$ rpki-client -vvf rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft File: E2EsNInrrttWOQK8neWS_I2DxVs.mft (raw, json) Hash identifier: 6uMVHGWV4pBPb0nFCOgwQhbVIqDOtcw/+MWTw/EvkwE= Subject key identifier: 0B:CF:74:06:0E:35:60:27:E0:65:DD:3D:52:D9:76:7D:E2:14:7D:E6 Authority key identifier: 13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B Certificate issuer: /CN=A91D513A/serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft Manifest number: 3496 Signing time: Mon 30 Jun 2025 15:19:40 +0000 Manifest this update: Mon 30 Jun 2025 15:19:39 +0000 Manifest next update: Mon 07 Jul 2025 15:19:39 +0000 Files and hashes: 1: E2EsNInrrttWOQK8neWS_I2DxVs.crl (hash: IWWUo3rMPTzAqC/kzk9meIfIqpEoCLgW7tWTXWalwyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D513A, serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B Validity Not Before: Jun 30 15:19:39 2025 GMT Not After : Jul 7 15:19:39 2025 GMT Subject: CN=6862ab0b-d0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:b2:8d:61:d9:62:85:46:d0:41:b5:4d:07: 53:7d:47:06:e5:23:bb:b4:22:02:34:80:03:8d:03: 08:7b:cc:93:1f:91:54:67:eb:24:c0:02:5a:ea:09: 78:a4:e6:a9:92:21:c0:2d:b6:d8:93:c1:c3:52:da: cc:18:8b:46:fd:df:2d:2d:12:9f:39:dd:ce:03:a8: 21:3c:bc:c4:d9:a0:2d:1c:d0:91:09:e3:96:0c:7c: a8:de:af:b9:76:6b:c3:18:04:c6:35:a9:4b:ff:dd: 3b:f7:08:e7:94:e0:b4:46:9c:47:47:c2:3a:5f:f6: 7c:20:36:3c:b8:9b:3f:83:e5:ba:fd:60:15:74:61: 44:37:5c:df:5d:14:2f:95:33:f2:e4:21:59:95:e1: d3:73:03:f0:06:9a:a9:23:3e:70:b9:28:9d:92:cc: a4:bf:53:ef:c3:71:d8:80:53:4e:bb:c3:dc:3e:dc: e0:8e:b6:fe:d4:91:aa:9d:58:50:1c:25:c5:f0:43: 1d:f2:da:fa:1a:71:ba:bc:79:ef:a9:af:98:f6:d1: a7:fb:dd:43:00:35:f8:6f:06:e4:8f:8f:7a:20:4b: 65:12:44:b5:ac:e1:19:c7:79:68:d7:37:e0:25:b0: 35:7c:9a:bb:dc:88:3a:a5:f6:18:3b:ac:76:10:30: a2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CF:74:06:0E:35:60:27:E0:65:DD:3D:52:D9:76:7D:E2:14:7D:E6 X509v3 Authority Key Identifier: keyid:13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:09:56:69:cd:63:2d:28:97:2a:3a:a2:55:19:10:1a:9a:d5: 5c:ee:38:61:a4:9c:23:6b:3c:6d:06:1a:42:da:2b:da:a8:06: bb:e9:23:5d:82:60:45:56:d5:04:b4:dc:ce:a6:0b:36:ae:59: bf:53:14:21:8a:f9:2c:8c:bd:68:92:bb:f1:dd:52:c3:5e:05: a4:2a:b1:c4:88:2c:8a:1d:82:7f:7a:3d:e7:90:69:9a:a6:a8: be:4f:1e:ab:3b:43:5c:da:ef:46:c6:3a:ca:b6:f3:77:71:b6: 65:9d:79:cf:0a:fa:1d:e6:50:c5:f5:9f:13:fd:0a:cb:6c:3f: 64:8d:d7:d9:92:20:5b:96:23:80:1f:dd:dc:27:94:08:c8:21: 48:cf:9a:3b:c7:f5:60:ea:7d:cd:c4:79:bf:41:79:6d:20:ed: 82:5f:77:31:5c:9a:7e:90:2b:63:af:57:ad:3a:0f:9a:70:ad: f7:93:28:e8:f1:d3:e6:df:f9:6f:bd:c2:ae:ff:3e:fe:ae:f3: 8d:14:5f:9a:c2:49:55:95:f1:95:19:5b:22:2e:1c:d6:13:7e: 8d:65:f9:7e:3f:f7:7f:e9:05:a2:81:16:c8:8c:2b:70:63:8b: 14:ae:34:ee:be:10:08:b7:e8:13:53:d1:4c:f6:3b:99:b3:70: 11:71:da:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxM0ExMTAvBgNVBAUTKDEzNjEyQzM0ODlFQkFFREI1NjM5MDJCQzlERTU5MkZD OEQ4M0M1NUIwHhcNMjUwNjMwMTUxOTM5WhcNMjUwNzA3MTUxOTM5WjAYMRYwFAYD VQQDEw02ODYyYWIwYi1kMGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cyyjWHZYoVG0EG1TQdTfUcG5SO7tCICNIADjQMIe8yTH5FUZ+skwAJa6gl4 pOapkiHALbbYk8HDUtrMGItG/d8tLRKfOd3OA6ghPLzE2aAtHNCRCeOWDHyo3q+5 dmvDGATGNalL/9079wjnlOC0RpxHR8I6X/Z8IDY8uJs/g+W6/WAVdGFEN1zfXRQv lTPy5CFZleHTcwPwBpqpIz5wuSidksykv1Pvw3HYgFNOu8PcPtzgjrb+1JGqnVhQ HCXF8EMd8tr6GnG6vHnvqa+Y9tGn+91DADX4bwbkj496IEtlEkS1rOEZx3lo1zfg JbA1fJq73Ig6pfYYO6x2EDCiiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvPdAYO NWAn4GXdPVLZdn3iFH3mMB8GA1UdIwQYMBaAFBNhLDSJ667bVjkCvJ3lkvyNg8Vb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTEzQS80MDFCRjgxRTFE QUExMUUyQTU3MkUyQTUwOEIwMkNEMi9FMkVzTklucnJ0dFdPUUs4bmVXU19JMkR4 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UyRXNOSW5ycnR0V09RSzhuZVdTX0kyRHhWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTEzQS80MDFCRjgxRTFEQUExMUUyQTU3MkUyQTUwOEIwMkNEMi9FMkVzTklucnJ0 dFdPUUs4bmVXU19JMkR4VnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkCVZpzWMtKJcqOqJVGRAamtVc7jhhpJwjazxtBhpC2ivaqAa76SNd gmBFVtUEtNzOpgs2rlm/UxQhivksjL1okrvx3VLDXgWkKrHEiCyKHYJ/ej3nkGma pqi+Tx6rO0Nc2u9GxjrKtvN3cbZlnXnPCvod5lDF9Z8T/QrLbD9kjdfZkiBbliOA H93cJ5QIyCFIz5o7x/Vg6n3NxHm/QXltIO2CX3cxXJp+kCtjr1etOg+acK33kyjo 8dPm3/lvvcKu/z7+rvONFF+awklVlfGVGVsiLhzWE36NZfl+P/d/6QWigRbIjCtw Y4sUrjTuvhAIt+gTU9FM9juZs3ARcdpG -----END CERTIFICATE-----Generated at Tue Jul 1 07:06:28 2025 by rpki-client