$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: fRKBsRrNK4tfOfzWIN8L0zMXjj6XzexGGIeovkIXnPo= Subject key identifier: 6B:1B:E7:E3:42:C6:C9:81:C6:8F:00:63:69:A2:00:36:97:B9:C6:BB Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 48 Signing time: Mon 21 Jul 2025 07:44:19 +0000 Manifest this update: Mon 21 Jul 2025 07:44:19 +0000 Manifest next update: Mon 28 Jul 2025 07:44:19 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: roIrSQroVFVIkkGyOeyzCkYO3xF+299ACII5nVYsoys=) 2: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) 3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=) 4: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Jul 21 07:44:19 2025 GMT Not After : Jul 28 07:44:19 2025 GMT Subject: CN=687defd3-d4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:eb:85:9e:6e:dd:e5:14:8e:8f:88:64:6c: 29:69:57:03:8e:2e:70:eb:7b:f4:49:ca:0f:ce:33: 0c:b8:12:18:39:9b:57:06:90:0b:41:40:39:fa:05: bb:d7:70:37:7b:b0:7a:09:b6:f6:e3:7d:c4:6c:66: ea:cc:48:35:e5:e0:c7:6a:aa:c8:02:bf:82:4d:9d: 4b:8e:48:81:f7:bc:8f:bc:b6:ae:26:04:c9:64:d7: ea:e4:cf:1e:4f:02:a2:54:74:94:fe:f4:8e:8a:13: 74:99:6c:1e:11:06:94:56:62:85:12:78:a1:3b:e6: 90:46:16:6b:79:1a:71:4a:2a:60:9b:58:dc:be:12: dc:f0:42:7c:c7:11:d7:2d:45:7f:bb:4d:a1:08:00: b3:eb:2e:33:8a:78:35:a0:49:13:c2:e9:16:7f:99: d0:ab:23:20:6f:ea:b9:da:99:1b:2c:c4:15:8f:d4: 69:88:aa:de:0a:fd:b3:d2:dd:7c:55:ca:a1:36:1c: e3:c5:e7:1d:fd:54:e1:ab:46:7b:01:b3:10:3e:09: 82:29:97:1b:98:f4:01:da:54:3e:24:d6:a5:d6:a2: be:54:67:88:68:c9:ac:90:9f:c9:52:18:23:d9:46: 98:11:94:6d:57:a7:5c:83:ee:bb:03:7e:70:c6:37: 31:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1B:E7:E3:42:C6:C9:81:C6:8F:00:63:69:A2:00:36:97:B9:C6:BB X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:02:cb:0d:69:ea:4d:2b:c0:55:99:4c:2a:38:d7:5e:ba:60: 98:94:79:f9:08:e5:f1:a0:f5:2d:b1:db:b2:8f:e7:e6:30:cc: 92:c9:7b:97:e9:26:b9:77:f5:76:1b:fd:5c:85:1c:35:b8:42: 63:cc:f2:e4:38:8a:ae:2c:f2:6a:d0:b6:0c:78:a2:ec:8f:d0: d8:17:87:34:c1:6a:14:2e:57:f8:92:6b:4b:00:17:f7:6c:e4: 2b:7f:e1:78:19:78:2f:11:1a:96:1f:03:64:a6:f7:a8:e3:df: 88:ec:05:7d:7e:78:3b:2e:20:16:84:9c:02:97:ea:e5:4c:7a: ea:7d:85:78:3a:bd:69:42:a5:69:7d:6e:a6:b6:29:07:1f:1b: e3:59:6b:36:84:a7:d0:e6:b8:6a:ef:fd:1b:7d:ae:96:3a:ef: 1a:7e:63:11:79:b3:2a:ac:7e:5f:57:a7:8e:a0:03:02:84:50: 59:9e:aa:07:55:3d:58:47:71:e0:6f:ef:80:83:76:11:f6:66: d4:f2:de:a7:b4:95:c1:54:fb:f7:9b:10:12:8f:14:9d:b7:34: dd:58:37:c2:f0:4d:65:9c:71:15:36:fd:0c:11:e5:79:85:5a: 32:9a:d4:97:6a:32:1c:07:0c:0b:76:05:d8:ba:16:e3:63:21: 3d:17:ae:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoM0QxRkNCNzI1NUM1MjUwM0UxMEFFNTg0QjExODlBMTVD RjU2MDc0RTAeFw0yNTA3MjEwNzQ0MTlaFw0yNTA3MjgwNzQ0MTlaMBgxFjAUBgNV BAMTDTY4N2RlZmQzLWQ0YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuo+uFnm7d5RSOj4hkbClpVwOOLnDre/RJyg/OMwy4Ehg5m1cGkAtBQDn6BbvX cDd7sHoJtvbjfcRsZurMSDXl4MdqqsgCv4JNnUuOSIH3vI+8tq4mBMlk1+rkzx5P AqJUdJT+9I6KE3SZbB4RBpRWYoUSeKE75pBGFmt5GnFKKmCbWNy+EtzwQnzHEdct RX+7TaEIALPrLjOKeDWgSRPC6RZ/mdCrIyBv6rnamRssxBWP1GmIqt4K/bPS3XxV yqE2HOPF5x39VOGrRnsBsxA+CYIplxuY9AHaVD4k1qXWor5UZ4hoyayQn8lSGCPZ RpgRlG1Xp1yD7rsDfnDGNzHDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaxvn40LG yYHGjwBjaaIANpe5xrswHwYDVR0jBBgwFoAUPR/LclXFJQPhCuWEsRiaFc9WB04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0M0NTYxMDJFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0Iw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJfTGNsWEZKUVBoQ3VXRXNSaWFGYzlXQjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0M0NTYxMDJFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQ aEN1V0VzUmlhRmM5V0IwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABYCyw1p6k0rwFWZTCo41166YJiUefkI5fGg9S2x27KP5+YwzJLJe5fp Jrl39XYb/VyFHDW4QmPM8uQ4iq4s8mrQtgx4ouyP0NgXhzTBahQuV/iSa0sAF/ds 5Ct/4XgZeC8RGpYfA2Sm96jj34jsBX1+eDsuIBaEnAKX6uVMeup9hXg6vWlCpWl9 bqa2KQcfG+NZazaEp9DmuGrv/Rt9rpY67xp+YxF5syqsfl9Xp46gAwKEUFmeqgdV PVhHceBv74CDdhH2ZtTy3qe0lcFU+/ebEBKPFJ23NN1YN8LwTWWccRU2/QwR5XmF WjKa1JdqMhwHDAt2Bdi6FuNjIT0XrtE= -----END CERTIFICATE-----Generated at Wed Jul 23 02:09:25 2025 by rpki-client