$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: 8AOCRdXC2AaPjZuKAQiashVd6ShFVlP2oFHYcQg/DxE= Subject key identifier: 46:41:3E:C3:5C:B7:82:BC:67:8D:6B:73:8E:EB:79:18:B5:9B:B2:D8 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 0390 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 038B Signing time: Sat 09 Aug 2025 01:21:19 +0000 Manifest this update: Sat 09 Aug 2025 01:21:19 +0000 Manifest next update: Sat 16 Aug 2025 01:21:19 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: eI/GK5gs6zadr2M55Lp783etHLEqsY3goOHi5Ksp4tk=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 912 (0x390) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Aug 9 01:21:19 2025 GMT Not After : Aug 16 01:21:19 2025 GMT Subject: CN=6896a28f-b779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:67:d6:51:ac:f2:8e:11:b8:47:35:ad:85:ee: a0:c9:ff:0a:84:8c:49:4a:0f:fd:3d:05:83:2d:3b: 3b:2f:ed:e1:ae:3b:26:fc:a0:f7:30:45:16:9a:61: b2:ac:c6:85:37:5a:26:ef:2d:95:cd:8e:ce:15:40: b7:a9:a8:1f:70:d9:dd:a4:ec:71:b2:9b:7b:ad:a3: d8:b4:59:d9:14:a7:41:1a:97:b7:3a:b0:ec:de:e3: fa:8d:02:48:f9:c8:ca:2e:43:80:bb:0f:f9:a3:41: 00:3d:9b:e1:b6:d4:51:f4:2b:91:d4:41:a0:f3:6d: 10:f4:5f:f9:64:e8:b2:65:79:2b:8f:10:ae:48:29: 1f:77:ba:f9:58:5d:7b:97:f4:17:ef:a7:fe:fd:1f: d2:60:62:5a:13:ba:31:5f:75:7b:ff:ea:3f:9d:01: 1d:59:d8:8c:d1:52:73:eb:3d:3b:d9:3d:45:51:1e: 63:28:52:28:e1:b0:4f:9e:ed:fd:e2:16:99:f5:b3: ab:a5:86:bf:a4:ff:b4:f1:e4:4d:a2:3e:bd:ac:a3: 7c:86:bd:ae:26:e7:8e:07:ca:6a:ae:4b:d1:e0:6c: 64:5d:16:03:f4:06:18:23:a9:69:8a:c7:8d:a0:fc: cf:b7:67:0c:11:bb:a7:ba:38:b7:b9:69:48:71:ec: aa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:41:3E:C3:5C:B7:82:BC:67:8D:6B:73:8E:EB:79:18:B5:9B:B2:D8 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:23:a0:3a:a0:29:b7:c0:f7:09:2d:c9:7e:0d:29:52:82:26: c2:2a:7c:92:ba:a8:89:1f:26:5d:a5:09:9b:ad:68:b6:69:e1: 7d:4f:57:27:0d:71:72:42:10:fc:cd:5f:99:7f:ed:d3:5a:d8: 27:42:2f:33:fd:0e:3f:cf:9a:da:88:6c:7d:cc:ea:17:73:54: 72:f2:20:1d:79:9b:db:29:41:fb:0b:ea:83:a5:a5:28:fd:14: 0d:44:72:e7:1f:ee:0a:b4:cf:51:54:f5:d0:bd:62:e0:b0:24: 9e:9c:1a:af:cd:a7:8f:8f:d7:2c:1c:ea:4d:42:9b:d6:f9:0d: 09:02:d2:c5:fe:8d:8e:74:1a:ae:79:a4:e1:73:7b:fe:33:19: 23:eb:50:6a:5e:b9:21:15:64:b7:e9:49:29:85:e0:75:be:a7: 52:5e:a2:b0:bd:71:13:a4:7d:2d:62:ce:01:e2:ac:7c:6a:22: 1a:c1:0f:6d:ce:cb:2c:16:d1:11:64:fb:55:90:0d:c7:5e:1f: d7:0c:39:7e:ff:63:a3:9d:0e:d2:6f:52:a0:a3:cc:3b:86:75: 88:d4:29:4c:1c:f8:9b:5a:3a:64:62:30:20:8f:e9:61:36:ee: ae:e4:61:b7:c6:df:5f:96:1f:80:c6:66:ca:d0:94:5d:f1:8b: 48:83:05:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjUwODA5MDEyMTE5WhcNMjUwODE2MDEyMTE5WjAYMRYwFAYD VQQDEw02ODk2YTI4Zi1iNzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGfWUazyjhG4RzWthe6gyf8KhIxJSg/9PQWDLTs7L+3hrjsm/KD3MEUWmmGy rMaFN1om7y2VzY7OFUC3qagfcNndpOxxspt7raPYtFnZFKdBGpe3OrDs3uP6jQJI +cjKLkOAuw/5o0EAPZvhttRR9CuR1EGg820Q9F/5ZOiyZXkrjxCuSCkfd7r5WF17 l/QX76f+/R/SYGJaE7oxX3V7/+o/nQEdWdiM0VJz6z072T1FUR5jKFIo4bBPnu39 4haZ9bOrpYa/pP+08eRNoj69rKN8hr2uJueOB8pqrkvR4GxkXRYD9AYYI6lpiseN oPzPt2cMEbunuji3uWlIceyqkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZBPsNc t4K8Z41rc47reRi1m7LYMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3I6A6oCm3wPcJLcl+DSlSgibCKnySuqiJHyZdpQmbrWi2aeF9T1cn DXFyQhD8zV+Zf+3TWtgnQi8z/Q4/z5raiGx9zOoXc1Ry8iAdeZvbKUH7C+qDpaUo /RQNRHLnH+4KtM9RVPXQvWLgsCSenBqvzaePj9csHOpNQpvW+Q0JAtLF/o2OdBqu eaThc3v+Mxkj61BqXrkhFWS36UkpheB1vqdSXqKwvXETpH0tYs4B4qx8aiIawQ9t zsssFtERZPtVkA3HXh/XDDl+/2OjnQ7Sb1Kgo8w7hnWI1ClMHPibWjpkYjAgj+lh Nu6u5GG3xt9flh+AxmbK0JRd8YtIgwWx -----END CERTIFICATE-----Generated at Sun Aug 10 10:34:16 2025 by rpki-client