$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft File: e14ORHE1uxchraYfZdx1yV9U2wI.mft (raw, json) Hash identifier: fG4UvOKX4wpStbB5+MGh0gucXZs7xwRaQOiYDgKNyug= Subject key identifier: EB:3E:13:42:6E:A2:CA:E3:71:5A:B1:17:7A:FF:14:01:D3:54:EA:16 Authority key identifier: 7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 Certificate issuer: /CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft Manifest number: 7C Signing time: Mon 11 Aug 2025 07:01:12 +0000 Manifest this update: Mon 11 Aug 2025 07:01:12 +0000 Manifest next update: Mon 18 Aug 2025 07:01:11 +0000 Files and hashes: 1: e14ORHE1uxchraYfZdx1yV9U2wI.crl (hash: I0y4BrVl1+q0a3xCDOCYPO6O4ih/lmhWIAACcoC/aiE=) 2: E4086C08BC2311EF9A445084C4F9AE02.roa (hash: r/4IGYNLMpKuCk8NRggWB2EhHJYpkEkj/MdGzvjYmVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8226, serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02 Validity Not Before: Aug 11 07:01:12 2025 GMT Not After : Aug 18 07:01:11 2025 GMT Subject: CN=68999538-70c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:08:64:64:18:c5:c8:d3:a2:4a:71:d9:9a:f1: f5:a4:69:90:df:24:4a:2f:f2:6c:e6:0f:be:c0:5b: 85:e9:30:e7:ae:3f:3d:c2:bb:f0:41:29:6d:6a:2b: 9a:1b:b4:a1:47:cc:7d:4a:d8:b9:8a:09:0d:50:87: 5f:4c:87:7e:eb:e0:61:15:0c:5d:03:ff:bb:50:1d: 90:d6:50:a2:77:42:35:48:eb:f1:a5:4f:b1:16:ec: 08:68:70:d9:3a:8c:03:4e:a2:62:76:e9:ac:45:a1: 02:0f:e4:cc:93:eb:6b:8f:da:7e:34:48:60:99:84: 8c:81:b5:6e:90:5e:74:d5:13:dc:64:78:9a:2b:bb: 81:74:42:55:5b:02:88:c3:ab:29:4b:55:05:0a:64: cc:a8:52:29:e9:4c:77:9d:98:39:10:72:45:a2:23: 06:f0:4f:2a:ce:7d:93:48:12:1f:89:f4:72:51:8b: 9e:c5:b1:33:88:5a:32:9e:ea:5f:f0:fe:fd:5c:e2: 21:0a:66:10:6f:50:76:21:84:63:f1:ff:c0:26:7b: 17:3d:37:d2:ed:f7:09:c9:d9:71:50:a2:18:c0:8b: cd:c7:a8:a8:da:7f:40:22:8f:b5:4d:db:94:4d:f2: 45:21:c8:52:5f:14:ac:94:f8:1f:9f:85:cb:9a:1c: 79:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3E:13:42:6E:A2:CA:E3:71:5A:B1:17:7A:FF:14:01:D3:54:EA:16 X509v3 Authority Key Identifier: keyid:7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:8a:5d:26:33:c0:9e:42:b1:d7:3e:51:29:ea:79:8b:9e:87: 67:ce:dc:6c:dc:d4:2f:de:7a:70:94:44:e4:62:9c:57:e4:da: 65:7f:98:dc:43:5b:a2:17:53:96:a9:09:6c:7f:53:c1:79:e3: 63:1f:51:6a:5a:c8:1b:4a:c6:68:31:20:d7:bf:45:62:5b:9e: 3b:63:9d:d4:0b:7a:db:f6:7b:7a:78:ba:45:c7:b8:12:32:ed: ec:12:5d:e0:89:0a:44:c2:84:f2:7a:56:a9:d9:de:dc:d3:85: 69:79:35:4d:7f:48:7f:24:49:b9:73:86:57:0c:f5:d8:f2:0a: 4a:db:5f:d6:6e:a5:09:a4:c6:e3:95:bb:b6:b8:96:be:92:f3: 41:22:4d:eb:39:0e:e6:9a:59:ee:97:c2:c5:f7:b9:0d:7f:07: 87:4b:18:f9:a0:ac:5e:7f:aa:0a:a9:3e:5b:6c:e4:0a:40:38: b9:3f:19:87:f8:1c:3b:89:39:31:47:dd:1f:e7:fd:fd:fc:74: 3e:8f:03:e5:32:93:a5:df:c5:0f:db:95:0a:7e:6e:74:5a:02: 1f:64:a2:02:8f:95:35:52:7d:33:ad:4e:8c:cf:df:82:9b:f5: c7:98:4d:f3:70:d6:cf:82:34:5c:d4:4c:9e:e1:74:c3:83:0b: 4e:86:80:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODIyNjExMC8GA1UEBRMoN0I1RTBFNDQ3MTM1QkIxNzIxQURBNjFGNjVEQzc1Qzk1 RjU0REIwMjAeFw0yNTA4MTEwNzAxMTJaFw0yNTA4MTgwNzAxMTFaMBgxFjAUBgNV BAMTDTY4OTk5NTM4LTcwYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuCGRkGMXI06JKcdma8fWkaZDfJEov8mzmD77AW4XpMOeuPz3Cu/BBKW1qK5ob tKFHzH1K2LmKCQ1Qh19Mh37r4GEVDF0D/7tQHZDWUKJ3QjVI6/GlT7EW7AhocNk6 jANOomJ26axFoQIP5MyT62uP2n40SGCZhIyBtW6QXnTVE9xkeJoru4F0QlVbAojD qylLVQUKZMyoUinpTHedmDkQckWiIwbwTyrOfZNIEh+J9HJRi57FsTOIWjKe6l/w /v1c4iEKZhBvUHYhhGPx/8Amexc9N9Lt9wnJ2XFQohjAi83HqKjaf0Aij7VN25RN 8kUhyFJfFKyU+B+fhcuaHHl1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6z4TQm6i yuNxWrEXev8UAdNU6hYwHwYDVR0jBBgwFoAUe14ORHE1uxchraYfZdx1yV9U2wIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjI2L0VDNERGMzE0QkMx RjExRUZBQURBNzQ1RkM0RjlBRTAyL2UxNE9SSEUxdXhjaHJhWWZaZHgxeVY5VTJ3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTE0T1JIRTF1eGNocmFZZlpkeDF5VjlVMndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MjI2L0VDNERGMzE0QkMxRjExRUZBQURBNzQ1RkM0RjlBRTAyL2UxNE9SSEUxdXhj aHJhWWZaZHgxeVY5VTJ3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEiKXSYzwJ5Csdc+USnqeYueh2fO3Gzc1C/eenCURORinFfk2mV/mNxD W6IXU5apCWx/U8F542MfUWpayBtKxmgxINe/RWJbnjtjndQLetv2e3p4ukXHuBIy 7ewSXeCJCkTChPJ6VqnZ3tzThWl5NU1/SH8kSblzhlcM9djyCkrbX9ZupQmkxuOV u7a4lr6S80EiTes5DuaaWe6XwsX3uQ1/B4dLGPmgrF5/qgqpPlts5ApAOLk/GYf4 HDuJOTFH3R/n/f38dD6PA+Uyk6XfxQ/blQp+bnRaAh9kogKPlTVSfTOtTozP34Kb 9ceYTfNw1s+CNFzUTJ7hdMODC06GgEI= -----END CERTIFICATE-----Generated at Tue Aug 12 13:46:24 2025 by rpki-client