$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: 4N+nBN0LfXkEtzoNlP621BZyl/GGqjL1RHVa5ROayvw= Subject key identifier: 96:D9:4A:F0:59:D1:04:E4:58:68:3E:4D:BE:D4:D4:4E:4F:34:5C:DB Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 49 Signing time: Wed 23 Jul 2025 07:53:15 +0000 Manifest this update: Wed 23 Jul 2025 07:53:14 +0000 Manifest next update: Wed 30 Jul 2025 07:53:14 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: dbOn4z8pXONW7xrf0iE7pL+FDx3ABwTjVrjf1+HUIwE=) 2: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) 3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=) 4: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 07:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Jul 23 07:53:14 2025 GMT Not After : Jul 30 07:53:14 2025 GMT Subject: CN=688094eb-9142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:90:47:be:ca:8e:1f:24:4e:aa:f9:83:ff:a7: ca:40:f7:6f:03:52:a2:99:47:10:91:fd:a2:ca:26: e0:6d:09:c0:6a:5e:80:b3:fb:d6:e2:24:65:a4:f4: 5b:ff:90:f4:4a:b3:2b:b3:f1:8d:14:12:7c:ea:cd: 7f:53:c4:29:c6:fc:3e:d0:4a:4f:a0:93:7c:91:6f: 5e:90:fb:31:fb:1d:cf:d6:a6:4c:c7:7a:cb:d6:11: 08:e0:d5:1c:38:ff:c4:aa:0f:79:72:40:30:3e:6f: b9:4e:91:3d:fc:7d:c0:93:bd:a6:0c:55:06:bf:47: 2b:f7:1c:65:72:22:e9:2f:89:f1:a2:24:48:c8:3a: a6:f0:dc:8a:95:53:12:29:cd:18:04:9f:1d:51:06: eb:50:c5:04:f7:6f:19:8a:51:dd:15:a1:fc:b2:ed: 86:37:dd:6f:42:03:d2:54:76:d4:58:5b:d8:63:38: 59:07:7e:3c:77:b3:10:09:9b:82:5a:8c:ae:ce:23: d1:76:60:d6:ab:38:85:50:8b:ef:32:2d:c4:e7:37: d6:20:30:aa:6b:57:ef:83:c5:d9:8f:80:2b:3a:bd: 1b:84:c0:e0:1b:f8:33:a2:2a:1c:fe:79:ee:06:fa: 21:e2:70:5b:85:39:d2:e2:b7:09:f6:88:2f:e6:6d: 56:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D9:4A:F0:59:D1:04:E4:58:68:3E:4D:BE:D4:D4:4E:4F:34:5C:DB X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:33:e1:da:d4:ec:a4:6b:7b:a0:95:53:d6:1c:8d:de:9b:28: ae:a3:9d:29:b0:0b:b0:1a:ce:3e:bd:08:6a:0d:95:8c:25:a8: 55:02:f7:d0:1e:f1:6e:72:5c:30:e3:95:42:e6:48:e7:09:16: d6:41:3d:3f:32:f5:03:6c:28:76:c9:39:5c:36:bc:32:56:a0: f6:ba:2d:61:28:bd:dd:a4:77:cc:e4:82:a3:85:01:ba:e6:66: 7a:d4:b0:97:5d:77:f4:dd:a2:36:39:de:9e:68:54:00:ac:06: 17:bd:e5:5f:9e:52:dd:68:94:21:d6:82:2b:be:0f:24:ef:a9: 21:d3:36:d3:45:d6:c0:2c:f5:dd:bc:74:36:9a:d6:60:1e:08: bc:a3:ec:1b:7a:50:3e:eb:06:42:f7:28:75:30:80:c6:b5:db: d4:80:42:08:6f:3a:49:55:13:a3:43:a3:a0:63:7b:2c:5f:02: 28:ad:50:de:91:77:d8:27:f9:38:52:28:9e:43:cd:b6:eb:91: 31:28:0d:a2:5f:80:a7:d9:34:5e:61:c0:75:90:04:eb:4f:74: f0:e6:41:4f:0f:8b:a4:5a:99:b6:bf:a3:49:6e:75:9f:9d:cb: 48:b4:88:4b:3b:d5:6d:e5:43:87:67:16:2f:94:25:b0:db:67: d8:eb:87:57 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoM0QxRkNCNzI1NUM1MjUwM0UxMEFFNTg0QjExODlBMTVD RjU2MDc0RTAeFw0yNTA3MjMwNzUzMTRaFw0yNTA3MzAwNzUzMTRaMBgxFjAUBgNV BAMTDTY4ODA5NGViLTkxNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbkEe+yo4fJE6q+YP/p8pA928DUqKZRxCR/aLKJuBtCcBqXoCz+9biJGWk9Fv/ kPRKsyuz8Y0UEnzqzX9TxCnG/D7QSk+gk3yRb16Q+zH7Hc/WpkzHesvWEQjg1Rw4 /8SqD3lyQDA+b7lOkT38fcCTvaYMVQa/Ryv3HGVyIukvifGiJEjIOqbw3IqVUxIp zRgEnx1RButQxQT3bxmKUd0Vofyy7YY33W9CA9JUdtRYW9hjOFkHfjx3sxAJm4Ja jK7OI9F2YNarOIVQi+8yLcTnN9YgMKprV++DxdmPgCs6vRuEwOAb+DOiKhz+ee4G +iHicFuFOdLitwn2iC/mbVazAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUltlK8FnR BORYaD5NvtTUTk80XNswHwYDVR0jBBgwFoAUPR/LclXFJQPhCuWEsRiaFc9WB04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0M0NTYxMDJFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0Iw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJfTGNsWEZKUVBoQ3VXRXNSaWFGYzlXQjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0M0NTYxMDJFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQ aEN1V0VzUmlhRmM5V0IwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAgz4drU7KRre6CVU9Ycjd6bKK6jnSmwC7Aazj69CGoNlYwlqFUC99Ae 8W5yXDDjlULmSOcJFtZBPT8y9QNsKHbJOVw2vDJWoPa6LWEovd2kd8zkgqOFAbrm ZnrUsJddd/TdojY53p5oVACsBhe95V+eUt1olCHWgiu+DyTvqSHTNtNF1sAs9d28 dDaa1mAeCLyj7Bt6UD7rBkL3KHUwgMa129SAQghvOklVE6NDo6BjeyxfAiitUN6R d9gn+ThSKJ5DzbbrkTEoDaJfgKfZNF5hwHWQBOtPdPDmQU8Pi6Ramba/o0ludZ+d y0i0iEs71W3lQ4dnFi+UJbDbZ9jrh1c= -----END CERTIFICATE-----Generated at Thu Jul 24 12:08:47 2025 by rpki-client