$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft File: EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json) Hash identifier: J1y2zT6XIuY6VljBQKulZndyYOcfJBT4iDh0fumJs9A= Subject key identifier: 5F:92:61:B4:F2:8B:3B:E0:27:AC:4A:D7:69:56:71:47:B1:41:B2:19 Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft Manifest number: 0C7B Signing time: Wed 02 Jul 2025 18:30:10 +0000 Manifest this update: Wed 02 Jul 2025 18:30:09 +0000 Manifest next update: Wed 09 Jul 2025 18:30:09 +0000 Files and hashes: 1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: b+HDmd/Ne23v0/f5JjKNYemrEA9Ovgs9WM9Y5JDzgMA=) 2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: IFWas/rgHa7uSrgJAOPof+Srn7iqSkG+8jyeDB/7tHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Validity Not Before: Jul 2 18:30:09 2025 GMT Not After : Jul 9 18:30:09 2025 GMT Subject: CN=68657ab1-4de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:94:14:4d:90:6c:24:88:dc:24:c9:93:f8: e6:c1:65:e1:64:56:3b:da:0f:d2:f9:f9:d0:e8:4a: 4a:63:a6:e4:1b:1d:e0:f8:2c:4d:8e:3d:2b:21:2b: 38:ea:94:93:af:0b:ce:cc:ff:59:32:dc:7f:7e:0f: a7:24:f1:18:a6:14:b4:cc:1a:08:9a:a3:c1:b1:84: a2:80:7e:7e:a4:8b:c1:7e:6e:0a:6c:3b:2a:a5:e5: 4f:26:10:7d:c9:70:5e:65:04:d9:48:b2:a7:e7:08: b4:5c:45:bd:d1:82:be:b3:92:cc:b2:d4:cd:cd:5a: dc:4b:a9:40:e2:bf:3a:93:83:f2:18:05:2b:34:2b: fc:69:f5:05:82:a1:d4:8a:0b:3b:bb:d2:3f:88:ad: 96:de:2b:67:89:f2:6f:3f:51:b0:1f:31:2e:57:f7: 80:8e:5b:f9:3e:b6:a4:56:0f:cf:02:c1:a9:91:13: a7:35:da:3c:81:db:2c:c3:e4:ca:ab:e3:11:ee:d2: 72:54:8d:f0:66:fd:a0:29:f1:9e:b1:48:50:62:c1: 37:da:39:02:f8:c9:03:3e:00:09:46:57:5b:8d:9e: ce:43:f5:12:7c:0a:6b:92:1c:e9:16:71:dc:76:87: b3:46:bc:d3:20:eb:53:e0:ce:79:ef:4e:bd:67:1d: 4e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:92:61:B4:F2:8B:3B:E0:27:AC:4A:D7:69:56:71:47:B1:41:B2:19 X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:6a:41:46:ec:bc:34:cb:db:95:4f:b5:73:ee:53:14:8b:aa: 90:8d:5f:12:03:4e:c4:f0:8e:e6:90:db:7b:a7:d9:d2:df:9b: dc:5a:53:5a:42:1d:f1:2b:18:67:ce:30:06:43:d4:9e:44:8e: 4c:d1:8f:82:c4:f4:96:dc:7b:8f:dc:6f:48:9b:b7:c8:03:67: e2:e7:e3:58:de:2d:f9:0d:25:69:b2:f8:57:e1:b7:05:47:cd: e8:38:aa:4d:a9:e0:be:06:56:a5:dc:a9:ea:4f:8b:c9:88:9f: 96:4f:b4:8e:9f:81:2e:05:19:5c:b6:36:64:38:2e:56:8b:a3: 55:42:f9:87:18:4b:05:27:e6:c7:38:a3:81:a4:dc:38:79:c1: d7:3d:56:a6:5b:8e:46:8e:a0:de:f1:64:06:68:e2:51:75:07: 81:3e:ab:f1:39:b7:69:92:2d:9f:e7:44:df:53:7d:d8:46:91: 19:27:91:14:f3:2d:f1:a3:4d:66:f8:7a:86:b4:76:b9:0c:3e: 81:cd:14:b0:83:82:57:d4:38:d7:83:d9:af:27:3d:c4:76:4c: a2:c0:c5:41:e9:e8:ba:ae:5c:97:7d:ca:76:91:ed:15:ad:ad: f9:de:a5:95:a5:1d:68:b3:d8:3b:57:c9:3d:23:e0:b7:ea:f8: 85:5e:44:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjUwNzAyMTgzMDA5WhcNMjUwNzA5MTgzMDA5WjAYMRYwFAYD VQQDEw02ODY1N2FiMS00ZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2MGUFE2QbCSI3CTJk/jmwWXhZFY72g/S+fnQ6EpKY6bkGx3g+CxNjj0rISs4 6pSTrwvOzP9ZMtx/fg+nJPEYphS0zBoImqPBsYSigH5+pIvBfm4KbDsqpeVPJhB9 yXBeZQTZSLKn5wi0XEW90YK+s5LMstTNzVrcS6lA4r86k4PyGAUrNCv8afUFgqHU igs7u9I/iK2W3itnifJvP1GwHzEuV/eAjlv5PrakVg/PAsGpkROnNdo8gdssw+TK q+MR7tJyVI3wZv2gKfGesUhQYsE32jkC+MkDPgAJRldbjZ7OQ/USfAprkhzpFnHc doezRrzTIOtT4M557069Zx1OLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+SYbTy izvgJ6xK12lWcUexQbIZMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTg4OC82RjU0RDEwRUZGRjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2 OWN4Tk83dldXTjZqa3l5NE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBakFG7Lw0y9uVT7Vz7lMUi6qQjV8SA07E8I7mkNt7p9nS35vcWlNa Qh3xKxhnzjAGQ9SeRI5M0Y+CxPSW3HuP3G9Im7fIA2fi5+NY3i35DSVpsvhX4bcF R83oOKpNqeC+Blal3KnqT4vJiJ+WT7SOn4EuBRlctjZkOC5Wi6NVQvmHGEsFJ+bH OKOBpNw4ecHXPVamW45GjqDe8WQGaOJRdQeBPqvxObdpki2f50TfU33YRpEZJ5EU 8y3xo01m+HqGtHa5DD6BzRSwg4JX1DjXg9mvJz3EdkyiwMVB6ei6rlyXfcp2ke0V ra353qWVpR1os9g7V8k9I+C36viFXkSO -----END CERTIFICATE-----Generated at Wed Jul 2 19:47:27 2025 by rpki-client