$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json) Hash identifier: j6oRnLb8o+MQc3i82wclkm0oeLzB0Ieg//7q5la9dMQ= Subject key identifier: 15:95:37:04:7B:B2:07:A0:0D:DD:77:71:39:6E:32:70:65:9B:85:03 Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Certificate serial: 03C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft Manifest number: 03BC Signing time: Sat 23 Aug 2025 00:57:38 +0000 Manifest this update: Sat 23 Aug 2025 00:57:37 +0000 Manifest next update: Sat 30 Aug 2025 00:57:37 +0000 Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: QDfshixvemZPcvTRvh37ztgns38lSDiniGvsC1v1c+M=) 2: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: wCf4g6o5WScb6RGG49PPoBi+hb01eShp6RghG0g0MJ8=) 3: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: gNV6yCoYOHvCUxwy2Tl0FTscxDv6xhq7lZUCCqRtA/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 963 (0x3c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Validity Not Before: Aug 23 00:57:37 2025 GMT Not After : Aug 30 00:57:37 2025 GMT Subject: CN=68a91202-ff65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:b5:a1:5b:7b:ea:92:25:4b:17:88:60:a3: 6b:cc:ca:f8:c8:f6:3c:06:8a:cf:17:6d:49:34:e5: 57:08:a5:db:08:09:ef:0b:b1:80:fa:80:11:f4:90: 5d:42:f5:42:8c:13:32:4a:6e:15:5d:c6:b1:c5:86: 43:22:8e:c2:bd:c3:2b:62:de:49:9c:b1:fb:db:82: ed:db:2a:dc:8e:79:2d:68:0f:5c:3c:8e:f1:a0:16: 53:48:62:d0:b4:dc:1c:27:f7:92:2f:fa:61:0c:14: 11:cc:f8:3f:ad:2c:c2:90:12:75:11:d6:cd:c6:0f: f6:57:8d:5d:bc:3c:be:4e:35:df:c2:7b:03:36:2b: 34:55:92:95:3c:ef:c4:ab:35:e1:28:ac:f1:1b:14: 89:2d:a6:67:ed:b6:b6:43:9b:c5:6e:de:4a:00:93: 15:ca:3c:c1:43:4b:10:55:fb:15:84:3b:08:e3:59: 2a:01:97:58:0d:8c:43:c0:c8:e0:4a:e8:53:6b:3d: 6f:31:48:30:3a:1c:82:be:a6:8c:c9:1b:c2:9d:bf: 34:d8:cb:ca:28:66:59:e6:fd:f2:40:01:ee:70:22: 8f:6e:45:9d:b7:fa:a5:34:36:3f:41:10:16:b7:97: 39:04:87:6b:ff:69:b5:b6:f2:1b:8d:7a:da:7e:ba: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:95:37:04:7B:B2:07:A0:0D:DD:77:71:39:6E:32:70:65:9B:85:03 X509v3 Authority Key Identifier: keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:70:a6:38:a3:b9:1b:20:52:36:53:36:58:8b:32:01:0c:61: 20:6b:ac:88:01:36:91:aa:35:05:18:e7:62:f8:9b:e1:3c:25: 9b:ba:4b:9c:97:77:99:75:49:7e:58:9b:7b:36:3f:4a:29:6c: ec:0b:58:1a:a0:bf:9a:5c:bf:c8:e1:7f:e6:e4:87:07:d2:b4: 4a:1a:b2:59:29:2a:89:d9:58:4a:b3:e7:1b:00:a5:3b:ed:d3: 4e:89:3c:c9:3c:cf:9a:a3:cb:4f:10:ca:36:7a:f6:84:71:d4: 69:01:9b:e2:67:6d:e6:ed:81:be:2e:6d:ed:37:9a:42:52:ef: d6:13:5f:6c:dc:13:1a:bf:0b:39:c0:64:07:63:6c:9d:30:f0: 8a:5c:e0:db:79:82:69:6a:ff:b2:0b:c3:43:96:e3:11:c8:9a: d8:0a:19:9e:59:19:0f:f2:f5:c9:88:9e:e6:1f:b7:63:38:91: cd:39:41:a2:c7:13:bc:79:c3:36:8a:10:18:e4:75:a9:ae:9c: bd:83:be:70:9b:7d:23:68:56:ba:e3:4d:00:31:e1:91:37:63: 30:72:78:56:b0:0b:49:43:5d:12:ba:14:e7:bc:2c:f7:2e:d7: 52:c2:09:28:1a:00:cb:81:dc:cb:25:cc:13:e7:a9:60:fb:da: 50:b5:8d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD MDQ1RjBDMjcwHhcNMjUwODIzMDA1NzM3WhcNMjUwODMwMDA1NzM3WjAYMRYwFAYD VQQDEw02OGE5MTIwMi1mZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2i1oVt76pIlSxeIYKNrzMr4yPY8BorPF21JNOVXCKXbCAnvC7GA+oAR9JBd QvVCjBMySm4VXcaxxYZDIo7CvcMrYt5JnLH724Lt2yrcjnktaA9cPI7xoBZTSGLQ tNwcJ/eSL/phDBQRzPg/rSzCkBJ1EdbNxg/2V41dvDy+TjXfwnsDNis0VZKVPO/E qzXhKKzxGxSJLaZn7ba2Q5vFbt5KAJMVyjzBQ0sQVfsVhDsI41kqAZdYDYxDwMjg SuhTaz1vMUgwOhyCvqaMyRvCnb802MvKKGZZ5v3yQAHucCKPbkWdt/qlNDY/QRAW t5c5BIdr/2m1tvIbjXrafrowuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWVNwR7 sgegDd13cTluMnBlm4UDMB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRGQi85RkNBQURGRUEwNTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0 RzNTNm5XWmlKT2JBUmZEQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQcKY4o7kbIFI2UzZYizIBDGEga6yIATaRqjUFGOdi+JvhPCWbukuc l3eZdUl+WJt7Nj9KKWzsC1gaoL+aXL/I4X/m5IcH0rRKGrJZKSqJ2VhKs+cbAKU7 7dNOiTzJPM+ao8tPEMo2evaEcdRpAZviZ23m7YG+Lm3tN5pCUu/WE19s3BMavws5 wGQHY2ydMPCKXODbeYJpav+yC8NDluMRyJrYChmeWRkP8vXJiJ7mH7djOJHNOUGi xxO8ecM2ihAY5HWprpy9g75wm30jaFa6400AMeGRN2MwcnhWsAtJQ10SuhTnvCz3 LtdSwgkoGgDLgdzLJcwT56lg+9pQtY2P -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:25 2025 by rpki-client