$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft File: L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json) Hash identifier: norL+nXnzs739DONhQ/ud2SNf6c0l2lm3XXnCVlIeUc= Subject key identifier: DF:A8:87:D5:6D:09:72:B8:76:3F:3E:59:C0:7E:42:A0:24:F5:69:37 Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 Certificate issuer: /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft Manifest number: 07BC Signing time: Fri 18 Jul 2025 21:27:42 +0000 Manifest this update: Fri 18 Jul 2025 21:27:41 +0000 Manifest next update: Fri 25 Jul 2025 21:27:41 +0000 Files and hashes: 1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: BDDru7XrwxvQp4CtSll+4AvJ4LxCP4T+0ZKaFTAyz1w=) 2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: nrFCEo7GcK2eALmFz5c2iHIjlVAiVLpJmfCmZn/cv3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Validity Not Before: Jul 18 21:27:41 2025 GMT Not After : Jul 25 21:27:41 2025 GMT Subject: CN=687abc4d-e1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:85:ce:e7:25:00:7a:94:9b:e4:8d:a9:29:7e: eb:7e:2c:11:83:aa:34:9d:93:4a:d8:c5:ec:fe:1b: 82:bb:2b:e8:e4:ef:b8:28:94:e3:dd:df:d1:01:29: 20:ee:30:8b:ab:f4:a6:c3:75:a7:c5:a5:f1:00:43: fd:c2:51:6c:b8:01:69:49:38:c2:27:e4:7d:85:02: 99:93:8c:3a:7f:d1:7c:ee:82:de:08:c3:6c:29:13: 6b:62:e8:50:90:d4:cd:fa:7a:b6:f1:b1:d0:df:e6: 68:c5:03:92:4c:4a:60:b4:65:28:85:9b:dd:29:a2: 27:67:f4:31:6a:6e:5f:c2:a1:df:3f:28:25:06:ee: dc:ae:0b:48:aa:c2:21:2d:42:5c:2e:44:cf:7e:a4: bf:6b:2f:48:1b:71:65:2c:a5:7c:69:4d:55:49:41: 2e:6d:26:27:3c:5a:f3:0f:2f:49:ff:7d:dc:c1:fd: ce:4c:b7:77:6d:85:93:f6:70:e5:cc:14:7a:dd:a8: 06:78:01:70:00:b1:78:ea:fb:48:79:57:28:48:9f: fc:f7:91:fb:86:c9:67:09:2d:91:a5:47:ff:61:2d: b0:33:86:69:73:0e:5e:48:77:b8:3a:ec:7e:a4:51: da:d7:d1:24:cc:7f:e6:25:62:83:55:ed:a1:34:a9: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A8:87:D5:6D:09:72:B8:76:3F:3E:59:C0:7E:42:A0:24:F5:69:37 X509v3 Authority Key Identifier: keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:18:d9:54:9e:19:80:5e:2c:44:c9:a8:2f:e4:32:86:5a:cb: 97:79:a0:33:4d:43:b2:a0:05:29:2e:93:87:f3:06:0f:56:38: 11:10:c6:fc:6a:33:10:a1:11:7c:65:65:1b:6f:b8:79:1f:da: 11:25:27:03:c5:77:a8:86:7d:72:2e:62:d0:6b:17:66:b2:6f: 4d:63:85:a8:f0:b6:4e:c4:35:6e:67:6e:81:5d:5f:63:9c:27: a8:01:2a:8a:4e:57:09:0f:2a:08:a8:2f:75:73:9f:50:10:11: 8e:0f:3c:1b:38:3b:3e:4f:47:60:6c:24:9b:1c:4b:c1:01:f6: b1:cb:d9:33:57:4a:05:55:3b:f4:6b:b4:60:f1:2e:2a:74:3a: a4:c3:15:38:48:a6:f6:e6:89:66:4d:28:d9:7f:ad:b5:eb:77: 61:59:99:8e:7b:ce:3d:0c:a6:69:21:1c:41:dd:ea:64:f5:d6: 88:28:c0:33:79:e8:78:3b:94:b4:f5:8e:98:28:e9:06:12:3a: 1d:bd:fb:6f:eb:43:e3:fd:34:98:9f:db:51:76:74:48:08:48: 0b:73:a8:bc:08:aa:5e:20:0e:e9:ce:9a:92:71:98:e1:80:64: e2:9c:30:f5:c4:a6:b4:d7:33:b9:be:a6:7c:27:87:de:e9:f5: c8:68:c1:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRDYxMTAvBgNVBAUTKDJGREY3QTZBRjkwNERGMkNENDdFNjVDQ0MwQzlDNUND QkYyMzk4RTUwHhcNMjUwNzE4MjEyNzQxWhcNMjUwNzI1MjEyNzQxWjAYMRYwFAYD VQQDEw02ODdhYmM0ZC1lMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04XO5yUAepSb5I2pKX7rfiwRg6o0nZNK2MXs/huCuyvo5O+4KJTj3d/RASkg 7jCLq/Smw3WnxaXxAEP9wlFsuAFpSTjCJ+R9hQKZk4w6f9F87oLeCMNsKRNrYuhQ kNTN+nq28bHQ3+ZoxQOSTEpgtGUohZvdKaInZ/Qxam5fwqHfPyglBu7crgtIqsIh LUJcLkTPfqS/ay9IG3FlLKV8aU1VSUEubSYnPFrzDy9J/33cwf3OTLd3bYWT9nDl zBR63agGeAFwALF46vtIeVcoSJ/895H7hslnCS2RpUf/YS2wM4Zpcw5eSHe4Oux+ pFHa19EkzH/mJWKDVe2hNKmtQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+oh9Vt CXK4dj8+WcB+QqAk9Wk3MB8GA1UdIwQYMBaAFC/femr5BN8s1H5lzMDJxcy/I5jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNENi8xMzlFMTI0NDA1 MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5elVmbVhNd01uRnpMOGpt T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5OTZhdmtFM3l6VWZtWE13TW5Gekw4am1PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNENi8xMzlFMTI0NDA1MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5 elVmbVhNd01uRnpMOGptT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEGNlUnhmAXixEyagv5DKGWsuXeaAzTUOyoAUpLpOH8wYPVjgREMb8 ajMQoRF8ZWUbb7h5H9oRJScDxXeohn1yLmLQaxdmsm9NY4Wo8LZOxDVuZ26BXV9j nCeoASqKTlcJDyoIqC91c59QEBGODzwbODs+T0dgbCSbHEvBAfaxy9kzV0oFVTv0 a7Rg8S4qdDqkwxU4SKb25olmTSjZf62163dhWZmOe849DKZpIRxB3epk9daIKMAz eeh4O5S09Y6YKOkGEjodvftv60Pj/TSYn9tRdnRICEgLc6i8CKpeIA7pzpqScZjh gGTinDD1xKa01zO5vqZ8J4fe6fXIaMFe -----END CERTIFICATE-----Generated at Sun Jul 20 04:16:28 2025 by rpki-client