$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json) Hash identifier: HZkewpha/EsPe0nVqrRC7jA+IvVOA6mleXRqQxZHsbY= Subject key identifier: 13:23:60:4E:97:B5:52:80:A7:CE:11:60:5E:74:92:D0:24:D3:DD:24 Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Certificate serial: 0C7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft Manifest number: 0C68 Signing time: Wed 02 Jul 2025 18:37:52 +0000 Manifest this update: Wed 02 Jul 2025 18:37:52 +0000 Manifest next update: Wed 09 Jul 2025 18:37:52 +0000 Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: tR+hKWV04KD+KC1wkeVrAZuSvsGcbueFfCDAC2hnw1c=) 2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: Xn8UFabkBh7C11XTNFuqVWX0DQ3YtKdO4oP8X6zIrEU=) 3: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: wQzyXgNB8e39dNmdtHKa5IWJxgKdAoXLBNvYY5X5/EU=) 4: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: ZW4D52b/QqoUPTvkPyb0ztzXgPBkyyW+b1SqWMCRNR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3198 (0xc7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Validity Not Before: Jul 2 18:37:52 2025 GMT Not After : Jul 9 18:37:52 2025 GMT Subject: CN=68657c80-ab26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:bd:b6:e4:5f:0e:c6:84:22:f7:75:45:39:43: 19:73:24:b7:2b:2c:d3:9c:c1:6c:21:e0:12:ce:cb: 62:cd:f2:0c:60:34:7a:83:3f:4d:30:1f:f1:cc:fc: 98:19:4a:9d:b0:74:23:3f:8a:e7:b6:c7:9a:3c:47: ab:1e:ac:8d:11:50:3f:71:e0:0c:f4:a5:e3:7c:18: 01:8a:5c:2e:a6:74:50:fb:94:b6:f3:87:7d:e8:cf: 53:56:c7:ce:c4:c5:a8:4f:fa:28:af:ce:69:44:3c: 11:3b:00:75:e7:12:14:45:c4:11:15:85:85:26:7d: bd:8f:28:6c:43:e1:1b:a9:43:d3:83:b1:83:5d:5a: 41:c7:a7:01:63:8c:3a:24:f0:17:37:a0:7c:bf:aa: fe:11:fe:66:e0:cb:c9:e0:9c:5d:7b:69:e2:95:08: 3a:6c:fb:33:14:bd:75:d4:ad:99:d6:ae:3d:a6:f2: 56:50:50:62:8d:46:27:2f:cd:22:9b:93:f4:7f:00: 17:4a:48:6e:96:44:6a:48:00:36:41:60:8a:b0:7d: 6d:76:c3:d4:c0:19:65:79:67:b6:c1:8a:e2:7f:87: 15:ca:96:69:fb:7c:c1:bd:72:da:cc:32:95:8e:9e: c7:4f:73:20:81:04:8a:25:f4:4f:80:97:40:2b:04: 3d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:23:60:4E:97:B5:52:80:A7:CE:11:60:5E:74:92:D0:24:D3:DD:24 X509v3 Authority Key Identifier: keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:de:20:0c:e6:e1:a4:5d:1e:03:3a:fa:e4:ce:34:d8:39:44: ab:c9:25:ec:de:74:c9:2a:29:91:29:33:35:3e:98:21:1a:f8: 54:58:9f:8b:1d:8f:3d:6b:84:da:e7:4a:25:ac:ed:80:e8:e2: 0d:7b:1a:9f:be:69:9f:c9:cd:e3:36:82:80:00:62:2c:d7:49: c6:aa:99:0d:e8:da:62:37:ec:33:c3:75:6c:68:de:0b:d5:9a: 15:44:fe:55:cb:fe:17:c5:69:cc:23:5b:5d:c0:30:68:6f:f9: c8:77:b8:40:8e:e1:af:c9:1d:b3:bd:f3:4d:25:a9:e3:f7:91: 7b:80:1d:78:e7:ee:88:80:20:92:aa:87:5c:60:cc:45:29:f1: 01:64:df:dd:3e:8e:ef:21:1c:ce:9e:50:f6:e4:1c:79:46:be: 10:d5:b9:75:e1:30:36:c7:25:a0:2f:ed:62:38:1c:fb:df:28: ad:f7:99:2f:38:40:3b:ec:0d:7b:2d:5f:d3:88:0f:3f:7c:35: b9:d9:5d:d2:34:cf:7b:e5:8e:a1:e9:d5:ac:d7:6d:bf:fa:95: 77:b0:cd:ee:69:9f:98:81:de:75:d3:7f:e2:51:73:e6:ba:a2: 20:7e:8d:a6:39:8b:4a:44:91:6f:3e:25:a7:6c:43:8a:bc:b2: 48:dc:d5:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKDEzNTVENTE4N0QyRTYzRDdFNkQ0OTA3OEQ4RTcxRkEw NTFDNDU2RTMwHhcNMjUwNzAyMTgzNzUyWhcNMjUwNzA5MTgzNzUyWjAYMRYwFAYD VQQDEw02ODY1N2M4MC1hYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3b225F8OxoQi93VFOUMZcyS3KyzTnMFsIeASzstizfIMYDR6gz9NMB/xzPyY GUqdsHQjP4rntseaPEerHqyNEVA/ceAM9KXjfBgBilwupnRQ+5S284d96M9TVsfO xMWoT/oor85pRDwROwB15xIURcQRFYWFJn29jyhsQ+EbqUPTg7GDXVpBx6cBY4w6 JPAXN6B8v6r+Ef5m4MvJ4Jxde2nilQg6bPszFL111K2Z1q49pvJWUFBijUYnL80i m5P0fwAXSkhulkRqSAA2QWCKsH1tdsPUwBlleWe2wYrif4cVypZp+3zBvXLazDKV jp7HT3MggQSKJfRPgJdAKwQ9JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMjYE6X tVKAp84RYF50ktAk090kMB8GA1UdIwQYMBaAFBNV1Rh9LmPX5tSQeNjnH6BRxFbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS82MzI2NTBGODA1 MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5Zm0xSkI0Mk9jZm9GSEVW dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UxWFZHSDB1WTlmbTFKQjQyT2Nmb0ZIRVZ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS82MzI2NTBGODA1MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5 Zm0xSkI0Mk9jZm9GSEVWdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs3iAM5uGkXR4DOvrkzjTYOUSrySXs3nTJKimRKTM1PpghGvhUWJ+L HY89a4Ta50olrO2A6OINexqfvmmfyc3jNoKAAGIs10nGqpkN6NpiN+wzw3VsaN4L 1ZoVRP5Vy/4XxWnMI1tdwDBob/nId7hAjuGvyR2zvfNNJanj95F7gB145+6IgCCS qodcYMxFKfEBZN/dPo7vIRzOnlD25Bx5Rr4Q1bl14TA2xyWgL+1iOBz73yit95kv OEA77A17LV/TiA8/fDW52V3SNM975Y6h6dWs122/+pV3sM3uaZ+Ygd5103/iUXPm uqIgfo2mOYtKRJFvPiWnbEOKvLJI3NVX -----END CERTIFICATE-----Generated at Fri Jul 4 14:53:36 2025 by rpki-client