$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft File: e14ORHE1uxchraYfZdx1yV9U2wI.mft (raw, json) Hash identifier: nfLMYvzTENIDqiRhOuzcDLmLVlgxpG0dEfCNY2pwMhM= Subject key identifier: FE:31:8C:74:4D:47:9F:8C:90:54:E3:F3:20:C0:73:0A:1C:F3:DA:2A Authority key identifier: 7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 Certificate issuer: /CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft Manifest number: 68 Signing time: Thu 03 Jul 2025 07:14:39 +0000 Manifest this update: Thu 03 Jul 2025 07:14:39 +0000 Manifest next update: Thu 10 Jul 2025 07:14:39 +0000 Files and hashes: 1: e14ORHE1uxchraYfZdx1yV9U2wI.crl (hash: ZA1oVws6g/43K6a9rylQmL2fQz0RPoVD35hp/h8ANdE=) 2: E4086C08BC2311EF9A445084C4F9AE02.roa (hash: r/4IGYNLMpKuCk8NRggWB2EhHJYpkEkj/MdGzvjYmVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8226, serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Validity Not Before: Jul 3 07:14:39 2025 GMT Not After : Jul 10 07:14:39 2025 GMT Subject: CN=68662ddf-6684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:10:65:35:b2:26:06:0b:7b:9f:cc:4e:f4: 36:cf:4d:26:3f:75:6b:70:5f:66:d9:49:d4:a5:11: cd:2d:59:b1:79:8e:e0:f3:70:cd:83:f6:8e:d0:97: 78:e1:9a:b1:44:64:bb:14:05:2a:fe:78:fd:04:4a: 96:5b:23:d8:1e:28:a6:97:66:1b:cf:1c:4a:12:e7: ce:81:93:dc:bf:26:f1:83:ac:16:7d:a1:f1:c1:fa: 94:17:a6:78:58:7f:ed:6a:97:6d:32:49:52:73:8c: 6e:73:08:41:7c:c1:1a:0e:0b:eb:1d:46:5a:2d:de: 51:4a:c8:61:87:52:62:5c:68:b6:20:57:7f:e7:c1: 73:ff:79:7a:84:e4:51:49:2c:44:eb:7a:30:60:32: 16:5f:a8:18:fe:96:33:11:1e:ac:51:72:01:7b:1f: 79:28:5f:11:12:b3:c0:7c:47:1c:fb:b9:16:0b:30: f7:92:59:53:7e:60:58:b8:15:1e:25:3f:e6:4e:d9: e6:36:02:68:a8:93:d3:ec:48:24:e5:92:92:e5:75: b5:c3:3b:5d:bc:73:75:a0:0a:04:ed:1f:70:0d:5c: ee:90:85:fb:de:08:1e:ff:31:4b:a5:d0:03:43:60: 86:dd:f3:40:a7:4a:47:6e:5f:07:4c:63:1e:47:d9: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:31:8C:74:4D:47:9F:8C:90:54:E3:F3:20:C0:73:0A:1C:F3:DA:2A X509v3 Authority Key Identifier: keyid:7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:91:a3:ee:9b:5f:b4:db:9b:62:70:96:d7:59:06:57:6e:05: 52:ff:be:58:cf:85:93:85:ba:c6:6c:7d:8d:49:d0:a1:6a:19: 05:e6:a8:80:a5:2b:4e:70:63:45:3e:1d:0e:6b:a7:c6:5e:e8: 21:3f:34:bf:81:d6:34:f3:b5:c1:23:ad:0a:79:1c:b8:47:04: 70:27:2e:f8:ef:10:5e:39:b0:1d:3b:c6:ad:8a:ac:17:db:d2: 02:43:0a:f5:2c:a5:b1:19:ae:86:8c:ea:b8:9e:a2:5f:32:e9: 76:71:8f:3a:96:4b:a3:d4:e6:65:4a:a4:68:fa:ba:b7:3c:db: e7:75:12:63:d0:2c:f8:3c:93:7a:b5:e7:62:c4:a5:86:8c:ad: b9:d4:6a:af:de:e1:f0:58:62:6e:97:16:7e:ba:aa:22:50:5a: 56:8b:2f:08:5c:52:91:1e:8f:e5:d4:f2:82:dc:a2:10:cb:07: 69:8a:c4:7b:48:ba:55:cd:11:04:78:eb:95:7a:ef:85:5b:59: 13:68:1b:ff:54:53:8f:f5:ca:d0:83:a9:7a:f9:3b:04:85:04: e7:c6:78:2b:89:7f:1f:c0:1b:66:31:a7:09:f6:a4:d3:32:24: 08:5b:40:6d:6b:69:58:21:11:df:0b:97:b4:d7:89:9b:6d:39: 0d:d8:02:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODIyNjExMC8GA1UEBRMoN0I1RTBFNDQ3MTM1QkIxNzIxQURBNjFGNjVEQzc1Qzk1 RjU0REIwMjAeFw0yNTA3MDMwNzE0MzlaFw0yNTA3MTAwNzE0MzlaMBgxFjAUBgNV BAMTDTY4NjYyZGRmLTY2ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6YRBlNbImBgt7n8xO9DbPTSY/dWtwX2bZSdSlEc0tWbF5juDzcM2D9o7Ql3jh mrFEZLsUBSr+eP0ESpZbI9geKKaXZhvPHEoS586Bk9y/JvGDrBZ9ofHB+pQXpnhY f+1ql20ySVJzjG5zCEF8wRoOC+sdRlot3lFKyGGHUmJcaLYgV3/nwXP/eXqE5FFJ LETrejBgMhZfqBj+ljMRHqxRcgF7H3koXxESs8B8Rxz7uRYLMPeSWVN+YFi4FR4l P+ZO2eY2Amiok9PsSCTlkpLldbXDO128c3WgCgTtH3ANXO6QhfveCB7/MUul0AND YIbd80CnSkduXwdMYx5H2fk7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/jGMdE1H n4yQVOPzIMBzChzz2iowHwYDVR0jBBgwFoAUe14ORHE1uxchraYfZdx1yV9U2wIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjI2L0VDNERGMzE0QkMx RjExRUZBQURBNzQ1RkM0RjlBRTAyL2UxNE9SSEUxdXhjaHJhWWZaZHgxeVY5VTJ3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTE0T1JIRTF1eGNocmFZZlpkeDF5VjlVMndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MjI2L0VDNERGMzE0QkMxRjExRUZBQURBNzQ1RkM0RjlBRTAyL2UxNE9SSEUxdXhj aHJhWWZaZHgxeVY5VTJ3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABCRo+6bX7Tbm2JwltdZBlduBVL/vljPhZOFusZsfY1J0KFqGQXmqICl K05wY0U+HQ5rp8Ze6CE/NL+B1jTztcEjrQp5HLhHBHAnLvjvEF45sB07xq2KrBfb 0gJDCvUspbEZroaM6rieol8y6XZxjzqWS6PU5mVKpGj6urc82+d1EmPQLPg8k3q1 52LEpYaMrbnUaq/e4fBYYm6XFn66qiJQWlaLLwhcUpEej+XU8oLcohDLB2mKxHtI ulXNEQR465V674VbWRNoG/9UU4/1ytCDqXr5OwSFBOfGeCuJfx/AG2Yxpwn2pNMy JAhbQG1raVghEd8Ll7TXiZttOQ3YApQ= -----END CERTIFICATE-----Generated at Thu Jul 3 10:21:13 2025 by rpki-client