$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json) Hash identifier: CRpkiKLrzqRWyRSpUlNvCgR835+HbMpGewCibUZre1w= Subject key identifier: 36:3F:A6:36:B5:E0:24:30:7A:83:ED:D8:BB:FD:5F:E8:C3:52:7C:0E Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Certificate serial: 34C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft Manifest number: 34AF Signing time: Fri 18 Jul 2025 15:22:29 +0000 Manifest this update: Fri 18 Jul 2025 15:22:29 +0000 Manifest next update: Fri 25 Jul 2025 15:22:29 +0000 Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: JA5+ZATelwIBkUT5NZNI/yKX1SLgZdLPPjUNcl/vCzU=) 2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: INyUubVzyzPFDA6zTyRhkIRyBY0HoCb9vhAv2oVdZVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13508 (0x34c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Validity Not Before: Jul 18 15:22:29 2025 GMT Not After : Jul 25 15:22:29 2025 GMT Subject: CN=687a66b5-d527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:ef:bb:44:43:6e:8b:2b:c8:51:a2:e8:86: ca:b4:12:02:1d:2b:99:bf:d8:cf:1b:d1:3b:da:4f: b5:e9:a9:b0:c9:86:0b:30:8d:4e:2f:76:d5:75:a7: cd:e0:42:62:88:7b:29:4d:ce:f1:92:39:bc:14:86: b1:6f:2b:89:2a:75:12:47:59:e2:29:9c:8c:b5:0b: b0:72:5b:b1:be:18:c5:ba:e3:1a:70:d0:2a:27:2f: 82:8f:e1:3c:67:8a:d2:e4:bc:e8:dc:74:83:ed:76: ff:97:c7:bd:59:5a:9c:a2:22:b7:0c:9c:aa:df:e9: 85:55:72:18:0b:1c:cc:3d:e3:bb:00:19:db:f1:c7: b0:a8:73:fd:01:e1:6a:9b:a5:9d:ce:f6:dd:77:c4: 9d:19:1f:b3:f4:ea:eb:df:3f:fd:ab:3b:2d:e1:56: eb:84:6f:bf:86:23:cd:46:0f:48:75:4d:62:9f:a8: 8c:10:9c:3e:da:2c:43:4a:fb:11:12:c6:d8:b6:bc: bf:fa:3f:6c:9b:b8:cd:7b:3a:a1:5a:25:c4:3a:c3: 41:86:a0:06:e4:dd:40:cd:d8:10:01:f5:9b:e1:0d: 06:d0:f4:0d:84:51:24:d5:57:84:b1:48:9a:99:5b: 0a:d8:d9:13:25:61:d0:0e:6f:99:1c:16:d3:ed:57: 20:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3F:A6:36:B5:E0:24:30:7A:83:ED:D8:BB:FD:5F:E8:C3:52:7C:0E X509v3 Authority Key Identifier: keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e7:af:81:dd:d2:2b:f6:cd:c9:c7:54:47:b7:c6:b7:ce:6f: c9:8a:cd:43:82:18:f1:88:dd:a2:ef:4d:20:17:8d:75:ec:f0: 3c:2b:1d:c3:1b:e6:7a:28:5e:d1:bb:ee:ff:c8:69:90:cf:c4: 74:0b:9b:f3:9b:94:b9:3c:ab:72:34:3b:8e:30:97:35:d0:e4: b8:9f:e4:d8:d9:89:0d:c7:08:7c:43:e4:c7:b1:ae:6b:8b:df: 86:6a:e3:07:c5:fb:51:b7:8c:31:ac:ef:85:fb:cd:ac:6c:9e: 10:65:8f:5e:2c:37:82:fd:8b:0b:c2:bf:87:1a:b0:e8:0b:6b: 78:84:7f:5a:f7:29:37:0d:a2:eb:28:d3:27:3e:b7:43:45:d9: 97:d9:f8:f6:75:5e:84:fa:0d:98:48:f0:43:8a:fb:07:09:65: 97:8e:f1:4b:52:c2:e5:88:7e:aa:b7:6d:fa:30:e7:9c:69:fc: b6:a2:98:10:f7:bf:c2:f2:c3:36:47:f5:e1:f1:dd:04:18:36: c6:b2:f6:5d:02:fb:73:94:21:1b:c6:a2:03:31:a9:3f:8b:56: 69:27:fe:65:33:ed:79:b4:bc:47:fe:23:c2:77:26:fe:8a:f9: 00:d1:1c:39:2c:a4:f9:83:80:92:78:ff:ba:4a:16:80:98:1a: ab:8d:41:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCMUQxMTAvBgNVBAUTKDk0MkYyNUQ3MzUwQjIwM0VBODlFRjJEMUNDMTUwQjA1 QjE3QjJCODcwHhcNMjUwNzE4MTUyMjI5WhcNMjUwNzI1MTUyMjI5WjAYMRYwFAYD VQQDEw02ODdhNjZiNS1kNTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVvvu0RDbosryFGi6IbKtBICHSuZv9jPG9E72k+16amwyYYLMI1OL3bVdafN 4EJiiHspTc7xkjm8FIaxbyuJKnUSR1niKZyMtQuwcluxvhjFuuMacNAqJy+Cj+E8 Z4rS5Lzo3HSD7Xb/l8e9WVqcoiK3DJyq3+mFVXIYCxzMPeO7ABnb8cewqHP9AeFq m6Wdzvbdd8SdGR+z9Orr3z/9qzst4VbrhG+/hiPNRg9IdU1in6iMEJw+2ixDSvsR EsbYtry/+j9sm7jNezqhWiXEOsNBhqAG5N1AzdgQAfWb4Q0G0PQNhFEk1VeEsUia mVsK2NkTJWHQDm+ZHBbT7VcgFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY/pja1 4CQweoPt2Lv9X+jDUnwOMB8GA1UdIwQYMBaAFJQvJdc1CyA+qJ7y0cwVCwWxeyuH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkIxRC9DNjg0Q0E5QzFE QUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElENm9udkxSekJVTEJiRjdL NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDOGwxelVMSUQ2b252TFJ6QlVMQmJGN0s0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkIxRC9DNjg0Q0E5QzFEQUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElE Nm9udkxSekJVTEJiRjdLNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr56+B3dIr9s3Jx1RHt8a3zm/Jis1DghjxiN2i700gF4117PA8Kx3D G+Z6KF7Ru+7/yGmQz8R0C5vzm5S5PKtyNDuOMJc10OS4n+TY2YkNxwh8Q+THsa5r i9+GauMHxftRt4wxrO+F+82sbJ4QZY9eLDeC/YsLwr+HGrDoC2t4hH9a9yk3DaLr KNMnPrdDRdmX2fj2dV6E+g2YSPBDivsHCWWXjvFLUsLliH6qt236MOecafy2opgQ 97/C8sM2R/Xh8d0EGDbGsvZdAvtzlCEbxqIDMak/i1ZpJ/5lM+15tLxH/iPCdyb+ ivkA0Rw5LKT5g4CSeP+6ShaAmBqrjUHf -----END CERTIFICATE-----Generated at Sun Jul 20 03:20:42 2025 by rpki-client