$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json) Hash identifier: AvtHB3jVMq49/B2aGjBcrQnf78fym7TkEEQ6GTZGbvY= Subject key identifier: 05:8B:17:15:BC:F5:12:71:90:1D:1D:DB:6E:48:8B:D6:5B:F0:59:42 Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft Manifest number: 49 Signing time: Sun 27 Jul 2025 07:49:45 +0000 Manifest this update: Sun 27 Jul 2025 07:49:45 +0000 Manifest next update: Sun 03 Aug 2025 07:49:45 +0000 Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: hiCZZ4yKbPdbDTRfGwkR5gz+yHdwmyEHRhGHQ2hvLLg=) 2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: Hq759PuHcjxrqDO6XDqBKqYrfjX30gMufng1UMG6yPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Validity Not Before: Jul 27 07:49:45 2025 GMT Not After : Aug 3 07:49:45 2025 GMT Subject: CN=6885da19-66ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:cd:f3:28:f3:80:78:df:dd:36:92:49:68:5b: 13:5f:23:f1:68:eb:d1:06:e7:a2:d7:e4:1e:ef:13: be:53:6c:8c:fb:9f:88:d4:60:27:65:d6:72:03:a9: ef:17:6a:5c:36:8d:65:12:1c:83:b3:77:b4:19:97: 2a:a1:60:13:bc:c7:a9:86:0a:fa:3d:9e:06:b0:d7: 9b:21:a8:ac:36:99:46:72:14:ff:4e:ce:97:b8:40: b1:ad:c4:91:87:f5:1d:bf:0e:4a:ba:de:01:cf:ae: 86:33:19:ab:62:5d:49:78:90:18:2d:fc:8f:d1:07: b0:06:06:28:1a:be:eb:58:20:24:af:c7:c4:73:5e: f2:eb:8b:67:26:63:de:32:48:a2:b9:fd:33:41:71: 5d:9c:26:b4:fa:a2:41:ae:0c:73:a8:66:27:7f:a0: 06:1d:5b:87:0d:74:5a:4f:3f:e8:4c:15:e3:6c:11: 87:08:5f:3e:b9:ae:09:00:6f:78:d2:7b:ae:24:02: 60:81:9b:6f:f9:6b:d5:96:08:fd:df:60:db:33:20: fd:1b:9b:56:c4:cc:ac:2c:9a:f9:3d:f9:87:4d:b6: ef:41:c6:21:96:50:65:5c:2e:23:be:e2:04:c9:62: 79:b1:cb:4c:58:f3:82:68:78:05:aa:95:a8:eb:83: bc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8B:17:15:BC:F5:12:71:90:1D:1D:DB:6E:48:8B:D6:5B:F0:59:42 X509v3 Authority Key Identifier: keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:1c:c6:cf:86:e1:d5:fd:c6:6c:92:dc:96:a4:02:42:6a:85: 2f:39:2f:a1:63:52:09:2c:10:31:3c:69:86:fa:79:84:46:72: a4:c8:93:7c:26:0a:e9:ea:17:75:1b:cb:ea:b4:dc:84:6f:a8: ee:eb:7e:c9:88:2b:38:04:a8:e8:1e:ea:b8:16:3f:11:ea:6f: ef:99:59:67:27:18:93:16:fc:05:0b:42:f3:53:8d:ec:0b:2f: b1:f7:fd:a6:ea:87:53:3c:e9:00:d7:9a:29:74:d3:28:59:7d: 21:21:80:b0:0a:0c:b6:84:53:58:42:44:23:21:72:44:d3:3e: 60:c7:09:75:5e:1e:bc:de:0d:70:c8:ea:27:f7:2c:ea:dc:95: 46:1b:55:55:05:58:b5:ff:67:27:c2:d8:2b:72:b8:e1:18:9e: a8:e2:83:7e:b5:c7:79:1d:1a:e1:ec:60:71:e9:c1:b9:7b:c1: 32:02:1b:ff:ca:2a:07:e9:be:2a:32:2e:a6:d5:eb:f5:cd:e6: fe:d0:1e:88:0d:18:b1:7a:74:71:d2:f2:ad:e4:c3:29:10:8e: 21:a6:36:00:f8:8e:44:c1:40:c0:aa:81:ef:8d:82:e1:16:dc: 21:14:28:69:ec:99:b7:ec:06:d0:e3:87:24:6f:7a:f8:ef:e2: 4a:9a:43:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDRDOTExMC8GA1UEBRMoOTU3NDUyOTNDODhBMjcyNkUxMEE1N0Q1OEY0MkNDMzE2 OUI3QzkyMjAeFw0yNTA3MjcwNzQ5NDVaFw0yNTA4MDMwNzQ5NDVaMBgxFjAUBgNV BAMTDTY4ODVkYTE5LTY2YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0zfMo84B43902kkloWxNfI/Fo69EG56LX5B7vE75TbIz7n4jUYCdl1nIDqe8X alw2jWUSHIOzd7QZlyqhYBO8x6mGCvo9ngaw15shqKw2mUZyFP9Ozpe4QLGtxJGH 9R2/Dkq63gHProYzGatiXUl4kBgt/I/RB7AGBigavutYICSvx8RzXvLri2cmY94y SKK5/TNBcV2cJrT6okGuDHOoZid/oAYdW4cNdFpPP+hMFeNsEYcIXz65rgkAb3jS e64kAmCBm2/5a9WWCP3fYNszIP0bm1bEzKwsmvk9+YdNtu9BxiGWUGVcLiO+4gTJ Ynmxy0xY84JoeAWqlajrg7zhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBYsXFbz1 EnGQHR3bbkiL1lvwWUIwHwYDVR0jBBgwFoAUlXRSk8iKJybhClfVj0LMMWm3ySIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0NEM5Lzg0MkY5ODk0MEVD OTExRjBBMjZGRjE0NEM0RjlBRTAyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lT SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFhSU2s4aUtKeWJoQ2xmVmowTE1NV20zeVNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 NEM5Lzg0MkY5ODk0MEVDOTExRjBBMjZGRjE0NEM0RjlBRTAyL2xYUlNrOGlLSnli aENsZlZqMExNTVdtM3lTSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHQcxs+G4dX9xmyS3JakAkJqhS85L6FjUgksEDE8aYb6eYRGcqTIk3wm CunqF3Uby+q03IRvqO7rfsmIKzgEqOge6rgWPxHqb++ZWWcnGJMW/AULQvNTjewL L7H3/abqh1M86QDXmil00yhZfSEhgLAKDLaEU1hCRCMhckTTPmDHCXVeHrzeDXDI 6if3LOrclUYbVVUFWLX/ZyfC2CtyuOEYnqjig361x3kdGuHsYHHpwbl7wTICG//K KgfpvioyLqbV6/XN5v7QHogNGLF6dHHS8q3kwykQjiGmNgD4jkTBQMCqge+NguEW 3CEUKGnsmbfsBtDjhyRvevjv4kqaQxQ= -----END CERTIFICATE-----Generated at Sun Jul 27 12:21:13 2025 by rpki-client