$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft File: EnvYBqI30MrekRgrn8cmZZvi73E.mft (raw, json) Hash identifier: cCHUzIHgEFI7P8p1w5qBGE7c0UHAOoDEE33Z1B7QQ/Y= Subject key identifier: 69:42:F2:DB:44:A1:1C:1C:B0:F8:03:A8:93:DE:EE:60:11:90:74:49 Authority key identifier: 12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71 Certificate issuer: /CN=A91D3876/serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71 Certificate serial: 064B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft Manifest number: 0645 Signing time: Wed 02 Jul 2025 22:58:05 +0000 Manifest this update: Wed 02 Jul 2025 22:58:05 +0000 Manifest next update: Wed 09 Jul 2025 22:58:05 +0000 Files and hashes: 1: EnvYBqI30MrekRgrn8cmZZvi73E.crl (hash: cfGr1QBxjGm0Df5X6hhU32nhGteodh/k66oXG1hn3Ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.crl rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1611 (0x64b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3876, serialNumber=127BD806A237D0CADE91182B9FC726659BE2EF71 Validity Not Before: Jul 2 22:58:05 2025 GMT Not After : Jul 9 22:58:05 2025 GMT Subject: CN=6865b97d-b67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:5b:60:17:82:72:ba:b0:68:30:8b:b5:a5: 40:4b:f8:09:fb:6f:b9:bb:d7:e9:f8:94:6d:40:e2: 4a:bb:22:1f:fc:c9:c1:c3:e0:89:d5:9e:02:c8:13: 23:ca:ac:43:be:55:0d:f6:3b:35:e5:be:d9:84:f5: 30:5d:b2:5b:7f:75:7c:0c:5f:fb:f2:d9:97:6e:c6: 6e:dc:89:8c:37:25:01:69:47:f5:14:03:8c:ee:50: 7d:e6:62:31:dd:40:8b:bf:cf:65:30:ee:e8:a6:29: 43:51:40:d0:c4:d3:a3:aa:ba:8b:e3:76:78:2b:7f: b1:ae:0a:12:88:f1:b2:61:bc:bc:b0:09:f7:57:69: 6c:cb:9a:6e:8d:0b:7c:32:37:a1:94:35:be:0d:64: 58:e2:39:a5:49:f5:c8:a9:8a:52:6d:b0:fd:fe:7f: 7e:8a:a8:2e:de:f3:2e:52:d6:b9:fa:19:e9:c6:b8: 8f:ff:59:c3:c2:2b:0f:be:2d:a9:b7:3c:f9:1a:08: fb:0a:81:96:73:d8:e1:c4:4f:91:54:3c:91:4e:4a: ac:4a:ca:5b:5e:2e:bc:47:ad:78:c2:95:90:a0:7f: 0a:44:4e:74:d1:a5:0a:b3:cf:6f:4f:df:43:a0:f0: 30:b7:68:af:c2:29:e3:b0:0f:a5:7a:cd:b5:aa:39: 42:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:42:F2:DB:44:A1:1C:1C:B0:F8:03:A8:93:DE:EE:60:11:90:74:49 X509v3 Authority Key Identifier: keyid:12:7B:D8:06:A2:37:D0:CA:DE:91:18:2B:9F:C7:26:65:9B:E2:EF:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EnvYBqI30MrekRgrn8cmZZvi73E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3876/262F7ACA977211EBBF6A5368C4F9AE02/EnvYBqI30MrekRgrn8cmZZvi73E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:55:d4:df:95:c3:47:e0:0d:b8:0a:c5:5e:bf:1f:6c:93:16: 6b:22:f5:1e:38:eb:9b:de:89:e0:ed:7f:45:72:5b:0a:c9:fa: e7:8f:d2:0c:04:f5:5e:d7:38:a5:a3:b6:08:d4:1a:92:4e:d6: 6b:62:85:ce:8c:63:84:66:1c:4a:57:ab:d1:36:03:3f:ff:c2: 7e:95:26:80:88:7a:f1:b3:13:34:62:1b:2b:3c:3f:57:9d:4e: 29:c5:0d:fe:eb:16:06:01:60:2d:63:d3:ac:cb:9b:83:e7:b3: 21:fe:39:54:7c:ba:14:8e:9d:db:c5:34:3c:a0:d6:f5:fb:4e: 85:01:68:ff:bd:a9:64:ca:01:d0:8a:6f:67:fd:e2:d4:fb:bd: ee:3f:bc:6f:f6:cf:3c:c3:3e:1e:23:1d:7a:7f:cd:67:9b:60: fb:26:ed:c0:41:74:e5:cc:10:5c:98:dc:23:18:d3:a6:e3:08: af:3d:20:9e:4d:d1:58:06:d8:b6:6a:8c:5d:36:3a:d7:f9:9d: a7:eb:3f:82:3e:60:6f:e4:a4:3c:d1:12:50:f2:f7:b0:4b:6b: 23:ba:36:a1:ea:78:c2:9f:dd:38:d5:b6:ad:82:36:af:3a:e5: 00:68:7f:b4:26:88:91:71:8f:07:1c:4e:54:62:b3:99:d6:04: 48:7c:ac:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM4NzYxMTAvBgNVBAUTKDEyN0JEODA2QTIzN0QwQ0FERTkxMTgyQjlGQzcyNjY1 OUJFMkVGNzEwHhcNMjUwNzAyMjI1ODA1WhcNMjUwNzA5MjI1ODA1WjAYMRYwFAYD VQQDEw02ODY1Yjk3ZC1iNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWFbYBeCcrqwaDCLtaVAS/gJ+2+5u9fp+JRtQOJKuyIf/MnBw+CJ1Z4CyBMj yqxDvlUN9js15b7ZhPUwXbJbf3V8DF/78tmXbsZu3ImMNyUBaUf1FAOM7lB95mIx 3UCLv89lMO7opilDUUDQxNOjqrqL43Z4K3+xrgoSiPGyYby8sAn3V2lsy5pujQt8 MjehlDW+DWRY4jmlSfXIqYpSbbD9/n9+iqgu3vMuUta5+hnpxriP/1nDwisPvi2p tzz5Ggj7CoGWc9jhxE+RVDyRTkqsSspbXi68R614wpWQoH8KRE500aUKs89vT99D oPAwt2ivwinjsA+les21qjlC9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlC8ttE oRwcsPgDqJPe7mARkHRJMB8GA1UdIwQYMBaAFBJ72AaiN9DK3pEYK5/HJmWb4u9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzg3Ni8yNjJGN0FDQTk3 NzIxMUVCQkY2QTUzNjhDNEY5QUUwMi9FbnZZQnFJMzBNcmVrUmdybjhjbVpadmk3 M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VudllCcUkzME1yZWtSZ3JuOGNtWlp2aTczRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mzg3Ni8yNjJGN0FDQTk3NzIxMUVCQkY2QTUzNjhDNEY5QUUwMi9FbnZZQnFJMzBN cmVrUmdybjhjbVpadmk3M0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuVdTflcNH4A24CsVevx9skxZrIvUeOOub3ong7X9FclsKyfrnj9IM BPVe1zilo7YI1BqSTtZrYoXOjGOEZhxKV6vRNgM//8J+lSaAiHrxsxM0YhsrPD9X nU4pxQ3+6xYGAWAtY9Osy5uD57Mh/jlUfLoUjp3bxTQ8oNb1+06FAWj/valkygHQ im9n/eLU+73uP7xv9s88wz4eIx16f81nm2D7Ju3AQXTlzBBcmNwjGNOm4wivPSCe TdFYBti2aoxdNjrX+Z2n6z+CPmBv5KQ80RJQ8vewS2sjujah6njCn9041batgjav OuUAaH+0JoiRcY8HHE5UYrOZ1gRIfKza -----END CERTIFICATE-----Generated at Fri Jul 4 15:04:40 2025 by rpki-client