$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json) Hash identifier: NtgyKhKCsOrYIjGOXGwA9Wb7SiIeg03mSzQO7F5Z3/Q= Subject key identifier: 8E:AC:47:F1:EA:46:D3:44:0D:33:30:0B:BC:73:55:67:E3:2C:58:DC Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Certificate serial: 055D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft Manifest number: 0558 Signing time: Sun 20 Jul 2025 23:34:42 +0000 Manifest this update: Sun 20 Jul 2025 23:34:41 +0000 Manifest next update: Sun 27 Jul 2025 23:34:41 +0000 Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: WtkqZXqjWglWcW2kmC6Xk6yT3r8VVGe4fEExcmeI5EM=) 2: AE1E5A1AF61C11EBAB08AF17C4F9AE02.roa (hash: Fhy8WYOVgOC1fXJBQao8UVDrtpv1Mv9qnIWLOPo1Mdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Validity Not Before: Jul 20 23:34:41 2025 GMT Not After : Jul 27 23:34:41 2025 GMT Subject: CN=687d7d11-927e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ae:89:67:d4:df:40:42:00:82:a7:08:ad:58: 47:61:42:63:86:11:8e:e8:c8:f5:c9:6f:a4:96:d5: d9:3a:1d:c9:ac:26:99:44:aa:c4:de:20:d9:b0:81: 42:59:22:dc:56:08:6f:64:b6:6d:b8:3e:5c:15:db: 5f:f8:ca:4b:0c:c7:c2:d0:6f:de:b1:a6:44:a1:ca: ff:b4:b6:58:12:7d:1d:70:67:0d:49:c5:79:69:86: 77:d0:86:ae:77:a2:56:d1:7e:18:d5:5b:40:e7:72: d3:6e:f0:1c:ae:81:64:fb:ec:f8:fe:02:d8:34:79: 0f:3e:dc:6e:6f:ed:f5:7d:03:7c:76:d0:ef:5e:df: 41:91:10:b7:18:05:82:5b:6b:b9:6a:64:32:ef:b2: e8:3b:22:34:4a:ed:3c:3c:6c:d8:cb:e7:7c:6d:3e: 0d:0f:54:64:b0:2e:dc:82:11:94:47:28:8e:a1:3e: 82:a9:87:89:82:fa:cf:53:ae:48:13:68:7c:e1:54: 27:17:ed:e4:a8:06:22:78:71:9c:b9:17:b5:4d:e0: ff:eb:1d:2f:82:ae:a5:06:21:05:a7:0b:e1:6a:5b: 6f:aa:20:47:f0:44:d8:00:1f:11:cb:3c:d8:20:40: 57:a0:ad:53:94:d9:fb:25:90:12:d7:13:48:6a:8e: 0e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AC:47:F1:EA:46:D3:44:0D:33:30:0B:BC:73:55:67:E3:2C:58:DC X509v3 Authority Key Identifier: keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:45:b8:94:5d:f0:d7:47:fe:b8:bf:ee:a6:89:5d:ef:b1:cc: e4:09:91:d0:f9:1f:f2:07:56:56:05:5b:d3:34:4d:2b:dc:16: 8a:01:a3:3f:b4:65:fb:4c:66:0a:83:a9:1f:0b:da:e3:98:f9: 25:9f:eb:9b:05:75:aa:59:5f:7f:4b:7a:0a:e0:aa:31:ec:cf: 54:d0:ef:e7:d3:14:ba:06:ae:61:b1:76:4d:21:f1:1f:c4:68: 19:9d:d1:d0:87:d4:6f:78:4c:e7:8e:23:49:8b:2a:1f:75:98: 4c:6e:98:c4:de:ba:b7:1c:4f:b8:fa:d0:f7:a1:ae:7a:9c:4c: fe:72:c8:6e:fe:b1:e9:4d:9c:20:de:15:36:8c:5d:14:5a:11: 93:fc:d6:56:8b:ff:95:61:cf:d9:4b:ee:fa:8e:23:15:5d:19: ab:40:75:fb:57:f2:9f:9d:f2:ff:39:0c:cd:34:7c:54:ab:64: 88:6b:60:d2:40:88:d5:77:ee:b9:4f:97:cc:d3:0b:63:ca:17: ab:4d:11:34:f4:be:15:0a:d8:01:59:47:f0:db:b4:84:e4:4b: 2d:9e:7f:26:ec:d0:17:8b:35:d2:04:82:1d:b9:62:68:3b:73: 5e:cf:65:8a:b3:b0:db:dc:6f:ad:0b:33:0d:93:8d:4b:18:c5: 8d:6f:68:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3 N0Q4ODhFNzkwHhcNMjUwNzIwMjMzNDQxWhcNMjUwNzI3MjMzNDQxWjAYMRYwFAYD VQQDEw02ODdkN2QxMS05MjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5K6JZ9TfQEIAgqcIrVhHYUJjhhGO6Mj1yW+kltXZOh3JrCaZRKrE3iDZsIFC WSLcVghvZLZtuD5cFdtf+MpLDMfC0G/esaZEocr/tLZYEn0dcGcNScV5aYZ30Iau d6JW0X4Y1VtA53LTbvAcroFk++z4/gLYNHkPPtxub+31fQN8dtDvXt9BkRC3GAWC W2u5amQy77LoOyI0Su08PGzYy+d8bT4ND1RksC7cghGURyiOoT6CqYeJgvrPU65I E2h84VQnF+3kqAYieHGcuRe1TeD/6x0vgq6lBiEFpwvhaltvqiBH8ETYAB8RyzzY IEBXoK1TlNn7JZAS1xNIao4OYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6sR/Hq RtNEDTMwC7xzVWfjLFjcMB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2 MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTZBQy8zOEQyMzcyMkY2MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUx VGdFM09zUHQxTGQzMklqbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpRbiUXfDXR/64v+6miV3vsczkCZHQ+R/yB1ZWBVvTNE0r3BaKAaM/ tGX7TGYKg6kfC9rjmPkln+ubBXWqWV9/S3oK4Kox7M9U0O/n0xS6Bq5hsXZNIfEf xGgZndHQh9RveEznjiNJiyofdZhMbpjE3rq3HE+4+tD3oa56nEz+cshu/rHpTZwg 3hU2jF0UWhGT/NZWi/+VYc/ZS+76jiMVXRmrQHX7V/KfnfL/OQzNNHxUq2SIa2DS QIjVd+65T5fM0wtjyherTRE09L4VCtgBWUfw27SE5Estnn8m7NAXizXSBIIduWJo O3Nez2WKs7Db3G+tCzMNk41LGMWNb2j0 -----END CERTIFICATE-----Generated at Mon Jul 21 08:07:59 2025 by rpki-client