$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json) Hash identifier: TxvXcWAvnRZftni91K5u/bDrdrEFjqnKz+LHZqFlF68= Subject key identifier: DE:DA:DB:AE:C1:0F:32:4A:6A:D3:12:B8:BD:34:8B:21:2E:95:07:FE Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft Manifest number: 04D1 Signing time: Sat 09 Aug 2025 00:17:54 +0000 Manifest this update: Sat 09 Aug 2025 00:17:54 +0000 Manifest next update: Sat 16 Aug 2025 00:17:54 +0000 Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: ekuCO8eRaO4TRpTZ9dPuogi2lYN7TXoSWu9+3Sa/3gA=) 2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: 4ooeZLcPwkHZ/ZShvap31EsyiH4g04EjDdlB/3H2WWc=) 3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: IONLpqLbIWNcEINYfdYWnA0lQhPUSCbB7gozoJAI8ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482 Validity Not Before: Aug 9 00:17:54 2025 GMT Not After : Aug 16 00:17:54 2025 GMT Subject: CN=689693b2-d77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:a5:df:3e:ec:fc:b3:bf:b3:96:d4:2e:81: d3:48:8e:ad:92:3c:fc:42:62:da:b8:3a:9a:4d:11: d6:5f:40:4b:34:e2:22:21:c1:6b:5b:da:dc:71:46: 5e:8b:5f:6e:4d:3a:1b:3e:71:af:15:e1:f5:fb:b6: 39:b0:e4:81:bb:d6:08:36:75:60:de:e2:50:e7:b6: 5f:93:25:b2:79:c1:63:47:09:cd:58:f6:e0:4e:c7: 6e:6b:19:97:89:44:6d:71:d1:3c:0a:0d:b4:8b:35: d7:eb:e9:7d:b3:87:c4:e3:ec:ad:0e:e4:36:dc:05: 95:dc:22:0f:4b:ae:0d:ba:26:44:7e:98:69:2c:1e: d9:12:1b:85:44:a5:60:2b:c6:e6:32:45:43:61:4b: fa:3d:e4:45:84:66:52:ef:db:3c:6e:20:c4:e4:fa: cf:b7:f8:9b:27:30:56:8e:3c:d4:d4:a7:95:12:31: a7:70:43:87:3a:fe:48:a5:c2:46:3a:32:49:3a:6f: db:80:83:06:e8:7b:62:ae:72:5f:5f:8b:0d:08:45: a2:74:77:fd:5b:59:91:25:7e:ea:50:6f:0a:a7:17: 5f:d2:76:f3:bb:81:24:91:75:c2:42:43:de:97:3e: 16:10:61:64:7d:e0:37:f3:41:23:d0:a5:3e:13:e4: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DA:DB:AE:C1:0F:32:4A:6A:D3:12:B8:BD:34:8B:21:2E:95:07:FE X509v3 Authority Key Identifier: keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:9c:e5:48:80:66:9d:57:71:1d:65:0d:2b:ea:3d:bc:84:ec: 37:ef:b3:21:ec:2e:b8:31:2c:8a:07:f4:5c:1d:d9:7c:4e:0d: 9b:b8:f1:63:fb:64:a3:12:b9:f3:e3:49:62:4a:50:62:8c:fa: af:8f:d3:63:af:35:6c:20:f1:1b:d5:b0:de:1f:26:8d:3a:fd: e8:24:0e:f7:1d:01:ea:1b:46:d6:e6:86:7c:15:4a:a9:f0:25: f0:38:d6:e2:60:a9:f3:69:6c:04:7f:5c:88:99:0d:0d:ff:82: 0b:4c:21:c5:1f:66:19:f0:17:1a:2e:a3:4a:d9:3d:73:bf:fc: 4b:88:9c:de:45:78:8e:fe:4e:a6:6f:0d:78:70:dd:4b:db:2d: 10:52:d7:3c:da:87:56:c5:50:09:6d:c7:16:13:ac:a4:5c:96: 48:21:16:1d:e6:59:9c:40:3c:fc:c2:15:bb:e1:5c:82:4f:18: 5a:fd:ad:b4:65:70:db:0e:56:66:f3:a2:bc:49:dc:6b:a0:9b: 29:ce:44:78:1a:32:33:b2:da:01:70:56:48:1c:09:6d:6e:68: 02:ef:19:88:2f:db:c4:7d:b7:87:72:13:ba:04:ce:c3:a9:17: 19:d2:2a:49:d6:9a:22:23:e7:44:fb:ee:e5:ff:f4:0a:ab:05: b9:58:2b:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1 RjIyRjI0ODIwHhcNMjUwODA5MDAxNzU0WhcNMjUwODE2MDAxNzU0WjAYMRYwFAYD VQQDEw02ODk2OTNiMi1kNzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6el3z7s/LO/s5bULoHTSI6tkjz8QmLauDqaTRHWX0BLNOIiIcFrW9rccUZe i19uTTobPnGvFeH1+7Y5sOSBu9YINnVg3uJQ57ZfkyWyecFjRwnNWPbgTsduaxmX iURtcdE8Cg20izXX6+l9s4fE4+ytDuQ23AWV3CIPS64NuiZEfphpLB7ZEhuFRKVg K8bmMkVDYUv6PeRFhGZS79s8biDE5PrPt/ibJzBWjjzU1KeVEjGncEOHOv5IpcJG OjJJOm/bgIMG6HtirnJfX4sNCEWidHf9W1mRJX7qUG8Kpxdf0nbzu4EkkXXCQkPe lz4WEGFkfeA380Ej0KU+E+S6EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7a267B DzJKatMSuL00iyEulQf+MB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhnOVIgGadV3EdZQ0r6j28hOw377Mh7C64MSyKB/RcHdl8Tg2buPFj +2SjErnz40liSlBijPqvj9NjrzVsIPEb1bDeHyaNOv3oJA73HQHqG0bW5oZ8FUqp 8CXwONbiYKnzaWwEf1yImQ0N/4ILTCHFH2YZ8BcaLqNK2T1zv/xLiJzeRXiO/k6m bw14cN1L2y0QUtc82odWxVAJbccWE6ykXJZIIRYd5lmcQDz8whW74VyCTxha/a20 ZXDbDlZm86K8SdxroJspzkR4GjIzstoBcFZIHAltbmgC7xmIL9vEfbeHchO6BM7D qRcZ0ipJ1poiI+dE++7l//QKqwW5WCvE -----END CERTIFICATE-----Generated at Sun Aug 10 20:01:00 2025 by rpki-client