$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft File: _eDYrIjb_GreZ9__WjrC7yZsXNw.mft (raw, json) Hash identifier: VA/pVb6EIMlF8CjahczsZmZdqBArNv1FGwGvd3bJqVA= Subject key identifier: 54:E8:5A:F2:86:E9:30:C9:76:C9:E0:88:FD:8E:04:21:D8:BD:B6:88 Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC Certificate issuer: /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft Manifest number: 1D Signing time: Thu 03 Jul 2025 08:10:38 +0000 Manifest this update: Thu 03 Jul 2025 08:10:38 +0000 Manifest next update: Thu 10 Jul 2025 08:10:38 +0000 Files and hashes: 1: _eDYrIjb_GreZ9__WjrC7yZsXNw.crl (hash: K+v/xNvLAbZYWdwcoRZ6Caqkzf/mo7TqkBMOrhhBh60=) 2: 292A3CF0376511F0A9D2D035C4F9AE02.roa (hash: qQ/o26aFQ3fCsqKdZcgYj7qgKbMCzj8e65hKr1gdKM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC Validity Not Before: Jul 3 08:10:38 2025 GMT Not After : Jul 10 08:10:38 2025 GMT Subject: CN=68663afe-73ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:0f:13:c3:5f:42:ec:ea:e0:df:bb:52:a3: 64:94:73:f7:f6:c9:27:9d:26:24:c6:f0:2d:fa:9f: 31:d6:08:7c:bb:f3:a8:3c:01:ab:cc:a1:c2:b8:1c: d5:ef:8d:1f:51:7d:60:27:20:e2:91:aa:a5:a3:53: 13:73:47:14:25:f8:cc:a7:01:3b:b2:0d:01:6a:a4: 8c:d6:59:47:19:ca:7a:87:30:45:b8:fa:9f:f8:c2: b7:41:47:9a:f4:34:be:6c:30:17:dd:2d:37:6d:b4: bf:e2:d3:04:f7:a0:2e:65:ad:b1:9c:4b:11:b5:9e: f2:51:33:7f:5e:91:a9:b9:1e:ba:40:2a:b5:3e:22: 5b:40:cc:1a:74:70:c1:f7:78:1b:97:6b:8d:7d:6d: 2b:b3:11:71:e4:e2:c3:0a:d2:48:af:aa:1f:a5:6d: 4f:9a:4d:fc:a1:13:f5:fa:e3:45:b5:29:0e:96:fe: 0e:f6:cc:4e:0c:72:73:c4:ff:e7:ec:91:8f:f1:5e: 73:ce:68:de:bb:07:01:3b:35:df:6f:53:34:72:38: 30:51:5f:08:d9:57:c3:d5:86:d0:a4:86:5c:34:ca: b2:a6:2f:67:b1:30:31:e2:fe:4d:68:63:01:d4:2a: bd:7e:ce:bf:ec:d4:ac:bf:f0:68:c7:72:9d:42:9f: 1f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E8:5A:F2:86:E9:30:C9:76:C9:E0:88:FD:8E:04:21:D8:BD:B6:88 X509v3 Authority Key Identifier: keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:a3:7a:73:42:37:b7:8e:93:3e:ca:21:11:5e:fe:32:a5:d0: 03:9a:d1:fe:76:a5:51:4e:e3:81:bf:fe:90:83:6b:9b:52:71: 99:c9:40:9e:f1:35:75:8c:6e:b3:77:e5:3d:00:eb:35:3c:b5: 20:fb:d6:b0:7d:9c:73:a9:47:43:49:ba:e3:db:23:bf:a5:60: a2:39:bf:82:ef:cf:ad:ad:ba:a2:ac:dc:51:ff:6a:bb:2c:6d: 95:3f:b8:97:8b:e9:9c:ff:d4:bf:a4:e4:a3:ad:1a:2e:de:2a: 9e:69:6d:48:e5:11:74:30:75:a8:f2:76:a9:90:7e:90:73:bc: dc:40:12:94:2b:59:1c:ea:59:ce:31:dd:86:a6:7f:e5:27:6c: 57:35:bc:e8:49:ad:0f:96:8b:d4:e3:f1:87:34:2b:9d:94:31: 76:8e:74:43:94:af:cc:14:cf:77:bf:eb:7e:ba:27:18:6a:f5: 76:20:3b:8d:10:00:11:b8:9c:4c:6f:16:ea:44:05:a7:81:60: f5:8a:fc:da:76:7f:2b:d4:c8:43:46:ca:f1:21:7a:5c:ae:ef: 85:80:90:f6:12:9a:88:f3:40:78:3a:0a:c4:f9:df:c1:ec:5a: 99:0e:36:96:bd:72:99:a9:bd:46:e9:7a:69:d8:fa:72:e2:9b: 74:54:43:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0ZBMTExMC8GA1UEBRMoRkRFMEQ4QUM4OERCRkM2QURFNjdERkZGNUEzQUMyRUYy NjZDNUNEQzAeFw0yNTA3MDMwODEwMzhaFw0yNTA3MTAwODEwMzhaMBgxFjAUBgNV BAMTDTY4NjYzYWZlLTczYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBNg8Tw19C7Org37tSo2SUc/f2ySedJiTG8C36nzHWCHy786g8AavMocK4HNXv jR9RfWAnIOKRqqWjUxNzRxQl+MynATuyDQFqpIzWWUcZynqHMEW4+p/4wrdBR5r0 NL5sMBfdLTdttL/i0wT3oC5lrbGcSxG1nvJRM39ekam5HrpAKrU+IltAzBp0cMH3 eBuXa419bSuzEXHk4sMK0kivqh+lbU+aTfyhE/X640W1KQ6W/g72zE4McnPE/+fs kY/xXnPOaN67BwE7Nd9vUzRyODBRXwjZV8PVhtCkhlw0yrKmL2exMDHi/k1oYwHU Kr1+zr/s1Ky/8GjHcp1Cnx/zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVOha8obp MMl2yeCI/Y4EIdi9togwHwYDVR0jBBgwFoAU/eDYrIjb/GreZ9//WjrC7yZsXNww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3RkExL0JGOTA3NEUyMkZB MDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dyZVo5X19XanJDN3lac1hO dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX2VEWXJJamJfR3JlWjlfX1dqckM3eVpzWE53LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 RkExL0JGOTA3NEUyMkZBMDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dy ZVo5X19XanJDN3lac1hOdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJWjenNCN7eOkz7KIRFe/jKl0AOa0f52pVFO44G//pCDa5tScZnJQJ7x NXWMbrN35T0A6zU8tSD71rB9nHOpR0NJuuPbI7+lYKI5v4Lvz62tuqKs3FH/arss bZU/uJeL6Zz/1L+k5KOtGi7eKp5pbUjlEXQwdajydqmQfpBzvNxAEpQrWRzqWc4x 3Yamf+UnbFc1vOhJrQ+Wi9Tj8Yc0K52UMXaOdEOUr8wUz3e/6366Jxhq9XYgO40Q ABG4nExvFupEBaeBYPWK/Np2fyvUyENGyvEhelyu74WAkPYSmojzQHg6CsT538Hs WpkONpa9cpmpvUbpemnY+nLim3RUQ+w= -----END CERTIFICATE-----Generated at Thu Jul 3 13:39:35 2025 by rpki-client