$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json) Hash identifier: +RYzbcuoMkDFsfieMJZ67L0KSdSvc0Dlns7HKj3Av+A= Subject key identifier: F4:41:AA:4E:B6:9A:0E:25:02:EF:2C:5D:86:77:7C:8E:7C:0B:BE:8B Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 05BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft Manifest number: 05A8 Signing time: Fri 18 Jul 2025 23:34:51 +0000 Manifest this update: Fri 18 Jul 2025 23:34:50 +0000 Manifest next update: Fri 25 Jul 2025 23:34:50 +0000 Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: oDCDQx1IK92uHnwdKdtXRu2pJqP+wKlHWV5GsTuFBlI=) 2: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: uDhOs7m4hROOvuYbsNmfelIHLedEW+qbRLJoRWnov7k=) 3: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: 2aWXQNNMXtNMfUOin6lgFHg66dnKR9UhJDXK2a/H1WM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1471 (0x5bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: Jul 18 23:34:50 2025 GMT Not After : Jul 25 23:34:50 2025 GMT Subject: CN=687ada1a-4ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:1c:5b:6f:5a:99:ed:e7:71:60:7c:16:43: 22:31:80:bc:c1:e1:1b:53:89:af:32:1e:f0:00:7a: 38:3b:71:b4:17:c5:b0:56:d4:43:3a:87:a2:12:4b: 19:e9:b4:4b:65:00:da:27:4d:e8:48:26:e9:a1:db: b8:21:d6:a1:1a:9f:dd:cc:22:97:79:49:13:4f:7c: dd:af:90:fe:1c:b4:f2:c2:e8:2d:79:c5:33:fe:01: 42:de:08:70:bd:68:d3:71:44:df:5a:1e:22:db:1c: b1:7b:5a:f3:75:dc:de:b9:94:48:35:70:34:78:15: 3b:2b:5d:c8:92:6e:ab:d7:9a:78:be:50:b0:a4:7a: ee:f7:97:ae:61:15:83:c0:a7:16:d6:2b:c5:e9:89: 75:41:99:c7:74:6d:0a:87:1d:6b:07:6f:f0:92:d9: db:9b:30:03:29:f6:33:2e:5e:c7:62:d0:86:58:ba: 56:50:3c:73:7e:2c:eb:e6:59:72:b8:0c:6c:6c:ba: 78:ea:cb:68:28:93:86:0e:ae:61:0e:8e:7a:d9:6e: 52:aa:9f:e7:cb:d3:b1:40:67:f4:1c:14:30:04:51: e9:2d:96:e8:ff:0c:32:13:8f:e7:77:e3:5d:af:4d: 91:28:f8:1c:d9:96:f5:9d:01:62:73:7c:da:f9:68: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:41:AA:4E:B6:9A:0E:25:02:EF:2C:5D:86:77:7C:8E:7C:0B:BE:8B X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:45:ae:fa:91:34:9c:58:d6:66:67:d0:6e:19:e6:95:c0:c9: bb:25:5c:3c:7e:4c:47:63:51:0c:85:cf:4a:57:37:be:5e:a4: 58:a3:ba:22:eb:f3:b3:24:a9:69:8b:6d:46:1b:ed:5a:d0:97: fc:ea:55:a5:1c:f2:68:f4:5b:c4:5d:28:27:32:0f:c4:f2:41: cd:84:fb:7a:34:da:b1:23:0f:4b:2c:b6:66:7b:51:d2:b6:ea: fd:0a:64:1e:30:10:86:fe:3a:0e:3b:6c:b3:d2:42:c5:2b:0e: ed:9c:a9:c9:f3:cb:b8:2e:6a:10:e2:1e:f9:ab:bb:c8:22:67: 67:24:9f:b0:50:e7:9c:21:b4:e2:80:79:5d:84:94:4e:6a:7e: f2:32:2d:ec:d3:c3:4a:93:d6:67:e4:19:70:62:ed:da:ad:b3: 5c:66:af:d5:04:da:76:bc:ea:3b:b0:c6:e3:5f:ca:14:f1:d6: a7:40:84:68:16:32:d2:cd:33:ad:b5:97:0c:60:15:ae:46:b4: 25:71:c0:f4:b1:aa:a9:61:e7:80:9f:6c:93:76:0a:17:3f:e0: b6:1a:37:fa:38:1b:ba:22:b7:37:07:89:f0:a6:cc:e2:f2:4a: e4:a9:89:d2:3d:2a:d2:b2:c7:15:38:c2:64:8c:14:1c:ac:05: c8:0d:f4:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjUwNzE4MjMzNDUwWhcNMjUwNzI1MjMzNDUwWjAYMRYwFAYD VQQDEw02ODdhZGExYS00ZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDkcW29ame3ncWB8FkMiMYC8weEbU4mvMh7wAHo4O3G0F8WwVtRDOoeiEksZ 6bRLZQDaJ03oSCbpodu4IdahGp/dzCKXeUkTT3zdr5D+HLTywugtecUz/gFC3ghw vWjTcUTfWh4i2xyxe1rzddzeuZRINXA0eBU7K13Ikm6r15p4vlCwpHru95euYRWD wKcW1ivF6Yl1QZnHdG0Khx1rB2/wktnbmzADKfYzLl7HYtCGWLpWUDxzfizr5lly uAxsbLp46stoKJOGDq5hDo562W5Sqp/ny9OxQGf0HBQwBFHpLZbo/wwyE4/nd+Nd r02RKPgc2Zb1nQFic3za+WhSywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRBqk62 mg4lAu8sXYZ3fI58C76LMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaRa76kTScWNZmZ9BuGeaVwMm7JVw8fkxHY1EMhc9KVze+XqRYo7oi 6/OzJKlpi21GG+1a0Jf86lWlHPJo9FvEXSgnMg/E8kHNhPt6NNqxIw9LLLZme1HS tur9CmQeMBCG/joOO2yz0kLFKw7tnKnJ88u4LmoQ4h75q7vIImdnJJ+wUOecIbTi gHldhJROan7yMi3s08NKk9Zn5BlwYu3arbNcZq/VBNp2vOo7sMbjX8oU8danQIRo FjLSzTOttZcMYBWuRrQlccD0saqpYeeAn2yTdgoXP+C2Gjf6OBu6Irc3B4nwpszi 8krkqYnSPSrSsscVOMJkjBQcrAXIDfSH -----END CERTIFICATE-----Generated at Sun Jul 20 14:29:07 2025 by rpki-client