$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft File: E6R11r48LHrEqN03EGaqbAF0-j0.mft (raw, json) Hash identifier: OB7GCrGAbyqQqREMUP6G6R23fFGijF1hsUYevhyUzs4= Subject key identifier: B9:5D:15:36:87:79:06:17:5D:1E:90:2E:D1:06:DA:5C:85:99:30:E6 Authority key identifier: 13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D Certificate issuer: /CN=A91CA141/serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D Certificate serial: 095D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft Manifest number: 0956 Signing time: Fri 08 Aug 2025 20:30:19 +0000 Manifest this update: Fri 08 Aug 2025 20:30:19 +0000 Manifest next update: Fri 15 Aug 2025 20:30:19 +0000 Files and hashes: 1: E6R11r48LHrEqN03EGaqbAF0-j0.crl (hash: RJOlKYXdX46KzEIx65E0D0RgIhMGP762iNsBkeKuZCE=) 2: 6B576C449E5711EABC193842C4F9AE02.roa (hash: rmBjNT0g6o5OQJ7VMnQunSAodjeObi4QujloW5TWZhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2397 (0x95d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA141, serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D Validity Not Before: Aug 8 20:30:19 2025 GMT Not After : Aug 15 20:30:19 2025 GMT Subject: CN=68965e5b-ee71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e8:63:24:1b:3d:b2:fb:32:65:81:19:e0:29: c8:49:66:c6:9d:59:e3:24:cb:4d:b6:5e:c9:9f:a2: 9a:77:da:41:fb:10:e7:ab:5a:58:e3:92:3c:91:5a: ea:b6:b4:67:46:be:3b:41:15:41:8b:84:13:56:31: 04:d8:f1:cd:ec:f9:4e:08:ae:e0:71:ee:43:a4:8a: 11:6a:e3:b7:c1:38:dc:0d:f2:ce:8a:8f:7c:90:57: 5b:af:f2:91:7d:41:5e:1b:a2:9a:4a:0f:4a:eb:1f: 77:29:5b:73:a8:39:f5:f2:84:c9:58:9d:cc:5c:ca: 12:80:10:e7:3f:0d:9d:ee:92:08:ab:80:dd:d4:6c: 89:20:4c:ff:b4:39:51:a4:6c:85:84:8a:f4:42:23: 7a:68:d0:39:de:64:3b:21:8b:09:fd:06:8d:c9:c7: fb:5e:ac:16:32:60:89:bc:57:c0:7d:87:1d:ba:ab: 58:e6:04:74:14:35:64:98:1c:8c:11:e7:2e:d7:3f: 22:8c:60:aa:06:c7:d6:0e:41:04:a5:94:7c:83:a0: 40:f5:5d:fd:b5:9f:52:e2:6a:22:eb:1f:c8:a8:f7: e0:47:64:e6:09:62:74:07:73:87:d7:33:e6:7b:68: 37:6d:c3:50:38:34:29:cf:1b:b1:cc:77:4d:bd:69: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5D:15:36:87:79:06:17:5D:1E:90:2E:D1:06:DA:5C:85:99:30:E6 X509v3 Authority Key Identifier: keyid:13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7e:33:65:ea:5e:f9:62:7f:f1:82:27:2f:b9:02:f8:57:a9: 4e:e8:96:5b:d1:db:b1:11:cd:86:d7:f1:80:8a:f1:68:13:6b: 15:16:a1:88:c6:b5:a5:c6:bd:3d:35:a4:4a:48:e6:0e:bf:f4: 52:7b:06:5a:29:41:c2:c1:98:62:8d:2c:58:26:07:aa:49:b7: 29:23:dd:77:bb:26:a2:4a:90:ea:9e:de:3d:0e:af:d4:26:38: ee:95:e7:90:2b:d3:fd:89:52:23:fd:aa:fd:bd:4c:57:58:1f: 8a:00:55:21:43:f9:cd:8c:a6:17:64:63:8e:7e:2b:ee:de:32: ac:08:a0:d2:f2:ee:1c:13:25:8c:f1:ba:d5:d3:7f:30:2c:23: f9:64:49:a1:63:9a:9e:77:7a:98:1f:ea:83:f8:eb:83:3b:a1: 69:e3:73:8b:76:40:8d:dc:8f:db:5f:84:7a:25:14:5a:be:1a: f3:b8:bb:97:91:13:d2:ec:61:b9:fb:20:d3:6f:dc:67:de:e2: 4e:39:f7:05:53:10:8a:bb:29:0c:94:65:14:b6:8e:e5:4d:69: 41:99:29:77:54:fa:19:1c:2e:e3:fc:a7:5d:99:7a:90:32:a3: bb:7b:4a:7b:3f:07:6c:9a:bb:5b:0f:6d:b6:a1:92:6d:93:a8: 9e:79:1b:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ExNDExMTAvBgNVBAUTKDEzQTQ3NUQ2QkUzQzJDN0FDNEE4REQzNzEwNjZBQTZD MDE3NEZBM0QwHhcNMjUwODA4MjAzMDE5WhcNMjUwODE1MjAzMDE5WjAYMRYwFAYD VQQDEw02ODk2NWU1Yi1lZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuhjJBs9svsyZYEZ4CnISWbGnVnjJMtNtl7Jn6Kad9pB+xDnq1pY45I8kVrq trRnRr47QRVBi4QTVjEE2PHN7PlOCK7gce5DpIoRauO3wTjcDfLOio98kFdbr/KR fUFeG6KaSg9K6x93KVtzqDn18oTJWJ3MXMoSgBDnPw2d7pIIq4Dd1GyJIEz/tDlR pGyFhIr0QiN6aNA53mQ7IYsJ/QaNycf7XqwWMmCJvFfAfYcduqtY5gR0FDVkmByM Eecu1z8ijGCqBsfWDkEEpZR8g6BA9V39tZ9S4moi6x/IqPfgR2TmCWJ0B3OH1zPm e2g3bcNQODQpzxuxzHdNvWnF3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLldFTaH eQYXXR6QLtEG2lyFmTDmMB8GA1UdIwQYMBaAFBOkdda+PCx6xKjdNxBmqmwBdPo9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTE0MS9BRUQxOERBODlF NTUxMUVBOEREMTkwM0NDNEY5QUUwMi9FNlIxMXI0OExIckVxTjAzRUdhcWJBRjAt ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U2UjExcjQ4TEhyRXFOMDNFR2FxYkFGMC1qMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTE0MS9BRUQxOERBODlFNTUxMUVBOEREMTkwM0NDNEY5QUUwMi9FNlIxMXI0OExI ckVxTjAzRUdhcWJBRjAtajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9fjNl6l75Yn/xgicvuQL4V6lO6JZb0duxEc2G1/GAivFoE2sVFqGI xrWlxr09NaRKSOYOv/RSewZaKUHCwZhijSxYJgeqSbcpI913uyaiSpDqnt49Dq/U JjjuleeQK9P9iVIj/ar9vUxXWB+KAFUhQ/nNjKYXZGOOfivu3jKsCKDS8u4cEyWM 8brV038wLCP5ZEmhY5qed3qYH+qD+OuDO6Fp43OLdkCN3I/bX4R6JRRavhrzuLuX kRPS7GG5+yDTb9xn3uJOOfcFUxCKuykMlGUUto7lTWlBmSl3VPoZHC7j/KddmXqQ MqO7e0p7PwdsmrtbD222oZJtk6ieeRsd -----END CERTIFICATE-----Generated at Sun Aug 10 18:17:17 2025 by rpki-client