$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: ymcaBcvdL7xiVuImvKRZiBgZadcrZfGSjVvEqQvV0xI= Subject key identifier: 04:ED:F5:06:7A:46:64:C8:C7:1B:69:FD:42:2D:D5:FB:2C:00:22:48 Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0F7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0F73 Signing time: Thu 12 Jun 2025 17:27:39 +0000 Manifest this update: Thu 12 Jun 2025 17:27:38 +0000 Manifest next update: Thu 19 Jun 2025 17:27:38 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: fzQChJcDiln+xdBrwiUtFCXqQmP2MfcWIZH+nMa12oc=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3962 (0xf7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: Jun 12 17:27:38 2025 GMT Not After : Jun 19 17:27:38 2025 GMT Subject: CN=684b0e0b-f966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4f:a2:52:04:6b:71:41:54:28:f4:b7:c9:58: bb:63:a4:9c:ac:71:99:bd:c3:70:14:5d:24:9a:32: b7:44:52:ad:d1:2d:3f:de:ec:77:d3:a7:e0:6c:b1: 5a:35:28:a3:27:54:84:b7:b6:1c:6d:af:59:a3:56: 18:b0:cb:96:71:8a:30:a3:4c:73:4f:c6:c9:70:b1: 5c:32:8d:a9:b1:53:96:ae:a2:2a:af:2c:f0:a6:5d: 57:c4:5e:3b:ba:9f:de:f7:98:6a:9a:f3:e7:f8:56: 4c:1e:99:17:c3:28:86:82:b6:f0:02:8a:86:5a:97: ab:a7:b1:a3:20:1b:92:f2:50:df:6c:92:01:5d:92: 23:bd:2d:e8:1b:93:77:e4:3e:e6:d2:9d:f7:48:ae: 43:88:e4:f3:50:d6:88:f7:28:43:25:da:c2:d8:31: 95:af:e9:cf:2b:c7:53:e2:79:54:28:3e:8b:ea:be: da:6d:fd:2a:49:33:54:7d:94:13:cd:af:43:0c:49: 30:bd:18:06:e4:d3:b9:bc:a6:ef:fb:c9:df:0c:30: 1b:3f:46:3f:b4:41:f2:74:26:1f:69:31:7f:ea:26: 3f:8f:46:50:ba:f0:4e:78:42:a4:b8:c9:91:49:26: 0e:c1:9e:ae:01:07:2d:5a:ea:ff:18:f6:f9:ce:49: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:ED:F5:06:7A:46:64:C8:C7:1B:69:FD:42:2D:D5:FB:2C:00:22:48 X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:b7:fe:fa:79:94:74:d9:7b:52:99:47:a8:82:db:e0:7b:27: fd:cc:0a:20:b3:09:be:ce:64:f6:bc:e0:88:04:9f:08:28:86: 8e:32:5e:7e:75:05:3d:6d:ae:e8:eb:25:42:9a:d6:0a:5c:fc: 25:3d:42:7c:00:dc:d7:3b:ce:9f:9b:39:c5:1a:46:e2:ae:a5: ce:e2:09:22:e1:47:c1:a7:a3:07:0c:12:3e:43:a8:f9:59:40: c7:6a:a7:13:9a:b9:f5:0c:22:08:96:c4:a3:4c:f7:2e:e5:b7: 28:ad:21:05:e3:24:48:00:69:7a:6f:8b:4a:01:12:5e:ee:87: 79:80:91:70:91:a8:7b:03:db:dc:06:8f:25:2c:73:18:50:18: 8f:f0:58:01:28:23:50:49:d2:f5:e3:51:cb:fc:22:fa:c3:98: e0:e7:6a:70:cc:3f:31:cf:28:aa:6e:44:94:f5:14:b3:6b:7d: 95:97:60:e7:3e:99:9e:eb:74:92:19:cb:99:c5:6a:9d:ef:f2: a9:5d:12:7d:74:10:c2:08:4e:b1:d1:50:28:7f:5e:4e:bc:0a: 10:03:99:dd:e2:bb:de:a1:8b:be:f0:13:f1:da:f1:50:2a:fa: c2:9d:10:e6:26:15:55:a4:9a:c4:12:3d:b3:33:b9:4e:ae:59: 1f:3a:cc:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUwNjEyMTcyNzM4WhcNMjUwNjE5MTcyNzM4WjAYMRYwFAYD VQQDEw02ODRiMGUwYi1mOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0+iUgRrcUFUKPS3yVi7Y6ScrHGZvcNwFF0kmjK3RFKt0S0/3ux306fgbLFa NSijJ1SEt7Ycba9Zo1YYsMuWcYowo0xzT8bJcLFcMo2psVOWrqIqryzwpl1XxF47 up/e95hqmvPn+FZMHpkXwyiGgrbwAoqGWperp7GjIBuS8lDfbJIBXZIjvS3oG5N3 5D7m0p33SK5DiOTzUNaI9yhDJdrC2DGVr+nPK8dT4nlUKD6L6r7abf0qSTNUfZQT za9DDEkwvRgG5NO5vKbv+8nfDDAbP0Y/tEHydCYfaTF/6iY/j0ZQuvBOeEKkuMmR SSYOwZ6uAQctWur/GPb5zkmGywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATt9QZ6 RmTIxxtp/UIt1fssACJIMB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3t/76eZR02XtSmUeogtvgeyf9zAogswm+zmT2vOCIBJ8IKIaOMl5+ dQU9ba7o6yVCmtYKXPwlPUJ8ANzXO86fmznFGkbirqXO4gki4UfBp6MHDBI+Q6j5 WUDHaqcTmrn1DCIIlsSjTPcu5bcorSEF4yRIAGl6b4tKARJe7od5gJFwkah7A9vc Bo8lLHMYUBiP8FgBKCNQSdL141HL/CL6w5jg52pwzD8xzyiqbkSU9RSza32Vl2Dn Ppme63SSGcuZxWqd7/KpXRJ9dBDCCE6x0VAof15OvAoQA5nd4rveoYu+8BPx2vFQ KvrCnRDmJhVVpJrEEj2zM7lOrlkfOsyM -----END CERTIFICATE-----Generated at Sat Jun 14 18:55:13 2025 by rpki-client