$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft File: eLB7yieVuFKmVslAPke8uKvgelo.mft (raw, json) Hash identifier: NEE6K4MUN3kYqFoYhHH66CPmH/eoNigtoFgD4kleu54= Subject key identifier: 6D:92:7A:12:78:0F:61:BE:33:5F:29:DF:4A:09:9A:5F:E3:BD:F9:83 Authority key identifier: 78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A Certificate issuer: /CN=A91B0380/serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft Manifest number: 88 Signing time: Tue 17 Jun 2025 05:27:21 +0000 Manifest this update: Tue 17 Jun 2025 05:27:20 +0000 Manifest next update: Tue 24 Jun 2025 05:27:20 +0000 Files and hashes: 1: eLB7yieVuFKmVslAPke8uKvgelo.crl (hash: tRE/prWQ9QUY7gr2vHCHwReD5Ps/KSl9epx3Z+SGASU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0380, serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A Validity Not Before: Jun 17 05:27:20 2025 GMT Not After : Jun 24 05:27:20 2025 GMT Subject: CN=6850fcb8-85fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6e:f6:67:5b:ba:f7:6a:a4:4e:72:e7:b5:5e: 0a:04:dd:51:7a:f8:0c:24:47:bb:c5:c7:d8:cb:03: 31:a5:e0:d1:ab:62:d6:2e:fb:0e:98:c2:95:80:51: 2f:35:77:94:5f:b1:ef:81:4c:ec:19:4d:10:73:57: d8:bd:e5:87:92:2f:b1:f8:fb:7c:c3:b2:82:c8:4e: 9f:6d:7a:64:09:9d:6b:8b:4c:3e:a6:fe:cc:2c:c1: 97:aa:82:bd:9f:bb:71:03:21:b0:dd:2f:29:ed:dd: 3d:f1:70:bf:9c:b5:21:f3:d1:2a:d8:c8:df:97:50: f8:59:d8:d1:90:7c:32:64:55:3a:9e:65:4e:be:eb: 6e:31:3a:9c:cf:0f:75:97:ed:90:9b:81:55:e2:96: 4c:63:1b:f5:7d:9c:90:bd:e0:93:1c:3b:4c:f1:58: f4:86:c6:b3:8a:8f:b6:8a:b6:f2:90:4c:bd:f9:c8: 63:7f:fa:6e:af:9b:f4:27:53:e0:e5:08:d2:41:fb: 58:d4:33:d5:ff:19:d6:eb:33:a1:6a:b5:26:49:28: 50:d7:89:88:5b:d5:cf:ac:7c:35:7a:a4:3d:e2:29: 74:29:db:5e:02:ae:86:90:29:1e:36:26:54:77:fb: 33:9d:9f:14:99:1c:f4:37:3d:92:cf:b3:af:24:a1: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:92:7A:12:78:0F:61:BE:33:5F:29:DF:4A:09:9A:5F:E3:BD:F9:83 X509v3 Authority Key Identifier: keyid:78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5d:c5:cb:00:c6:56:c2:7e:f0:f3:1c:41:85:1d:18:c2:91: 0a:f8:15:67:e4:2e:69:ed:96:30:1e:08:50:67:7c:83:23:f5: c0:52:80:51:cf:41:28:fa:cb:49:51:2a:cd:95:cf:84:8f:52: 39:a3:c7:13:d7:80:75:ad:8d:c6:bf:79:ab:da:5d:11:bc:c4: ea:90:29:68:d1:38:52:d1:68:cf:d9:22:f0:37:80:50:62:3d: f5:66:06:37:30:c6:a6:f5:1b:a7:85:df:31:94:8e:57:35:dc: c0:09:e5:ed:0c:f9:11:08:36:69:fa:2a:84:b3:aa:0d:06:6c: 21:66:2e:64:f8:63:5d:4c:89:05:10:af:65:4f:da:b8:90:91: 24:2a:9b:f3:a3:0a:a3:06:97:a6:08:f8:35:b5:7f:3f:21:0d: a7:64:5d:07:87:71:43:4f:a7:0e:cc:3e:20:f7:36:d0:78:50: bf:48:68:1b:2d:e8:e0:96:c8:25:ce:3b:e4:7b:66:17:cc:ce: 1f:32:e1:4b:c1:3a:09:68:3c:c7:9f:a2:03:54:07:d8:dd:0a: e3:d5:b0:bf:5e:f3:12:52:f0:04:70:e7:a4:2b:b2:d2:83:08: af:d9:b2:4b:2c:b8:ff:c8:c3:85:b6:df:36:70:e9:eb:0f:87: 39:6f:f8:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzODAxMTAvBgNVBAUTKDc4QjA3QkNBMjc5NUI4NTJBNjU2Qzk0MDNFNDdCQ0I4 QUJFMDdBNUEwHhcNMjUwNjE3MDUyNzIwWhcNMjUwNjI0MDUyNzIwWjAYMRYwFAYD VQQDEw02ODUwZmNiOC04NWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArG72Z1u692qkTnLntV4KBN1RevgMJEe7xcfYywMxpeDRq2LWLvsOmMKVgFEv NXeUX7HvgUzsGU0Qc1fYveWHki+x+Pt8w7KCyE6fbXpkCZ1ri0w+pv7MLMGXqoK9 n7txAyGw3S8p7d098XC/nLUh89Eq2Mjfl1D4WdjRkHwyZFU6nmVOvutuMTqczw91 l+2Qm4FV4pZMYxv1fZyQveCTHDtM8Vj0hsazio+2irbykEy9+chjf/pur5v0J1Pg 5QjSQftY1DPV/xnW6zOharUmSShQ14mIW9XPrHw1eqQ94il0KdteAq6GkCkeNiZU d/sznZ8UmRz0Nz2Sz7OvJKEhQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2SehJ4 D2G+M18p30oJml/jvfmDMB8GA1UdIwQYMBaAFHiwe8onlbhSplbJQD5HvLir4Hpa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM4MC82RTZFMzYwMDdC Q0IxMUVGQTI0ODkyMTFDNEY5QUUwMi9lTEI3eWllVnVGS21Wc2xBUGtlOHVLdmdl bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2VMQjd5aWVWdUZLbVZzbEFQa2U4dUt2Z2Vsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM4MC82RTZFMzYwMDdCQ0IxMUVGQTI0ODkyMTFDNEY5QUUwMi9lTEI3eWllVnVG S21Wc2xBUGtlOHVLdmdlbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgXcXLAMZWwn7w8xxBhR0YwpEK+BVn5C5p7ZYwHghQZ3yDI/XAUoBR z0Eo+stJUSrNlc+Ej1I5o8cT14B1rY3Gv3mr2l0RvMTqkClo0ThS0WjP2SLwN4BQ Yj31ZgY3MMam9Runhd8xlI5XNdzACeXtDPkRCDZp+iqEs6oNBmwhZi5k+GNdTIkF EK9lT9q4kJEkKpvzowqjBpemCPg1tX8/IQ2nZF0Hh3FDT6cOzD4g9zbQeFC/SGgb Lejglsglzjvke2YXzM4fMuFLwToJaDzHn6IDVAfY3Qrj1bC/XvMSUvAEcOekK7LS gwiv2bJLLLj/yMOFtt82cOnrD4c5b/jI -----END CERTIFICATE-----Generated at Thu Jun 19 05:13:20 2025 by rpki-client