$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft File: elR0EjxUiBfiXzSEzCa2CwZBvWk.mft (raw, json) Hash identifier: 7YSlLUvYdBbtIKplDUR+mj2S40IB+58+ubGHTR9EEQ0= Subject key identifier: C3:2A:0F:57:5F:B3:2C:FE:3A:1D:60:83:70:55:B0:78:88:C6:DD:C9 Authority key identifier: 7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 Certificate issuer: /CN=A91B6F87/serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Certificate serial: 07A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft Manifest number: 078E Signing time: Tue 12 Aug 2025 21:52:55 +0000 Manifest this update: Tue 12 Aug 2025 21:52:55 +0000 Manifest next update: Tue 19 Aug 2025 21:52:55 +0000 Files and hashes: 1: elR0EjxUiBfiXzSEzCa2CwZBvWk.crl (hash: vUiDIqVFsRaAIWjtKa3frt3Bm/JprWz8qqOV+voc5Y4=) 2: 6AB849742C9C11EBB49A3A32C4F9AE02.roa (hash: d4sd7UZZo9a+uPHZX7tMr/i70JRLudIGa9+mnphuZB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F87, serialNumber=7A5474123C548817E25F3484CC26B60B0641BD69 Validity Not Before: Aug 12 21:52:55 2025 GMT Not After : Aug 19 21:52:55 2025 GMT Subject: CN=689bb7b7-884b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b1:ce:16:63:f1:ea:54:1e:d0:2f:c8:4d:b4: fe:67:b6:be:74:47:be:e3:a1:5a:50:2f:8b:25:76: 1d:26:09:96:0f:b4:2c:43:ae:c4:d8:34:6c:21:3d: 62:ef:16:35:b2:f9:6b:c1:4b:d2:cc:c1:ac:6a:16: a9:f7:55:10:e2:6c:2f:d4:4c:12:88:f6:64:fc:ec: 49:63:bf:6a:6c:5c:56:43:5b:e5:80:3c:f9:21:75: 13:24:40:3b:84:a7:97:36:17:19:bd:2e:8c:25:2f: 00:b7:a4:84:2b:6f:96:58:97:32:87:03:b3:b4:6a: f9:5f:f3:bc:2c:55:f6:36:b7:1a:b6:25:69:67:18: 35:56:6c:26:c5:70:c2:55:a0:b6:49:3b:8c:d9:77: 4b:2e:92:ea:b9:d7:c3:a5:ee:ef:9b:5d:b2:80:c5: 63:31:77:d6:df:ee:d1:a7:73:71:e6:2c:a5:70:22: 9a:41:f8:a7:87:67:83:7f:64:e7:08:77:fa:52:07: ca:e1:07:e0:67:77:4b:26:a0:b7:4e:d7:7a:90:67: 13:cc:ba:fe:8a:cd:45:55:2c:f8:10:e9:13:78:eb: 93:94:34:5a:93:c0:92:93:35:c0:82:16:15:22:4e: 13:a9:23:c1:15:2c:c4:32:df:ed:eb:9b:fc:91:27: cd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2A:0F:57:5F:B3:2C:FE:3A:1D:60:83:70:55:B0:78:88:C6:DD:C9 X509v3 Authority Key Identifier: keyid:7A:54:74:12:3C:54:88:17:E2:5F:34:84:CC:26:B6:0B:06:41:BD:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elR0EjxUiBfiXzSEzCa2CwZBvWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/B1CD71F0268811EBBE7C682BC4F9AE02/elR0EjxUiBfiXzSEzCa2CwZBvWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:92:5f:a3:a2:ef:2a:a4:c4:72:5a:ae:4c:35:9b:78:45:22: a8:a1:5f:1d:97:75:ba:d3:c3:86:12:0e:d2:73:69:04:44:44: 39:bf:7d:2e:81:0f:4e:f3:8e:5d:f6:0a:ba:01:27:92:77:94: 61:e0:7c:f0:47:b3:e2:6c:52:fe:35:44:69:5c:9f:22:e0:b6: 54:c9:3e:e7:96:e6:bb:ba:21:4e:88:17:29:04:d6:b0:c5:49: a1:81:7d:c9:90:23:dc:93:46:54:b8:21:07:3d:2a:ee:77:ce: 9d:c1:61:c4:7f:2c:08:c2:05:16:91:8d:1c:b6:d6:b0:7b:b0: 10:cd:69:44:17:26:a1:26:71:35:c8:b3:8a:d7:b4:6f:97:94: aa:39:2c:12:34:dd:07:46:ba:27:b3:73:98:b8:53:04:ff:8c: 92:cd:d0:b1:a1:46:ea:c0:9b:86:36:8a:a2:fe:1d:b6:21:38: 1d:67:13:47:b0:01:02:01:85:2f:40:ea:44:a3:09:86:54:41: 35:ce:fe:4c:d8:15:61:91:05:3c:08:bb:18:b5:f7:43:01:47: dd:f2:43:6c:38:90:ae:1e:fe:22:0a:f9:a3:eb:97:13:3d:2a: d3:87:be:0d:5a:43:86:fa:99:f5:19:db:cf:29:e2:fe:d9:d3: 2c:94:0b:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGODcxMTAvBgNVBAUTKDdBNTQ3NDEyM0M1NDg4MTdFMjVGMzQ4NENDMjZCNjBC MDY0MUJENjkwHhcNMjUwODEyMjE1MjU1WhcNMjUwODE5MjE1MjU1WjAYMRYwFAYD VQQDEw02ODliYjdiNy04ODRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rHOFmPx6lQe0C/ITbT+Z7a+dEe+46FaUC+LJXYdJgmWD7QsQ67E2DRsIT1i 7xY1svlrwUvSzMGsahap91UQ4mwv1EwSiPZk/OxJY79qbFxWQ1vlgDz5IXUTJEA7 hKeXNhcZvS6MJS8At6SEK2+WWJcyhwOztGr5X/O8LFX2NrcatiVpZxg1VmwmxXDC VaC2STuM2XdLLpLqudfDpe7vm12ygMVjMXfW3+7Rp3Nx5iylcCKaQfinh2eDf2Tn CHf6UgfK4QfgZ3dLJqC3Ttd6kGcTzLr+is1FVSz4EOkTeOuTlDRak8CSkzXAghYV Ik4TqSPBFSzEMt/t65v8kSfNXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMqD1df syz+Oh1gg3BVsHiIxt3JMB8GA1UdIwQYMBaAFHpUdBI8VIgX4l80hMwmtgsGQb1p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9CMUNENzFGMDI2 ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlCZmlYelNFekNhMkN3WkJ2 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VsUjBFanhVaUJmaVh6U0V6Q2EyQ3daQnZXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY4Ny9CMUNENzFGMDI2ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9lbFIwRWp4VWlC ZmlYelNFekNhMkN3WkJ2V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4kl+jou8qpMRyWq5MNZt4RSKooV8dl3W608OGEg7Sc2kEREQ5v30u gQ9O845d9gq6ASeSd5Rh4HzwR7PibFL+NURpXJ8i4LZUyT7nlua7uiFOiBcpBNaw xUmhgX3JkCPck0ZUuCEHPSrud86dwWHEfywIwgUWkY0cttawe7AQzWlEFyahJnE1 yLOK17Rvl5SqOSwSNN0HRrons3OYuFME/4ySzdCxoUbqwJuGNoqi/h22ITgdZxNH sAECAYUvQOpEowmGVEE1zv5M2BVhkQU8CLsYtfdDAUfd8kNsOJCuHv4iCvmj65cT PSrTh74NWkOG+pn1GdvPKeL+2dMslAtm -----END CERTIFICATE-----Generated at Wed Aug 13 00:32:16 2025 by rpki-client