$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft File: E7lMrVWeIPuzDgiXoUBmaydArx4.mft (raw, json) Hash identifier: SNA0UM7XB6zGRvIlQgzc1hz0bwcx6bkVi9Ex0DrDyPs= Subject key identifier: 84:7D:9F:17:0C:6B:BD:E4:6B:A4:9A:4D:65:E4:94:E0:55:99:43:19 Authority key identifier: 13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E Certificate issuer: /CN=A91A7CA3/serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft Manifest number: 0495 Signing time: Sat 09 Aug 2025 00:29:20 +0000 Manifest this update: Sat 09 Aug 2025 00:29:20 +0000 Manifest next update: Sat 16 Aug 2025 00:29:20 +0000 Files and hashes: 1: E7lMrVWeIPuzDgiXoUBmaydArx4.crl (hash: FSTRzb7KtjOaFCrEUlzH9YC5gEgcOLEhogOkptuaw+Q=) 2: B092FF78479111ECA77ED34DC4F9AE02.roa (hash: N6UdB/vsoDQh8PeESm7VPxFgrUH9sp1ez29ivoqCJVw=) 3: AFFF3716479111ECA77ED34DC4F9AE02.roa (hash: u4T6c6+EeGnanbuuwAq6FQjgSX9l5ijgis5wFYw/MM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7CA3, serialNumber=13B94CAD559E20FBB30E0897A140666B2740AF1E Validity Not Before: Aug 9 00:29:20 2025 GMT Not After : Aug 16 00:29:20 2025 GMT Subject: CN=68969660-5fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:09:51:38:9f:9c:0a:94:87:24:06:de:10:1d: 0c:bb:bd:de:e6:16:8d:8f:fb:65:06:2a:d0:5e:76: 61:a8:4a:2e:b5:d3:f2:15:6d:1b:a9:30:cc:7f:0b: bf:8e:26:f9:4e:1e:c9:18:71:4a:8c:35:68:95:8b: 4e:79:84:dc:8d:d3:e8:a8:ef:f3:7d:55:e3:6d:8b: 9d:36:41:cd:41:c8:e3:3a:0e:8d:83:2a:27:4d:77: 23:dd:03:3d:84:81:3f:09:c8:d5:a3:98:92:8c:43: c3:75:a7:8f:72:b4:72:96:7e:2e:0b:e4:47:de:f5: 07:4b:70:08:2e:54:ee:e8:e8:68:d4:5d:bd:e1:7e: f0:a2:03:37:5a:d0:b4:fb:24:fe:84:48:87:39:d7: f2:ca:8c:63:6c:9f:2a:93:96:a4:a1:75:53:a2:35: 94:c7:5e:0c:67:7a:2a:50:01:a5:21:fd:18:54:7d: 03:40:88:1e:d5:f6:e2:93:dd:ce:4c:44:27:a9:a3: 08:19:9a:8d:50:d0:06:ca:50:8f:de:a5:41:6f:9a: 65:bf:0c:c4:0c:02:3f:8c:43:43:75:af:23:a5:6c: 99:ce:af:d9:2f:f6:1c:ac:2c:14:8f:35:3a:6f:46: d2:c3:7f:97:ae:b3:c4:1d:9b:51:98:55:d3:30:69: d1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7D:9F:17:0C:6B:BD:E4:6B:A4:9A:4D:65:E4:94:E0:55:99:43:19 X509v3 Authority Key Identifier: keyid:13:B9:4C:AD:55:9E:20:FB:B3:0E:08:97:A1:40:66:6B:27:40:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7lMrVWeIPuzDgiXoUBmaydArx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7CA3/41B910A8478F11EC9B56222AC4F9AE02/E7lMrVWeIPuzDgiXoUBmaydArx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:10:53:8c:9d:4e:40:13:cd:03:22:d6:3f:17:83:cf:de:52: 14:0f:4f:76:7b:86:34:8f:d9:0b:bf:d4:17:e2:04:37:de:84: b5:03:07:6e:d2:08:91:92:a1:99:80:53:59:a8:5e:63:90:08: 88:f6:38:18:1b:14:99:7e:51:26:f9:58:ad:c7:0b:da:d2:ec: a2:5c:79:99:47:74:81:54:40:3f:a1:98:a4:34:8b:7e:db:23: 64:93:c1:b1:fe:38:37:c0:24:f5:18:98:dd:d6:0b:0c:a1:c2: 1f:38:b9:ae:e3:7b:9e:bc:31:a6:54:9e:cd:b9:8d:76:2b:db: 37:8b:01:b7:2b:51:36:7a:c8:57:db:6e:09:7b:da:60:05:0e: 8f:b1:b6:51:95:be:30:a5:89:a1:69:da:49:39:73:9c:58:78: 91:9a:5e:43:0d:48:83:a9:83:d8:a0:90:e9:2f:bc:2b:69:fd: fe:7d:de:f1:81:d0:7b:28:30:96:6f:83:57:af:a8:72:95:42: 62:ca:ad:ea:c9:54:06:ba:f1:76:e0:43:49:1f:95:92:9d:ee: 36:e6:94:77:e7:50:c8:9c:d0:41:dd:1e:66:0d:4b:41:54:42: 06:34:6b:6c:d4:cb:bb:a3:1f:b5:bb:80:fc:09:60:26:e5:a7: 67:6c:1f:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDQTMxMTAvBgNVBAUTKDEzQjk0Q0FENTU5RTIwRkJCMzBFMDg5N0ExNDA2NjZC Mjc0MEFGMUUwHhcNMjUwODA5MDAyOTIwWhcNMjUwODE2MDAyOTIwWjAYMRYwFAYD VQQDEw02ODk2OTY2MC01ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8glROJ+cCpSHJAbeEB0Mu73e5haNj/tlBirQXnZhqEoutdPyFW0bqTDMfwu/ jib5Th7JGHFKjDVolYtOeYTcjdPoqO/zfVXjbYudNkHNQcjjOg6NgyonTXcj3QM9 hIE/CcjVo5iSjEPDdaePcrRyln4uC+RH3vUHS3AILlTu6Oho1F294X7wogM3WtC0 +yT+hEiHOdfyyoxjbJ8qk5akoXVTojWUx14MZ3oqUAGlIf0YVH0DQIge1fbik93O TEQnqaMIGZqNUNAGylCP3qVBb5plvwzEDAI/jENDda8jpWyZzq/ZL/YcrCwUjzU6 b0bSw3+XrrPEHZtRmFXTMGnRTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIR9nxcM a73ka6SaTWXklOBVmUMZMB8GA1UdIwQYMBaAFBO5TK1VniD7sw4Il6FAZmsnQK8e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0NBMy80MUI5MTBBODQ3 OEYxMUVDOUI1NjIyMkFDNEY5QUUwMi9FN2xNclZXZUlQdXpEZ2lYb1VCbWF5ZEFy eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3bE1yVldlSVB1ekRnaVhvVUJtYXlkQXJ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0NBMy80MUI5MTBBODQ3OEYxMUVDOUI1NjIyMkFDNEY5QUUwMi9FN2xNclZXZUlQ dXpEZ2lYb1VCbWF5ZEFyeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiEFOMnU5AE80DItY/F4PP3lIUD092e4Y0j9kLv9QX4gQ33oS1Awdu 0giRkqGZgFNZqF5jkAiI9jgYGxSZflEm+Vitxwva0uyiXHmZR3SBVEA/oZikNIt+ 2yNkk8Gx/jg3wCT1GJjd1gsMocIfOLmu43uevDGmVJ7NuY12K9s3iwG3K1E2eshX 224Je9pgBQ6PsbZRlb4wpYmhadpJOXOcWHiRml5DDUiDqYPYoJDpL7wraf3+fd7x gdB7KDCWb4NXr6hylUJiyq3qyVQGuvF24ENJH5WSne425pR351DInNBB3R5mDUtB VEIGNGts1Mu7ox+1u4D8CWAm5adnbB/l -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:36 2025 by rpki-client