$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft File: eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json) Hash identifier: vTTj9KJYnrY3pc+nsIzkQUK9T4R6CEte8oWgUs8P33k= Subject key identifier: D8:07:1D:3A:FE:41:DF:1E:C6:94:EB:CB:D6:A8:73:8E:8C:10:28:AE Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft Manifest number: 4C Signing time: Sat 09 Aug 2025 07:50:42 +0000 Manifest this update: Sat 09 Aug 2025 07:50:42 +0000 Manifest next update: Sat 16 Aug 2025 07:50:42 +0000 Files and hashes: 1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: X5n6HzfaiFwz6iWiq24xchOUssZlsbHidTg0CYPpQbo=) 2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: vF2hPrjWnGE1wVLs/Ml1OeBVYR8W6IECJw4qVwfrJO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62 Validity Not Before: Aug 9 07:50:42 2025 GMT Not After : Aug 16 07:50:42 2025 GMT Subject: CN=6896fdd2-3634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:8e:75:45:1c:e9:65:51:60:cf:23:c2:78: dd:b6:c4:f5:af:75:a6:e3:f6:13:da:90:7a:68:68: 30:50:7b:51:ac:dd:b5:4d:01:80:ab:0f:22:75:73: ca:ee:7a:6b:e5:21:53:51:0f:2f:11:3d:0b:fe:9e: cf:2e:97:69:13:ea:1c:14:81:dd:13:41:c8:3f:a3: ff:c5:14:ea:a9:c7:b5:76:da:c8:6a:3e:3b:cd:ab: 62:2d:d6:92:c5:f0:3c:f6:df:19:ff:ac:14:86:ca: 09:37:55:26:ac:de:a2:82:d1:4c:b0:40:8c:02:87: eb:ed:c2:28:09:95:17:48:71:dd:6b:a5:66:06:d9: ad:2b:f5:a6:c0:87:db:b1:90:a7:19:db:cf:f2:0a: 04:29:0d:42:c0:65:13:7f:4c:78:91:3e:74:cb:23: bb:20:27:f5:0b:f1:c4:e9:97:b3:cd:6d:5b:e6:25: ae:6d:25:53:eb:40:62:21:e8:3a:77:0f:65:e6:af: a3:eb:03:31:d3:df:81:f2:c4:15:af:b4:e9:c8:9a: 41:52:61:4e:e5:57:52:b0:07:f0:5f:37:86:74:e7: db:cc:91:2b:fd:d4:0f:0d:76:e0:d4:d1:d4:33:ed: 19:1c:ff:7b:08:1b:15:d9:38:4f:59:ed:b3:6c:18: ea:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:07:1D:3A:FE:41:DF:1E:C6:94:EB:CB:D6:A8:73:8E:8C:10:28:AE X509v3 Authority Key Identifier: keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:58:33:93:dc:ff:45:ec:f6:2f:99:54:da:fd:c4:ad:30:04: 55:dd:05:a8:bd:6e:38:e3:4e:4e:4b:46:45:41:32:c7:1c:14: ca:3d:fb:13:6d:b4:f2:62:c5:2f:7d:7b:37:01:17:79:3c:93: 81:9f:0f:a4:32:d3:7b:4d:91:c6:70:f1:f5:7b:aa:04:d0:66: ee:f8:db:39:70:ba:89:3e:54:e7:e8:84:48:21:aa:ef:75:55: 73:c3:5a:a5:a2:00:75:cc:68:96:58:fe:05:5b:00:91:b8:af: 3c:7c:9f:ab:bc:26:68:7b:a7:d6:c1:bb:2c:1a:60:51:06:61: c7:9f:99:2f:7b:28:52:29:3d:88:4f:47:c3:89:36:47:96:72: 83:c3:51:ca:34:2e:68:9b:99:83:35:94:b8:42:bf:cd:30:ba: cd:1a:67:85:fc:cc:c1:2f:c6:57:4f:68:2b:16:c9:e2:1d:f3: 54:a1:b5:1a:a0:af:96:5d:80:87:93:79:4b:6c:82:f0:1c:f4: ec:6e:a3:e7:b9:f3:b8:13:bc:f0:36:83:86:3a:f4:16:2b:96: 43:3d:f7:7c:fc:c5:85:f7:ec:ce:ba:f4:76:1d:ec:27:09:32: d2:d3:0b:8d:25:4f:24:a8:90:e8:b9:8c:1e:de:2d:4a:b0:a4: 17:f3:81:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MzhGNTExMC8GA1UEBRMoNzk1NjhBMzhFQ0RCNjE3RTY3OEMwOEE2Q0M0M0M0RDY1 MDJDRUM2MjAeFw0yNTA4MDkwNzUwNDJaFw0yNTA4MTYwNzUwNDJaMBgxFjAUBgNV BAMTDTY4OTZmZGQyLTM2MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkH451RRzpZVFgzyPCeN22xPWvdabj9hPakHpoaDBQe1Gs3bVNAYCrDyJ1c8ru emvlIVNRDy8RPQv+ns8ul2kT6hwUgd0TQcg/o//FFOqpx7V22shqPjvNq2It1pLF 8Dz23xn/rBSGygk3VSas3qKC0UywQIwCh+vtwigJlRdIcd1rpWYG2a0r9abAh9ux kKcZ28/yCgQpDULAZRN/THiRPnTLI7sgJ/UL8cTpl7PNbVvmJa5tJVPrQGIh6Dp3 D2Xmr6PrAzHT34HyxBWvtOnImkFSYU7lV1KwB/BfN4Z059vMkSv91A8NduDU0dQz 7Rkc/3sIGxXZOE9Z7bNsGOoJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2AcdOv5B 3x7GlOvL1qhzjowQKK4wHwYDVR0jBBgwFoAUeVaKOOzbYX5njAimzEPE1lAs7GIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzOEY1L0U4MDI4MTlFMDI1 QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1bmpBaW16RVBFMWxBczdH SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZVZhS09PemJZWDVuakFpbXpFUEUxbEFzN0dJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIz OEY1L0U4MDI4MTlFMDI1QjExRjA5QUNGRDkxMEM0RjlBRTAyL2VWYUtPT3piWVg1 bmpBaW16RVBFMWxBczdHSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFxYM5Pc/0Xs9i+ZVNr9xK0wBFXdBai9bjjjTk5LRkVBMsccFMo9+xNt tPJixS99ezcBF3k8k4GfD6Qy03tNkcZw8fV7qgTQZu742zlwuok+VOfohEghqu91 VXPDWqWiAHXMaJZY/gVbAJG4rzx8n6u8Jmh7p9bBuywaYFEGYcefmS97KFIpPYhP R8OJNkeWcoPDUco0LmibmYM1lLhCv80wus0aZ4X8zMEvxldPaCsWyeId81ShtRqg r5ZdgIeTeUtsgvAc9Oxuo+e587gTvPA2g4Y69BYrlkM993z8xYX37M669HYd7CcJ MtLTC40lTySokOi5jB7eLUqwpBfzgbE= -----END CERTIFICATE-----Generated at Sun Aug 10 18:24:34 2025 by rpki-client