$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft File: ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json) Hash identifier: HSYg4AgyuQzwwWlbGrSU+hWviNjBa4s0EaCjZ8bHsiw= Subject key identifier: 27:1D:FC:AD:1E:DA:C4:31:EF:C3:B6:7B:30:A6:60:BB:3A:70:8A:3E Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 Certificate issuer: /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft Manifest number: 7E Signing time: Sat 19 Jul 2025 06:58:08 +0000 Manifest this update: Sat 19 Jul 2025 06:58:07 +0000 Manifest next update: Sat 26 Jul 2025 06:58:07 +0000 Files and hashes: 1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: HM5x7juvo4cpwRNnO1Loh3ng7zre+tdiplWgQx8vPsI=) 2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2 Validity Not Before: Jul 19 06:58:07 2025 GMT Not After : Jul 26 06:58:07 2025 GMT Subject: CN=687b4200-1e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:30:12:c7:2e:68:41:b3:1d:35:70:6e:a1: cf:bc:bf:91:fa:aa:aa:c0:32:db:5f:66:06:b8:93: 2e:f0:16:a3:48:84:54:22:03:b9:9a:06:da:67:e8: 5d:67:5e:d2:75:e1:52:1c:46:7c:46:c4:c1:b1:12: 76:4a:3e:6b:bd:8e:da:f8:1f:c4:2e:07:9f:d8:44: 6e:eb:dc:87:84:2e:67:a1:3b:46:a3:52:e1:d9:5a: a2:b4:97:59:da:bf:d4:80:40:80:20:df:36:24:63: d3:c7:85:cd:fc:8e:89:9d:6b:85:dc:65:c6:8b:93: 9e:4c:eb:c7:f1:13:eb:e3:9b:ca:8d:3a:0c:3b:99: 18:db:8c:b8:62:63:d6:2b:79:14:29:bd:60:f2:5b: 2f:55:4e:0a:ae:0b:33:a4:0c:ee:c8:29:62:6b:6b: 06:f1:bd:72:13:64:98:30:0e:78:8d:5e:52:49:f5: 7d:18:71:74:96:d0:a7:1e:45:26:99:4b:0c:e1:cc: b0:05:70:8e:9e:ba:4e:bb:27:cf:3e:e2:1c:dc:c9: dc:6e:e4:b1:8c:a4:40:4a:c5:3e:a3:32:7a:f3:4d: 91:24:ed:b2:a8:6b:05:58:77:8d:c6:14:08:57:a4: 0c:38:2c:d0:82:19:31:25:4d:58:20:ea:a4:45:40: 3a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1D:FC:AD:1E:DA:C4:31:EF:C3:B6:7B:30:A6:60:BB:3A:70:8A:3E X509v3 Authority Key Identifier: keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:5d:21:c8:69:c8:32:5f:7e:95:96:50:cc:0a:7d:29:7e:26: ce:82:4a:40:48:e4:5f:f1:40:2f:b8:89:6a:5e:4b:a7:d2:c8: d6:c3:8e:80:66:ad:4b:a9:8f:fd:27:3b:8a:37:e3:9f:77:93: 3f:48:de:cb:f0:d8:ae:b5:43:2b:95:e5:ec:41:cb:98:d4:fe: 00:34:fb:5c:47:ab:04:a8:91:b4:bf:7c:c3:ad:d2:8d:89:a7: a4:6c:83:81:eb:42:85:13:ee:9f:95:5f:d6:e0:f4:92:86:e5: 0c:80:1e:20:d7:1e:f3:72:40:c6:06:a3:48:59:e1:20:c2:11: de:fb:c6:3d:6c:e5:cf:74:29:19:39:5d:c9:ba:4d:a3:63:3b: d4:f9:72:28:36:9b:6e:b6:2d:58:ac:16:85:a9:6e:5b:61:ce: f1:51:39:b5:be:f9:d2:e4:4b:e9:dc:89:6f:35:af:34:a4:ea: 5f:be:cf:c8:f1:39:52:a8:23:07:44:78:76:5d:94:9b:21:db: c5:7e:76:86:cf:d7:9d:ea:c9:bc:ec:11:7e:d3:37:1d:f3:04: 2a:67:3e:91:ff:91:b0:43:bc:17:9b:df:7e:f8:f2:81:87:5c: 09:d2:c6:0a:87:43:b9:b6:90:b5:b2:ff:06:e6:db:04:50:ee: 10:b5:21:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwRjcxMTAvBgNVBAUTKDAwQjcyQUQ1MzMzQ0VBQUUxQTU4NUM4MjgwODlDNDQ1 NTk5OTYzRjIwHhcNMjUwNzE5MDY1ODA3WhcNMjUwNzI2MDY1ODA3WjAYMRYwFAYD VQQDEw02ODdiNDIwMC0xZTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrMwEscuaEGzHTVwbqHPvL+R+qqqwDLbX2YGuJMu8BajSIRUIgO5mgbaZ+hd Z17SdeFSHEZ8RsTBsRJ2Sj5rvY7a+B/ELgef2ERu69yHhC5noTtGo1Lh2VqitJdZ 2r/UgECAIN82JGPTx4XN/I6JnWuF3GXGi5OeTOvH8RPr45vKjToMO5kY24y4YmPW K3kUKb1g8lsvVU4KrgszpAzuyClia2sG8b1yE2SYMA54jV5SSfV9GHF0ltCnHkUm mUsM4cywBXCOnrpOuyfPPuIc3MncbuSxjKRASsU+ozJ6802RJO2yqGsFWHeNxhQI V6QMOCzQghkxJU1YIOqkRUA6IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcd/K0e 2sQx78O2ezCmYLs6cIo+MB8GA1UdIwQYMBaAFAC3KtUzPOquGlhcgoCJxEVZmWPy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBGNy85Rjc2OEFGQUE3 RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZxNGFXRnlDZ0luRVJWbVpZ X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBGNy85Rjc2OEFGQUE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BTGNxMVRNODZx NGFXRnlDZ0luRVJWbVpZX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwXSHIacgyX36VllDMCn0pfibOgkpASORf8UAvuIlqXkun0sjWw46A Zq1LqY/9JzuKN+Ofd5M/SN7L8NiutUMrleXsQcuY1P4ANPtcR6sEqJG0v3zDrdKN iaekbIOB60KFE+6flV/W4PSShuUMgB4g1x7zckDGBqNIWeEgwhHe+8Y9bOXPdCkZ OV3Juk2jYzvU+XIoNptuti1YrBaFqW5bYc7xUTm1vvnS5Evp3IlvNa80pOpfvs/I 8TlSqCMHRHh2XZSbIdvFfnaGz9ed6sm87BF+0zcd8wQqZz6R/5GwQ7wXm99++PKB h1wJ0sYKh0O5tpC1sv8G5tsEUO4QtSHH -----END CERTIFICATE-----Generated at Sun Jul 20 07:30:07 2025 by rpki-client