$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: CQBsk9aJUdmjzqPRS6QRA0WMlNRowZlFtSyTqQc5bpk= Subject key identifier: 9C:BA:E7:6D:7B:BE:2F:0A:22:B0:99:87:AE:E2:39:C0:DF:1B:A4:BE Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 0157 Signing time: Mon 21 Jul 2025 04:11:26 +0000 Manifest this update: Mon 21 Jul 2025 04:11:25 +0000 Manifest next update: Mon 28 Jul 2025 04:11:25 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: IweNuXswjozHuSWENanKnWxA26o0oY0vs6sj2SFZGqY=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: Jul 21 04:11:25 2025 GMT Not After : Jul 28 04:11:25 2025 GMT Subject: CN=687dbdee-6a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:11:e2:2f:65:61:51:c7:0f:a1:fe:1c:69:cd: 88:fe:91:63:1c:e1:4e:bd:f4:01:de:58:8b:26:02: 5c:16:59:23:ad:10:b6:ed:a5:12:01:2b:20:f5:fc: 20:1e:50:0d:8d:43:da:45:15:76:2c:26:92:5e:e5: 2d:b4:2f:8d:bd:4f:57:2d:d0:76:00:ef:cd:d1:e9: 19:4c:c3:b8:18:ba:6b:e7:9f:f4:1f:2a:4e:52:3b: aa:88:68:4d:48:bb:6c:3f:91:f6:89:de:59:8d:9d: 70:91:bc:99:e6:11:3b:3c:e4:f8:6a:f7:71:1c:21: c0:88:71:e8:1e:69:f4:cd:4b:b7:11:f2:c1:68:c4: 1f:7f:45:9c:31:c8:8d:94:58:f6:c4:6e:e0:73:81: 53:f1:3a:d3:fd:bb:85:a2:42:fb:b5:20:0c:67:37: 9d:87:1a:8d:3d:ac:5a:66:73:bf:54:86:63:08:70: 76:60:8a:a2:31:9d:19:77:73:b6:43:50:14:1d:a3: 7d:71:9c:ad:6e:da:a4:a7:c6:40:69:cd:f5:3e:02: 69:37:a4:b9:2d:df:61:59:ba:77:51:20:d3:90:49: a4:9e:95:8a:15:f2:16:16:f9:21:e7:bf:dc:27:e5: 5b:48:36:22:41:24:ed:78:fa:8b:28:35:e9:5f:0f: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BA:E7:6D:7B:BE:2F:0A:22:B0:99:87:AE:E2:39:C0:DF:1B:A4:BE X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:ab:76:5b:e7:03:a1:72:ca:5a:2d:f0:38:af:68:18:5c:60: 98:d3:07:ce:b3:e2:ac:7a:85:9e:84:f1:74:6a:e5:76:5a:86: a7:e3:46:90:04:75:0d:7a:42:60:3f:e3:97:01:4a:54:a8:bf: ba:d2:4b:95:5d:54:e2:76:f4:44:c8:b1:12:42:3e:ca:6c:41: aa:6a:c7:50:db:89:06:89:3a:07:70:c3:a7:85:e6:aa:be:27: 92:10:38:96:75:47:e7:fd:7b:07:b1:80:59:5f:c8:7e:0a:79: 3f:29:ae:e8:6c:03:bc:44:b0:6a:96:b2:39:21:e5:ff:9d:e5: e0:63:e4:76:34:b5:b4:fa:cf:7c:23:b9:ff:84:e8:bf:50:15: 82:01:b6:30:5c:bd:83:db:73:7e:ab:c0:4c:32:09:e6:4a:73: bf:6c:e6:dc:2f:db:9c:4d:64:38:03:c0:9c:b6:fb:a5:92:30: 14:eb:cf:ef:48:f1:97:f7:44:cb:fc:8e:91:99:57:2b:dc:54: b5:f3:21:a3:e6:69:4f:0d:51:a1:2b:2a:af:70:3c:63:58:dd: 86:b4:91:d3:43:a2:6e:b8:0b:58:ed:ed:72:9e:8f:2d:32:40: ab:45:14:dd:36:ef:c1:2a:60:cc:01:4c:a6:bd:7f:9b:b6:a2: 1b:06:99:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjUwNzIxMDQxMTI1WhcNMjUwNzI4MDQxMTI1WjAYMRYwFAYD VQQDEw02ODdkYmRlZS02YTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BHiL2VhUccPof4cac2I/pFjHOFOvfQB3liLJgJcFlkjrRC27aUSASsg9fwg HlANjUPaRRV2LCaSXuUttC+NvU9XLdB2AO/N0ekZTMO4GLpr55/0HypOUjuqiGhN SLtsP5H2id5ZjZ1wkbyZ5hE7POT4avdxHCHAiHHoHmn0zUu3EfLBaMQff0WcMciN lFj2xG7gc4FT8TrT/buFokL7tSAMZzedhxqNPaxaZnO/VIZjCHB2YIqiMZ0Zd3O2 Q1AUHaN9cZytbtqkp8ZAac31PgJpN6S5Ld9hWbp3USDTkEmknpWKFfIWFvkh57/c J+VbSDYiQSTtePqLKDXpXw95wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJy65217 vi8KIrCZh67iOcDfG6S+MB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHq3Zb5wOhcspaLfA4r2gYXGCY0wfOs+KseoWehPF0auV2Woan40aQ BHUNekJgP+OXAUpUqL+60kuVXVTidvREyLESQj7KbEGqasdQ24kGiToHcMOnheaq vieSEDiWdUfn/XsHsYBZX8h+Cnk/Ka7obAO8RLBqlrI5IeX/neXgY+R2NLW0+s98 I7n/hOi/UBWCAbYwXL2D23N+q8BMMgnmSnO/bObcL9ucTWQ4A8CctvulkjAU68/v SPGX90TL/I6RmVcr3FS18yGj5mlPDVGhKyqvcDxjWN2GtJHTQ6JuuAtY7e1yno8t MkCrRRTdNu/BKmDMAUymvX+btqIbBplR -----END CERTIFICATE-----Generated at Mon Jul 21 07:04:28 2025 by rpki-client