$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft File: ed1SqjF1MIEm0XSGpygF-w4bqlg.mft (raw, json) Hash identifier: 4l4TZySeBhvBlBCnaaGkKPJqeiW3XAp8cspTVKl4CYk= Subject key identifier: 3D:44:F8:36:2D:42:17:CC:43:5F:05:CA:FC:C2:3D:2E:AD:19:EA:51 Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58 Certificate issuer: /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58 Certificate serial: 0754 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft Manifest number: 074D Signing time: Mon 30 Jun 2025 21:58:43 +0000 Manifest this update: Mon 30 Jun 2025 21:58:42 +0000 Manifest next update: Mon 07 Jul 2025 21:58:42 +0000 Files and hashes: 1: ed1SqjF1MIEm0XSGpygF-w4bqlg.crl (hash: TSyjXZmX5TGzrlrQ4zKhHq+DSDhN5ber8G2v2Ywz79o=) 2: 6B5C86022D6811EB86D96027C4F9AE02.roa (hash: t3hqNdqM2MD3ZAVu8FNoGwxlm5G0gcPJniuKJXcYFWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB0E2, serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58 Validity Not Before: Jun 30 21:58:42 2025 GMT Not After : Jul 7 21:58:42 2025 GMT Subject: CN=68630892-9c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7d:89:8f:52:3d:a7:b7:3f:6f:2d:d8:2b:9e: 75:57:90:df:1b:20:ec:26:e0:5d:92:c9:55:dc:2e: f8:33:31:a0:77:a4:4c:98:98:96:99:4b:64:4c:5e: 27:79:6d:26:4c:0c:7b:50:15:89:bc:02:5c:e7:58: 8f:dd:b7:6a:20:0d:cd:84:51:5b:eb:9f:d6:54:a8: df:c3:6e:f1:cf:4c:2c:cb:2f:e6:e2:b8:03:2f:e8: bc:2d:ba:53:ac:c9:45:61:16:69:3e:b9:bd:ea:4f: e8:0b:a5:3d:7a:85:e8:7e:db:f6:76:f2:8a:88:7a: 64:20:b4:28:e5:13:ec:b4:8a:f0:35:e1:39:5c:b4: 80:c0:40:4a:63:46:8d:38:15:cd:c3:9a:46:9c:50: e2:d0:c6:f7:cc:00:14:cb:9c:32:da:1b:b1:46:83: 10:10:5e:20:7c:69:4c:55:ca:2d:02:7b:36:01:91: 02:13:4d:32:b5:31:29:90:03:6f:62:1f:e7:1a:86: ca:65:cb:24:44:e3:75:b3:b1:b8:c7:8c:bb:a0:60: 93:dd:7b:93:ad:a1:51:12:8a:22:2b:50:5f:0d:d7: c6:71:37:ac:38:15:ab:f0:1c:8a:27:ca:fc:57:01: c4:1a:ef:ca:fe:d6:9a:3a:86:41:da:77:1e:9f:35: 6a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:44:F8:36:2D:42:17:CC:43:5F:05:CA:FC:C2:3D:2E:AD:19:EA:51 X509v3 Authority Key Identifier: keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8b:31:c9:bf:5a:74:7d:08:1d:1d:51:b7:87:1d:96:a6:79: e4:ed:9b:76:97:45:23:00:78:c9:37:bd:81:d4:5b:df:16:2f: 24:f8:93:c9:ad:bc:ca:27:98:bf:3e:b4:3c:e2:8f:19:f7:08: fa:62:f0:19:98:97:65:79:96:14:15:51:e0:c8:3d:39:6e:9a: 6e:04:a8:6f:29:9b:b7:88:4e:20:3a:a5:13:ea:74:79:50:b3: 8b:d1:9c:22:b1:11:90:73:ff:5a:ed:ab:4c:f8:28:20:49:8e: 8c:84:6c:70:2e:3b:27:d7:62:38:94:2a:18:da:f5:fd:44:4f: c2:a4:d4:48:c3:8d:fd:e8:cf:aa:e1:46:eb:05:24:77:f8:47: ba:f7:d1:0d:c2:5f:f2:d8:5d:7f:a8:66:56:5d:d0:ea:6b:b2: 95:a8:9a:87:5d:a9:ed:c0:81:39:7c:5b:b9:3f:d6:57:ed:f1: e3:b5:91:c4:24:18:45:6f:2d:c6:cf:a1:ed:8e:eb:07:6c:59: 8d:fb:36:0c:0f:1e:49:aa:d8:0d:ca:9d:80:cc:d8:60:5f:73: 5e:b2:a9:8a:d0:c1:77:de:0e:1f:75:e4:0d:87:84:66:b5:d3: 82:48:42:68:fa:2d:80:e2:7a:36:f9:c4:a9:9b:41:95:4e:6b: 62:c9:bd:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwRTIxMTAvBgNVBAUTKDc5REQ1MkFBMzE3NTMwODEyNkQxNzQ4NkE3MjgwNUZC MEUxQkFBNTgwHhcNMjUwNjMwMjE1ODQyWhcNMjUwNzA3MjE1ODQyWjAYMRYwFAYD VQQDEw02ODYzMDg5Mi05YzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz32Jj1I9p7c/by3YK551V5DfGyDsJuBdkslV3C74MzGgd6RMmJiWmUtkTF4n eW0mTAx7UBWJvAJc51iP3bdqIA3NhFFb65/WVKjfw27xz0wsyy/m4rgDL+i8LbpT rMlFYRZpPrm96k/oC6U9eoXoftv2dvKKiHpkILQo5RPstIrwNeE5XLSAwEBKY0aN OBXNw5pGnFDi0Mb3zAAUy5wy2huxRoMQEF4gfGlMVcotAns2AZECE00ytTEpkANv Yh/nGobKZcskRON1s7G4x4y7oGCT3XuTraFREooiK1BfDdfGcTesOBWr8ByKJ8r8 VwHEGu/K/taaOoZB2ncenzVqXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1E+DYt QhfMQ18FyvzCPS6tGepRMB8GA1UdIwQYMBaAFHndUqoxdTCBJtF0hqcoBfsOG6pY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjBFMi9CNjIzODUyQTJE NjYxMUVCQjQ0RjU3MjVDNEY5QUUwMi9lZDFTcWpGMU1JRW0wWFNHcHlnRi13NGJx bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VkMVNxakYxTUlFbTBYU0dweWdGLXc0YnFsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjBFMi9CNjIzODUyQTJENjYxMUVCQjQ0RjU3MjVDNEY5QUUwMi9lZDFTcWpGMU1J RW0wWFNHcHlnRi13NGJxbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeizHJv1p0fQgdHVG3hx2Wpnnk7Zt2l0UjAHjJN72B1FvfFi8k+JPJ rbzKJ5i/PrQ84o8Z9wj6YvAZmJdleZYUFVHgyD05bppuBKhvKZu3iE4gOqUT6nR5 ULOL0ZwisRGQc/9a7atM+CggSY6MhGxwLjsn12I4lCoY2vX9RE/CpNRIw4396M+q 4UbrBSR3+Ee699ENwl/y2F1/qGZWXdDqa7KVqJqHXantwIE5fFu5P9ZX7fHjtZHE JBhFby3Gz6HtjusHbFmN+zYMDx5JqtgNyp2AzNhgX3NesqmK0MF33g4fdeQNh4Rm tdOCSEJo+i2A4no2+cSpm0GVTmtiyb2A -----END CERTIFICATE-----Generated at Wed Jul 2 05:12:26 2025 by rpki-client