$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft File: eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json) Hash identifier: h4vQTQv2L7tNstgGcSsWzZVmSOCRjvL8KOJA25kWT+8= Subject key identifier: A4:5C:6A:F6:73:5E:5A:B6:FD:63:51:8A:B4:AB:9A:CE:B5:83:3F:27 Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft Manifest number: 39 Signing time: Thu 03 Jul 2025 07:49:06 +0000 Manifest this update: Thu 03 Jul 2025 07:49:05 +0000 Manifest next update: Thu 10 Jul 2025 07:49:05 +0000 Files and hashes: 1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: DI9VdPrGetjag05AoOXkTjIFE4chT0hhvSIKL1Kil7c=) 2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: vF2hPrjWnGE1wVLs/Ml1OeBVYR8W6IECJw4qVwfrJO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Validity Not Before: Jul 3 07:49:05 2025 GMT Not After : Jul 10 07:49:05 2025 GMT Subject: CN=686635f2-239d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:87:9d:15:d0:a0:92:b6:41:f7:e2:93:d7:d9: ad:25:24:48:f0:3b:e6:e3:2e:91:76:16:35:60:55: 58:83:6d:95:50:12:c6:63:5e:ce:d3:2b:2b:29:48: 8b:82:8d:0d:4d:ee:49:76:98:86:9c:01:75:f5:52: 35:27:52:49:6a:23:2e:74:18:5b:d3:4c:9a:1b:15: cb:14:1e:fc:a7:2f:ea:eb:28:26:41:6c:d0:9e:27: fb:e3:8b:80:ab:2f:81:1e:e0:cd:df:fa:7e:96:34: ba:d5:cd:05:4f:6d:43:76:20:ba:65:07:a6:7e:ed: 5d:b2:b5:12:14:12:24:c3:64:a3:e0:9d:48:31:d0: 80:bb:14:d8:43:bc:27:4a:65:9b:79:98:02:bb:50: 23:01:bb:34:ff:98:52:04:f5:7e:53:e4:6c:60:10: 4f:51:d2:9d:7d:6d:82:1c:9b:5e:d3:8d:c8:ae:9b: d6:95:93:77:6b:46:d0:0f:cf:3a:b3:ca:c6:90:78: b4:24:5b:58:9f:e2:45:b2:2e:bf:e8:be:be:17:d0: f7:87:96:0e:d3:e8:95:ba:f3:8a:44:4c:40:e4:5e: 26:d2:55:95:04:81:c5:51:ce:73:49:d0:56:fd:7d: f5:f0:6a:c3:69:94:40:5f:32:1f:e4:1c:5e:b0:9c: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5C:6A:F6:73:5E:5A:B6:FD:63:51:8A:B4:AB:9A:CE:B5:83:3F:27 X509v3 Authority Key Identifier: keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:c8:3b:89:7b:37:0a:c2:1b:86:d8:16:ba:28:1d:51:be:6c: d2:6a:a7:8e:3a:e2:6f:60:d8:e9:72:d0:e3:1f:44:74:f0:b6: 03:e8:81:4a:db:85:16:7d:31:0c:10:8d:cc:2c:19:66:ab:9e: 98:36:ca:d1:14:fa:44:16:54:b8:ac:4e:38:54:3a:dc:c2:f6: 93:19:69:9c:02:cd:1a:7d:66:38:90:8a:43:4f:72:b9:81:84: da:55:21:10:05:9f:6b:90:0e:37:73:a0:f3:28:18:35:bc:85: 06:1e:89:15:21:c7:97:dc:96:d1:06:63:0f:80:b8:7c:67:40: f3:a3:ea:8c:fe:f8:80:30:a3:56:30:56:58:c7:ab:9c:e6:bc: 83:c5:43:d8:56:f8:93:27:46:1f:53:1f:7a:f5:61:f3:60:ac: 1c:2d:4e:67:ca:e9:cf:cc:79:13:cc:78:a3:57:d5:fd:8c:c5: f8:ff:7e:8a:6f:b1:c2:49:da:cb:cf:92:55:fc:59:30:59:19: 4c:ab:89:b6:58:78:f0:4f:ec:c3:41:35:77:ac:af:30:d9:21: 73:88:69:48:b3:83:94:db:e9:f1:52:92:a4:1c:36:c0:32:4e: ef:2a:5c:27:10:c6:16:4d:67:e9:73:d5:f0:b0:34:98:98:3a: b1:ff:41:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzhGNTExMC8GA1UEBRMoNzk1NjhBMzhFQ0RCNjE3RTY3OEMwOEE2Q0M0M0M0RDY1 MDJDRUM2MjAeFw0yNTA3MDMwNzQ5MDVaFw0yNTA3MTAwNzQ5MDVaMBgxFjAUBgNV BAMTDTY4NjYzNWYyLTIzOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvh50V0KCStkH34pPX2a0lJEjwO+bjLpF2FjVgVViDbZVQEsZjXs7TKyspSIuC jQ1N7kl2mIacAXX1UjUnUklqIy50GFvTTJobFcsUHvynL+rrKCZBbNCeJ/vji4Cr L4Ee4M3f+n6WNLrVzQVPbUN2ILplB6Z+7V2ytRIUEiTDZKPgnUgx0IC7FNhDvCdK ZZt5mAK7UCMBuzT/mFIE9X5T5GxgEE9R0p19bYIcm17Tjcium9aVk3drRtAPzzqz ysaQeLQkW1if4kWyLr/ovr4X0PeHlg7T6JW684pETEDkXibSVZUEgcVRznNJ0Fb9 ffXwasNplEBfMh/kHF6wnCrHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpFxq9nNe Wrb9Y1GKtKuazrWDPycwHwYDVR0jBBgwFoAUeVaKOOzbYX5njAimzEPE1lAs7GIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0U4MDI4MTlFMDI1 QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1bmpBaW16RVBFMWxBczdH SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVZhS09PemJZWDVuakFpbXpFUEUxbEFzN0dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OEY1L0U4MDI4MTlFMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1 bmpBaW16RVBFMWxBczdHSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMbIO4l7NwrCG4bYFrooHVG+bNJqp4464m9g2Oly0OMfRHTwtgPogUrb hRZ9MQwQjcwsGWarnpg2ytEU+kQWVLisTjhUOtzC9pMZaZwCzRp9ZjiQikNPcrmB hNpVIRAFn2uQDjdzoPMoGDW8hQYeiRUhx5fcltEGYw+AuHxnQPOj6oz++IAwo1Yw VljHq5zmvIPFQ9hW+JMnRh9TH3r1YfNgrBwtTmfK6c/MeRPMeKNX1f2Mxfj/fopv scJJ2svPklX8WTBZGUyribZYePBP7MNBNXesrzDZIXOIaUizg5Tb6fFSkqQcNsAy Tu8qXCcQxhZNZ+lz1fCwNJiYOrH/Qcw= -----END CERTIFICATE-----Generated at Fri Jul 4 07:43:05 2025 by rpki-client