$ rpki-client -vvf rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft File: l9pBnzurP2V6paXATgV8StlhvFs.mft (raw, json) Hash identifier: JQBrWdNbM+h2vU8X7mvpIifLocwRcPS94yNHwgWyCwc= Subject key identifier: D2:41:E2:74:84:E1:91:1B:C8:B2:F8:21:2C:1B:68:78:3C:89:60:1F Authority key identifier: 97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B Certificate issuer: /CN=A911251C/serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Certificate serial: 01F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft Manifest number: 01F1 Signing time: Sat 19 Jul 2025 02:42:01 +0000 Manifest this update: Sat 19 Jul 2025 02:42:00 +0000 Manifest next update: Sat 26 Jul 2025 02:42:00 +0000 Files and hashes: 1: l9pBnzurP2V6paXATgV8StlhvFs.crl (hash: gppcJjX+0h3idSG4nKCePYDuvSKcn/KZRaitMtB3QAk=) 2: B2F017A26BE311ED8B83B484C4F9AE02.roa (hash: 6uCw/qXIdZiC4cEobpHAa9i3YEi9P+DFX8n151x7wcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911251C, serialNumber=97DA419F3BAB3F657AA5A5C04E057C4AD961BC5B Validity Not Before: Jul 19 02:42:00 2025 GMT Not After : Jul 26 02:42:00 2025 GMT Subject: CN=687b05f8-7d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:66:03:6a:ad:64:2c:5b:a7:aa:24:b2:c2:a2: 28:97:6e:a4:d9:72:80:a7:65:ed:f2:3e:52:23:3f: b6:d6:8b:7b:5e:63:14:3d:05:cc:d7:9f:9a:e8:0d: da:c8:98:ac:e5:d0:77:df:37:ed:36:8b:8a:e4:bb: ef:a4:eb:ff:2b:21:d6:8b:2c:b2:51:f2:2b:86:cf: b1:75:f3:e6:45:d8:1d:47:6d:aa:91:7b:1b:2f:f7: bb:25:bd:46:66:a9:56:14:32:56:db:85:61:0f:54: c0:a3:29:1a:c1:67:5e:33:b3:28:32:1c:47:8c:af: 20:b3:4e:af:9e:7c:41:04:10:84:47:c0:02:4f:60: 06:05:1d:d5:46:59:ba:9e:e7:a3:a8:f0:79:89:61: 1e:01:7c:5e:a6:95:f5:9f:8c:7c:dc:04:c2:11:74: 85:d7:86:e1:d7:41:7d:88:b1:9f:1a:89:cb:98:9b: 95:29:c7:60:9c:91:30:f8:f1:07:45:5e:c4:c2:e2: 05:6a:c8:2e:ec:4d:6a:07:e2:55:15:47:5f:f7:7e: 8f:0a:c7:ef:63:ad:96:a2:f2:fa:84:08:a8:c2:01: f0:28:2b:90:1f:a0:c8:47:8f:dc:2a:0b:8f:8c:87: 76:19:c8:b8:af:b3:c3:2c:d1:af:7e:41:69:e8:7b: 22:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:41:E2:74:84:E1:91:1B:C8:B2:F8:21:2C:1B:68:78:3C:89:60:1F X509v3 Authority Key Identifier: keyid:97:DA:41:9F:3B:AB:3F:65:7A:A5:A5:C0:4E:05:7C:4A:D9:61:BC:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9pBnzurP2V6paXATgV8StlhvFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911251C/F8F7E2506BE011ED99196F62C4F9AE02/l9pBnzurP2V6paXATgV8StlhvFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:38:19:bd:de:82:69:85:f7:c8:40:8c:62:6d:43:08:d8:a0: 05:0a:f3:d9:37:5c:b7:49:86:85:16:a0:6d:34:2a:b9:d8:fa: a8:7e:35:92:b4:2c:39:71:3b:5d:60:37:a2:4b:4d:1c:f9:64: b1:1f:4a:d8:2b:fc:d3:e8:39:cf:14:90:82:59:49:b9:f0:d9: 59:17:45:68:ca:2a:89:3d:76:ed:8b:83:25:75:4a:88:1a:2a: 98:a0:5e:0f:2a:4f:c3:4c:52:62:32:4f:c9:53:a8:d3:b5:cd: 0a:ae:43:78:19:df:e7:ed:d3:26:2c:81:86:e6:f8:3f:e4:ea: 20:4c:53:9a:da:e0:70:2d:e8:76:53:0b:b4:b9:44:86:4d:8a: 22:cf:12:41:8f:4b:24:c7:89:09:75:ca:6d:07:54:61:6e:53: 6b:60:6f:c6:c6:06:82:73:88:77:8e:fa:eb:a3:74:7b:5c:ee: 49:05:28:a7:9b:35:5a:31:08:b7:bc:b3:ff:55:70:75:57:89: 83:5b:c7:77:cc:e9:73:38:d7:47:9a:d5:b5:77:96:4f:4b:f4: 83:40:49:c7:22:bc:c1:03:7c:13:46:db:5a:ee:85:6e:0b:37: f8:8b:e8:f8:69:3b:8c:82:49:a7:15:3a:0b:95:13:5d:4a:43: 4a:91:58:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI1MUMxMTAvBgNVBAUTKDk3REE0MTlGM0JBQjNGNjU3QUE1QTVDMDRFMDU3QzRB RDk2MUJDNUIwHhcNMjUwNzE5MDI0MjAwWhcNMjUwNzI2MDI0MjAwWjAYMRYwFAYD VQQDEw02ODdiMDVmOC03ZDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GYDaq1kLFunqiSywqIol26k2XKAp2Xt8j5SIz+21ot7XmMUPQXM15+a6A3a yJis5dB33zftNouK5LvvpOv/KyHWiyyyUfIrhs+xdfPmRdgdR22qkXsbL/e7Jb1G ZqlWFDJW24VhD1TAoykawWdeM7MoMhxHjK8gs06vnnxBBBCER8ACT2AGBR3VRlm6 nuejqPB5iWEeAXxeppX1n4x83ATCEXSF14bh10F9iLGfGonLmJuVKcdgnJEw+PEH RV7EwuIFasgu7E1qB+JVFUdf936PCsfvY62WovL6hAiowgHwKCuQH6DIR4/cKguP jId2Gci4r7PDLNGvfkFp6HsiVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJB4nSE 4ZEbyLL4ISwbaHg8iWAfMB8GA1UdIwQYMBaAFJfaQZ87qz9leqWlwE4FfErZYbxb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjUxQy9GOEY3RTI1MDZC RTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAyVjZwYVhBVGdWOFN0bGh2 RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5cEJuenVyUDJWNnBhWEFUZ1Y4U3RsaHZGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjUxQy9GOEY3RTI1MDZCRTAxMUVEOTkxOTZGNjJDNEY5QUUwMi9sOXBCbnp1clAy VjZwYVhBVGdWOFN0bGh2RnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuOBm93oJphffIQIxibUMI2KAFCvPZN1y3SYaFFqBtNCq52PqofjWS tCw5cTtdYDeiS00c+WSxH0rYK/zT6DnPFJCCWUm58NlZF0VoyiqJPXbti4MldUqI GiqYoF4PKk/DTFJiMk/JU6jTtc0KrkN4Gd/n7dMmLIGG5vg/5OogTFOa2uBwLeh2 Uwu0uUSGTYoizxJBj0skx4kJdcptB1RhblNrYG/GxgaCc4h3jvrro3R7XO5JBSin mzVaMQi3vLP/VXB1V4mDW8d3zOlzONdHmtW1d5ZPS/SDQEnHIrzBA3wTRtta7oVu Czf4i+j4aTuMgkmnFToLlRNdSkNKkViT -----END CERTIFICATE-----Generated at Sun Jul 20 06:27:23 2025 by rpki-client