$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: k4TNgOYFA991kn9ngen2TM168/im1+hEK3DkWqq6Xak= Subject key identifier: D1:E0:CE:3A:1C:B1:BC:5C:88:CB:81:7B:A5:A4:EE:91:DF:1F:6E:BA Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 09C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 09BC Signing time: Fri 04 Jul 2025 20:22:49 +0000 Manifest this update: Fri 04 Jul 2025 20:22:48 +0000 Manifest next update: Fri 11 Jul 2025 20:22:48 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: Zp8DVT/t6sspEmCAnQ7ghhD0NEG73L1q0+nng69bGNA=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: n5P347FiAUuKhxz5D51UBzZC3yGrF18WlVG2Rg0oGrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2498 (0x9c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: Jul 4 20:22:48 2025 GMT Not After : Jul 11 20:22:48 2025 GMT Subject: CN=68683819-1b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:f5:6f:c9:46:62:c8:6f:36:eb:b3:9f:6e: 6e:b7:00:21:2b:8a:c2:18:e5:f9:6c:42:8e:07:44: 5f:14:df:d5:54:ca:f3:d1:f8:56:49:c8:4f:be:ce: 6d:9c:0b:e4:6d:38:a4:31:13:b0:63:35:64:68:ae: 51:3a:85:42:21:22:08:2e:b5:08:e0:31:db:ad:59: ec:f5:f5:c8:f9:7e:04:ef:16:df:c8:f1:a4:7d:9e: 34:85:ef:58:d2:98:31:be:97:5c:9d:da:d8:6d:1b: 86:11:22:74:30:06:c1:4b:72:6f:c3:1b:cd:b2:1e: 1f:c0:71:47:ef:da:2b:b8:5f:d5:b2:aa:7c:d5:c3: 8d:5e:07:4f:8d:26:f4:fc:a4:2e:76:6a:82:23:d1: e0:3b:40:02:67:89:f4:a4:27:58:a2:82:aa:79:8f: 88:89:9d:ac:bb:0b:1f:54:99:e4:98:99:d1:e8:f3: 74:6e:00:26:9f:67:dc:9a:f4:27:7f:62:ab:53:8c: 7f:47:05:21:3c:1e:60:56:90:e1:a6:c9:f5:a2:7e: e8:62:ee:d4:2c:76:2e:ef:bf:8e:3b:27:da:6c:ff: 01:e2:02:9e:ad:a5:19:31:ab:55:7a:6d:af:d2:59: 2e:ca:a6:31:5b:f5:f2:b2:b2:6e:03:61:ad:80:63: e4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E0:CE:3A:1C:B1:BC:5C:88:CB:81:7B:A5:A4:EE:91:DF:1F:6E:BA X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:94:ca:e1:26:11:c3:9a:a5:03:63:6c:bf:7c:6e:92:53:c6: c3:f3:8b:e0:4a:cc:f7:c0:04:66:bf:b1:ee:87:c0:d4:77:a1: 40:08:b7:50:89:77:db:09:cb:cd:b1:2b:b3:08:88:10:f6:cf: e5:ec:df:82:d6:ba:b9:6b:89:6d:ec:3d:b5:80:4e:89:84:4d: b6:84:d3:f7:4f:64:02:9b:ed:e2:a4:d4:b4:ac:91:91:83:51: 6c:ce:f6:43:ea:84:59:ab:c4:da:4f:2d:d6:78:ae:91:03:eb: c7:36:ff:6b:65:5f:0a:6e:5a:9d:b4:2d:f5:70:d6:bb:bb:98: 7e:ae:de:8a:07:9c:18:d0:6e:48:29:75:98:0a:80:51:c4:58: a0:8f:fd:3d:89:3f:79:9e:d1:ca:91:ce:57:4c:5a:5c:d7:11: 98:f4:11:72:d0:7f:c6:c2:d3:a7:43:a1:58:36:93:02:e4:eb: b0:36:53:cb:30:9f:d1:e1:c8:88:0b:99:b7:b0:ea:61:22:a9: 80:05:8b:6d:50:32:b5:08:0b:50:f8:07:b1:70:f2:93:11:2b: a9:40:bf:b7:76:0e:7b:62:11:eb:81:d2:cd:03:ec:69:07:4a: 7d:4d:52:43:4a:75:4f:eb:e9:89:bc:1b:7d:d7:d8:88:8d:56: 7f:79:50:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjUwNzA0MjAyMjQ4WhcNMjUwNzExMjAyMjQ4WjAYMRYwFAYD VQQDEw02ODY4MzgxOS0xYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDP1b8lGYshvNuuzn25utwAhK4rCGOX5bEKOB0RfFN/VVMrz0fhWSchPvs5t nAvkbTikMROwYzVkaK5ROoVCISIILrUI4DHbrVns9fXI+X4E7xbfyPGkfZ40he9Y 0pgxvpdcndrYbRuGESJ0MAbBS3JvwxvNsh4fwHFH79oruF/Vsqp81cONXgdPjSb0 /KQudmqCI9HgO0ACZ4n0pCdYooKqeY+IiZ2suwsfVJnkmJnR6PN0bgAmn2fcmvQn f2KrU4x/RwUhPB5gVpDhpsn1on7oYu7ULHYu77+OOyfabP8B4gKeraUZMatVem2v 0lkuyqYxW/XysrJuA2GtgGPkZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHgzjoc sbxciMuBe6Wk7pHfH266MB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAklMrhJhHDmqUDY2y/fG6SU8bD84vgSsz3wARmv7Huh8DUd6FACLdQ iXfbCcvNsSuzCIgQ9s/l7N+C1rq5a4lt7D21gE6JhE22hNP3T2QCm+3ipNS0rJGR g1FszvZD6oRZq8TaTy3WeK6RA+vHNv9rZV8KblqdtC31cNa7u5h+rt6KB5wY0G5I KXWYCoBRxFigj/09iT95ntHKkc5XTFpc1xGY9BFy0H/GwtOnQ6FYNpMC5OuwNlPL MJ/R4ciIC5m3sOphIqmABYttUDK1CAtQ+AexcPKTESupQL+3dg57YhHrgdLNA+xp B0p9TVJDSnVP6+mJvBt919iIjVZ/eVAh -----END CERTIFICATE-----Generated at Sat Jul 5 05:33:23 2025 by rpki-client