$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft File: EvkubHLmyiXAdQVbSP43tlq24FI.mft (raw, json) Hash identifier: 0UjeviLDdMPhXoS2tmjLjp1Xjobffk+Y6e0uaLNeXtI= Subject key identifier: 35:79:BB:91:69:3F:9C:56:AC:D4:40:6F:9E:1F:EC:C4:95:5A:21:0C Authority key identifier: 12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 Certificate issuer: /CN=A91B6006/serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Certificate serial: 12E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft Manifest number: 12C1 Signing time: Mon 30 Jun 2025 17:15:08 +0000 Manifest this update: Mon 30 Jun 2025 17:15:08 +0000 Manifest next update: Mon 07 Jul 2025 17:15:08 +0000 Files and hashes: 1: EvkubHLmyiXAdQVbSP43tlq24FI.crl (hash: LspVBmDP3F10Vd5pjk4O7HU6KQeIJJ+TB9by3Rl59WQ=) 2: D67D6C12D09611ECAE4FA90AC4F9AE02.roa (hash: ohfZG59sEvFb3B98TJzWsPWyWdsfQxGqekH2JoxH6gQ=) 3: D5BE6FF6D09611ECAE4FA90AC4F9AE02.roa (hash: QtJIcs1O/DIjF/Awmfs8kNbcOWbla/g4nCBWN3yn5TE=) 4: 2AD29284D22A11E8B6E99987C4F9AE02.roa (hash: 3q5R1J4djCmGk92jrHGge8u1JnUcb5OYOxif13zqZng=) 5: D82E5F1ADBC211E99D686940C4F9AE02.roa (hash: At2TYBc2mB9m2KMar1RnpPwLIC3piw2pCnJKYNvU7DI=) 6: 8ECD16D0CE7211ED84D09A78C4F9AE02.roa (hash: T7RO7bDELeuxgYKkuydZy/+SJnNf8qDQvOpkzhWcvjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4841 (0x12e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6006, serialNumber=12F92E6C72E6CA25C075055B48FE37B65AB6E052 Validity Not Before: Jun 30 17:15:08 2025 GMT Not After : Jul 7 17:15:08 2025 GMT Subject: CN=6862c61c-9f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:f2:66:00:4a:8a:46:c7:f3:03:52:36:68: ac:c0:83:a3:36:c9:74:10:09:1d:46:29:13:3c:86: f4:2f:7c:6c:40:37:5d:27:8e:d6:36:e5:48:04:eb: d4:76:f0:8b:d5:86:c6:da:89:1a:06:0f:ef:7c:2b: f1:f2:5b:e7:ad:3b:d0:a7:c0:e6:6b:eb:07:16:51: 60:e2:40:a4:53:1f:8b:a5:5c:ab:d6:16:dc:10:29: c3:b2:58:ba:9d:3d:82:91:f1:ca:41:45:b1:62:43: d3:4e:3f:1c:61:45:77:92:24:80:15:09:58:ce:b3: 31:b0:08:52:02:2c:48:af:fa:b8:16:d1:1e:b8:4e: da:f5:63:2d:dd:5d:f5:1c:0f:37:d8:f8:e0:4d:65: c8:68:78:52:59:2a:a4:b6:18:8e:bc:81:97:9b:69: 2f:ed:71:43:0a:42:7e:3c:ce:73:e3:1c:73:25:e2: 2e:9d:8a:58:07:ab:a7:52:b3:19:e5:69:fb:52:b8: 84:b5:17:d0:08:8f:c8:d2:38:a1:f2:1b:e8:15:de: 24:1f:a3:58:12:23:46:42:1f:d3:c7:92:75:11:6d: 7f:11:bc:67:b7:ca:62:b3:06:d9:7f:2f:16:9b:29: 7c:7c:20:77:c7:13:a4:06:b7:10:e6:0a:ef:30:11: 5b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:79:BB:91:69:3F:9C:56:AC:D4:40:6F:9E:1F:EC:C4:95:5A:21:0C X509v3 Authority Key Identifier: keyid:12:F9:2E:6C:72:E6:CA:25:C0:75:05:5B:48:FE:37:B6:5A:B6:E0:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvkubHLmyiXAdQVbSP43tlq24FI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6006/E4FDE46AC3E811E8AC76EB16C4F9AE02/EvkubHLmyiXAdQVbSP43tlq24FI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:7d:8d:f3:b3:05:b1:cf:99:47:8f:1b:31:1b:44:31:e8:e2: d6:aa:e3:d7:f9:2c:be:ad:5c:7a:f4:ed:8e:db:7b:4a:7d:10: f0:db:5d:bb:fe:21:ad:dd:a4:be:d4:42:9d:28:f2:67:fa:8c: f6:8f:f6:07:1f:a8:46:cf:6e:2c:75:99:2f:ec:49:35:e7:31: 43:55:f9:82:d5:2b:1a:c2:fd:62:e6:20:ce:6b:3e:66:bd:ca: 63:c3:6b:1d:00:46:4a:0f:99:ec:41:13:bc:61:6a:ab:99:26: 10:3b:c8:50:7a:c8:14:24:99:83:22:8e:b8:64:4b:b3:37:f8: 85:a7:ce:f0:46:15:2a:15:34:4e:1b:e4:02:af:d0:8b:af:28: 55:90:82:ee:dc:95:c6:49:bf:72:a6:65:e9:3a:65:b5:f9:c7: b2:82:5d:57:8d:64:b0:b7:c9:0c:bb:33:58:2d:8a:06:fb:8b: d1:53:80:eb:0b:c8:d2:cc:32:8d:c5:2f:56:6f:81:44:dc:de: cf:a3:43:00:4f:73:19:db:67:89:e0:94:c3:83:e3:8f:0e:c2: 53:59:a1:07:a5:48:ce:a0:18:12:52:1e:c5:e6:e1:61:e7:9b: 0c:6d:c6:40:e1:c7:3f:6b:69:f2:b5:a2:19:47:c6:8b:9d:3e: 0c:52:cc:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYwMDYxMTAvBgNVBAUTKDEyRjkyRTZDNzJFNkNBMjVDMDc1MDU1QjQ4RkUzN0I2 NUFCNkUwNTIwHhcNMjUwNjMwMTcxNTA4WhcNMjUwNzA3MTcxNTA4WjAYMRYwFAYD VQQDEw02ODYyYzYxYy05ZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq7yZgBKikbH8wNSNmiswIOjNsl0EAkdRikTPIb0L3xsQDddJ47WNuVIBOvU dvCL1YbG2okaBg/vfCvx8lvnrTvQp8Dma+sHFlFg4kCkUx+LpVyr1hbcECnDsli6 nT2CkfHKQUWxYkPTTj8cYUV3kiSAFQlYzrMxsAhSAixIr/q4FtEeuE7a9WMt3V31 HA832PjgTWXIaHhSWSqkthiOvIGXm2kv7XFDCkJ+PM5z4xxzJeIunYpYB6unUrMZ 5Wn7UriEtRfQCI/I0jih8hvoFd4kH6NYEiNGQh/Tx5J1EW1/Ebxnt8piswbZfy8W myl8fCB3xxOkBrcQ5grvMBFbPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDV5u5Fp P5xWrNRAb54f7MSVWiEMMB8GA1UdIwQYMBaAFBL5Lmxy5solwHUFW0j+N7ZatuBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjAwNi9FNEZERTQ2QUMz RTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlpWEFkUVZiU1A0M3RscTI0 RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V2a3ViSExteWlYQWRRVmJTUDQzdGxxMjRGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjAwNi9FNEZERTQ2QUMzRTgxMUU4QUM3NkVCMTZDNEY5QUUwMi9Fdmt1YkhMbXlp WEFkUVZiU1A0M3RscTI0RkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApfY3zswWxz5lHjxsxG0Qx6OLWquPX+Sy+rVx69O2O23tKfRDw2127 /iGt3aS+1EKdKPJn+oz2j/YHH6hGz24sdZkv7Ek15zFDVfmC1Ssawv1i5iDOaz5m vcpjw2sdAEZKD5nsQRO8YWqrmSYQO8hQesgUJJmDIo64ZEuzN/iFp87wRhUqFTRO G+QCr9CLryhVkILu3JXGSb9ypmXpOmW1+ceygl1XjWSwt8kMuzNYLYoG+4vRU4Dr C8jSzDKNxS9Wb4FE3N7Po0MAT3MZ22eJ4JTDg+OPDsJTWaEHpUjOoBgSUh7F5uFh 55sMbcZA4cc/a2nytaIZR8aLnT4MUsy5 -----END CERTIFICATE-----Generated at Wed Jul 2 16:00:09 2025 by rpki-client