$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft File: E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json) Hash identifier: PE3Gpc31hOyM4jEFhF4t928kg/Cz/NPTNA43ZNBqoXA= Subject key identifier: D5:A5:59:83:FA:3B:D8:33:D3:F7:51:5C:D1:30:21:6E:AF:EB:09:B7 Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 Certificate issuer: /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Certificate serial: 0C92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft Manifest number: 0C7C Signing time: Sun 10 Aug 2025 18:23:20 +0000 Manifest this update: Sun 10 Aug 2025 18:23:19 +0000 Manifest next update: Sun 17 Aug 2025 18:23:19 +0000 Files and hashes: 1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: VsW0BDMF/y+fJkuTmHjra0ZKAyOrOqLipMU4ETFCGAw=) 2: E26173CE050611EAA0470B49C4F9AE02.roa (hash: Xn8UFabkBh7C11XTNFuqVWX0DQ3YtKdO4oP8X6zIrEU=) 3: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: wQzyXgNB8e39dNmdtHKa5IWJxgKdAoXLBNvYY5X5/EU=) 4: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: ZW4D52b/QqoUPTvkPyb0ztzXgPBkyyW+b1SqWMCRNR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3218 (0xc92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3 Validity Not Before: Aug 10 18:23:19 2025 GMT Not After : Aug 17 18:23:19 2025 GMT Subject: CN=6898e397-e722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:a2:c5:f0:86:2c:63:0a:c8:56:17:36:d2: 0d:ae:55:d5:48:94:dd:4d:7e:64:18:e5:3f:4d:05: e4:9b:c7:12:76:33:31:81:2e:33:77:cd:d4:86:4c: 6a:9d:8b:d5:49:17:2c:7d:46:cb:b2:4e:7f:30:99: bd:5a:5a:7b:d5:75:f0:3e:b2:39:d6:d8:70:e6:c1: 9c:9e:42:5f:db:67:86:26:d6:75:c5:6e:a6:e1:cc: 8f:46:94:48:17:f7:2a:8f:f2:9d:e0:e4:81:d1:67: b9:21:16:e6:a7:a0:8b:d3:56:88:66:35:97:da:22: 1e:fc:78:7d:0a:ef:5f:de:03:2d:4e:dc:ea:cb:67: 2d:95:bf:f9:86:e6:2e:4e:73:12:7f:fe:ce:a3:b5: a7:21:12:59:e1:c6:e1:e0:b4:17:ef:cb:93:23:ad: b7:a1:02:93:b3:e6:a4:ea:6d:65:7a:cb:4f:8a:c2: 87:45:aa:8c:c3:9c:e5:f7:ce:91:59:34:33:f7:8f: b1:f0:f6:67:f5:f9:76:83:95:3b:26:0b:ed:3a:f3: 63:d4:ec:d1:ca:43:47:ad:01:ec:a1:6c:26:a8:82: d4:c8:4c:fb:f6:60:6d:e5:bd:5d:92:ec:ff:02:84: 69:a7:2f:bf:14:36:a6:7a:48:7d:21:40:88:dc:d9: 5d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A5:59:83:FA:3B:D8:33:D3:F7:51:5C:D1:30:21:6E:AF:EB:09:B7 X509v3 Authority Key Identifier: keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:93:7a:ab:c9:33:66:5c:b1:63:09:ba:37:61:8f:52:77:38: 57:eb:39:64:0c:40:69:12:d3:a1:42:75:1d:ea:90:b8:c1:de: 89:27:80:75:63:be:76:24:01:13:55:1d:13:c6:e0:76:63:1f: 7c:80:79:90:88:d4:69:bb:c5:72:82:56:fe:1c:85:c8:96:b8: b7:3a:99:16:f8:64:d0:e0:be:16:68:8d:9f:34:70:5d:4a:89: 6b:98:a5:3f:48:56:d5:f7:6a:28:dd:f6:38:2f:ff:82:01:90: d9:e9:44:57:71:14:24:2e:b5:73:dc:42:3b:6a:9a:aa:c7:f3: d1:60:ba:da:39:42:ca:aa:4c:20:43:b2:c8:f4:87:41:66:35: 40:d1:4a:78:dd:60:ea:09:18:23:7a:ed:55:89:42:90:66:b1: 84:4a:12:11:4f:98:13:5e:52:81:a4:a8:2b:1e:6a:11:cf:da: 40:7a:5b:47:3b:0c:05:97:1e:ec:0d:95:26:38:39:0f:09:e1: c4:3f:23:71:6c:db:d4:30:64:89:b8:a5:d0:05:30:c2:56:a5: 33:35:29:13:fa:42:7c:5b:65:c6:93:2e:08:49:29:7e:6d:5f: 8b:34:59:73:31:b1:74:10:68:38:26:20:5e:7b:a2:35:88:b6: 82:9d:a4:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKDEzNTVENTE4N0QyRTYzRDdFNkQ0OTA3OEQ4RTcxRkEw NTFDNDU2RTMwHhcNMjUwODEwMTgyMzE5WhcNMjUwODE3MTgyMzE5WjAYMRYwFAYD VQQDEw02ODk4ZTM5Ny1lNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4aixfCGLGMKyFYXNtINrlXVSJTdTX5kGOU/TQXkm8cSdjMxgS4zd83Uhkxq nYvVSRcsfUbLsk5/MJm9Wlp71XXwPrI51thw5sGcnkJf22eGJtZ1xW6m4cyPRpRI F/cqj/Kd4OSB0We5IRbmp6CL01aIZjWX2iIe/Hh9Cu9f3gMtTtzqy2ctlb/5huYu TnMSf/7Oo7WnIRJZ4cbh4LQX78uTI623oQKTs+ak6m1lestPisKHRaqMw5zl986R WTQz94+x8PZn9fl2g5U7JgvtOvNj1OzRykNHrQHsoWwmqILUyEz79mBt5b1dkuz/ AoRppy+/FDamekh9IUCI3Nld1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWlWYP6 O9gz0/dRXNEwIW6v6wm3MB8GA1UdIwQYMBaAFBNV1Rh9LmPX5tSQeNjnH6BRxFbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS82MzI2NTBGODA1 MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5Zm0xSkI0Mk9jZm9GSEVW dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0UxWFZHSDB1WTlmbTFKQjQyT2Nmb0ZIRVZ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS82MzI2NTBGODA1MDUxMUVBQUE5MzRDNDNDNEY5QUUwMi9FMVhWR0gwdVk5 Zm0xSkI0Mk9jZm9GSEVWdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAck3qryTNmXLFjCbo3YY9SdzhX6zlkDEBpEtOhQnUd6pC4wd6JJ4B1 Y752JAETVR0TxuB2Yx98gHmQiNRpu8Vyglb+HIXIlri3OpkW+GTQ4L4WaI2fNHBd SolrmKU/SFbV92oo3fY4L/+CAZDZ6URXcRQkLrVz3EI7apqqx/PRYLraOULKqkwg Q7LI9IdBZjVA0Up43WDqCRgjeu1ViUKQZrGEShIRT5gTXlKBpKgrHmoRz9pAeltH OwwFlx7sDZUmODkPCeHEPyNxbNvUMGSJuKXQBTDCVqUzNSkT+kJ8W2XGky4ISSl+ bV+LNFlzMbF0EGg4JiBee6I1iLaCnaSg -----END CERTIFICATE-----Generated at Sun Aug 10 21:19:16 2025 by rpki-client