$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft File: E72mTG8bWiwzOUc2NU6ejmvK4lY.mft (raw, json) Hash identifier: 53E5jHjzON0rexHophGi5DpgZ4BTMdj2u5dcqPHjiDE= Subject key identifier: C1:DA:56:E8:A5:24:FE:4C:66:FC:87:0A:3B:1D:1F:DA:7B:B1:85:64 Authority key identifier: 13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 Certificate issuer: /CN=A91F1C8C/serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Certificate serial: 0819 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft Manifest number: 0810 Signing time: Sat 28 Jun 2025 20:31:55 +0000 Manifest this update: Sat 28 Jun 2025 20:31:55 +0000 Manifest next update: Sat 05 Jul 2025 20:31:55 +0000 Files and hashes: 1: E72mTG8bWiwzOUc2NU6ejmvK4lY.crl (hash: NCs5KRDG2BXI7c4b0xmf9E4hExtZsmEamg4wDenVkw0=) 2: FA870AFA94E011EDB701A974C4F9AE02.roa (hash: GfKJIrjmB/IQqGBbWvEsxSHUiEi5qreV/8BX3Exlv6E=) 3: F8C3E4EA94E011EDB701A974C4F9AE02.roa (hash: ppcWvH2kJjQ1xzMFc9qaEdUMAFHB7kgGpZFW1BmvQFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 20:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2073 (0x819) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1C8C, serialNumber=13BDA64C6F1B5A2C33394736354E9E8E6BCAE256 Validity Not Before: Jun 28 20:31:55 2025 GMT Not After : Jul 5 20:31:55 2025 GMT Subject: CN=6860513b-e8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:4b:d1:f4:43:fc:ba:cf:11:ba:2b:ec:8b: 5f:7f:26:ce:b6:77:8c:0f:51:86:93:e0:f8:15:d7: ab:7b:d8:75:de:3c:6d:aa:15:2c:12:e2:26:1d:02: ef:ae:54:49:b7:db:53:40:30:a4:1f:a5:10:c8:d1: ae:70:6f:6d:3b:d4:47:17:3a:f4:25:2a:45:47:45: a7:57:3a:5a:2a:a7:eb:10:76:b4:07:cb:8b:ab:53: 54:c6:00:80:02:24:d2:e7:a3:76:32:bd:80:98:dd: 11:7a:15:ce:ad:2b:9c:97:ee:bf:d1:12:2e:bf:0e: 8d:49:59:16:47:a2:12:ab:a8:04:27:75:1b:a2:70: 3a:85:2a:0e:dd:7a:24:c7:d0:62:4e:72:12:af:12: 7e:99:1e:ae:1b:f7:08:90:a2:24:a3:4a:f1:73:90: f6:1a:64:76:eb:58:b8:d7:36:f4:2a:ad:9c:7e:9d: 6d:c7:80:05:9a:61:20:bd:da:a8:fd:2c:a2:d9:56: bb:9d:9f:c4:02:f4:b5:5b:ba:60:ba:2b:41:18:4d: c0:3d:a2:ae:c3:f5:59:0f:4c:39:02:80:bc:7a:8a: 01:01:e3:56:56:f1:b8:cb:a2:17:04:06:16:09:01: 2b:7b:85:f3:c1:e7:76:8f:db:9e:6c:03:e2:ef:26: 11:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DA:56:E8:A5:24:FE:4C:66:FC:87:0A:3B:1D:1F:DA:7B:B1:85:64 X509v3 Authority Key Identifier: keyid:13:BD:A6:4C:6F:1B:5A:2C:33:39:47:36:35:4E:9E:8E:6B:CA:E2:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E72mTG8bWiwzOUc2NU6ejmvK4lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C8C/23E5D5DEDF9911EA9F85D982C4F9AE02/E72mTG8bWiwzOUc2NU6ejmvK4lY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:4f:e3:ec:ac:9f:1d:06:7c:a2:47:9c:c3:bc:36:9f:23:75: c2:c9:1b:54:9a:fd:8f:0f:76:7a:c4:58:c6:3e:39:22:07:74: 31:8e:bc:4b:80:c5:a4:9d:d4:5a:22:b5:1e:e6:72:6c:6a:c2: a8:70:5e:02:7e:30:13:71:d6:3a:c8:d1:b3:1f:98:28:4c:ff: 91:a4:e6:db:05:a0:6a:d0:f0:4f:11:83:a7:af:20:a9:ed:0c: 8c:ee:90:ea:80:a0:6c:f2:15:d9:6a:49:f1:82:47:7b:4c:b8: 12:de:1a:4e:a4:d6:a7:f4:a3:5b:eb:bc:10:41:1e:3d:79:3f: 8d:19:41:e3:d1:ce:a6:7b:1c:73:e6:d1:0e:ec:bf:de:3d:8e: 06:81:fb:e1:4c:fb:52:8b:1f:6c:c4:eb:30:83:ae:7b:ca:72: d4:3c:02:51:ef:a7:dc:02:bb:93:71:89:85:2a:7a:b5:6f:cc: d6:8c:55:fc:25:b1:a3:44:1a:86:36:6c:68:92:c8:00:d2:0e: d2:e7:a9:d4:75:74:57:5b:de:b3:35:4e:ad:cd:d6:10:3f:89: 50:75:af:bf:16:c0:35:d7:85:43:32:11:13:ee:98:48:95:ec: c4:1a:60:50:fd:2a:71:e0:db:32:80:e3:2d:2d:e0:2e:28:b5: 2f:b5:83:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFDOEMxMTAvBgNVBAUTKDEzQkRBNjRDNkYxQjVBMkMzMzM5NDczNjM1NEU5RThF NkJDQUUyNTYwHhcNMjUwNjI4MjAzMTU1WhcNMjUwNzA1MjAzMTU1WjAYMRYwFAYD VQQDEw02ODYwNTEzYi1lOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2VL0fRD/LrPEbor7ItffybOtneMD1GGk+D4Fdere9h13jxtqhUsEuImHQLv rlRJt9tTQDCkH6UQyNGucG9tO9RHFzr0JSpFR0WnVzpaKqfrEHa0B8uLq1NUxgCA AiTS56N2Mr2AmN0RehXOrSucl+6/0RIuvw6NSVkWR6ISq6gEJ3UbonA6hSoO3Xok x9BiTnISrxJ+mR6uG/cIkKIko0rxc5D2GmR261i41zb0Kq2cfp1tx4AFmmEgvdqo /Syi2Va7nZ/EAvS1W7pguitBGE3APaKuw/VZD0w5AoC8eooBAeNWVvG4y6IXBAYW CQEre4Xzwed2j9uebAPi7yYRowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHaVuil JP5MZvyHCjsdH9p7sYVkMB8GA1UdIwQYMBaAFBO9pkxvG1osMzlHNjVOno5ryuJW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM4Qy8yM0U1RDVERURG OTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldpd3pPVWMyTlU2ZWptdks0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Mm1URzhiV2l3ek9VYzJOVTZlam12SzRsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUM4Qy8yM0U1RDVERURGOTkxMUVBOUY4NUQ5ODJDNEY5QUUwMi9FNzJtVEc4Yldp d3pPVWMyTlU2ZWptdks0bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxT+PsrJ8dBnyiR5zDvDafI3XCyRtUmv2PD3Z6xFjGPjkiB3QxjrxL gMWkndRaIrUe5nJsasKocF4CfjATcdY6yNGzH5goTP+RpObbBaBq0PBPEYOnryCp 7QyM7pDqgKBs8hXZaknxgkd7TLgS3hpOpNan9KNb67wQQR49eT+NGUHj0c6mexxz 5tEO7L/ePY4GgfvhTPtSix9sxOswg657ynLUPAJR76fcAruTcYmFKnq1b8zWjFX8 JbGjRBqGNmxoksgA0g7S56nUdXRXW96zNU6tzdYQP4lQda+/FsA114VDMhET7phI lezEGmBQ/Spx4NsygOMtLeAuKLUvtYNZ -----END CERTIFICATE-----Generated at Sun Jun 29 09:47:28 2025 by rpki-client