$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft File: E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json) Hash identifier: La8OfFdL1wvkhzZBZd39hPNwC0Qj80ciMLu2L79dskg= Subject key identifier: 3E:AE:48:E3:D4:5D:54:41:7C:55:C3:EC:4E:0B:37:E9:21:2F:AC:E0 Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E Certificate issuer: /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft Manifest number: 0481 Signing time: Tue 01 Jul 2025 00:34:34 +0000 Manifest this update: Tue 01 Jul 2025 00:34:34 +0000 Manifest next update: Tue 08 Jul 2025 00:34:34 +0000 Files and hashes: 1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: kD3Nm6o6+KVKjcc+lzHBR9zLq6zaVvRhs/f5NQsN8OY=) 2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: N6UdB/vsoDQh8PeESm7VPxFgrUH9sp1ez29ivoqCJVw=) 3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: u4T6c6+EeGnanbuuwAq6FQjgSX9l5ijgis5wFYw/MM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:34:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E Validity Not Before: Jul 1 00:34:34 2025 GMT Not After : Jul 8 00:34:34 2025 GMT Subject: CN=68632d1a-6353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b4:22:32:2e:82:06:a7:6c:c6:94:be:8a:37: 06:77:15:32:45:43:9b:2b:11:cb:7d:27:2a:f2:0d: 68:f5:9d:f1:12:94:f0:98:f2:9d:7a:26:c2:e1:38: 49:72:7f:9b:31:ea:39:75:f3:59:c8:72:d9:83:a3: 72:1c:b5:05:91:be:2e:09:a4:02:47:0a:1b:b8:58: ac:1e:82:fc:f3:69:d7:63:73:a3:c4:1e:8a:84:73: 76:28:f6:0f:f9:3e:ad:a1:7d:e7:9a:ec:34:6a:0c: 86:57:f3:12:f2:e6:dd:78:5f:70:77:16:e6:dd:5f: 78:c0:11:23:51:84:9f:7c:9f:22:e4:9f:1d:ca:67: ad:61:45:19:b2:97:c1:a1:08:d3:3b:72:d6:7b:1a: 31:3d:d0:af:d4:20:b5:4e:16:d2:63:62:cd:be:50: cc:ee:b6:e6:3f:bb:bc:b2:a0:90:2a:4b:70:23:0b: bb:8b:70:64:68:bc:f2:82:8e:13:94:61:ba:3e:34: a6:7f:57:84:1a:31:50:0f:e4:33:66:9b:eb:3b:8f: 76:50:6e:98:ab:9a:0e:43:7d:d3:72:74:c0:91:8f: 60:5e:03:e4:3b:f8:61:bd:31:c2:72:f9:9e:43:83: b3:9d:50:18:f0:bf:08:ac:54:d3:74:07:64:19:53: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AE:48:E3:D4:5D:54:41:7C:55:C3:EC:4E:0B:37:E9:21:2F:AC:E0 X509v3 Authority Key Identifier: keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:34:90:41:37:5d:d0:4e:75:6a:8a:06:fa:bc:ee:76:7a:c6: 34:1a:04:ea:06:ad:63:00:d5:29:0a:a6:7d:02:4d:8e:ac:74: 65:81:f7:a7:5d:2c:49:f1:48:c9:e7:60:1f:7f:38:23:b5:8c: ea:cb:ec:ef:57:33:6d:d2:fa:2d:4d:10:4a:30:7d:ef:07:93: c1:7d:cc:46:22:fa:7e:8e:8a:3a:2d:81:e8:8c:4e:d4:85:09: c4:5d:d2:92:d9:9c:5b:2f:4f:6a:7e:95:32:09:fd:0b:fe:34: d3:86:4d:bd:2b:4e:88:c2:ce:b2:24:60:a8:b9:53:ea:6d:09: cc:81:19:b1:f3:78:e2:ec:f0:6d:7a:c3:14:e7:89:64:96:54: 5e:e2:cc:6b:74:3d:c2:b8:a6:ff:d4:d1:e6:c5:d6:c6:8e:0a: f7:e2:e3:b1:5a:fe:c4:a6:24:21:33:ba:cd:ba:09:df:4e:a6: eb:c0:85:ee:d5:de:39:89:cf:12:21:14:5a:2a:84:88:43:e5: a9:6f:48:e7:50:0c:4c:0a:83:8f:34:be:92:18:4b:a2:f3:eb: 63:43:03:91:3d:a3:ff:ca:73:6a:ba:6e:03:2e:bc:c6:86:e3: e7:be:c2:c7:e0:2c:7e:e7:e0:08:1b:40:ce:48:b3:b8:27:ed: 6f:69:44:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDQTMxMTAvBgNVBAUTKDEzQjk0Q0FENTU5RTIwRkJCMzBFMDg5N0ExNDA2NjZC Mjc0MEFGMUUwHhcNMjUwNzAxMDAzNDM0WhcNMjUwNzA4MDAzNDM0WjAYMRYwFAYD VQQDEw02ODYzMmQxYS02MzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37QiMi6CBqdsxpS+ijcGdxUyRUObKxHLfScq8g1o9Z3xEpTwmPKdeibC4ThJ cn+bMeo5dfNZyHLZg6NyHLUFkb4uCaQCRwobuFisHoL882nXY3OjxB6KhHN2KPYP +T6toX3nmuw0agyGV/MS8ubdeF9wdxbm3V94wBEjUYSffJ8i5J8dymetYUUZspfB oQjTO3LWexoxPdCv1CC1ThbSY2LNvlDM7rbmP7u8sqCQKktwIwu7i3BkaLzygo4T lGG6PjSmf1eEGjFQD+QzZpvrO492UG6Yq5oOQ33TcnTAkY9gXgPkO/hhvTHCcvme Q4OznVAY8L8IrFTTdAdkGVN8LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6uSOPU XVRBfFXD7E4LN+khL6zgMB8GA1UdIwQYMBaAFBO5TK1VniD7sw4Il6FAZmsnQK8e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0NBMy80MUI5MTBBODQ3 OEYxMUVDOUI1NjIyMkFDNEY5QUUwMi9FN2xNclZXZUlQdXpEZ2lYb1VCbWF5ZEFy eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3bE1yVldlSVB1ekRnaVhvVUJtYXlkQXJ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0NBMy80MUI5MTBBODQ3OEYxMUVDOUI1NjIyMkFDNEY5QUUwMi9FN2xNclZXZUlQ dXpEZ2lYb1VCbWF5ZEFyeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhNJBBN13QTnVqigb6vO52esY0GgTqBq1jANUpCqZ9Ak2OrHRlgfen XSxJ8UjJ52AffzgjtYzqy+zvVzNt0votTRBKMH3vB5PBfcxGIvp+joo6LYHojE7U hQnEXdKS2ZxbL09qfpUyCf0L/jTThk29K06Iws6yJGCouVPqbQnMgRmx83ji7PBt esMU54lkllRe4sxrdD3CuKb/1NHmxdbGjgr34uOxWv7EpiQhM7rNugnfTqbrwIXu 1d45ic8SIRRaKoSIQ+Wpb0jnUAxMCoOPNL6SGEui8+tjQwORPaP/ynNqum4DLrzG huPnvsLH4Cx+5+AIG0DOSLO4J+1vaUQs -----END CERTIFICATE-----Generated at Thu Jul 3 01:11:06 2025 by rpki-client