$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft File: e8dWLzeFS9JjniQQ1nPld8v7MR8.mft (raw, json) Hash identifier: K0OB9OgpzN8Dvkth3t9PWR94JyOk4zsnf1WrbP5KIaE= Subject key identifier: F9:86:A0:4A:75:54:06:1E:06:07:4B:F0:24:C9:04:E7:EF:2C:BC:6A Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F Certificate issuer: /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft Manifest number: 4D Signing time: Sat 05 Jul 2025 07:42:21 +0000 Manifest this update: Sat 05 Jul 2025 07:42:20 +0000 Manifest next update: Sat 12 Jul 2025 07:42:20 +0000 Files and hashes: 1: e8dWLzeFS9JjniQQ1nPld8v7MR8.crl (hash: NUeA/f5Tolj+GA/7HPHEyknTzssIZJQyq/FgqaLvKMY=) 2: C6D4BDF8ECFC11EF9447031DC4F9AE02.roa (hash: vKvGvc7f1ooIQwok9o5vzvjlKuAVRyu9TkNTlmBt1ZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Validity Not Before: Jul 5 07:42:20 2025 GMT Not After : Jul 12 07:42:20 2025 GMT Subject: CN=6868d75c-3343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:df:94:2b:20:db:60:0b:41:68:1f:77:9c: 7b:28:e5:a8:53:4d:3e:6f:83:8a:31:86:9f:3e:69: ce:eb:13:39:0e:78:55:04:35:6e:63:00:ca:f1:d0: 98:ad:32:15:37:8a:34:48:07:00:fc:c4:91:ad:9a: da:07:30:1b:65:d3:10:bd:a4:30:57:69:68:57:af: ad:bb:d2:29:00:c1:60:5d:83:f9:40:4a:c6:5c:c8: 06:4a:60:fd:e1:e5:be:31:13:57:38:4c:04:8e:4f: 9a:ed:93:e0:df:11:eb:09:39:bd:78:03:d4:25:f7: 31:df:6d:bc:49:bf:cd:24:9b:5f:58:3e:4c:c7:f8: c9:60:dd:2c:9b:80:38:4a:ef:55:46:ca:70:0c:91: 8e:57:44:8f:1e:0e:ac:a4:07:58:6b:2d:73:74:51: 3e:7b:e4:74:e0:a3:3e:92:dc:38:66:b6:02:f4:4d: 07:84:bf:2a:1e:b4:a9:f7:c2:3d:52:07:51:ef:66: 47:0e:78:35:b9:57:0d:bc:56:06:32:24:48:b7:ff: df:1f:6a:56:b7:1c:2c:ca:d5:06:5e:38:48:f9:5f: ef:43:7a:20:03:fc:df:96:d5:d2:fd:78:a2:f3:f0: 42:42:72:31:f1:44:da:92:ed:7c:35:21:15:9f:26: 75:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:86:A0:4A:75:54:06:1E:06:07:4B:F0:24:C9:04:E7:EF:2C:BC:6A X509v3 Authority Key Identifier: keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:01:21:8f:32:cc:b6:31:2f:6d:2b:27:ae:7e:49:f3:09:35: 42:f8:f5:08:f8:58:c2:5b:1e:cc:89:6a:f1:70:e5:36:64:71: 10:d9:f9:39:10:59:a5:00:b4:2b:dc:26:fc:7e:c6:44:40:b9: 2f:1d:49:ca:15:8b:77:45:94:eb:06:34:fe:9c:ce:77:51:02: f5:9e:52:56:a4:20:88:88:48:8b:22:c5:a1:f2:7f:c8:22:90: 1b:61:dd:9c:f0:8d:ca:66:f2:19:da:95:9a:62:9d:7f:42:ca: a7:02:c5:3e:e4:6a:99:52:8e:be:3d:b7:4a:41:bc:dd:60:f8: e9:de:ed:c7:73:e0:7b:b5:e1:85:d8:ed:4c:27:0b:98:b4:88: 4c:eb:06:94:5b:fb:38:29:7b:0d:0f:82:97:ac:43:6f:24:26: b7:a7:15:4e:76:15:e6:ea:b1:59:e0:2a:cc:9c:ab:48:5e:2c: 5d:f6:2c:f4:e9:f9:8d:95:c0:39:11:96:be:f3:6e:a5:35:44: 35:17:4b:88:2b:4a:8c:8b:dd:02:26:c6:02:ce:a9:1b:b1:8f: 47:43:9f:f6:be:0d:ab:d2:04:67:d7:5e:e2:40:05:2d:08:f7: 5b:22:8d:f3:fd:20:07:94:f9:3f:36:2e:d5:f3:58:e2:ed:0e: 59:ca:f7:cd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzZDMjExMC8GA1UEBRMoN0JDNzU2MkYzNzg1NEJEMjYzOUUyNDEwRDY3M0U1NzdD QkZCMzExRjAeFw0yNTA3MDUwNzQyMjBaFw0yNTA3MTIwNzQyMjBaMBgxFjAUBgNV BAMTDTY4NjhkNzVjLTMzNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDThN+UKyDbYAtBaB93nHso5ahTTT5vg4oxhp8+ac7rEzkOeFUENW5jAMrx0Jit MhU3ijRIBwD8xJGtmtoHMBtl0xC9pDBXaWhXr6270ikAwWBdg/lASsZcyAZKYP3h 5b4xE1c4TASOT5rtk+DfEesJOb14A9Ql9zHfbbxJv80km19YPkzH+Mlg3SybgDhK 71VGynAMkY5XRI8eDqykB1hrLXN0UT575HTgoz6S3DhmtgL0TQeEvyoetKn3wj1S B1HvZkcOeDW5Vw28VgYyJEi3/98fala3HCzK1QZeOEj5X+9DeiAD/N+W1dL9eKLz 8EJCcjHxRNqS7Xw1IRWfJnX/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+YagSnVU Bh4GB0vwJMkE5+8svGowHwYDVR0jBBgwFoAUe8dWLzeFS9JjniQQ1nPld8v7MR8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzNkMyLzUwRkI5MDcwRUMz OTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlKam5pUVExblBsZDh2N01S OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZThkV0x6ZUZTOUpqbmlRUTFuUGxkOHY3TVI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz NkMyLzUwRkI5MDcwRUMzOTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlK am5pUVExblBsZDh2N01SOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAABIY8yzLYxL20rJ65+SfMJNUL49Qj4WMJbHsyJavFw5TZkcRDZ+TkQ WaUAtCvcJvx+xkRAuS8dScoVi3dFlOsGNP6czndRAvWeUlakIIiISIsixaHyf8gi kBth3Zzwjcpm8hnalZpinX9CyqcCxT7kaplSjr49t0pBvN1g+One7cdz4Hu14YXY 7UwnC5i0iEzrBpRb+zgpew0PgpesQ28kJrenFU52FebqsVngKsycq0heLF32LPTp +Y2VwDkRlr7zbqU1RDUXS4grSoyL3QImxgLOqRuxj0dDn/a+DavSBGfXXuJABS0I 91sijfP9IAeU+T82LtXzWOLtDlnK980= -----END CERTIFICATE-----Generated at Sat Jul 5 11:16:15 2025 by rpki-client