$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft File: etee6zuSg1TZUNxuT4vsyyXC_Es.mft (raw, json) Hash identifier: Mil9UgZujcEPqGMU0eyWJzYX8WRJMPDmMQGh9emyTiw= Subject key identifier: D6:E3:0C:6B:9E:EC:85:D3:5D:9D:90:CB:DA:74:13:63:B5:2F:3C:FA Authority key identifier: 7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B Certificate issuer: /CN=A91F3CB1/serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft Manifest number: 2C Signing time: Tue 01 Jul 2025 08:31:52 +0000 Manifest this update: Tue 01 Jul 2025 08:31:51 +0000 Manifest next update: Tue 08 Jul 2025 08:31:51 +0000 Files and hashes: 1: etee6zuSg1TZUNxuT4vsyyXC_Es.crl (hash: AELKRe0OWgqfLAutS3EEmO7XdvCjpFNx08S4gW9t7jk=) 2: 9217B6681AA811F0B10C6412C4F9AE02.roa (hash: k9SmP/i/EacapJo/9m72S70HfODKRHtE2FbOisDtRLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3CB1, serialNumber=7AD79EEB3B928354D950DC6E4F8BECCB25C2FC4B Validity Not Before: Jul 1 08:31:51 2025 GMT Not After : Jul 8 08:31:51 2025 GMT Subject: CN=68639cf7-0e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:06:fe:11:cb:37:24:d5:65:0b:06:f7:dc: ae:a1:6d:65:bc:9f:dd:82:b7:2e:a3:48:32:7a:b5: 57:d1:15:22:80:05:68:48:e9:2f:aa:19:0b:a4:19: 75:9b:18:1c:95:9d:6a:df:bc:7e:7d:e8:fc:7f:04: 1c:cf:94:2c:2f:90:dc:2c:3e:ef:a9:98:6c:07:af: 1a:7b:59:c9:a7:a8:81:c2:af:75:0a:a0:98:f8:ee: 26:b3:e8:5e:66:0d:dd:a8:5d:41:65:0b:91:3a:2c: 80:5d:a5:97:f9:90:e0:0d:1b:1e:69:64:d4:f0:8f: c6:32:c6:54:1d:23:c4:de:3c:d0:f7:21:c0:3c:78: 6f:41:40:22:2a:2a:55:3c:75:e6:ab:04:f2:4f:7e: 92:21:f9:0e:e2:cb:d7:76:69:a7:f0:b0:19:50:a5: 86:77:9d:ac:eb:40:d0:89:9b:ad:72:e7:09:a9:54: b0:ef:f2:09:d7:ec:2d:ca:9f:bb:aa:10:e7:0a:b2: 9e:10:d2:f9:73:9d:65:ef:be:22:20:80:aa:2a:77: 17:26:53:57:4a:57:07:00:cd:c4:9c:92:2a:a8:97: ff:2c:fe:ec:6c:a4:e6:f1:5e:9e:50:f3:63:c4:84: 4a:7d:0b:37:22:80:16:8e:b4:78:73:44:92:c8:55: 43:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E3:0C:6B:9E:EC:85:D3:5D:9D:90:CB:DA:74:13:63:B5:2F:3C:FA X509v3 Authority Key Identifier: keyid:7A:D7:9E:EB:3B:92:83:54:D9:50:DC:6E:4F:8B:EC:CB:25:C2:FC:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etee6zuSg1TZUNxuT4vsyyXC_Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3CB1/2D843698168611F08916985BC4F9AE02/etee6zuSg1TZUNxuT4vsyyXC_Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:da:3a:6d:ec:c6:84:f9:65:85:48:6c:97:3b:d8:15:53:a7: 1a:db:a6:bc:3a:5a:6b:61:17:7a:f8:8a:6c:0c:72:d4:99:db: 79:74:63:de:b1:e5:0c:0e:31:bc:4b:19:8a:f8:c4:0e:4d:c2: cd:3b:f5:e8:fd:02:f0:38:ab:86:72:fa:14:f4:28:9a:dc:87: 53:88:64:07:3f:f0:34:0b:93:cc:5e:8a:cb:68:86:a6:d4:7c: 5c:7a:24:09:97:ac:24:d1:cd:68:ce:ac:c3:fb:2d:80:cd:90: 04:c4:77:04:72:95:85:37:d6:c3:28:8e:f9:ac:09:c6:2b:fd: 8c:e5:05:bd:41:67:c3:47:a3:a2:75:fb:35:5c:29:ed:62:86: 0e:d5:c9:3f:56:ab:92:8f:50:68:af:f1:6d:61:e3:bd:6f:d4: 62:5f:ff:a2:dd:2e:2b:e7:0a:ad:b2:6b:62:93:88:c5:c6:9b: c1:f7:8c:f5:4c:32:a1:07:d6:23:4d:51:70:31:79:dd:d1:be: 82:19:bc:e0:e9:da:78:4a:03:0f:23:84:5b:c7:54:23:c6:9a: 51:ac:4f:21:ac:e0:05:d9:09:6a:f0:d4:2c:28:04:74:68:98: f7:c5:f0:30:46:a7:98:48:6c:0b:44:5a:54:a9:be:5b:b0:76: 27:f4:3d:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0NCMTExMC8GA1UEBRMoN0FENzlFRUIzQjkyODM1NEQ5NTBEQzZFNEY4QkVDQ0Iy NUMyRkM0QjAeFw0yNTA3MDEwODMxNTFaFw0yNTA3MDgwODMxNTFaMBgxFjAUBgNV BAMTDTY4NjM5Y2Y3LTBlMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCotgb+Ecs3JNVlCwb33K6hbWW8n92Cty6jSDJ6tVfRFSKABWhI6S+qGQukGXWb GByVnWrfvH596Px/BBzPlCwvkNwsPu+pmGwHrxp7WcmnqIHCr3UKoJj47iaz6F5m Dd2oXUFlC5E6LIBdpZf5kOANGx5pZNTwj8YyxlQdI8TePND3IcA8eG9BQCIqKlU8 dearBPJPfpIh+Q7iy9d2aafwsBlQpYZ3nazrQNCJm61y5wmpVLDv8gnX7C3Kn7uq EOcKsp4Q0vlznWXvviIggKoqdxcmU1dKVwcAzcSckiqol/8s/uxspObxXp5Q82PE hEp9CzcigBaOtHhzRJLIVUN5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1uMMa57s hdNdnZDL2nQTY7UvPPowHwYDVR0jBBgwFoAUetee6zuSg1TZUNxuT4vsyyXC/Esw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQ0IxLzJEODQzNjk4MTY4 NjExRjA4OTE2OTg1QkM0RjlBRTAyL2V0ZWU2enVTZzFUWlVOeHVUNHZzeXlYQ19F cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZXRlZTZ6dVNnMVRaVU54dVQ0dnN5eVhDX0VzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz Q0IxLzJEODQzNjk4MTY4NjExRjA4OTE2OTg1QkM0RjlBRTAyL2V0ZWU2enVTZzFU WlVOeHVUNHZzeXlYQ19Fcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGXaOm3sxoT5ZYVIbJc72BVTpxrbprw6WmthF3r4imwMctSZ23l0Y96x 5QwOMbxLGYr4xA5Nws079ej9AvA4q4Zy+hT0KJrch1OIZAc/8DQLk8xeistohqbU fFx6JAmXrCTRzWjOrMP7LYDNkATEdwRylYU31sMojvmsCcYr/YzlBb1BZ8NHo6J1 +zVcKe1ihg7VyT9Wq5KPUGiv8W1h471v1GJf/6LdLivnCq2ya2KTiMXGm8H3jPVM MqEH1iNNUXAxed3RvoIZvODp2nhKAw8jhFvHVCPGmlGsTyGs4AXZCWrw1CwoBHRo mPfF8DBGp5hIbAtEWlSpvluwdif0PTs= -----END CERTIFICATE-----Generated at Thu Jul 3 07:20:10 2025 by rpki-client