$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft File: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json) Hash identifier: FkGZO6xBYG44RaM9rZjN4ff4kI50fQUr3conYz5ibxw= Subject key identifier: 04:4E:C4:64:2B:51:1F:FA:82:18:A9:79:56:C4:DB:6A:25:DC:7E:8B Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 Certificate issuer: /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft Manifest number: D2 Signing time: Sat 09 Aug 2025 06:01:48 +0000 Manifest this update: Sat 09 Aug 2025 06:01:48 +0000 Manifest next update: Sat 16 Aug 2025 06:01:48 +0000 Files and hashes: 1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: 4NUtCISAC8gLr6FRUO2fs0mSfkqQ+22Z1eZOpuZyaPc=) 2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: C6HUwf1FQ1jXt6f1hhjL5V8WYMVbIiest2VH946jwa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4 Validity Not Before: Aug 9 06:01:48 2025 GMT Not After : Aug 16 06:01:48 2025 GMT Subject: CN=6896e44c-7353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:74:7a:a4:df:81:da:a1:de:4d:dd:87:89: 04:8d:71:c7:67:68:80:21:96:39:30:f8:78:d4:3f: dd:6a:68:4d:aa:9e:ea:94:a6:83:cc:0b:75:7f:5f: a7:b4:2a:8d:92:ee:c9:67:17:82:07:67:b8:7d:8d: ea:e1:9f:44:10:58:8f:d1:e9:50:08:16:5f:a9:1b: ad:ed:45:02:a4:06:b3:e0:61:60:08:5b:56:00:fe: 14:92:d3:ad:59:d0:13:af:cc:08:7b:3c:30:5d:3f: 73:66:1f:54:94:9a:a1:9e:6d:b8:e3:9d:bb:e9:e3: a2:0a:27:d7:1f:d8:45:b6:e0:98:16:ed:34:78:d2: 72:f4:21:f9:32:a8:35:2c:23:f6:3c:bf:04:6f:61: 10:c7:bf:53:48:5b:a6:13:23:fa:74:8b:5f:e9:4d: 8f:db:71:5d:ba:43:92:bd:aa:ad:05:a9:78:87:61: 77:dc:11:59:74:a5:95:78:8a:e0:38:bc:5e:9e:e7: ae:23:b2:07:fd:7d:a6:a9:f8:ca:61:46:d8:c6:ba: a9:ed:f7:a3:97:de:bc:e6:e1:56:7e:d7:4b:4f:75: d0:08:59:19:93:71:a7:3f:18:f4:44:05:35:d4:db: 63:3f:73:ba:6f:88:70:a9:a1:21:32:98:e6:11:c4: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4E:C4:64:2B:51:1F:FA:82:18:A9:79:56:C4:DB:6A:25:DC:7E:8B X509v3 Authority Key Identifier: keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a2:63:2d:6d:60:aa:69:68:2b:34:27:2d:66:a7:f2:cf:b0: ef:96:13:07:9a:a5:8c:27:70:15:f7:51:d8:6c:e3:6d:6d:59: 04:d9:16:08:51:bf:a0:31:b6:07:23:0c:d6:2f:ff:9b:15:2c: b8:3c:96:40:fd:db:dd:6c:dc:e9:2d:51:dc:10:42:99:b9:e6: 92:fb:ee:e2:57:81:5d:67:b1:08:75:56:35:24:cc:bd:de:77: 29:2d:69:09:df:8a:70:aa:2f:4e:a9:9a:59:5e:9d:d3:24:8d: ee:b5:86:01:e5:be:28:8a:5c:dc:36:fd:dd:34:d1:28:61:6d: 62:8c:46:10:e2:1d:94:31:11:16:dd:6c:7a:a6:bd:4c:d6:76: 97:05:f3:bd:83:05:0c:ae:8c:8d:31:9c:6d:df:e2:ec:f5:08: 78:c8:36:50:5c:d5:87:e0:74:c3:7b:8f:8b:75:b9:27:3a:53: 7b:3c:e3:6e:bf:f1:06:24:d6:2b:3d:16:95:bb:0e:d0:38:c0: 88:fa:35:b9:1c:9f:97:ff:bc:1b:da:94:6b:6d:af:4e:2c:2c: a5:8c:11:07:87:5c:13:74:6c:df:79:eb:d3:40:08:72:ac:cc: 35:dd:41:36:86:65:f2:77:bd:94:74:19:c9:28:b6:06:37:11: 3f:60:30:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0RjAxMTAvBgNVBAUTKDEzNDZGNjVENjI5RkZGOTM2QjBGQzRDRjEyNzUwOUI2 ODJFOEUzRTQwHhcNMjUwODA5MDYwMTQ4WhcNMjUwODE2MDYwMTQ4WjAYMRYwFAYD VQQDEw02ODk2ZTQ0Yy03MzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTx0eqTfgdqh3k3dh4kEjXHHZ2iAIZY5MPh41D/damhNqp7qlKaDzAt1f1+n tCqNku7JZxeCB2e4fY3q4Z9EEFiP0elQCBZfqRut7UUCpAaz4GFgCFtWAP4UktOt WdATr8wIezwwXT9zZh9UlJqhnm2445276eOiCifXH9hFtuCYFu00eNJy9CH5Mqg1 LCP2PL8Eb2EQx79TSFumEyP6dItf6U2P23FdukOSvaqtBal4h2F33BFZdKWVeIrg OLxenueuI7IH/X2mqfjKYUbYxrqp7fejl9685uFWftdLT3XQCFkZk3GnPxj0RAU1 1NtjP3O6b4hwqaEhMpjmEcTyKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAROxGQr UR/6ghipeVbE22ol3H6LMB8GA1UdIwQYMBaAFBNG9l1in/+Taw/EzxJ1CbaC6OPk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzRGMC8wRDQ2Q0JFODM0 MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81TnJEOFRQRW5VSnRvTG80 LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UwYjJYV0tmXzVOckQ4VFBFblVKdG9MbzQtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzRGMC8wRDQ2Q0JFODM0MDAxMUVGOTQ3Nzk1NDBDNEY5QUUwMi9FMGIyWFdLZl81 TnJEOFRQRW5VSnRvTG80LVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5omMtbWCqaWgrNCctZqfyz7DvlhMHmqWMJ3AV91HYbONtbVkE2RYI Ub+gMbYHIwzWL/+bFSy4PJZA/dvdbNzpLVHcEEKZueaS++7iV4FdZ7EIdVY1JMy9 3ncpLWkJ34pwqi9OqZpZXp3TJI3utYYB5b4oilzcNv3dNNEoYW1ijEYQ4h2UMREW 3Wx6pr1M1naXBfO9gwUMroyNMZxt3+Ls9Qh4yDZQXNWH4HTDe4+LdbknOlN7PONu v/EGJNYrPRaVuw7QOMCI+jW5HJ+X/7wb2pRrba9OLCyljBEHh1wTdGzfeevTQAhy rMw13UE2hmXyd72UdBnJKLYGNxE/YDAf -----END CERTIFICATE-----Generated at Sun Aug 10 05:46:56 2025 by rpki-client