKIOmmaoloTr8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/5ZvTb 18U38uYR10ymstAt9F2bMB8GA1UdIwQYMBaAFHpQbCF6MQeOQheBYDgN0sg5KNku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkRGOC83Njc2RjVEQ0Yz Q0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0NUNGNEZnT0EzU3lEa28y UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsQnNJWG94QjQ1Q0Y0RmdPQTNTeURrbzJTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkRGOC83Njc2RjVEQ0YzQ0ExMUU5QUFCQTUzN0ZDNEY5QUUwMi9lbEJzSVhveEI0 NUNGNEZnT0EzU3lEa28yUzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNfPo3aQ6KMOUiKIp78NEZWhQbSjPe+MjvpvGjy2kvUpYQFFaB0Kju fb6vBNTVLWgSoj6qb78bue4bCwFQCJWm7MIjKyknHt+4RcCsauVMnrKFt81OkseF PHHA2kdk1gC7rN7fy9/ETEmnieOnRi8PIp0MCU7GvDmRFY6Ot9pMwOfvfjXw3K6e vLfBiFj5Ndnec7zb2uxUVaI9p/4R9hpXXR8/hOUxcc+B6hNSePmyiXzZs8RPcECK zsXgJcyRHXM2UGVGWh+1mPtaAM4aDRMpAxgAqOOpuNe7dEnQW3JofezMBJFbvHu4 TcIimgWSrDxJHe9/a0NbErjtLYkgPw0C -----END CERTIFICATE-----Generated at Wed Jul 2 13:03:48 2025 by rpki-client