$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft File: e5n41rlBPOKiluscfX7-bUfQy6Q.mft (raw, json) Hash identifier: afjcbl8Rtgjo7ZPHQ5bqLaJnSqBb8LWX/pYoS7lu9jo= Subject key identifier: 34:16:55:8B:59:67:27:9B:9E:69:EC:84:8F:8B:94:10:D7:EB:F9:E7 Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 08B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft Manifest number: 08AA Signing time: Mon 30 Jun 2025 20:45:23 +0000 Manifest this update: Mon 30 Jun 2025 20:45:23 +0000 Manifest next update: Mon 07 Jul 2025 20:45:23 +0000 Files and hashes: 1: e5n41rlBPOKiluscfX7-bUfQy6Q.crl (hash: 524IxnbsQHQ70Th0rnfZqNwTeH7tUn5Bsloyco4KbrI=) 2: 059261A8BC5111EABE07AE32C4F9AE02.roa (hash: cybKavsK+KygtFzdLH5ZiH4HxzktrVv6nGmG8yvNLOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2225 (0x8b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Jun 30 20:45:23 2025 GMT Not After : Jul 7 20:45:23 2025 GMT Subject: CN=6862f763-867d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:ac:7c:60:7a:24:20:d2:f4:68:d0:d8:9c: 2c:04:9f:a4:e7:fb:07:9a:8c:a7:ff:0d:e8:12:00: 8e:05:b6:5a:28:5c:e8:a3:67:1e:69:43:00:a9:67: 84:23:ec:1b:1f:25:14:07:b4:a2:5d:c5:94:2b:b3: 0e:ca:7e:95:a1:96:7b:71:b3:74:54:e6:7e:2d:c9: 00:96:38:04:55:b5:a4:36:61:e9:55:46:de:eb:71: f0:96:5d:77:bf:45:69:f0:88:94:26:da:b8:73:d5: fe:2a:ba:ff:05:e6:92:c9:da:93:bf:2b:22:56:ca: 8f:2a:99:3f:5e:b2:c7:e6:96:bc:08:1c:f5:cb:71: 58:2e:5c:e6:53:b9:12:c4:d6:d0:8b:88:a4:86:fd: 55:62:2c:90:77:5a:2a:be:92:fc:27:36:3f:27:51: a6:4f:fd:56:8d:d2:89:7c:2c:63:a1:b0:16:af:14: c8:02:5f:60:c2:ec:4a:1f:e9:70:a5:00:59:4f:ea: 6a:7f:ba:0c:77:33:93:b2:38:60:89:f2:d8:b3:0c: f7:8b:aa:98:8e:4e:24:b2:0e:ac:0e:4e:cd:c2:27: a9:79:12:40:9f:0e:ae:9a:ca:62:ef:29:e5:28:e2: ff:f0:f9:2b:89:78:19:d1:58:69:aa:1b:62:37:42: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:16:55:8B:59:67:27:9B:9E:69:EC:84:8F:8B:94:10:D7:EB:F9:E7 X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:2c:fb:6b:3e:24:86:36:ed:ca:49:86:88:bd:3c:cc:34:64: 33:6a:b9:54:11:12:7c:24:19:e0:5e:e1:44:d3:55:c9:88:0b: 6d:d1:44:c1:7e:48:8a:f8:3a:c7:b9:dc:43:cb:41:62:f9:a1: 05:50:8e:f8:3e:97:4a:50:98:a3:b7:bb:e2:44:12:35:ad:70: 61:f9:f2:05:d6:3a:ef:b9:85:a2:24:1f:05:d3:9f:20:61:d8: be:b1:8f:0d:2a:b3:20:49:00:53:da:4d:19:93:3a:0a:67:a0: 83:aa:6c:aa:63:9e:f6:22:21:5a:94:bc:79:04:83:8e:b6:7d: 9b:14:f6:43:43:e7:8a:8c:7d:7c:0e:71:c0:f0:dc:d8:d1:ba: 9e:bc:b1:26:96:b1:f5:0b:6b:ca:02:43:0a:66:a3:4c:25:00: 9a:52:a8:e5:33:19:f7:0a:90:b4:14:d6:8c:a2:dd:d5:2d:76: e4:aa:47:82:69:d4:a7:d9:99:4a:db:50:d5:c0:fb:12:a1:b4: 51:5a:4a:f9:0e:c2:ba:01:b5:3b:ec:a7:5f:dd:21:d5:7b:c2: 66:aa:e1:7a:14:cd:c5:89:35:00:84:be:f0:65:42:f6:19:bb: 19:21:3b:00:0d:ed:d8:44:36:b6:17:cc:42:c5:61:99:50:08: 9b:21:99:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjUwNjMwMjA0NTIzWhcNMjUwNzA3MjA0NTIzWjAYMRYwFAYD VQQDEw02ODYyZjc2My04NjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1isfGB6JCDS9GjQ2JwsBJ+k5/sHmoyn/w3oEgCOBbZaKFzoo2ceaUMAqWeE I+wbHyUUB7SiXcWUK7MOyn6VoZZ7cbN0VOZ+LckAljgEVbWkNmHpVUbe63Hwll13 v0Vp8IiUJtq4c9X+Krr/BeaSydqTvysiVsqPKpk/XrLH5pa8CBz1y3FYLlzmU7kS xNbQi4ikhv1VYiyQd1oqvpL8JzY/J1GmT/1WjdKJfCxjobAWrxTIAl9gwuxKH+lw pQBZT+pqf7oMdzOTsjhgifLYswz3i6qYjk4ksg6sDk7NwiepeRJAnw6umspi7ynl KOL/8PkriXgZ0VhpqhtiN0JWtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQWVYtZ ZyebnmnshI+LlBDX6/nnMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYxQi8yM0YzMDU1MEJDNEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBP S2lsdXNjZlg3LWJVZlF5NlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSLPtrPiSGNu3KSYaIvTzMNGQzarlUERJ8JBngXuFE01XJiAtt0UTB fkiK+DrHudxDy0Fi+aEFUI74PpdKUJijt7viRBI1rXBh+fIF1jrvuYWiJB8F058g Ydi+sY8NKrMgSQBT2k0ZkzoKZ6CDqmyqY572IiFalLx5BIOOtn2bFPZDQ+eKjH18 DnHA8NzY0bqevLEmlrH1C2vKAkMKZqNMJQCaUqjlMxn3CpC0FNaMot3VLXbkqkeC adSn2ZlK21DVwPsSobRRWkr5DsK6AbU77Kdf3SHVe8JmquF6FM3FiTUAhL7wZUL2 GbsZITsADe3YRDa2F8xCxWGZUAibIZll -----END CERTIFICATE-----Generated at Wed Jul 2 05:23:45 2025 by rpki-client