$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft File: eE7A8P-dbYDcn33OORSfxg-WFJk.mft (raw, json) Hash identifier: hdoAdH+qnwiELY78mNPWCW86uhNuGb7OmtWxZJs9Xzo= Subject key identifier: 97:F7:8E:03:CE:31:E0:33:BC:FB:D3:E6:B9:2C:51:4C:6C:E2:EC:BF Authority key identifier: 78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 Certificate issuer: /CN=A91FA69F/serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft Manifest number: BC Signing time: Sun 29 Jun 2025 04:54:32 +0000 Manifest this update: Sun 29 Jun 2025 04:54:32 +0000 Manifest next update: Sun 06 Jul 2025 04:54:32 +0000 Files and hashes: 1: eE7A8P-dbYDcn33OORSfxg-WFJk.crl (hash: /Xl0DYQPhmMLSq78hksFAM+GPuKSnu/SdlH5TjZCeOg=) 2: 4FAF60B433A411EFB7A29C24C4F9AE02.roa (hash: LD7B5+XzyaE0f/ths6DbB5WXZXs6tAf0rdqOWz9N/kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=784EC0F0FF9D6D80DC9F7DCE39149FC60F961499 Validity Not Before: Jun 29 04:54:32 2025 GMT Not After : Jul 6 04:54:32 2025 GMT Subject: CN=6860c708-505b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e3:f6:4e:81:c8:23:e3:65:ef:45:4c:0f:ac: 8c:89:fd:d2:d8:b6:af:2e:fe:19:a5:46:02:d4:ff: 05:18:f8:6f:94:37:66:6d:a9:3a:94:46:9c:f5:12: 76:28:a5:c1:1b:8d:52:fc:95:87:c5:69:5a:c3:2b: 80:ed:2e:a1:5d:1b:0d:cf:bb:db:18:36:47:f7:32: 3c:79:92:ff:05:9c:74:b1:23:91:a0:c6:c5:ca:87: b7:96:dc:91:95:fb:f3:da:da:ff:a8:7b:57:10:a5: f8:dc:0a:8a:95:a5:52:73:0c:df:17:e7:8f:78:04: a3:5a:d0:c9:71:46:9d:7c:28:e8:52:d0:54:f4:43: 9b:cd:96:da:db:d8:8e:dd:78:84:15:27:75:79:5c: 97:32:1b:18:cc:17:b0:77:3d:3b:f1:b6:bc:ed:f6: 2a:df:6d:0f:03:7b:13:87:8f:70:ff:cd:e1:79:ea: f8:8e:7a:43:58:72:d4:ea:64:d0:cc:f1:66:2a:31: 15:d4:5a:b4:94:d7:bc:a5:24:71:53:60:94:e5:38: b5:09:8d:83:89:36:8a:94:ea:38:cc:5b:98:d7:dd: 59:00:3f:05:63:c7:8f:83:5f:05:b7:63:35:f6:b8: 68:51:69:cd:28:14:58:39:c7:5f:19:2c:0b:e1:b4: a2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F7:8E:03:CE:31:E0:33:BC:FB:D3:E6:B9:2C:51:4C:6C:E2:EC:BF X509v3 Authority Key Identifier: keyid:78:4E:C0:F0:FF:9D:6D:80:DC:9F:7D:CE:39:14:9F:C6:0F:96:14:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eE7A8P-dbYDcn33OORSfxg-WFJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/C665DF2233A311EFA5B49B23C4F9AE02/eE7A8P-dbYDcn33OORSfxg-WFJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:0a:b7:80:77:7e:98:86:e3:8b:38:72:85:96:c1:2e:2f:6d: b0:8d:cc:c6:62:8c:7f:31:1a:b7:be:93:df:f3:a8:95:c6:b2: 7d:a7:b1:21:51:a3:e6:16:df:05:22:73:52:11:1d:6c:dc:25: f9:04:7e:65:ad:4f:8c:23:b1:a9:da:94:c8:c8:9f:b1:1b:b3: 2a:d9:a0:a2:7a:a7:9c:a5:d6:e9:ee:8a:da:a8:e4:7e:da:5b: db:64:7b:9e:05:dd:2e:20:43:09:28:d8:7b:c9:cf:b6:a4:ed: 7e:33:5b:93:f5:16:c7:cd:71:42:a0:ea:9f:f1:bb:12:ec:97: 4e:1c:ee:86:b1:3e:0f:05:ce:00:82:f0:25:74:c5:eb:0f:38: 74:68:be:ec:48:c9:5a:6d:b8:67:fc:3b:0e:bd:ad:a3:c4:e9: c7:bb:c1:d4:4c:04:3a:de:f5:aa:a3:47:27:c5:fe:90:27:34: bc:1a:60:81:ce:2b:4c:76:55:e1:25:16:fd:d0:17:cb:4c:a9: d7:0a:c1:ae:21:6b:01:ca:bc:5e:1f:dc:97:82:de:56:20:31: 19:a4:42:23:06:74:28:07:78:63:bf:f7:05:35:55:8c:bb:89: 45:40:50:d1:ee:1c:88:b5:1a:83:bb:43:f7:7d:4e:6d:58:04: 54:61:0e:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKDc4NEVDMEYwRkY5RDZEODBEQzlGN0RDRTM5MTQ5RkM2 MEY5NjE0OTkwHhcNMjUwNjI5MDQ1NDMyWhcNMjUwNzA2MDQ1NDMyWjAYMRYwFAYD VQQDEw02ODYwYzcwOC01MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OP2ToHII+Nl70VMD6yMif3S2LavLv4ZpUYC1P8FGPhvlDdmbak6lEac9RJ2 KKXBG41S/JWHxWlawyuA7S6hXRsNz7vbGDZH9zI8eZL/BZx0sSORoMbFyoe3ltyR lfvz2tr/qHtXEKX43AqKlaVScwzfF+ePeASjWtDJcUadfCjoUtBU9EObzZba29iO 3XiEFSd1eVyXMhsYzBewdz078ba87fYq320PA3sTh49w/83heer4jnpDWHLU6mTQ zPFmKjEV1Fq0lNe8pSRxU2CU5Ti1CY2DiTaKlOo4zFuY191ZAD8FY8ePg18Ft2M1 9rhoUWnNKBRYOcdfGSwL4bSi/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJf3jgPO MeAzvPvT5rksUUxs4uy/MB8GA1UdIwQYMBaAFHhOwPD/nW2A3J99zjkUn8YPlhSZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9DNjY1REYyMjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZRGNuMzNPT1JTZnhnLVdG SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFN0E4UC1kYllEY24zM09PUlNmeGctV0ZKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9DNjY1REYyMjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9lRTdBOFAtZGJZ RGNuMzNPT1JTZnhnLVdGSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFCreAd36YhuOLOHKFlsEuL22wjczGYox/MRq3vpPf86iVxrJ9p7Eh UaPmFt8FInNSER1s3CX5BH5lrU+MI7Gp2pTIyJ+xG7Mq2aCieqecpdbp7oraqOR+ 2lvbZHueBd0uIEMJKNh7yc+2pO1+M1uT9RbHzXFCoOqf8bsS7JdOHO6GsT4PBc4A gvAldMXrDzh0aL7sSMlabbhn/DsOva2jxOnHu8HUTAQ63vWqo0cnxf6QJzS8GmCB zitMdlXhJRb90BfLTKnXCsGuIWsByrxeH9yXgt5WIDEZpEIjBnQoB3hjv/cFNVWM u4lFQFDR7hyItRqDu0P3fU5tWARUYQ4h -----END CERTIFICATE-----Generated at Sun Jun 29 16:21:08 2025 by rpki-client