$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft File: EvkubHLmyiXAdQVbSP43tlq24FI.mft (raw, json) Hash identifier: +GHZc/BQT5MMlYbOC9oD18gEypkebO2lnAkTTib2ons= Subject key identifier: 58:03:31:9D:21:8B:36:10:3C:D1:CC:E3:E9:00:FC:4F:29:A0:79:F3 Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 Certificate issuer: /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Certificate serial: 1306 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft Manifest number: 12DE Signing time: Fri 22 Aug 2025 17:11:23 +0000 Manifest this update: Fri 22 Aug 2025 17:11:22 +0000 Manifest next update: Fri 29 Aug 2025 17:11:22 +0000 Files and hashes: 1: EvkubHLmyiXAdQVbSP43tlq24FI.crl (hash: EsjX5nwagFKTlRVtQ5ySuNxEEHHnRboR/abRAKYPmog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4870 (0x1306) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6006, serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Validity Not Before: Aug 22 17:11:22 2025 GMT Not After : Aug 29 17:11:22 2025 GMT Subject: CN=68a8a4bb-4b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c3:f0:c0:fc:11:c5:d8:ed:91:32:69:89:e6: 2e:56:37:fb:9a:f0:70:da:30:8f:bd:d7:36:76:84: 43:e4:f5:30:c4:7a:16:06:f9:ca:8c:91:89:b7:c8: bd:a0:31:5e:2d:27:b2:9e:cb:1f:0d:21:19:22:50: df:a1:01:2f:da:f2:39:dc:bf:c3:a0:f1:e2:51:15: 78:b9:e0:00:7d:8f:ad:14:71:fd:42:75:ea:ba:4c: 9a:06:3a:49:c5:2a:5e:d2:8e:13:b7:ac:aa:2b:3b: fc:65:b5:7c:42:d6:78:fc:cd:e2:9d:2f:f1:48:58: f6:0d:47:41:87:dd:14:83:fb:78:0b:62:fd:18:be: e9:be:b4:a9:9c:3b:b7:35:f3:8f:29:ac:d7:70:f2: e7:f9:de:6e:d4:91:c7:20:1e:29:95:9b:8a:f1:fd: 21:e0:b6:30:91:c6:8b:76:26:07:50:fa:93:e6:48: 84:49:39:df:6f:30:97:7c:6b:71:ae:3b:75:04:35: c6:c0:d2:21:18:4a:25:49:04:5b:7f:6c:59:5d:51: f1:c4:15:d3:15:d8:a3:be:9d:1f:cd:e1:db:2e:73: cc:4e:bf:d2:c2:88:c3:41:2b:59:02:04:6a:80:89: fa:4f:8b:36:1b:a2:06:ba:5c:1b:36:c5:93:ee:86: 13:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:03:31:9D:21:8B:36:10:3C:D1:CC:E3:E9:00:FC:4F:29:A0:79:F3 X509v3 Authority Key Identifier: keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b7:e2:15:f8:f9:2c:ac:25:f6:6a:af:d3:35:e7:d9:79:40: 3b:e4:72:90:2a:d2:d6:b7:c9:49:05:71:b3:d2:a6:c1:4c:a0: be:0c:b1:dd:2b:0a:9f:d5:b1:64:f5:bc:81:26:99:05:ac:5c: 79:a5:32:ef:c2:ee:ba:5e:0f:ef:f2:24:03:c5:0e:bf:ce:24: 78:40:82:3e:46:43:40:84:19:1d:85:2d:0e:80:6f:23:26:ac: 11:f8:7f:db:c1:04:b8:c6:33:22:97:b6:a9:8b:a6:ab:78:8b: ff:d6:00:e0:48:1b:d5:f3:5a:c6:83:99:e2:2c:4a:30:4f:02: 2d:78:24:9f:90:6e:69:cd:c0:d4:bd:96:e5:1a:76:cc:5b:7d: 52:b3:f1:92:10:68:7f:f5:38:dd:44:46:4f:da:4e:7b:d1:ae: 49:c8:1f:ea:44:36:bb:98:50:70:14:ad:9a:e8:98:c5:cb:cc: 71:22:74:2d:d9:e1:ee:2a:15:1b:ba:7c:72:90:e1:83:71:43: 14:09:3d:04:e7:1a:11:aa:5a:cd:64:46:76:95:9c:80:14:ce: 7e:2c:15:49:7a:d0:cd:f2:ea:e1:9e:95:78:f1:62:66:0f:82: 62:ca:d3:88:d0:57:c0:7f:d6:cb:22:1d:27:a0:9f:c2:2f:aa: 1f:9b:6e:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYwMDYxMTAvBgNVBAUTKDEyRjkyRTZDNzJFNkNBMjVDMDc1MDU1QjQ4RkUzN0I2 NUFCNkUwNTIwHhcNMjUwODIyMTcxMTIyWhcNMjUwODI5MTcxMTIyWjAYMRYwFAYD VQQDEw02OGE4YTRiYi00YjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5sPwwPwRxdjtkTJpieYuVjf7mvBw2jCPvdc2doRD5PUwxHoWBvnKjJGJt8i9 oDFeLSeynssfDSEZIlDfoQEv2vI53L/DoPHiURV4ueAAfY+tFHH9QnXqukyaBjpJ xSpe0o4Tt6yqKzv8ZbV8QtZ4/M3inS/xSFj2DUdBh90Ug/t4C2L9GL7pvrSpnDu3 NfOPKazXcPLn+d5u1JHHIB4plZuK8f0h4LYwkcaLdiYHUPqT5kiESTnfbzCXfGtx rjt1BDXGwNIhGEolSQRbf2xZXVHxxBXTFdijvp0fzeHbLnPMTr/SwojDQStZAgRq gIn6T4s2G6IGulwbNsWT7oYTOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgDMZ0h izYQPNHM4+kA/E8poHnzMB8GA1UdIwQYMBaAFBL5Lmxy5solwHUFW0j+N7ZatuBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjAwNi9FNEZERTQ2QUMz RTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlpWEFkUVZiU1A0M3RscTI0 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V2a3ViSExteWlYQWRRVmJTUDQzdGxxMjRGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjAwNi9FNEZERTQ2QUMzRTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlp WEFkUVZiU1A0M3RscTI0RkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdt+IV+PksrCX2aq/TNefZeUA75HKQKtLWt8lJBXGz0qbBTKC+DLHd Kwqf1bFk9byBJpkFrFx5pTLvwu66Xg/v8iQDxQ6/ziR4QII+RkNAhBkdhS0OgG8j JqwR+H/bwQS4xjMil7api6areIv/1gDgSBvV81rGg5niLEowTwIteCSfkG5pzcDU vZblGnbMW31Ss/GSEGh/9TjdREZP2k570a5JyB/qRDa7mFBwFK2a6JjFy8xxInQt 2eHuKhUbunxykOGDcUMUCT0E5xoRqlrNZEZ2lZyAFM5+LBVJetDN8urhnpV48WJm D4JiytOI0FfAf9bLIh0noJ/CL6ofm25d -----END CERTIFICATE-----Generated at Sat Aug 23 23:58:14 2025 by rpki-client