$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft File: EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json) Hash identifier: 6NAtHAsVODKlQo93lSeTvsVFVfT4KDnsJUogME1MfkI= Subject key identifier: 7E:60:B3:BB:58:92:C4:C2:DF:2C:87:E4:CA:7B:69:29:1D:AF:32:4B Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A Certificate issuer: /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft Manifest number: 010E Signing time: Thu 03 Jul 2025 05:09:59 +0000 Manifest this update: Thu 03 Jul 2025 05:09:58 +0000 Manifest next update: Thu 10 Jul 2025 05:09:58 +0000 Files and hashes: 1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: sgIS4fuNgrkqb8ZXvBWvvwTsB4cdXozr7oMAItiCkPY=) 2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: YLouRJayszJ+YXIZjA0nYlRHirFmGMZNUS3tAUGchSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A Validity Not Before: Jul 3 05:09:58 2025 GMT Not After : Jul 10 05:09:58 2025 GMT Subject: CN=686610a7-d037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9f:4e:47:43:aa:3e:2e:74:8f:8d:95:86:01: cc:65:d1:d5:76:40:bc:df:3b:14:f9:ab:cb:f5:a0: c9:c5:cd:de:48:a7:10:d2:14:f8:7a:86:e0:9f:71: e5:ea:ce:18:f7:55:ac:e0:42:2b:d9:dc:50:d2:1f: 41:d6:c2:5b:91:e3:8d:9d:2c:b1:8b:5d:c8:e9:ca: de:96:22:9a:14:63:97:da:16:4e:f1:74:69:58:64: d8:62:97:70:84:2d:97:e2:36:53:47:31:fc:44:db: 67:5f:20:08:2b:1c:e1:33:88:17:aa:15:bf:49:c3: 93:01:00:3b:ce:61:83:98:59:6d:78:95:05:ba:07: 6f:85:95:b1:67:57:f3:9d:39:73:83:32:0a:83:97: d5:6e:27:9c:16:93:1c:53:61:90:4a:7c:d8:35:72: 95:56:04:85:61:f9:56:0b:31:c7:20:32:a4:77:67: 71:59:53:a2:18:1a:f8:6c:c3:8a:e0:1c:9f:e1:21: d2:79:4d:39:22:a8:16:19:c9:95:fb:a1:3e:7e:a1: f6:c3:f6:eb:7a:e1:16:66:dd:d2:53:7e:49:00:f4: 6e:fd:1e:ab:0d:94:85:58:c1:82:04:2f:6a:69:6e: 87:0d:1b:9b:b6:f0:e2:12:db:c6:36:05:65:86:9d: 4f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:60:B3:BB:58:92:C4:C2:DF:2C:87:E4:CA:7B:69:29:1D:AF:32:4B X509v3 Authority Key Identifier: keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e2:b9:1f:fc:e0:5a:0e:32:3a:a2:6c:e0:53:f5:8e:38:ca: 2b:b4:fd:29:eb:b8:de:ac:60:57:52:3a:9e:1c:10:bb:77:fb: f6:6d:74:1a:98:1b:6b:7d:67:58:63:6d:57:bb:03:35:f5:a3: f7:8e:49:81:7a:ab:b1:ab:e4:c0:ef:e0:fd:a5:33:46:e0:fe: a0:8c:2b:0d:39:5a:45:81:7f:92:ba:ae:0b:62:c5:c5:92:da: ce:7a:4b:5e:91:56:ba:c0:75:4d:de:d3:fe:e8:20:48:c9:68: 1a:41:43:77:83:fc:4e:ed:21:fd:b9:23:7e:b3:ee:67:51:7b: 30:a2:81:ec:1f:20:92:bf:14:93:eb:bd:7b:1a:73:25:d4:51: 1c:fc:4c:cb:f9:ac:57:14:4a:4b:75:cc:59:29:d5:3e:dd:76: e7:ae:8d:a7:90:52:88:ef:5e:37:bd:a3:39:c3:62:17:69:49: 9f:a3:c5:86:af:c2:d2:5b:65:dd:51:40:8c:37:76:54:42:14: 7c:a2:f2:b9:68:d0:f3:dd:92:74:71:83:03:f8:f7:40:ac:db: 8e:43:b2:44:77:e5:d2:49:09:81:d8:3d:3d:34:b4:51:3c:09: 9b:30:9b:94:d3:c7:f7:e2:68:56:25:01:da:71:35:a9:73:22: d4:17:12:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKDExNUE0MTYwQzg1NTU0N0Q5RTMxMEM2MEQzRDA4OENC QkM5QTk5MkEwHhcNMjUwNzAzMDUwOTU4WhcNMjUwNzEwMDUwOTU4WjAYMRYwFAYD VQQDEw02ODY2MTBhNy1kMDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5p9OR0OqPi50j42VhgHMZdHVdkC83zsU+avL9aDJxc3eSKcQ0hT4eobgn3Hl 6s4Y91Ws4EIr2dxQ0h9B1sJbkeONnSyxi13I6creliKaFGOX2hZO8XRpWGTYYpdw hC2X4jZTRzH8RNtnXyAIKxzhM4gXqhW/ScOTAQA7zmGDmFlteJUFugdvhZWxZ1fz nTlzgzIKg5fVbiecFpMcU2GQSnzYNXKVVgSFYflWCzHHIDKkd2dxWVOiGBr4bMOK 4Byf4SHSeU05IqgWGcmV+6E+fqH2w/breuEWZt3SU35JAPRu/R6rDZSFWMGCBC9q aW6HDRubtvDiEtvGNgVlhp1PnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5gs7tY ksTC3yyH5Mp7aSkdrzJLMB8GA1UdIwQYMBaAFBFaQWDIVVR9njEMYNPQiMu8mpkq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC9GRUNBNzUwNkJF N0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZIMmVNUXhnMDlDSXk3eWFt U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VWcEJZTWhWVkgyZU1ReGcwOUNJeTd5YW1Tby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC9GRUNBNzUwNkJFN0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZI MmVNUXhnMDlDSXk3eWFtU28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA4rkf/OBaDjI6omzgU/WOOMortP0p67jerGBXUjqeHBC7d/v2bXQa mBtrfWdYY21XuwM19aP3jkmBequxq+TA7+D9pTNG4P6gjCsNOVpFgX+Suq4LYsXF ktrOektekVa6wHVN3tP+6CBIyWgaQUN3g/xO7SH9uSN+s+5nUXswooHsHyCSvxST 6717GnMl1FEc/EzL+axXFEpLdcxZKdU+3Xbnro2nkFKI7143vaM5w2IXaUmfo8WG r8LSW2XdUUCMN3ZUQhR8ovK5aNDz3ZJ0cYMD+PdArNuOQ7JEd+XSSQmB2D09NLRR PAmbMJuU08f34mhWJQHacTWpcyLUFxKk -----END CERTIFICATE-----Generated at Thu Jul 3 23:06:41 2025 by rpki-client