$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft File: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json) Hash identifier: rsB/cl3x5I4crpZeYDiqfw/yvs6KKDoXCltfnxCmx64= Subject key identifier: 21:C8:BA:75:74:CE:3B:E1:B3:E9:45:77:07:72:5A:D1:11:D3:69:98 Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 Certificate issuer: /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft Manifest number: 020C Signing time: Mon 11 Aug 2025 02:19:59 +0000 Manifest this update: Mon 11 Aug 2025 02:19:58 +0000 Manifest next update: Mon 18 Aug 2025 02:19:58 +0000 Files and hashes: 1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: M6u5k3P3nLONNN7dqRoOypI5ZK7esKc9S0/gVz43S0Q=) 2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: SUpV5MPTH/BMBi71c7spbVUHkBTzCZVpxBmfHqDrVmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Validity Not Before: Aug 11 02:19:58 2025 GMT Not After : Aug 18 02:19:58 2025 GMT Subject: CN=6899534e-0775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:14:5d:19:09:f7:ab:b7:63:0e:06:ac:57:4d: 54:24:72:35:cc:b5:f4:83:55:18:72:87:ec:0c:56: 71:eb:4f:9a:bb:38:66:32:c1:4c:c6:30:db:d8:d1: e8:12:15:ec:c1:9f:ac:64:dd:89:be:09:9f:35:13: 59:ba:ce:d9:35:51:84:e8:1b:42:07:0f:6f:77:0e: f1:9f:29:be:54:b9:93:ad:79:54:84:1f:7f:3f:4b: 86:70:86:28:e8:d6:60:24:34:c2:fc:02:15:e3:90: b7:b4:a2:78:0b:ef:51:e8:34:46:4f:a7:e5:f4:56: 0d:d4:33:3c:a3:5c:00:54:36:c3:67:8f:c3:83:df: 8c:e5:55:18:fc:0e:93:04:1c:36:e2:b4:d8:9e:1e: 7e:d0:c7:50:50:7a:e4:2e:52:52:9d:19:5b:a1:cc: ed:ee:97:8d:d7:ac:1e:97:83:9d:01:b9:7b:1c:d4: cb:97:87:21:3e:c8:d2:5b:ab:4f:88:20:51:dc:07: 19:00:d6:32:52:12:98:a8:19:e8:a7:f0:d1:44:59: ce:45:e9:f7:4b:23:b2:78:f0:e8:22:1a:a3:93:4e: cd:0e:b5:a8:72:2f:65:e6:6c:d3:5a:57:2e:c8:e7: b1:41:19:4f:42:4d:c7:41:53:0f:05:7a:96:bd:38: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C8:BA:75:74:CE:3B:E1:B3:E9:45:77:07:72:5A:D1:11:D3:69:98 X509v3 Authority Key Identifier: keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:43:dc:46:c4:1c:06:39:fc:ed:b4:5f:ba:f7:61:b0:22:fe: 14:a3:77:0e:b2:14:72:6f:31:56:6c:1d:fe:57:93:89:00:14: bb:48:a1:c5:5f:a9:e6:ee:33:f8:8b:81:40:4d:2b:41:7e:f3: 9f:50:d3:ae:91:1b:64:d0:52:c6:5d:8f:52:78:cc:f2:83:ae: a4:c3:ed:6a:21:df:84:a5:ff:80:93:f1:bd:bc:8b:f6:0d:be: d9:c2:6a:0e:0f:7f:2f:8b:01:6c:57:d7:dc:82:5c:4b:ce:0d: 22:45:ec:d6:de:49:31:43:f4:60:80:bc:d7:f7:fa:33:0a:91: e5:6e:68:00:96:a9:41:e8:8a:04:c0:9d:04:e4:b9:ca:8e:fa: 73:6c:ad:5f:58:1b:fc:4a:e6:4e:c6:3a:0b:b7:41:8a:bf:55: 29:43:df:7e:38:63:62:1e:8d:87:97:11:bd:4f:d5:63:2a:a0: 04:aa:bb:44:80:a2:56:7d:be:18:0b:3c:db:a7:15:8e:7b:fb: 69:4d:ec:ea:48:c0:86:03:97:16:09:29:6a:94:ed:2b:f3:ba: d5:25:28:c6:a5:61:43:06:b2:48:82:f3:ed:64:e1:5f:bc:27: 76:eb:86:a0:8d:00:c7:64:55:5d:56:f8:29:5f:07:f5:98:11: eb:23:d8:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDEzQjI3RkQ0NjI0OEY0QTczM0Q5MjQ2NTFDOTQwQ0I3 RjFBMzA2MDkwHhcNMjUwODExMDIxOTU4WhcNMjUwODE4MDIxOTU4WjAYMRYwFAYD VQQDEw02ODk5NTM0ZS0wNzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBRdGQn3q7djDgasV01UJHI1zLX0g1UYcofsDFZx60+auzhmMsFMxjDb2NHo EhXswZ+sZN2JvgmfNRNZus7ZNVGE6BtCBw9vdw7xnym+VLmTrXlUhB9/P0uGcIYo 6NZgJDTC/AIV45C3tKJ4C+9R6DRGT6fl9FYN1DM8o1wAVDbDZ4/Dg9+M5VUY/A6T BBw24rTYnh5+0MdQUHrkLlJSnRlboczt7peN16wel4OdAbl7HNTLl4chPsjSW6tP iCBR3AcZANYyUhKYqBnop/DRRFnORen3SyOyePDoIhqjk07NDrWoci9l5mzTWlcu yOexQRlPQk3HQVMPBXqWvTjcuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHIunV0 zjvhs+lFdwdyWtER02mYMB8GA1UdIwQYMBaAFBOyf9RiSPSnM9kkZRyUDLfxowYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zRUY3RTlCQzU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlLY3oyU1JsSEpRTXRfR2pC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Sl8xR0pJOUtjejJTUmxISlFNdF9HakJnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zRUY3RTlCQzU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlL Y3oyU1JsSEpRTXRfR2pCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUQ9xGxBwGOfzttF+692GwIv4Uo3cOshRybzFWbB3+V5OJABS7SKHF X6nm7jP4i4FATStBfvOfUNOukRtk0FLGXY9SeMzyg66kw+1qId+Epf+Ak/G9vIv2 Db7ZwmoOD38viwFsV9fcglxLzg0iRezW3kkxQ/RggLzX9/ozCpHlbmgAlqlB6IoE wJ0E5LnKjvpzbK1fWBv8SuZOxjoLt0GKv1UpQ99+OGNiHo2HlxG9T9VjKqAEqrtE gKJWfb4YCzzbpxWOe/tpTezqSMCGA5cWCSlqlO0r87rVJSjGpWFDBrJIgvPtZOFf vCd264agjQDHZFVdVvgpXwf1mBHrI9iW -----END CERTIFICATE-----Generated at Mon Aug 11 05:56:14 2025 by rpki-client