$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: E/GB8waD/Dio2/3TDSI7DPJaVNoPZDJpE9D7nsyZ5ng= Subject key identifier: 1F:44:0F:E0:AE:E0:EB:13:A7:D8:D7:49:F0:60:9B:92:16:2A:8A:81 Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 0710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 0710 Signing time: Fri 20 Jun 2025 20:32:49 +0000 Manifest this update: Fri 20 Jun 2025 20:32:49 +0000 Manifest next update: Fri 27 Jun 2025 20:32:49 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: rqVex+UtQp61yHjS2z8U6lJoiC1UX2UrX66RN8f5tE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 20:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1808 (0x710) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: Jun 20 20:32:49 2025 GMT Not After : Jun 27 20:32:49 2025 GMT Subject: CN=6855c571-ca23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:1b:c5:e7:5b:f3:08:0a:dd:cd:77:2f:92: 93:a6:26:6d:7a:a3:44:63:c3:38:ec:75:64:e9:ca: e8:aa:39:57:e7:8a:3f:91:c3:b2:ee:79:f5:4e:a0: 18:7a:93:8a:66:c3:9d:b0:b7:7f:04:9a:b2:53:53: a3:a4:32:24:ad:6b:93:27:40:ef:0f:27:a1:13:97: a2:a8:12:8a:fe:fc:62:1c:5c:e8:78:9f:b5:1a:87: f2:e1:94:43:cf:c3:76:64:7e:43:a4:b7:43:44:db: ac:09:c2:e6:99:c0:b8:81:b0:67:d8:f1:96:66:36: 8f:61:bc:4f:ac:df:06:f7:dd:67:bb:4d:f7:5b:d7: c2:a9:48:8f:a0:ae:34:fe:f4:2e:a8:55:f7:b0:76: 32:d8:4a:76:71:9a:c9:24:98:88:41:64:18:a5:97: 0d:66:92:80:16:b1:3e:7f:71:c9:15:bb:ea:90:22: f8:e8:ba:66:50:13:ba:7e:c1:39:33:f7:94:73:e4: cd:9b:56:3a:7d:ae:c0:4c:0f:cd:29:6a:27:4a:a0: be:31:dd:1d:4c:1a:a8:0b:6f:bc:c4:0d:b1:15:13: 2c:06:a4:fa:54:c0:34:48:9d:63:83:27:c9:12:70: 71:40:18:10:41:2d:d5:27:07:cc:b8:b1:59:60:5a: c8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:44:0F:E0:AE:E0:EB:13:A7:D8:D7:49:F0:60:9B:92:16:2A:8A:81 X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:e0:6b:1b:16:c2:43:fe:9c:99:13:54:38:c6:61:51:27:a4: c1:18:88:16:bb:76:6a:03:8e:e6:e1:a2:d5:ed:10:71:00:1b: d3:8f:ca:80:e7:9a:fb:93:6c:4d:0f:a3:d0:dd:20:00:af:ce: 7d:47:a0:bb:3c:f4:58:69:81:05:61:e9:6b:85:c5:78:e7:38: bc:44:d8:bc:ac:41:83:c0:29:e6:8b:5b:31:3c:09:62:da:81: 76:2d:dc:9e:71:df:1e:d7:59:c6:2b:c7:eb:98:72:53:df:98: 2f:ad:0e:de:70:bc:ef:80:3a:cc:ed:d8:23:3a:95:2e:5a:8f: 57:6b:af:b0:db:fb:a6:32:55:71:e9:19:51:8b:ff:4c:19:7b: b6:71:68:65:e6:1b:44:df:b5:18:d1:d4:85:28:b4:9c:2d:0a: 87:e4:e0:34:99:24:fb:cf:7d:8f:8a:71:60:49:62:45:1a:43: 91:93:dc:30:e9:43:2f:b8:2d:31:4d:52:8d:d8:3e:5f:e7:1c: 1d:6e:36:92:04:7e:82:ba:65:82:e8:5f:24:2c:46:ff:21:c2: 18:93:f8:e3:f4:69:0c:6a:18:ff:05:c6:23:43:e4:ca:8e:40: 4d:01:7f:b1:4b:5d:d8:28:5b:69:65:16:9a:d2:3a:c8:48:77: fa:e3:99:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjUwNjIwMjAzMjQ5WhcNMjUwNjI3MjAzMjQ5WjAYMRYwFAYD VQQDEw02ODU1YzU3MS1jYTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzu8bxedb8wgK3c13L5KTpiZteqNEY8M47HVk6croqjlX54o/kcOy7nn1TqAY epOKZsOdsLd/BJqyU1OjpDIkrWuTJ0DvDyehE5eiqBKK/vxiHFzoeJ+1Gofy4ZRD z8N2ZH5DpLdDRNusCcLmmcC4gbBn2PGWZjaPYbxPrN8G991nu033W9fCqUiPoK40 /vQuqFX3sHYy2Ep2cZrJJJiIQWQYpZcNZpKAFrE+f3HJFbvqkCL46LpmUBO6fsE5 M/eUc+TNm1Y6fa7ATA/NKWonSqC+Md0dTBqoC2+8xA2xFRMsBqT6VMA0SJ1jgyfJ EnBxQBgQQS3VJwfMuLFZYFrIqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9ED+Cu 4OsTp9jXSfBgm5IWKoqBMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk4GsbFsJD/pyZE1Q4xmFRJ6TBGIgWu3ZqA47m4aLV7RBxABvTj8qA 55r7k2xND6PQ3SAAr859R6C7PPRYaYEFYelrhcV45zi8RNi8rEGDwCnmi1sxPAli 2oF2Ldyecd8e11nGK8frmHJT35gvrQ7ecLzvgDrM7dgjOpUuWo9Xa6+w2/umMlVx 6RlRi/9MGXu2cWhl5htE37UY0dSFKLScLQqH5OA0mST7z32PinFgSWJFGkORk9ww 6UMvuC0xTVKN2D5f5xwdbjaSBH6CumWC6F8kLEb/IcIYk/jj9GkMahj/BcYjQ+TK jkBNAX+xS13YKFtpZRaa0jrISHf645mV -----END CERTIFICATE-----Generated at Sat Jun 21 06:46:28 2025 by rpki-client