$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft File: EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json) Hash identifier: apCnbiLjSaWfNEMPilVk3oTNpN0yDnrthQ34H/t4kds= Subject key identifier: DE:46:C2:4D:8A:15:72:1D:BA:81:DB:B9:57:F2:10:2B:B7:D2:AF:7F Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 Certificate issuer: /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Certificate serial: 0E23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft Manifest number: 0E13 Signing time: Wed 02 Jul 2025 18:02:41 +0000 Manifest this update: Wed 02 Jul 2025 18:02:41 +0000 Manifest next update: Wed 09 Jul 2025 18:02:41 +0000 Files and hashes: 1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: rRGFYjVNlHYrEha/LZ81WZVHPW2ma+yDXxgQKl8DYmM=) 2: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: QWOTAeLgnWJFAAIChZL1m0e0kICN2c6Ng+tc3RXx8Yg=) 3: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: tRUYfW/mxJFIRHVM9QsIKc4UoKBg/TdEbDm54bKQfQg=) 4: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: agk9fTE0Dhy5dYc90EBQeapRa6cEZ8A1rQ5/CvNJ7LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3619 (0xe23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1 Validity Not Before: Jul 2 18:02:41 2025 GMT Not After : Jul 9 18:02:41 2025 GMT Subject: CN=68657441-addc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:57:dc:39:c4:c6:17:c6:56:2b:7f:34:89: 1f:b5:84:eb:76:93:e0:05:2f:ec:9f:90:ff:cb:80: 38:0f:da:ae:39:20:87:bc:3b:f3:26:d3:69:72:06: 5a:1c:69:c5:ba:5e:e0:38:d4:4f:5b:94:39:fd:a2: 52:b3:d5:e0:2c:37:cd:4b:7f:64:74:94:95:3c:3e: e3:17:a9:86:66:18:3c:ad:ed:a2:15:bd:d7:bc:dc: 89:34:32:6c:8a:b6:e0:20:eb:8d:61:17:f8:9b:8f: c7:8e:5e:7f:37:d4:28:56:5b:6e:8e:70:1f:1d:67: f9:99:04:39:1e:49:0a:d4:b8:e0:8a:7b:57:89:22: c3:fd:e0:3f:f5:72:dc:14:16:83:5c:ba:52:2d:b9: a6:73:79:11:c0:a1:33:1d:f6:aa:e0:f9:71:9f:d1: 2a:5c:8e:38:26:56:31:94:fd:db:20:ae:23:a3:a5: ab:a1:86:59:69:70:a0:47:c9:9d:b7:60:9e:6b:f3: 01:89:d5:7d:70:16:06:86:00:ef:c3:53:14:e3:54: 69:09:1e:79:bb:61:97:a2:77:9c:63:0b:6d:84:2c: f5:59:77:45:3e:3f:bf:1d:47:d4:82:80:ba:b3:ef: 8d:d0:0f:e2:12:8f:30:3e:86:b9:4f:94:2e:7d:82: d8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:46:C2:4D:8A:15:72:1D:BA:81:DB:B9:57:F2:10:2B:B7:D2:AF:7F X509v3 Authority Key Identifier: keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:dd:62:42:85:d5:b3:38:e3:9e:ac:2c:dc:9d:b9:18:e8:ab: ab:d5:b2:98:51:b2:f9:6a:6f:64:f6:c9:a7:23:00:0e:b9:56: 9a:60:e2:1d:2b:7a:48:e5:e0:fd:44:d1:c2:98:97:72:ea:94: 5c:e7:9c:38:ee:c1:89:b5:46:21:67:16:a5:3e:2c:e6:7e:5d: c0:45:f2:3e:7b:a6:02:ac:de:72:7b:47:8e:5e:ff:f3:9a:27: 6e:63:ad:3b:49:8f:c5:84:02:70:d0:26:d6:ef:36:5a:56:6c: 32:db:e6:48:b1:a7:f2:84:1d:96:44:42:50:47:b1:76:0d:33: 2e:08:b5:a9:e3:8b:f9:9b:e7:cd:c5:98:41:96:80:71:b6:d5: 7f:07:b4:f9:24:0c:6f:38:97:58:39:24:b5:39:1e:0d:1d:fc: 8a:93:69:a7:5a:db:74:22:50:8e:3a:0d:d8:30:9b:a0:1a:27: 86:79:1d:44:e4:8a:83:8d:e6:ac:08:47:7c:9e:c0:bd:c0:37: bc:e1:29:e1:78:d4:4c:cc:48:50:57:04:f6:1a:80:44:ee:76: 5d:80:ff:fc:84:fe:bf:9a:d4:74:5e:69:d1:de:4c:a1:43:cb: 30:20:18:f6:32:d4:8a:12:8a:b2:ab:a6:f0:8c:72:1a:8b:f1: c1:e2:0c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3QjIxMTAvBgNVBAUTKDExNTYyMDVFQzczODBBMDBGMTBGMzQxMDExNEQwNDAz NTdGMDBGRjEwHhcNMjUwNzAyMTgwMjQxWhcNMjUwNzA5MTgwMjQxWjAYMRYwFAYD VQQDEw02ODY1NzQ0MS1hZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TBX3DnExhfGVit/NIkftYTrdpPgBS/sn5D/y4A4D9quOSCHvDvzJtNpcgZa HGnFul7gONRPW5Q5/aJSs9XgLDfNS39kdJSVPD7jF6mGZhg8re2iFb3XvNyJNDJs irbgIOuNYRf4m4/Hjl5/N9QoVltujnAfHWf5mQQ5HkkK1LjgintXiSLD/eA/9XLc FBaDXLpSLbmmc3kRwKEzHfaq4Plxn9EqXI44JlYxlP3bIK4jo6WroYZZaXCgR8md t2Cea/MBidV9cBYGhgDvw1MU41RpCR55u2GXonecYwtthCz1WXdFPj+/HUfUgoC6 s++N0A/iEo8wPoa5T5QufYLYFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5Gwk2K FXIduoHbuVfyECu30q9/MB8GA1UdIwQYMBaAFBFWIF7HOAoA8Q80EBFNBANX8A/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTdCMi8zRUUzMjM1QUFF OTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENnRHhEelFRRVUwRUExZndE X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VWWWdYc2M0Q2dEeER6UVFFVTBFQTFmd0RfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTdCMi8zRUUzMjM1QUFFOTkxMUU5QUM1MEUxN0JDNEY5QUUwMi9FVllnWHNjNENn RHhEelFRRVUwRUExZndEX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf3WJChdWzOOOerCzcnbkY6Kur1bKYUbL5am9k9smnIwAOuVaaYOId K3pI5eD9RNHCmJdy6pRc55w47sGJtUYhZxalPizmfl3ARfI+e6YCrN5ye0eOXv/z miduY607SY/FhAJw0CbW7zZaVmwy2+ZIsafyhB2WREJQR7F2DTMuCLWp44v5m+fN xZhBloBxttV/B7T5JAxvOJdYOSS1OR4NHfyKk2mnWtt0IlCOOg3YMJugGieGeR1E 5IqDjeasCEd8nsC9wDe84SnheNRMzEhQVwT2GoBE7nZdgP/8hP6/mtR0XmnR3kyh Q8swIBj2MtSKEoqyq6bwjHIai/HB4gy9 -----END CERTIFICATE-----Generated at Thu Jul 3 08:54:58 2025 by rpki-client