$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft File: e38qjYSvvYwzKp9LTmcJs65_CvY.mft (raw, json) Hash identifier: /Zhqj+A0/JBcirVp1DATWPyavt14PyRCZkcEa2I73MA= Subject key identifier: 68:66:67:EF:DE:A9:25:93:C8:7B:7F:8D:E6:51:8B:57:2B:B2:6D:F3 Authority key identifier: 7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6 Certificate issuer: /CN=A91656C7/serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft Manifest number: 2A Signing time: Thu 07 Aug 2025 08:28:54 +0000 Manifest this update: Thu 07 Aug 2025 08:28:54 +0000 Manifest next update: Thu 14 Aug 2025 08:28:54 +0000 Files and hashes: 1: e38qjYSvvYwzKp9LTmcJs65_CvY.crl (hash: Xlszm3pdEcnoomfwWk6Y02QZCpekvrMhFe19naTy//M=) 2: 0930CE00408411F0A6916727C4F9AE02.roa (hash: RmPJ00Uips89e1P+AW2N3rLdF8Pmzlx8rWyUZVnX0RI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91656C7, serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6 Validity Not Before: Aug 7 08:28:54 2025 GMT Not After : Aug 14 08:28:54 2025 GMT Subject: CN=689463c6-2a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:4f:1c:76:10:70:e0:2a:0e:5c:c9:69:78: f4:36:8c:98:35:78:bf:62:78:aa:cf:57:db:4f:75: d2:f4:e4:e6:38:5c:0f:52:a0:ff:01:da:c7:06:17: ad:6b:f5:55:d8:1a:b1:cd:f4:9d:ad:87:fb:15:f2: cb:be:14:11:09:fb:78:4e:6c:91:71:00:ec:e8:a9: a7:a3:2d:18:48:20:62:3d:52:b2:e5:36:3f:28:f7: 39:7c:51:91:f7:52:48:ce:68:24:60:d3:24:51:89: 13:5e:83:49:3b:e1:42:50:c9:af:6e:48:f5:e6:94: b3:06:ab:72:ec:90:92:07:4c:8f:d0:84:70:04:df: 0e:31:07:c4:df:eb:12:1e:6d:8e:eb:43:60:7d:2a: 16:1f:58:6f:4d:c5:30:47:b2:d3:9a:47:fe:98:cf: 7b:9c:7d:e4:31:98:e6:3a:1e:69:33:02:c5:c9:76: d4:d0:64:6b:c9:24:c0:22:40:4f:43:67:66:a0:39: 03:a4:73:b2:31:ca:f0:d4:04:4a:5c:6e:b6:e5:4b: 52:94:97:de:01:49:4d:72:63:37:c8:9f:98:df:cf: c6:2e:c0:4c:7e:81:1b:81:eb:56:43:89:ed:69:96: 47:46:31:a1:82:31:78:58:18:4d:65:66:f6:c3:90: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:66:67:EF:DE:A9:25:93:C8:7B:7F:8D:E6:51:8B:57:2B:B2:6D:F3 X509v3 Authority Key Identifier: keyid:7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2b:43:a0:5a:00:0b:6c:c6:02:f6:c5:5b:57:65:ef:bb:10: 94:f8:36:99:40:be:11:9d:74:ff:06:a4:ba:c8:bb:c2:68:06: a5:2b:1c:77:6c:c4:fd:45:03:01:65:fe:10:ba:34:f1:e3:d9: ad:0a:1b:8f:b0:26:3e:fd:db:b0:3a:1f:1f:08:2c:09:6a:cc: 70:3b:99:4d:60:50:e9:ba:87:78:4e:83:12:20:41:dd:c5:67: 6a:a0:1d:d3:6e:32:1d:b6:49:20:1c:b8:63:32:e0:4e:5e:4d: ca:40:63:e7:2f:5f:ad:28:bd:be:82:e9:35:b3:fa:fd:90:05: 2c:85:c7:29:9e:62:25:41:00:fb:0c:4a:66:41:12:f2:62:79: 16:a3:09:d7:a2:19:9a:b2:3e:65:cc:a8:dd:be:41:41:0c:2d: 5e:dc:46:ac:32:a7:72:41:51:d6:49:f4:d8:99:9c:b5:5a:06: b3:d9:ea:7d:76:c2:bc:b4:38:f4:1d:9d:c9:de:ef:ed:93:6b: 93:b2:35:c9:b7:32:a2:93:77:36:91:74:31:f0:c4:f2:3a:d1: 36:1e:73:9f:a9:c6:8e:ef:f7:7b:1b:d6:5a:ed:d7:1a:71:ea: 17:78:1b:e0:5b:60:74:94:a1:fa:9c:ab:4e:6a:c5:03:9a:c4: 85:a1:ca:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NTZDNzExMC8GA1UEBRMoN0I3RjJBOEQ4NEFGQkQ4QzMzMkE5RjRCNEU2NzA5QjNB RTdGMEFGNjAeFw0yNTA4MDcwODI4NTRaFw0yNTA4MTQwODI4NTRaMBgxFjAUBgNV BAMTDTY4OTQ2M2M2LTJhMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLbE8cdhBw4CoOXMlpePQ2jJg1eL9ieKrPV9tPddL05OY4XA9SoP8B2scGF61r 9VXYGrHN9J2th/sV8su+FBEJ+3hObJFxAOzoqaejLRhIIGI9UrLlNj8o9zl8UZH3 UkjOaCRg0yRRiRNeg0k74UJQya9uSPXmlLMGq3LskJIHTI/QhHAE3w4xB8Tf6xIe bY7rQ2B9KhYfWG9NxTBHstOaR/6Yz3ucfeQxmOY6HmkzAsXJdtTQZGvJJMAiQE9D Z2agOQOkc7IxyvDUBEpcbrblS1KUl94BSU1yYzfIn5jfz8YuwEx+gRuB61ZDie1p lkdGMaGCMXhYGE1lZvbDkF5/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaGZn796p JZPIe3+N5lGLVyuybfMwHwYDVR0jBBgwFoAUe38qjYSvvYwzKp9LTmcJs65/CvYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1NkM3LzU0NTEzMjRBNDA4 MzExRjA4QjAzQUI2NUM0RjlBRTAyL2UzOHFqWVN2dll3ektwOUxUbWNKczY1X0N2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTM4cWpZU3Z2WXd6S3A5TFRtY0pzNjVfQ3ZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1 NkM3LzU0NTEzMjRBNDA4MzExRjA4QjAzQUI2NUM0RjlBRTAyL2UzOHFqWVN2dll3 ektwOUxUbWNKczY1X0N2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAUrQ6BaAAtsxgL2xVtXZe+7EJT4NplAvhGddP8GpLrIu8JoBqUrHHds xP1FAwFl/hC6NPHj2a0KG4+wJj7927A6Hx8ILAlqzHA7mU1gUOm6h3hOgxIgQd3F Z2qgHdNuMh22SSAcuGMy4E5eTcpAY+cvX60ovb6C6TWz+v2QBSyFxymeYiVBAPsM SmZBEvJieRajCdeiGZqyPmXMqN2+QUEMLV7cRqwyp3JBUdZJ9NiZnLVaBrPZ6n12 wry0OPQdncne7+2Ta5OyNcm3MqKTdzaRdDHwxPI60TYec5+pxo7v93sb1lrt1xpx 6hd4G+BbYHSUofqcq05qxQOaxIWhyhs= -----END CERTIFICATE-----Generated at Fri Aug 8 19:36:40 2025 by rpki-client