$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: spMNzIaPz/BLqNu12NwMclcT75HnTZhZZYi1B+q7tCQ= Subject key identifier: B2:1C:F0:35:A7:30:35:A9:61:D5:AE:F1:30:DA:A9:88:52:E3:C1:6E Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 2530 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 2530 Signing time: Fri 22 Aug 2025 14:48:27 +0000 Manifest this update: Fri 22 Aug 2025 14:48:27 +0000 Manifest next update: Fri 29 Aug 2025 14:48:27 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: D2dUCmOhaPePNTOwxzbHyHSB35gf3tH4X7SAwYKNcLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9520 (0x2530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: Aug 22 14:48:27 2025 GMT Not After : Aug 29 14:48:27 2025 GMT Subject: CN=68a8833b-5e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6a:f5:9c:eb:59:44:1b:73:2e:e3:7e:84:88: dc:08:d5:a8:b2:56:5f:e7:da:86:09:f7:82:80:6e: 45:95:90:8f:bf:ee:aa:8b:ff:b3:bc:7d:43:97:57: e6:b4:56:ff:b4:91:60:fd:b2:74:5e:3e:53:53:30: 3b:62:f1:01:92:c9:46:11:b4:d9:f9:53:c3:2c:84: 63:4b:18:41:0f:e3:97:d1:97:ea:2f:a1:79:2b:79: 7b:64:43:b5:9e:65:b6:ae:d4:b6:66:ce:b7:25:cd: 9f:a4:d3:c2:b0:e0:c3:b1:ee:89:6d:59:90:f0:7d: b0:cf:de:71:b3:bc:6a:e1:30:66:77:4d:c9:bc:05: 0a:04:af:90:c6:92:a8:42:a0:39:89:a7:a5:ec:bf: dd:43:63:0d:8e:b0:61:b7:b9:7c:9c:d2:ef:57:73: 07:3a:89:da:c3:a9:c4:35:3d:d1:84:d5:c2:e7:09: c0:00:f9:17:3c:e0:4a:06:ff:25:21:d4:13:b9:4a: 20:fb:b7:06:b5:4a:13:81:9f:73:45:c9:3e:70:1c: f2:12:39:39:e4:20:72:3e:80:fc:a9:2c:8d:87:95: b0:f7:c7:42:fb:08:8c:af:d4:1c:d7:80:a8:1c:24: a1:47:b0:02:ce:1b:6d:8a:69:c5:56:3d:36:df:48: a2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1C:F0:35:A7:30:35:A9:61:D5:AE:F1:30:DA:A9:88:52:E3:C1:6E X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:cd:69:fc:26:da:0d:37:f7:55:a8:2b:f7:f6:55:21:01:f3: 18:a2:82:10:d8:cb:25:a4:b8:cd:b3:ec:43:15:7b:01:4b:72: f5:f0:55:01:c2:3c:ac:bb:5d:c4:93:6f:7e:17:bd:67:72:16: b6:14:8f:c0:fa:a2:a7:15:ce:2c:f9:89:c4:33:99:f1:96:08: fc:00:9c:9c:8d:71:92:06:bc:22:db:68:38:fc:9e:8c:b6:22: cf:3d:a5:4e:72:24:f0:d9:ed:11:79:3d:09:c0:90:d6:3d:11: 7b:71:2d:1b:34:85:5c:81:ed:b9:3a:74:5c:55:b4:16:ed:4f: f8:98:ef:9e:b0:74:4e:e3:f1:db:71:59:85:c1:9e:8e:f8:ba: 64:6e:30:1e:81:ee:3d:d9:af:d5:a1:48:cd:d1:b4:9a:6a:0f: a7:11:55:31:eb:b6:10:6d:08:27:3e:fb:6f:5d:9d:04:db:b7: ff:2f:bc:26:a1:08:9d:98:b6:58:70:eb:98:8d:e4:a1:0a:76: 07:9b:3d:7f:2d:93:86:c0:87:b9:80:e1:9c:95:97:3d:fc:69: a2:e4:fa:a5:eb:cf:25:d1:93:8b:92:dd:ba:18:36:f5:7a:29: 83:b1:db:60:82:e4:02:2d:ad:10:d7:48:c9:ce:54:ea:d7:ff: 36:4d:74:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjUwODIyMTQ0ODI3WhcNMjUwODI5MTQ0ODI3WjAYMRYwFAYD VQQDEw02OGE4ODMzYi01ZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52r1nOtZRBtzLuN+hIjcCNWoslZf59qGCfeCgG5FlZCPv+6qi/+zvH1Dl1fm tFb/tJFg/bJ0Xj5TUzA7YvEBkslGEbTZ+VPDLIRjSxhBD+OX0ZfqL6F5K3l7ZEO1 nmW2rtS2Zs63Jc2fpNPCsODDse6JbVmQ8H2wz95xs7xq4TBmd03JvAUKBK+QxpKo QqA5iael7L/dQ2MNjrBht7l8nNLvV3MHOonaw6nENT3RhNXC5wnAAPkXPOBKBv8l IdQTuUog+7cGtUoTgZ9zRck+cBzyEjk55CByPoD8qSyNh5Ww98dC+wiMr9Qc14Co HCShR7ACzhttimnFVj0230ii6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIc8DWn MDWpYdWu8TDaqYhS48FuMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZzWn8JtoNN/dVqCv39lUhAfMYooIQ2MslpLjNs+xDFXsBS3L18FUB wjysu13Ek29+F71ncha2FI/A+qKnFc4s+YnEM5nxlgj8AJycjXGSBrwi22g4/J6M tiLPPaVOciTw2e0ReT0JwJDWPRF7cS0bNIVcge25OnRcVbQW7U/4mO+esHRO4/Hb cVmFwZ6O+LpkbjAege492a/VoUjN0bSaag+nEVUx67YQbQgnPvtvXZ0E27f/L7wm oQidmLZYcOuYjeShCnYHmz1/LZOGwIe5gOGclZc9/Gmi5Pql688l0ZOLkt26GDb1 eimDsdtgguQCLa0Q10jJzlTq1/82TXS9 -----END CERTIFICATE-----Generated at Sat Aug 23 12:45:56 2025 by rpki-client