$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft File: EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json) Hash identifier: vDf13t6z+f6dVevWXYjZpQzaZJPZYlhhpmmvKqXIf90= Subject key identifier: AD:7D:F1:B6:79:8A:69:80:EF:B5:4D:52:3A:72:90:84:7F:A0:C2:97 Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 Certificate issuer: /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft Manifest number: B5 Signing time: Sun 29 Jun 2025 05:02:31 +0000 Manifest this update: Sun 29 Jun 2025 05:02:30 +0000 Manifest next update: Sun 06 Jul 2025 05:02:30 +0000 Files and hashes: 1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: ehSJMFmvKmf2jSOl+LDDAngi+iaYwP6O5UrvBjlfXEw=) 2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: GLbMFy1JbyAVM7u4jQAEv8xQTj/rbFbdkkf2ZQWfsOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 05:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375 Validity Not Before: Jun 29 05:02:30 2025 GMT Not After : Jul 6 05:02:30 2025 GMT Subject: CN=6860c8e7-6233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:17:1d:c0:a2:da:c2:f9:0c:ef:f4:31:df: 04:87:04:9f:b2:5e:73:a9:e2:ad:93:00:06:dc:69: c7:77:8a:27:71:9e:50:05:01:23:61:cb:1b:b1:ef: 03:34:e9:6c:83:af:99:b9:6e:17:a6:3d:bf:62:d3: c3:97:1b:6a:a0:ad:ab:1d:99:63:65:99:5d:f7:b2: a6:4e:98:32:57:17:d5:67:85:7b:fb:03:a1:7a:2a: ce:06:3e:67:4e:65:ac:6c:87:64:a2:a0:03:1f:b5: cb:ff:55:d6:31:b2:ac:0e:6f:6f:d4:9e:2a:71:31: 42:66:76:27:04:c3:bf:44:b7:78:d6:40:14:c1:37: 82:ba:be:d1:de:b7:b2:4a:10:00:03:eb:5e:f9:97: 36:b2:57:b6:89:93:ba:85:c8:40:25:25:18:43:05: 95:36:bf:43:e4:9b:9e:bb:06:88:45:31:14:24:ea: 8e:a5:ab:fb:14:df:e6:ba:80:ce:bd:31:c0:c4:0a: 02:56:5f:58:b7:37:c2:17:a2:6d:a2:7d:43:08:ce: 8b:93:90:3f:84:12:d1:de:78:0f:bf:1a:3d:b6:98: bf:8a:0f:19:be:7e:99:8d:a4:f0:f1:3a:a2:bf:93: b7:28:4a:8d:ab:1f:8c:29:1c:fb:c5:8d:44:c6:44: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7D:F1:B6:79:8A:69:80:EF:B5:4D:52:3A:72:90:84:7F:A0:C2:97 X509v3 Authority Key Identifier: keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:8b:7c:43:01:b3:76:4d:d9:2c:d8:99:35:ed:1b:e1:6a:99: 7b:cd:af:df:73:09:b0:88:fe:13:b9:17:53:c9:f5:d5:8b:1c: 16:ff:79:49:66:15:78:41:b0:af:bc:77:c0:43:af:2e:56:c7: 9b:63:5a:c3:87:23:33:7d:f7:32:01:e8:c7:b4:e2:28:80:66: e2:8d:21:3b:17:78:af:8a:b5:21:32:92:6a:58:70:87:2e:a5: fe:82:25:cc:b7:92:be:6f:9a:30:3c:46:7d:92:be:ec:7e:95: 1c:9b:83:46:c1:da:7d:43:f5:c2:0b:33:fa:77:c4:15:e8:df: c3:6d:d7:83:7e:eb:d2:c1:c6:14:8e:6b:28:5e:db:21:89:e4: dd:eb:ff:ff:05:00:4a:15:54:43:52:90:1a:40:60:54:f8:f0: c4:ce:b1:c0:56:37:27:92:4f:80:e0:42:12:2a:1b:33:fe:9d: bd:11:e3:2f:ec:a3:61:dc:e3:1e:ed:52:80:88:86:d1:2d:a5: f0:83:b5:0d:3e:9f:06:83:93:7f:7a:23:69:ad:ea:e5:5a:8f: 58:6d:21:04:72:a0:c9:bc:d2:eb:85:0f:ad:3f:8d:a4:1d:f3: 10:b2:f3:61:bc:74:cd:00:21:68:fb:e2:cb:e3:7c:2b:34:be: 2b:8a:d6:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5 M0RFQTIzNzUwHhcNMjUwNjI5MDUwMjMwWhcNMjUwNzA2MDUwMjMwWjAYMRYwFAYD VQQDEw02ODYwYzhlNy02MjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtt4XHcCi2sL5DO/0Md8EhwSfsl5zqeKtkwAG3GnHd4oncZ5QBQEjYcsbse8D NOlsg6+ZuW4Xpj2/YtPDlxtqoK2rHZljZZld97KmTpgyVxfVZ4V7+wOheirOBj5n TmWsbIdkoqADH7XL/1XWMbKsDm9v1J4qcTFCZnYnBMO/RLd41kAUwTeCur7R3rey ShAAA+te+Zc2sle2iZO6hchAJSUYQwWVNr9D5JueuwaIRTEUJOqOpav7FN/muoDO vTHAxAoCVl9YtzfCF6Jton1DCM6Lk5A/hBLR3ngPvxo9tpi/ig8Zvn6ZjaTw8Tqi v5O3KEqNqx+MKRz7xY1ExkS1lwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK198bZ5 immA77VNUjpykIR/oMKXMB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG amZ4S01vVkE4Yk9UM3FJM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZi3xDAbN2Tdks2Jk17Rvhapl7za/fcwmwiP4TuRdTyfXVixwW/3lJ ZhV4QbCvvHfAQ68uVsebY1rDhyMzffcyAejHtOIogGbijSE7F3ivirUhMpJqWHCH LqX+giXMt5K+b5owPEZ9kr7sfpUcm4NGwdp9Q/XCCzP6d8QV6N/DbdeDfuvSwcYU jmsoXtshieTd6///BQBKFVRDUpAaQGBU+PDEzrHAVjcnkk+A4EISKhsz/p29EeMv 7KNh3OMe7VKAiIbRLaXwg7UNPp8Gg5N/eiNprerlWo9YbSEEcqDJvNLrhQ+tP42k HfMQsvNhvHTNACFo++LL43wrNL4ritbs -----END CERTIFICATE-----Generated at Sun Jun 29 10:52:50 2025 by rpki-client