$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: vBecX9Wqc3RCmecyfT4KiDQbfULzUcjplnHs/xhqFdo= Subject key identifier: 99:12:87:48:02:64:3B:58:91:C4:1F:E1:DD:C6:98:F5:27:E2:BF:33 Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0F83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0F7C Signing time: Mon 30 Jun 2025 17:46:01 +0000 Manifest this update: Mon 30 Jun 2025 17:46:01 +0000 Manifest next update: Mon 07 Jul 2025 17:46:01 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: dUIpAQjtl0OdZI5qCiIZGAKid0aKWemPIGkSZ+aBj1w=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3971 (0xf83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: Jun 30 17:46:01 2025 GMT Not After : Jul 7 17:46:01 2025 GMT Subject: CN=6862cd59-f4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0e:57:84:46:a3:12:48:54:a0:9b:9e:9e:ac: 84:4c:68:f0:53:64:ba:4e:57:41:58:d5:d9:13:30: 26:14:09:ec:e0:4e:7a:4a:e0:cf:0f:e3:a1:71:99: 67:58:8e:18:48:fe:88:66:94:39:53:92:04:93:d2: de:03:29:a7:c0:4a:de:df:5c:d8:db:2a:71:90:ad: 74:24:38:ca:35:35:2b:0e:94:22:ea:de:de:83:e2: 27:b1:59:b7:af:e4:b5:ed:27:c2:9c:21:b1:a5:f0: 38:11:ab:18:90:41:8f:49:36:63:04:dc:42:35:97: 86:df:2a:91:6a:ac:1c:13:34:8e:5f:4a:55:01:53: b0:3f:1c:7d:06:7e:5c:9e:4d:27:94:cb:a8:7c:c8: 80:7a:d7:d1:13:5f:92:08:18:5c:d9:46:f7:41:53: 9e:fa:56:47:c7:0c:65:93:10:a6:ee:2e:1c:f7:77: a1:21:a5:91:e6:20:cc:98:b1:8d:10:5a:13:94:d6: 54:bd:4b:8c:48:1f:33:a3:b0:88:b0:c5:0d:1c:ab: 75:0b:08:fc:25:5b:8a:38:0f:d9:f8:35:13:df:0f: e9:ef:da:1e:a1:eb:43:23:94:f8:62:76:12:26:f1: aa:9e:13:ed:64:53:9c:54:f8:59:21:1f:e1:35:64: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:12:87:48:02:64:3B:58:91:C4:1F:E1:DD:C6:98:F5:27:E2:BF:33 X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3d:20:40:86:5c:83:99:6a:d8:6d:8d:89:bb:83:9d:db:dd: 04:da:ca:7c:a0:75:ff:ef:eb:e0:37:2c:98:b4:41:76:35:d6: 74:b7:ef:b0:46:0b:e9:f1:df:ea:a5:bb:1c:07:c4:16:cd:6d: df:90:6e:6e:53:ba:de:91:7e:0c:18:00:ec:b4:1b:9a:b8:79: 80:c2:59:f8:de:45:a4:0b:45:a9:03:33:cc:73:87:01:1e:46: ef:64:65:65:49:e2:81:ac:b7:b1:a3:9d:79:8e:0f:74:3e:ab: d3:86:d7:2b:70:15:8d:40:45:64:5b:48:0c:57:26:67:d2:d6: 1a:52:95:7b:4f:df:df:f1:e3:fd:65:8e:67:03:1b:71:18:1f: 02:69:28:6a:8b:13:2c:78:2c:45:84:7c:a2:d7:42:2e:79:12: 5d:7b:b9:6a:52:7e:39:4a:ce:c9:0e:a4:90:9d:2b:db:49:36: 2a:92:78:b9:9d:fc:2b:e2:76:ee:ac:4f:ee:1e:de:b7:10:fe: 14:06:b3:2a:04:a8:ef:91:24:9a:51:d2:72:f2:ec:16:0d:be: d3:11:b9:85:89:e3:09:8b:69:e8:c8:c5:a9:21:61:aa:4b:a8: fa:86:5b:10:09:a5:5b:52:61:5c:7d:5c:60:11:29:aa:4f:d8: 5d:37:c0:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUwNjMwMTc0NjAxWhcNMjUwNzA3MTc0NjAxWjAYMRYwFAYD VQQDEw02ODYyY2Q1OS1mNGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApg5XhEajEkhUoJuenqyETGjwU2S6TldBWNXZEzAmFAns4E56SuDPD+OhcZln WI4YSP6IZpQ5U5IEk9LeAymnwEre31zY2ypxkK10JDjKNTUrDpQi6t7eg+InsVm3 r+S17SfCnCGxpfA4EasYkEGPSTZjBNxCNZeG3yqRaqwcEzSOX0pVAVOwPxx9Bn5c nk0nlMuofMiAetfRE1+SCBhc2Ub3QVOe+lZHxwxlkxCm7i4c93ehIaWR5iDMmLGN EFoTlNZUvUuMSB8zo7CIsMUNHKt1Cwj8JVuKOA/Z+DUT3w/p79oeoetDI5T4YnYS JvGqnhPtZFOcVPhZIR/hNWS5jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkSh0gC ZDtYkcQf4d3GmPUn4r8zMB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbPSBAhlyDmWrYbY2Ju4Od290E2sp8oHX/7+vgNyyYtEF2NdZ0t++w Rgvp8d/qpbscB8QWzW3fkG5uU7rekX4MGADstBuauHmAwln43kWkC0WpAzPMc4cB HkbvZGVlSeKBrLexo515jg90PqvThtcrcBWNQEVkW0gMVyZn0tYaUpV7T9/f8eP9 ZY5nAxtxGB8CaShqixMseCxFhHyi10IueRJde7lqUn45Ss7JDqSQnSvbSTYqkni5 nfwr4nburE/uHt63EP4UBrMqBKjvkSSaUdJy8uwWDb7TEbmFieMJi2noyMWpIWGq S6j6hlsQCaVbUmFcfVxgESmqT9hdN8D3 -----END CERTIFICATE-----Generated at Wed Jul 2 11:37:53 2025 by rpki-client