$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft File: 96B_epkcIaJc05qyCt5Po7XgXRU.mft (raw, json) Hash identifier: JfBaV8HTlSXYoYbvg1/03tQlaS0Qx0EPZ7QfGHGUdOg= Subject key identifier: A4:5A:EA:7B:06:38:2E:AD:B9:38:D8:97:F2:8D:D8:F8:1A:FC:3B:AC Authority key identifier: F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15 Certificate issuer: /CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15 Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft Manifest number: 03D6 Signing time: Thu 03 Jul 2025 01:02:20 +0000 Manifest this update: Thu 03 Jul 2025 01:02:19 +0000 Manifest next update: Thu 10 Jul 2025 01:02:19 +0000 Files and hashes: 1: 96B_epkcIaJc05qyCt5Po7XgXRU.crl (hash: ZFOjaY5KOoq3uDiFzzCjSt6nRfk53KnYzI+kIT+KA5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC2F, serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15 Validity Not Before: Jul 3 01:02:19 2025 GMT Not After : Jul 10 01:02:19 2025 GMT Subject: CN=6865d69c-0a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:45:c6:31:c7:43:05:6a:5e:0f:24:d5:39: ce:e5:a6:7c:44:15:44:2b:52:f0:ca:ae:e1:50:58: 0e:ef:8a:fc:50:41:e6:e8:47:50:13:a4:13:28:a6: 2d:a9:68:2e:8c:59:a2:56:f7:2d:61:d4:ed:63:5b: 06:63:17:e2:b0:1e:16:ae:f9:f4:ec:06:7d:33:b0: 2c:19:5f:c1:62:13:bd:97:e4:a7:ed:4b:80:35:59: 22:9f:b3:69:5c:54:23:d1:11:fe:bb:2d:5e:20:c1: bc:d9:ed:af:44:4d:04:eb:ee:98:e4:5b:a2:a2:b9: 89:60:a5:96:c8:25:3f:04:bb:5f:05:91:57:35:75: 31:78:57:22:61:42:b0:3d:8d:b0:94:7f:54:b9:4f: 21:f4:6b:5b:66:9b:50:05:6b:1d:98:51:ea:a0:27: 44:36:44:8e:8f:61:83:7e:a6:77:56:00:d3:0b:17: 80:3f:84:48:a3:e1:35:20:bc:3e:f2:28:6f:b7:d2: af:87:f7:32:c1:1f:05:cb:9e:10:b8:73:40:76:2e: 34:a5:6d:dc:e4:4f:8e:cc:28:c1:4d:f5:e7:c5:b2: 3a:bf:e6:8f:2e:48:c4:f1:d6:41:26:5d:88:96:ad: c9:c5:b4:d2:51:dc:98:1b:d1:9f:68:a8:e7:8e:f5: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:5A:EA:7B:06:38:2E:AD:B9:38:D8:97:F2:8D:D8:F8:1A:FC:3B:AC X509v3 Authority Key Identifier: keyid:F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f3:e1:a4:da:dd:d1:e6:48:34:72:08:fa:45:c1:43:0e:5b: e9:72:5f:89:f9:ce:61:fb:6a:12:b0:1c:0d:f1:cf:76:12:bb: 92:29:b6:8a:09:5e:44:bc:be:9e:eb:aa:d4:6e:e2:92:09:44: 58:f1:bf:4c:b3:78:de:62:f4:9d:0e:bb:15:eb:65:0f:55:e1: b6:66:ca:d7:e4:95:d5:5e:c8:79:11:9a:37:28:27:47:e4:51: 03:15:5d:95:c7:f4:ac:d2:df:b0:b5:7b:f4:30:86:28:1c:40: 68:f8:9d:42:8e:5e:c4:24:cb:e2:99:30:11:bd:4b:62:b7:62: bf:a7:4b:bd:32:c6:97:08:e8:ea:b5:70:4b:f1:c9:66:3c:06: 65:0a:24:b5:93:fd:5a:1c:ac:12:e9:fb:fc:5f:80:8f:d0:14: dd:e6:c5:5d:aa:7c:84:9d:fa:19:34:13:a0:df:da:85:9e:53: 8d:07:27:e0:fb:8c:43:9a:ef:7f:de:ad:f9:44:bd:d9:6c:0b: a6:0a:73:50:a6:4e:73:5d:ad:7c:04:14:66:f8:b2:0a:f6:49: ca:bc:3a:ec:fb:88:56:2d:52:d4:9b:0d:bf:a0:56:bd:0c:27: 75:8d:de:d5:bb:ce:4d:4d:46:7d:fa:0d:ab:2f:52:c2:8f:f9: 69:90:da:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDMkYxMTAvBgNVBAUTKEY3QTA3RjdBOTkxQzIxQTI1Q0QzOUFCMjBBREU0RkEz QjVFMDVEMTUwHhcNMjUwNzAzMDEwMjE5WhcNMjUwNzEwMDEwMjE5WjAYMRYwFAYD VQQDEw02ODY1ZDY5Yy0wYTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWFFxjHHQwVqXg8k1TnO5aZ8RBVEK1Lwyq7hUFgO74r8UEHm6EdQE6QTKKYt qWgujFmiVvctYdTtY1sGYxfisB4Wrvn07AZ9M7AsGV/BYhO9l+Sn7UuANVkin7Np XFQj0RH+uy1eIMG82e2vRE0E6+6Y5FuiormJYKWWyCU/BLtfBZFXNXUxeFciYUKw PY2wlH9UuU8h9GtbZptQBWsdmFHqoCdENkSOj2GDfqZ3VgDTCxeAP4RIo+E1ILw+ 8ihvt9Kvh/cywR8Fy54QuHNAdi40pW3c5E+OzCjBTfXnxbI6v+aPLkjE8dZBJl2I lq3JxbTSUdyYG9GfaKjnjvX3GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRa6nsG OC6tuTjYl/KN2Pga/DusMB8GA1UdIwQYMBaAFPegf3qZHCGiXNOasgreT6O14F0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMyRi83MjFCMzFENDk2 MzgxMUVDQjgzQzE2ODJDNEY5QUUwMi85NkJfZXBrY0lhSmMwNXF5Q3Q1UG83WGdY UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2Ql9lcGtjSWFKYzA1cXlDdDVQbzdYZ1hSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUMyRi83MjFCMzFENDk2MzgxMUVDQjgzQzE2ODJDNEY5QUUwMi85NkJfZXBrY0lh SmMwNXF5Q3Q1UG83WGdYUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm8+Gk2t3R5kg0cgj6RcFDDlvpcl+J+c5h+2oSsBwN8c92EruSKbaK CV5EvL6e66rUbuKSCURY8b9Ms3jeYvSdDrsV62UPVeG2ZsrX5JXVXsh5EZo3KCdH 5FEDFV2Vx/Ss0t+wtXv0MIYoHEBo+J1Cjl7EJMvimTARvUtit2K/p0u9MsaXCOjq tXBL8clmPAZlCiS1k/1aHKwS6fv8X4CP0BTd5sVdqnyEnfoZNBOg39qFnlONByfg +4xDmu9/3q35RL3ZbAumCnNQpk5zXa18BBRm+LIK9knKvDrs+4hWLVLUmw2/oFa9 DCd1jd7Vu85NTUZ9+g2rL1LCj/lpkNrr -----END CERTIFICATE-----Generated at Thu Jul 3 10:37:43 2025 by rpki-client