$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: n48C4s2opaM/TNyClX/el2+ycHXhC0h5S2/GoQrQk6U= Subject key identifier: B8:7E:FA:EE:55:DF:47:55:49:77:33:64:BA:E4:06:50:AF:68:52:21 Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 09B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 09B1 Signing time: Thu 12 Jun 2025 19:49:02 +0000 Manifest this update: Thu 12 Jun 2025 19:49:02 +0000 Manifest next update: Thu 19 Jun 2025 19:49:02 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: De8KxuFfFk5o1+xocdlgbI2a1mOtp0CYcn5ZRp81ofE=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: n5P347FiAUuKhxz5D51UBzZC3yGrF18WlVG2Rg0oGrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2487 (0x9b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: Jun 12 19:49:02 2025 GMT Not After : Jun 19 19:49:02 2025 GMT Subject: CN=684b2f2e-29ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:ad:79:c9:3c:b5:9b:be:1f:49:24:b7:3c: 39:ce:06:cd:4d:fe:ef:1c:60:8c:62:9c:dc:e7:1b: 88:ab:11:e3:15:b9:ec:fd:d3:df:66:1c:22:ff:7e: 71:9f:42:04:34:1a:4a:29:db:1e:ba:17:51:ac:85: f0:f8:5d:a2:cf:f1:50:ef:f4:4a:05:d0:30:d2:5d: 87:ea:c9:5c:3d:b4:99:d0:a0:9d:5b:51:38:9a:af: 2c:c5:58:21:e1:a8:fc:cf:3f:31:fa:49:66:b9:ec: b0:35:9a:d5:c2:42:9d:5e:ae:c7:62:a9:28:1e:ac: e3:6e:a6:a4:4e:13:5f:94:a0:eb:7a:80:3f:9d:81: ff:fd:f2:97:04:d0:48:41:b0:21:8a:15:e5:91:6d: 7a:d8:95:0f:3a:58:42:46:6f:16:e7:2d:d0:c3:f0: 2d:ba:ed:04:1e:90:50:d0:4e:44:56:2b:4a:f6:ec: eb:32:18:70:e9:39:6e:21:95:b6:32:81:5a:24:7e: 5e:42:3f:4e:9e:9b:87:54:ac:57:58:dc:99:16:ce: 1f:ec:71:0e:f9:73:b7:aa:c9:26:38:c3:58:fc:44: d7:ba:70:09:aa:dd:52:43:05:76:f0:05:7e:11:ea: 03:2a:f3:0f:9a:1b:8e:29:40:14:c9:58:ad:2d:bd: a4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7E:FA:EE:55:DF:47:55:49:77:33:64:BA:E4:06:50:AF:68:52:21 X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:a2:8b:89:01:50:75:2e:7d:14:43:8b:66:38:16:d4:19:c5: ed:d7:64:82:f6:c4:50:4c:3a:a4:44:c6:8f:1c:2c:93:ff:67: f8:8e:dc:84:9e:a3:f8:fe:58:b6:28:2b:a0:84:3b:b6:5c:ed: c8:e8:7f:40:6d:20:19:7e:34:9b:4e:56:4f:34:c2:62:74:b5: 3f:0b:0e:36:76:f6:f7:93:0a:9d:2a:7a:a9:03:b7:4b:7d:41: 35:f5:9e:42:02:09:39:10:2f:2f:8a:44:f3:2d:8c:91:08:f1: 72:3d:8d:65:c7:c1:62:4c:e8:b4:cb:d6:cb:35:49:f1:2f:b4: ed:56:7c:1e:5c:34:c9:5d:5a:9f:93:c4:7c:29:c0:ed:12:58: f5:81:3d:20:fe:29:bb:ba:37:a3:d1:78:77:92:82:3d:79:95: ae:46:e9:bc:e1:8b:2e:07:59:81:7e:31:0a:99:85:b7:a4:11: 85:c2:8a:98:9b:06:e8:db:74:3d:a5:8b:41:b9:38:db:c5:c5: ca:ff:c0:86:ff:cc:55:22:b4:84:4d:69:e2:4f:c0:50:c0:61: 9c:e5:01:c1:e8:56:f0:84:80:10:ed:ba:04:22:d3:7c:8b:46: 79:dd:1c:00:22:de:ef:6c:b3:15:86:31:dc:a1:30:c5:07:07: 24:21:47:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjUwNjEyMTk0OTAyWhcNMjUwNjE5MTk0OTAyWjAYMRYwFAYD VQQDEw02ODRiMmYyZS0yOWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk+teck8tZu+H0kktzw5zgbNTf7vHGCMYpzc5xuIqxHjFbns/dPfZhwi/35x n0IENBpKKdseuhdRrIXw+F2iz/FQ7/RKBdAw0l2H6slcPbSZ0KCdW1E4mq8sxVgh 4aj8zz8x+klmueywNZrVwkKdXq7HYqkoHqzjbqakThNflKDreoA/nYH//fKXBNBI QbAhihXlkW162JUPOlhCRm8W5y3Qw/Atuu0EHpBQ0E5EVitK9uzrMhhw6TluIZW2 MoFaJH5eQj9OnpuHVKxXWNyZFs4f7HEO+XO3qskmOMNY/ETXunAJqt1SQwV28AV+ EeoDKvMPmhuOKUAUyVitLb2kKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLh++u5V 30dVSXczZLrkBlCvaFIhMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZoouJAVB1Ln0UQ4tmOBbUGcXt12SC9sRQTDqkRMaPHCyT/2f4jtyE nqP4/li2KCughDu2XO3I6H9AbSAZfjSbTlZPNMJidLU/Cw42dvb3kwqdKnqpA7dL fUE19Z5CAgk5EC8vikTzLYyRCPFyPY1lx8FiTOi0y9bLNUnxL7TtVnweXDTJXVqf k8R8KcDtElj1gT0g/im7ujej0Xh3koI9eZWuRum84YsuB1mBfjEKmYW3pBGFwoqY mwbo23Q9pYtBuTjbxcXK/8CG/8xVIrSETWniT8BQwGGc5QHB6FbwhIAQ7boEItN8 i0Z53RwAIt7vbLMVhjHcoTDFBwckIUe4 -----END CERTIFICATE-----Generated at Sat Jun 14 18:24:52 2025 by rpki-client