$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: Eey+QUTLqscDWxaR50NENDBFKNO7K9xs7CkMo+X0/oc= Subject key identifier: 67:86:18:7F:20:2F:38:01:5D:B3:E9:31:09:F5:3A:D6:7F:4D:35:BC Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0F9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0F97 Signing time: Fri 22 Aug 2025 17:39:18 +0000 Manifest this update: Fri 22 Aug 2025 17:39:18 +0000 Manifest next update: Fri 29 Aug 2025 17:39:18 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: VaY5EU8oGis3qd2b7boWv0l/v2uqGlsy+lQa7nD9/qI=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3998 (0xf9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: Aug 22 17:39:18 2025 GMT Not After : Aug 29 17:39:18 2025 GMT Subject: CN=68a8ab46-8a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:87:84:a5:e0:6b:b0:50:dc:ee:00:3e:83: aa:71:c8:51:44:bf:b4:9e:be:22:c3:06:5d:54:bc: e0:69:f5:dd:0c:58:01:4a:3e:00:3c:f2:86:fa:21: 6d:7c:18:a9:82:fb:df:6a:b2:2a:90:38:8c:78:9d: 54:96:36:bf:3e:8a:e7:50:29:1e:34:d5:c0:e5:4e: 4d:75:b5:89:ba:30:1e:14:67:56:44:b9:b7:db:25: 59:9c:6a:3e:ba:28:8b:ae:52:cf:06:30:d1:a9:19: d1:f0:c9:7e:45:2c:13:ae:75:31:72:c9:ec:58:55: f6:60:f3:52:5a:78:e1:bd:78:39:c6:f1:2d:73:8b: c3:8f:c3:48:0c:ef:ad:05:6f:62:9a:e3:e4:c0:b4: 63:b9:39:d9:cb:04:a0:df:6e:ce:e7:08:6b:37:ce: 60:d7:4a:e7:c4:cd:1c:3f:3a:67:46:f0:69:78:f7: 1f:60:bb:aa:e2:ce:ce:a1:5a:3b:0c:41:f4:d1:5a: 5e:6a:41:6e:36:1c:0c:07:1d:36:a6:f5:06:3f:f2: e3:7e:23:f4:3b:56:7f:30:74:ae:50:1f:71:99:6a: 14:5e:b8:e6:9a:99:45:bb:66:39:29:ec:f3:78:ce: 60:0a:78:d9:65:51:6a:23:28:56:28:68:0c:2f:ea: 78:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:86:18:7F:20:2F:38:01:5D:B3:E9:31:09:F5:3A:D6:7F:4D:35:BC X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d6:26:64:0b:42:6b:0c:c8:6c:4f:f3:95:cf:11:f4:f3:76: 79:8c:8b:0d:46:dc:ee:b4:23:1e:20:c8:de:16:cc:f5:e1:9b: 44:d6:d6:0a:db:60:6f:54:ec:db:93:c0:f3:c2:5c:99:58:2c: a4:49:ca:10:02:d5:19:b7:57:51:3f:8f:14:07:33:c6:80:96: 25:25:cf:d7:24:df:66:8a:af:b2:85:2f:64:bc:bb:94:07:f5: 28:89:20:24:ac:87:08:bf:e8:22:26:c9:95:fc:bb:76:33:d0: e5:b9:70:f9:26:29:b0:02:35:0a:be:2e:cf:a8:34:f0:33:f6: 49:d9:ca:bf:d6:9e:be:da:cc:e8:76:f0:46:8a:06:49:b5:95: 17:93:51:88:0e:c4:06:1b:2e:dc:8a:55:68:18:e2:f2:fa:44: 42:39:62:28:9f:04:92:8a:cd:23:a7:29:99:9f:4b:0a:7c:ed: ed:4d:f4:39:10:76:d4:96:d9:37:59:57:6d:af:d4:d3:e6:56: 97:ec:b3:b4:74:e4:14:0e:4f:00:a6:a4:dd:d7:d1:17:6f:d3: ff:28:ef:8c:23:6c:80:cd:e4:bb:2c:c6:4c:ba:e9:e7:f5:11: 10:de:d7:94:e9:91:62:4a:d3:fa:36:da:6a:00:86:59:fb:20: 53:89:6b:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUwODIyMTczOTE4WhcNMjUwODI5MTczOTE4WjAYMRYwFAYD VQQDEw02OGE4YWI0Ni04YTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshOHhKXga7BQ3O4APoOqcchRRL+0nr4iwwZdVLzgafXdDFgBSj4APPKG+iFt fBipgvvfarIqkDiMeJ1Ulja/PornUCkeNNXA5U5NdbWJujAeFGdWRLm32yVZnGo+ uiiLrlLPBjDRqRnR8Ml+RSwTrnUxcsnsWFX2YPNSWnjhvXg5xvEtc4vDj8NIDO+t BW9imuPkwLRjuTnZywSg327O5whrN85g10rnxM0cPzpnRvBpePcfYLuq4s7OoVo7 DEH00VpeakFuNhwMBx02pvUGP/LjfiP0O1Z/MHSuUB9xmWoUXrjmmplFu2Y5Kezz eM5gCnjZZVFqIyhWKGgML+p4qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeGGH8g LzgBXbPpMQn1OtZ/TTW8MB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH1iZkC0JrDMhsT/OVzxH083Z5jIsNRtzutCMeIMjeFsz14ZtE1tYK 22BvVOzbk8DzwlyZWCykScoQAtUZt1dRP48UBzPGgJYlJc/XJN9miq+yhS9kvLuU B/UoiSAkrIcIv+giJsmV/Lt2M9DluXD5JimwAjUKvi7PqDTwM/ZJ2cq/1p6+2szo dvBGigZJtZUXk1GIDsQGGy7cilVoGOLy+kRCOWIonwSSis0jpymZn0sKfO3tTfQ5 EHbUltk3WVdtr9TT5laX7LO0dOQUDk8ApqTd19EXb9P/KO+MI2yAzeS7LMZMuunn 9REQ3teU6ZFiStP6NtpqAIZZ+yBTiWt6 -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:04 2025 by rpki-client