$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: 8WhcsC/p17kMeZMjGFkHfd2Z5sQgNrWKtZ+mnigsz5g= Subject key identifier: F9:BC:03:9F:5B:48:5F:A4:E2:02:F3:17:9A:CF:FA:82:AB:16:66:F2 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 0374 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 036F Signing time: Sun 15 Jun 2025 00:37:49 +0000 Manifest this update: Sun 15 Jun 2025 00:37:49 +0000 Manifest next update: Sun 22 Jun 2025 00:37:49 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: E2OqTXlw5zg/jDC6iYWFRIfTXMe6a4+7fAckQFezHkk=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 884 (0x374) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Jun 15 00:37:49 2025 GMT Not After : Jun 22 00:37:49 2025 GMT Subject: CN=684e15dd-6c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:e7:83:3e:81:72:53:56:1c:b8:79:8f:ea: 6e:28:8e:ee:d3:ac:98:60:fd:65:d4:0b:e8:76:1d: e9:33:01:31:13:e1:f8:ec:12:fa:17:a3:b7:ab:81: 99:c3:83:14:81:39:6a:1d:fb:02:40:23:d9:e7:e1: 51:86:66:df:78:9b:9d:99:af:48:dc:43:49:3f:05: b4:7c:b6:cb:2d:74:d3:c3:66:55:8d:ee:44:69:d6: 9e:09:18:5f:92:22:90:f9:a5:73:48:61:4e:38:e3: 2a:43:ad:d0:b4:59:27:b9:38:6e:8d:3f:ce:53:8b: d1:f7:42:d8:90:55:2b:0f:1d:5a:eb:9a:28:76:b9: e6:c7:63:2a:31:8a:01:7e:3e:44:a5:32:12:d4:4d: c7:48:f8:aa:49:d7:4e:06:f5:ec:21:25:af:25:2f: 13:b1:af:67:f2:ff:89:63:03:20:05:81:e4:a0:9d: 22:ac:df:d4:45:ec:98:0a:20:63:0f:29:68:1d:c7: 6e:62:0a:08:04:a0:87:a6:7e:66:78:78:3c:fb:0d: 83:54:8c:b0:35:30:5b:9a:41:b0:c4:af:e9:64:f6: ad:31:ef:e5:ad:6b:17:50:f4:3c:ec:2e:bc:9f:30: fc:a2:f3:d4:b7:51:d9:a0:2b:05:d6:18:2d:2c:34: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BC:03:9F:5B:48:5F:A4:E2:02:F3:17:9A:CF:FA:82:AB:16:66:F2 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:c8:69:18:a9:86:2c:9a:b3:24:25:7c:11:67:38:cc:1f:4c: d1:96:ef:1e:18:b2:e6:9b:c5:34:60:37:eb:ba:e8:63:79:71: df:6e:d2:1c:b3:f1:88:fc:ef:99:bf:b3:1c:b8:f5:8f:b2:0f: 40:e1:d1:4e:00:04:78:3e:1e:0f:c3:40:05:ca:d5:11:50:fe: d0:5e:c7:2c:f2:81:f1:e3:bf:b4:0f:c8:d1:bf:d1:cd:e1:79: f3:3c:fe:0e:4e:70:14:ad:9d:94:de:52:36:4d:d7:f5:9b:34: f3:dc:27:c5:b6:d9:cc:77:bd:8b:80:1c:e9:4f:bf:8f:a6:68: 16:4f:8a:ee:c4:d5:38:ed:83:04:e3:eb:f6:5c:04:18:28:79: c9:09:e8:e9:cf:02:13:ae:d6:02:c5:af:1f:a3:c4:48:49:43: 2e:f2:21:bc:e8:f3:8c:5e:54:54:6a:a9:c0:a5:f3:e6:15:4c: 7c:0d:4d:07:8f:fc:a2:04:59:74:bf:dd:7b:8f:f6:e0:37:66: 66:4e:d1:09:36:9f:57:b3:ed:45:04:1b:25:b7:53:6c:58:f0: 70:f9:b9:04:30:99:5f:d0:cc:1b:d1:48:1d:28:9f:09:43:3a: 06:57:24:e5:38:05:6d:92:0e:97:46:ce:5f:67:71:d0:39:c7: 1e:b7:69:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjUwNjE1MDAzNzQ5WhcNMjUwNjIyMDAzNzQ5WjAYMRYwFAYD VQQDEw02ODRlMTVkZC02YzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoXngz6BclNWHLh5j+puKI7u06yYYP1l1Avodh3pMwExE+H47BL6F6O3q4GZ w4MUgTlqHfsCQCPZ5+FRhmbfeJudma9I3ENJPwW0fLbLLXTTw2ZVje5EadaeCRhf kiKQ+aVzSGFOOOMqQ63QtFknuThujT/OU4vR90LYkFUrDx1a65oodrnmx2MqMYoB fj5EpTIS1E3HSPiqSddOBvXsISWvJS8Tsa9n8v+JYwMgBYHkoJ0irN/UReyYCiBj DyloHcduYgoIBKCHpn5meHg8+w2DVIywNTBbmkGwxK/pZPatMe/lrWsXUPQ87C68 nzD8ovPUt1HZoCsF1hgtLDSBhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPm8A59b SF+k4gLzF5rP+oKrFmbyMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDyGkYqYYsmrMkJXwRZzjMH0zRlu8eGLLmm8U0YDfruuhjeXHfbtIc s/GI/O+Zv7McuPWPsg9A4dFOAAR4Ph4Pw0AFytURUP7QXscs8oHx47+0D8jRv9HN 4XnzPP4OTnAUrZ2U3lI2Tdf1mzTz3CfFttnMd72LgBzpT7+PpmgWT4ruxNU47YME 4+v2XAQYKHnJCejpzwITrtYCxa8fo8RISUMu8iG86POMXlRUaqnApfPmFUx8DU0H j/yiBFl0v917j/bgN2ZmTtEJNp9Xs+1FBBslt1NsWPBw+bkEMJlf0Mwb0UgdKJ8J QzoGVyTlOAVtkg6XRs5fZ3HQOccet2lN -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:07 2025 by rpki-client