$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft File: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json) Hash identifier: IqAoT8ryIhwMBarE5ZJb8309Bs5Kgi8j90UftALJOr4= Subject key identifier: 7B:25:F4:E6:A9:32:96:B4:34:44:CC:90:73:27:99:4B:51:1C:41:F2 Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 Certificate issuer: /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft Manifest number: B1 Signing time: Thu 03 Jul 2025 06:13:55 +0000 Manifest this update: Thu 03 Jul 2025 06:13:55 +0000 Manifest next update: Thu 10 Jul 2025 06:13:55 +0000 Files and hashes: 1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: baN1yqEoKzlvXDWVA4drHJx7QZXXaJm0TpYNUHITqGA=) 2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: tG+xEb4Bj22fmRv5Ap5El7N6H/BamXJAvudixhV4S5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE814, serialNumber=118D9BDE31754F9854CB554740A299F137E241E2 Validity Not Before: Jul 3 06:13:55 2025 GMT Not After : Jul 10 06:13:55 2025 GMT Subject: CN=68661fa3-b895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:2e:c0:9b:9c:d5:74:06:e0:77:49:aa:a0: c6:42:73:33:dd:28:28:e2:b3:7c:92:c5:13:88:e4: ed:8a:5a:e5:0d:4c:e1:cb:63:6d:8c:b4:52:26:6a: b2:e4:08:48:e9:eb:ca:96:b1:7e:02:89:be:77:2d: f8:ea:1c:92:a9:87:0d:ba:8e:b8:b3:51:84:55:47: 98:71:ae:2f:8c:e7:94:c2:8c:8f:e0:12:46:3c:95: 96:80:68:34:ea:fe:1f:fb:45:52:14:d1:86:89:7f: 06:72:5c:67:90:3a:ac:9d:fb:53:36:0a:d9:0e:0d: 70:d9:26:92:fb:19:f5:1e:b8:e4:95:0b:c9:0d:36: 08:e1:33:03:43:39:70:6d:52:f1:11:6f:ad:60:2d: b5:0b:db:2a:a3:60:f0:e6:26:71:e8:b2:02:d0:aa: ac:20:83:11:a2:a9:69:6a:c0:13:d5:03:b0:6c:a7: cb:bb:5a:36:60:71:f0:8b:1f:ef:92:13:f0:a8:f9: fd:f3:23:15:c4:b1:03:87:de:36:d2:56:d4:31:91: d4:ef:25:af:ab:62:54:69:6f:5f:32:e0:6a:eb:80: af:56:6c:53:44:63:3a:9c:f9:67:da:ff:f1:2a:2d: c2:b8:ff:1d:ea:05:3b:c2:0d:6e:e6:e6:78:a6:98: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:25:F4:E6:A9:32:96:B4:34:44:CC:90:73:27:99:4B:51:1C:41:F2 X509v3 Authority Key Identifier: keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:34:88:64:f8:8b:47:26:8b:33:5e:11:f1:01:59:6b:0c:2d: a1:b7:6b:5c:33:93:7b:14:f9:2e:93:e6:1f:2c:e5:71:4b:e2: 69:8d:55:26:7f:f7:82:b0:81:6c:b6:d4:d3:c6:84:d1:62:d4: fa:aa:6d:57:5b:e8:74:b7:f2:3d:11:6f:c6:0b:3b:30:aa:31: 2d:5b:b9:dd:46:13:b5:14:f1:55:32:36:47:2b:28:ba:a4:1a: 2b:21:3e:8f:ba:90:ff:9a:bc:2d:4a:fc:13:b6:60:3c:a6:a3: cb:12:9e:52:e7:ff:17:8e:eb:4d:57:05:c9:47:2e:45:73:62: 06:19:a2:f5:95:83:88:e3:f9:e4:06:2a:99:f3:1f:32:6e:55: a6:8a:f3:de:1a:d0:b2:b6:64:db:cd:c1:8d:62:2e:10:7e:d8: 39:ea:e1:01:92:91:8e:03:17:d3:6d:cd:de:bf:ad:4e:db:a8: 7d:b5:ea:35:99:6b:0d:a3:cc:5b:5f:bb:3f:8b:ac:57:99:59: 07:62:59:53:80:90:96:f5:de:35:10:17:42:cd:ad:6d:92:e7: 5c:11:af:9f:f8:e6:4d:d6:a1:e2:0a:70:89:ab:61:77:d7:00: 57:61:82:ad:18:d6:32:19:fc:d2:b4:f3:48:0e:6f:78:77:69: 89:31:5d:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MTQxMTAvBgNVBAUTKDExOEQ5QkRFMzE3NTRGOTg1NENCNTU0NzQwQTI5OUYx MzdFMjQxRTIwHhcNMjUwNzAzMDYxMzU1WhcNMjUwNzEwMDYxMzU1WjAYMRYwFAYD VQQDEw02ODY2MWZhMy1iODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQMuwJuc1XQG4HdJqqDGQnMz3Sgo4rN8ksUTiOTtilrlDUzhy2NtjLRSJmqy 5AhI6evKlrF+Aom+dy346hySqYcNuo64s1GEVUeYca4vjOeUwoyP4BJGPJWWgGg0 6v4f+0VSFNGGiX8GclxnkDqsnftTNgrZDg1w2SaS+xn1HrjklQvJDTYI4TMDQzlw bVLxEW+tYC21C9sqo2Dw5iZx6LIC0KqsIIMRoqlpasAT1QOwbKfLu1o2YHHwix/v khPwqPn98yMVxLEDh9420lbUMZHU7yWvq2JUaW9fMuBq64CvVmxTRGM6nPln2v/x Ki3CuP8d6gU7wg1u5uZ4pphH+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsl9Oap Mpa0NETMkHMnmUtRHEHyMB8GA1UdIwQYMBaAFBGNm94xdU+YVMtVR0CimfE34kHi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgxNC84QzU3RjE1QTRB MzAxMUVGQTgzMDc3MTlDNEY5QUUwMi9FWTJiM2pGMVQ1aFV5MVZIUUtLWjhUZmlR ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VZMmIzakYxVDVoVXkxVkhRS0taOFRmaVFlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgxNC84QzU3RjE1QTRBMzAxMUVGQTgzMDc3MTlDNEY5QUUwMi9FWTJiM2pGMVQ1 aFV5MVZIUUtLWjhUZmlRZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWNIhk+ItHJoszXhHxAVlrDC2ht2tcM5N7FPkuk+YfLOVxS+JpjVUm f/eCsIFsttTTxoTRYtT6qm1XW+h0t/I9EW/GCzswqjEtW7ndRhO1FPFVMjZHKyi6 pBorIT6PupD/mrwtSvwTtmA8pqPLEp5S5/8XjutNVwXJRy5Fc2IGGaL1lYOI4/nk BiqZ8x8yblWmivPeGtCytmTbzcGNYi4Qftg56uEBkpGOAxfTbc3ev61O26h9teo1 mWsNo8xbX7s/i6xXmVkHYllTgJCW9d41EBdCza1tkudcEa+f+OZN1qHiCnCJq2F3 1wBXYYKtGNYyGfzStPNIDm94d2mJMV0G -----END CERTIFICATE-----Generated at Thu Jul 3 17:06:55 2025 by rpki-client