$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json) Hash identifier: r1pjcIVo8elHUid/HLmOBTQ3rlaWWdlozIc+b8gnEGQ= Subject key identifier: F3:96:AD:D1:78:3B:B2:2D:57:B9:C0:5F:48:D6:E0:4F:FD:5E:50:E7 Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57 Certificate serial: 2529 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft Manifest number: 2529 Signing time: Fri 08 Aug 2025 14:49:00 +0000 Manifest this update: Fri 08 Aug 2025 14:48:59 +0000 Manifest next update: Fri 15 Aug 2025 14:48:59 +0000 Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: z2KvY7HPrfSHwlI/ZpKT/a0QjnrMVm7CNFE3PP+0SiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9513 (0x2529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57 Validity Not Before: Aug 8 14:48:59 2025 GMT Not After : Aug 15 14:48:59 2025 GMT Subject: CN=68960e5b-0e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2f:8c:c7:c1:db:ec:d2:38:5d:03:4f:16:40: 52:76:84:aa:37:34:64:9c:27:17:7b:af:e8:a8:77: 06:75:f6:33:fc:7f:06:27:19:c7:58:5e:ca:60:6c: 57:58:1c:02:90:ae:1c:68:0a:55:36:57:d8:02:63: 83:e5:2f:16:42:b0:9a:c0:db:90:23:4b:80:b1:d9: f0:c6:61:c0:6c:64:29:15:74:0c:4b:99:d7:e3:05: 92:28:52:44:b8:e8:3d:4e:93:1c:32:99:a4:2d:68: 16:d9:64:ff:b8:f2:6a:78:b0:c4:f3:e4:76:dc:ff: c2:03:82:18:63:ca:88:6f:0f:d1:09:a4:21:74:5d: 4b:32:ee:18:a1:d4:90:80:c3:fe:6b:7b:59:fd:2d: 4b:14:7d:0d:a7:34:62:92:02:c2:35:56:25:a1:94: 84:e8:23:df:34:ad:82:83:52:9c:01:7e:02:27:51: 9c:3a:be:ad:0c:62:f9:de:76:9b:9a:64:bf:e7:cc: 38:96:89:29:be:fe:d7:43:df:86:01:59:42:d8:26: dd:01:c6:3e:81:83:86:51:2c:ce:6f:bf:fc:ae:0b: d0:21:de:62:25:0f:d9:a7:64:fb:b1:6a:17:b5:cd: d2:ae:0a:f8:33:af:5c:aa:1a:95:1b:d5:ce:e5:9c: 55:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:96:AD:D1:78:3B:B2:2D:57:B9:C0:5F:48:D6:E0:4F:FD:5E:50:E7 X509v3 Authority Key Identifier: keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:09:6a:4b:9f:d3:e3:09:16:80:44:73:fa:31:13:3a:49:7f: 26:46:6d:bc:d0:3d:d0:b5:4a:45:60:54:2a:54:ab:82:4a:17: 38:4d:30:d0:bb:72:db:3e:57:53:3f:b3:ce:5a:36:29:09:12: 50:7b:3b:a0:ac:43:18:f5:a1:39:30:d1:de:65:e7:7d:dc:c2: ee:59:ef:8c:dd:f3:05:8b:bd:cb:df:22:28:84:b9:9b:bb:e7: ee:06:d6:c3:a8:30:3f:f5:a1:3d:12:54:66:f5:de:6d:c0:2f: 11:8e:0e:88:05:ab:9d:7b:a2:d4:a9:f7:44:3a:ff:d5:33:34: 52:d5:cf:e3:14:27:93:b6:fe:24:95:c9:50:1c:d9:17:90:1e: cc:e3:e0:a8:6a:ac:d9:bf:8a:dc:a8:fb:c2:10:c2:10:ac:b5: 34:5e:df:0f:c9:ca:b8:d2:ae:1f:ed:50:67:2c:ce:44:65:49: ab:d8:be:e0:86:9c:b5:ed:d7:ac:2f:d1:6b:81:71:7f:14:ff: 1f:6a:ef:d2:b5:c1:8a:82:74:46:29:48:35:8b:d9:6f:f7:3a: a9:92:82:3a:fa:ec:75:20:69:41:b6:c4:78:69:21:63:7c:80: 7b:56:89:a9:89:66:6a:98:fb:3a:57:45:56:03:8c:20:17:ca: f0:fc:42:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy NjA2OTNBNTcwHhcNMjUwODA4MTQ0ODU5WhcNMjUwODE1MTQ0ODU5WjAYMRYwFAYD VQQDEw02ODk2MGU1Yi0wZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwi+Mx8Hb7NI4XQNPFkBSdoSqNzRknCcXe6/oqHcGdfYz/H8GJxnHWF7KYGxX WBwCkK4caApVNlfYAmOD5S8WQrCawNuQI0uAsdnwxmHAbGQpFXQMS5nX4wWSKFJE uOg9TpMcMpmkLWgW2WT/uPJqeLDE8+R23P/CA4IYY8qIbw/RCaQhdF1LMu4YodSQ gMP+a3tZ/S1LFH0NpzRikgLCNVYloZSE6CPfNK2Cg1KcAX4CJ1GcOr6tDGL53nab mmS/58w4lokpvv7XQ9+GAVlC2CbdAcY+gYOGUSzOb7/8rgvQId5iJQ/Zp2T7sWoX tc3Srgr4M69cqhqVG9XO5ZxV3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOWrdF4 O7ItV7nAX0jW4E/9XlDnMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5 MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE a2E2MGJFTjFRUUFtQnBPbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjCWpLn9PjCRaARHP6MRM6SX8mRm280D3QtUpFYFQqVKuCShc4TTDQ u3LbPldTP7POWjYpCRJQezugrEMY9aE5MNHeZed93MLuWe+M3fMFi73L3yIohLmb u+fuBtbDqDA/9aE9ElRm9d5twC8Rjg6IBaude6LUqfdEOv/VMzRS1c/jFCeTtv4k lclQHNkXkB7M4+CoaqzZv4rcqPvCEMIQrLU0Xt8Pycq40q4f7VBnLM5EZUmr2L7g hpy17desL9FrgXF/FP8fau/StcGKgnRGKUg1i9lv9zqpkoI6+ux1IGlBtsR4aSFj fIB7VompiWZqmPs6V0VWA4wgF8rw/EKi -----END CERTIFICATE-----Generated at Fri Aug 8 20:50:44 2025 by rpki-client