$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft File: eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft (raw, json) Hash identifier: 0Gj6LkC67yhxOyig11WbVfQvHhocUQr5jFfOEJhtJz8= Subject key identifier: 10:A2:02:F9:6E:63:D3:30:F3:F7:BE:11:24:70:FB:ED:78:75:DF:67 Authority key identifier: 79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F Certificate issuer: /CN=A91BC5BC/serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Certificate serial: 09D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft Manifest number: 09CE Signing time: Fri 08 Aug 2025 20:17:30 +0000 Manifest this update: Fri 08 Aug 2025 20:17:30 +0000 Manifest next update: Fri 15 Aug 2025 20:17:30 +0000 Files and hashes: 1: eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl (hash: FcqNdHpAok43qLc/WKonUb/R0ZSF58fVV7OP2pdPSgY=) 2: B1AF1C9C862311EA9052C281C4F9AE02.roa (hash: n5P347FiAUuKhxz5D51UBzZC3yGrF18WlVG2Rg0oGrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2516 (0x9d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC5BC, serialNumber=7975033DC5D4540F16AEC121286EC414CA787D6F Validity Not Before: Aug 8 20:17:30 2025 GMT Not After : Aug 15 20:17:30 2025 GMT Subject: CN=68965b5a-705f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:11:0c:03:39:b2:96:5b:1e:63:15:a1:b0: 14:84:25:5f:29:d5:fe:7b:41:e7:8e:92:70:2f:ba: 67:59:10:fe:ba:09:be:c3:20:79:4a:64:cb:aa:54: 56:54:d6:2d:03:24:41:af:02:e4:45:54:88:07:fe: ca:20:35:16:f8:e7:75:68:0d:87:2a:8b:3a:51:48: eb:83:50:e1:97:2f:78:15:f4:dd:e8:a5:a0:19:be: 3e:92:08:a5:1c:bf:26:05:2d:b3:ac:cd:79:43:15: d7:84:b0:e3:c7:89:a3:48:0b:3b:42:b8:bf:eb:67: 09:65:57:ae:10:43:5f:97:03:be:e5:cd:4d:89:45: c6:0e:ee:51:09:ce:25:a5:d7:a9:c5:a3:26:d5:d3: da:5d:0c:61:d6:15:47:b4:97:6b:50:86:74:cd:1f: 82:c4:6a:98:b0:10:d5:47:7e:88:19:16:f4:6b:93: 61:e2:9c:d9:3a:f3:51:24:86:21:82:5a:76:fc:6b: 38:d5:ef:78:77:8d:cb:b9:fc:53:5f:b2:8f:2b:c8: f9:7a:1e:ec:6e:15:dc:0c:69:83:ee:36:7c:85:31: 61:d6:20:5f:49:0c:a7:86:5c:cc:90:db:e8:ca:29: 8d:07:e0:59:86:5a:61:34:7c:6c:24:57:fa:39:f1: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A2:02:F9:6E:63:D3:30:F3:F7:BE:11:24:70:FB:ED:78:75:DF:67 X509v3 Authority Key Identifier: keyid:79:75:03:3D:C5:D4:54:0F:16:AE:C1:21:28:6E:C4:14:CA:78:7D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eXUDPcXUVA8WrsEhKG7EFMp4fW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC5BC/13EAA47C862311EAA0059881C4F9AE02/eXUDPcXUVA8WrsEhKG7EFMp4fW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5d:6f:46:8a:35:a2:56:ca:3a:0d:2b:8a:b9:c2:4a:48:12: 4a:e8:60:0b:2c:1f:c7:f8:fa:80:a3:ad:e6:53:bd:e8:de:8e: eb:72:15:70:31:b2:4b:6e:80:26:1e:94:58:ba:3c:5d:35:4c: 3f:1b:97:38:84:09:c3:b3:2d:00:50:af:de:7c:ad:83:fb:69: ae:c1:bd:0d:e4:75:25:78:38:a6:f5:b7:c4:d8:ca:21:54:92: fb:b4:54:eb:82:64:3c:ab:e7:5a:72:35:d5:a0:f1:61:14:31: 79:6e:8e:88:ee:6a:67:23:c9:12:f5:85:8f:d9:55:e6:5a:13: 62:6b:31:13:f5:b2:47:40:32:5a:9d:3b:c1:86:2f:8b:e4:92: bb:73:f7:3a:7e:33:4b:64:6c:56:e9:3f:d3:ff:e4:b8:00:65: 0f:67:1d:c1:dd:d6:01:95:89:30:a9:8f:cd:78:5d:dd:4a:3d: ba:1b:72:83:32:1b:1a:b6:33:a5:88:21:b2:a1:06:ac:66:78: 9d:2e:2f:af:09:20:c4:af:09:94:42:21:c7:bd:ac:20:75:83: b6:c6:35:e7:01:61:44:1d:3c:82:93:17:f2:d6:65:f9:a0:5c: 73:a6:75:3d:1c:02:3f:e4:2b:3f:74:25:95:61:4b:ac:18:9b: e6:ed:68:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM1QkMxMTAvBgNVBAUTKDc5NzUwMzNEQzVENDU0MEYxNkFFQzEyMTI4NkVDNDE0 Q0E3ODdENkYwHhcNMjUwODA4MjAxNzMwWhcNMjUwODE1MjAxNzMwWjAYMRYwFAYD VQQDEw02ODk2NWI1YS03MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdkRDAM5spZbHmMVobAUhCVfKdX+e0HnjpJwL7pnWRD+ugm+wyB5SmTLqlRW VNYtAyRBrwLkRVSIB/7KIDUW+Od1aA2HKos6UUjrg1Dhly94FfTd6KWgGb4+kgil HL8mBS2zrM15QxXXhLDjx4mjSAs7Qri/62cJZVeuEENflwO+5c1NiUXGDu5RCc4l pdepxaMm1dPaXQxh1hVHtJdrUIZ0zR+CxGqYsBDVR36IGRb0a5Nh4pzZOvNRJIYh glp2/Gs41e94d43LufxTX7KPK8j5eh7sbhXcDGmD7jZ8hTFh1iBfSQynhlzMkNvo yimNB+BZhlphNHxsJFf6OfHo4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCiAvlu Y9Mw8/e+ESRw++14dd9nMB8GA1UdIwQYMBaAFHl1Az3F1FQPFq7BIShuxBTKeH1v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzVCQy8xM0VBQTQ3Qzg2 MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZBOFdyc0VoS0c3RUZNcDRm VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VYVURQY1hVVkE4V3JzRWhLRzdFRk1wNGZXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzVCQy8xM0VBQTQ3Qzg2MjMxMUVBQTAwNTk4ODFDNEY5QUUwMi9lWFVEUGNYVVZB OFdyc0VoS0c3RUZNcDRmVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtXW9GijWiVso6DSuKucJKSBJK6GALLB/H+PqAo63mU73o3o7rchVw MbJLboAmHpRYujxdNUw/G5c4hAnDsy0AUK/efK2D+2muwb0N5HUleDim9bfE2Moh VJL7tFTrgmQ8q+dacjXVoPFhFDF5bo6I7mpnI8kS9YWP2VXmWhNiazET9bJHQDJa nTvBhi+L5JK7c/c6fjNLZGxW6T/T/+S4AGUPZx3B3dYBlYkwqY/NeF3dSj26G3KD MhsatjOliCGyoQasZnidLi+vCSDErwmUQiHHvawgdYO2xjXnAWFEHTyCkxfy1mX5 oFxzpnU9HAI/5Cs/dCWVYUusGJvm7WiJ -----END CERTIFICATE-----Generated at Sun Aug 10 16:11:58 2025 by rpki-client