$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft File: e1ZuSGesy4G3S6nWZiJObARfDCc.mft (raw, json) Hash identifier: Zhvu7y17jXHJ37q+Q0xRJiVjwwjMMgJ7FFH0vHk0hNg= Subject key identifier: 6D:4E:48:AB:97:3E:22:83:02:9E:4C:45:60:A0:2D:76:77:43:48:16 Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 Certificate issuer: /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Certificate serial: 03A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft Manifest number: 039A Signing time: Tue 17 Jun 2025 00:25:55 +0000 Manifest this update: Tue 17 Jun 2025 00:25:54 +0000 Manifest next update: Tue 24 Jun 2025 00:25:54 +0000 Files and hashes: 1: e1ZuSGesy4G3S6nWZiJObARfDCc.crl (hash: tlUbFp389MYqTMs9CmTTV1RVa7bEuapVFyrSyp1Fm5E=) 2: 6808AEBA278511F09AB25F80C4F9AE02.roa (hash: wCf4g6o5WScb6RGG49PPoBi+hb01eShp6RghG0g0MJ8=) 3: F85D97D8278411F0B46E4A7FC4F9AE02.roa (hash: gNV6yCoYOHvCUxwy2Tl0FTscxDv6xhq7lZUCCqRtA/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 929 (0x3a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27 Validity Not Before: Jun 17 00:25:54 2025 GMT Not After : Jun 24 00:25:54 2025 GMT Subject: CN=6850b613-5f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b6:a9:56:45:a6:2b:93:6a:31:1e:9a:91:53: 39:2d:ba:32:28:e9:8e:37:eb:af:af:40:21:e3:e8: 1b:30:4b:85:d8:0d:fb:cb:13:09:59:a1:95:11:e8: cf:49:78:01:92:d2:e4:8c:9b:f3:da:c8:77:5c:0e: a1:2c:d7:9f:71:6d:b9:43:f5:43:d4:ef:34:77:2b: 59:cb:b8:08:d7:14:c0:35:36:72:e1:e7:bd:ed:d7: 47:ae:e9:04:74:30:e7:3c:21:75:ff:2b:7d:65:9c: 0a:3f:1d:52:a1:48:ce:2f:93:a8:73:9d:9f:54:bf: 7b:ef:ce:ab:a8:35:2f:51:62:a7:af:6a:8f:d2:4f: 5a:f5:f7:27:d4:25:7e:24:82:90:ce:66:f5:4a:1e: 4c:31:02:99:71:67:49:e7:a7:74:69:04:74:53:d1: 11:2a:df:d4:1f:47:75:64:6d:e3:9b:07:b3:b9:88: 3c:f0:63:ba:7b:0b:a5:ea:9e:dd:77:5f:7f:20:b6: 89:35:7f:10:63:be:2b:b1:37:ad:83:49:b1:52:6c: 2e:3c:9e:d5:d9:12:2e:de:fd:31:40:f9:02:5d:5c: 81:5c:91:58:00:65:41:48:67:2b:86:1b:a7:38:5f: 2f:3a:10:bf:eb:19:8c:64:fa:d9:48:c9:15:38:e3: dd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4E:48:AB:97:3E:22:83:02:9E:4C:45:60:A0:2D:76:77:43:48:16 X509v3 Authority Key Identifier: keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d4:53:8e:36:16:f0:ac:6e:35:51:fe:5b:9b:06:31:4d:7e: 37:d2:66:3c:91:5c:c5:9c:6b:18:16:02:ae:d3:2b:37:1e:4a: 33:b2:1e:45:45:a2:38:37:68:e8:f0:f1:84:89:a5:75:9e:ff: 24:de:75:85:c1:01:fb:45:12:94:2e:2c:a5:a7:b1:ca:be:59: 16:05:b3:7a:63:19:f8:e9:ff:b0:48:95:f8:34:0e:85:7c:d5: c8:38:ff:91:cc:f7:7e:9e:b0:59:a5:45:b3:19:09:91:48:77: 5b:83:7d:b9:d1:f3:09:cc:42:9d:f6:ff:8d:24:a7:55:13:1c: dd:c0:46:b1:70:f3:b3:52:21:dc:e6:6a:be:96:ec:dd:ef:26: a9:02:a9:69:56:85:b4:4d:7b:a2:8d:f8:30:37:f8:58:e7:b2: 4d:d0:e9:63:65:55:90:52:8b:90:d6:11:5f:37:dc:1d:1e:0d: 12:85:cc:96:1d:64:05:58:4a:d3:5a:1d:85:62:3a:af:75:ba: ad:06:85:45:3e:30:4c:7d:10:30:92:e6:29:2e:5e:e8:d0:2e: 58:c5:e8:95:a8:52:78:1c:6a:61:2b:c1:b4:7d:c8:95:61:d0: 4f:e3:bf:43:89:6a:15:bd:5a:f1:16:0f:8e:90:09:5b:19:bd: 02:c9:1d:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJERkIxMTAvBgNVBAUTKDdCNTY2RTQ4NjdBQ0NCODFCNzRCQTlENjY2MjI0RTZD MDQ1RjBDMjcwHhcNMjUwNjE3MDAyNTU0WhcNMjUwNjI0MDAyNTU0WjAYMRYwFAYD VQQDEw02ODUwYjYxMy01ZjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLapVkWmK5NqMR6akVM5LboyKOmON+uvr0Ah4+gbMEuF2A37yxMJWaGVEejP SXgBktLkjJvz2sh3XA6hLNefcW25Q/VD1O80dytZy7gI1xTANTZy4ee97ddHrukE dDDnPCF1/yt9ZZwKPx1SoUjOL5Ooc52fVL97786rqDUvUWKnr2qP0k9a9fcn1CV+ JIKQzmb1Sh5MMQKZcWdJ56d0aQR0U9ERKt/UH0d1ZG3jmwezuYg88GO6ewul6p7d d19/ILaJNX8QY74rsTetg0mxUmwuPJ7V2RIu3v0xQPkCXVyBXJFYAGVBSGcrhhun OF8vOhC/6xmMZPrZSMkVOOPdswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1OSKuX PiKDAp5MRWCgLXZ3Q0gWMB8GA1UdIwQYMBaAFHtWbkhnrMuBt0up1mYiTmwEXwwn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRGQi85RkNBQURGRUEw NTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0RzNTNm5XWmlKT2JBUmZE Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2UxWnVTR2VzeTRHM1M2bldaaUpPYkFSZkRDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRGQi85RkNBQURGRUEwNTAxMUVDOTdCRjhENzJDNEY5QUUwMi9lMVp1U0dlc3k0 RzNTNm5XWmlKT2JBUmZEQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu1FOONhbwrG41Uf5bmwYxTX430mY8kVzFnGsYFgKu0ys3Hkozsh5F RaI4N2jo8PGEiaV1nv8k3nWFwQH7RRKULiylp7HKvlkWBbN6Yxn46f+wSJX4NA6F fNXIOP+RzPd+nrBZpUWzGQmRSHdbg3250fMJzEKd9v+NJKdVExzdwEaxcPOzUiHc 5mq+luzd7yapAqlpVoW0TXuijfgwN/hY57JN0OljZVWQUouQ1hFfN9wdHg0ShcyW HWQFWErTWh2FYjqvdbqtBoVFPjBMfRAwkuYpLl7o0C5YxeiVqFJ4HGphK8G0fciV YdBP479DiWoVvVrxFg+OkAlbGb0CyR1F -----END CERTIFICATE-----Generated at Tue Jun 17 11:27:16 2025 by rpki-client