$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json) Hash identifier: GRe8d1XFnl+SxRJPihpLyJ2lIS/+I77Jj/e1Bu2NYd0= Subject key identifier: 20:28:0A:E1:C3:1B:96:CB:86:16:88:46:E6:5C:C9:8C:F7:EC:BA:39 Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Certificate serial: 0B8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft Manifest number: 0B82 Signing time: Fri 18 Jul 2025 19:12:49 +0000 Manifest this update: Fri 18 Jul 2025 19:12:48 +0000 Manifest next update: Fri 25 Jul 2025 19:12:48 +0000 Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: onX8LVuHfSmilAZcxfJwRXO3+rbZowfOWkUQ3UDf0BM=) 2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: DFFj/9slvAH+PEbWNXT9e7xoWXrU79TcIDoX6Iil9eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2954 (0xb8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Validity Not Before: Jul 18 19:12:48 2025 GMT Not After : Jul 25 19:12:48 2025 GMT Subject: CN=687a9cb1-531e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:4b:e9:33:51:d4:a1:dc:b1:74:52:da:2e: 94:dd:88:08:f2:20:ba:34:f6:5b:27:47:f0:cb:f3: c5:9e:50:29:6a:40:79:ca:8f:bc:1e:f8:4f:57:23: 5a:02:a1:fe:a1:a9:28:d7:6e:fd:d2:c6:61:b7:dd: a3:0b:a3:91:a5:70:a8:95:e9:00:3f:fe:40:b1:db: 3e:b0:72:d1:1f:e4:7e:70:13:a2:0c:ae:27:04:b8: a2:fd:91:6c:db:81:0a:9b:32:99:2d:3c:1d:78:eb: 69:99:7a:d4:ab:9e:61:f1:69:f8:a6:cb:98:72:5b: ec:3a:c8:e5:6e:ce:a5:5c:6d:92:70:d9:07:2d:4e: 80:67:3e:8a:3d:2a:55:b8:12:44:e6:1c:b3:ba:51: 97:b6:1e:25:d1:9b:f3:71:2e:21:29:43:a2:ba:f0: 35:4c:20:73:fb:f9:0b:9e:f3:15:97:96:f1:1a:eb: 9d:74:a9:53:f6:9e:a0:df:d0:5b:2b:db:16:ae:cf: b0:9d:20:b4:a0:d9:a5:05:fa:dc:bb:6e:fe:55:70: 52:fb:24:98:1a:cc:72:dc:7b:54:fc:f4:54:f8:7a: d3:5c:8c:c0:df:4e:26:b2:c1:cf:42:ff:0a:3d:d7: ef:40:7b:f5:18:3d:d7:b3:79:8d:41:ae:4b:a6:b5: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:28:0A:E1:C3:1B:96:CB:86:16:88:46:E6:5C:C9:8C:F7:EC:BA:39 X509v3 Authority Key Identifier: keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:9b:3d:b3:76:26:d1:3e:b2:ad:0f:9a:3d:07:ec:ee:78:b9: 4e:ff:20:67:8a:86:f9:93:75:1a:46:05:36:b1:bd:03:e6:67: 54:3c:b5:8f:80:61:96:b4:ec:43:51:2f:b2:ce:8a:6f:ec:c8: 27:23:e9:39:fc:8a:93:8b:5e:37:eb:00:da:5e:53:3d:30:9e: fa:20:d6:81:01:f7:11:72:a4:42:e2:e0:5f:b9:1f:00:9c:60: 4f:7b:b0:b4:45:35:d6:a7:00:91:62:83:ba:58:4d:2c:60:c8: 93:cd:b6:f9:a0:77:20:37:60:dd:d3:ea:66:d5:4e:86:d0:58: e9:2d:07:b9:32:ec:4d:d4:55:6e:37:8a:17:65:98:eb:6a:ec: 5f:d2:6e:80:54:2a:b5:6f:68:36:a7:e3:69:40:fe:b2:cf:ee: b4:e8:8b:b9:fd:11:90:cf:e9:da:13:5d:9c:df:84:4a:a4:e9: 8f:6a:32:82:ba:b3:d8:a9:d6:10:fa:8d:5a:63:a0:fa:e5:e5: 3a:fe:19:e0:81:d4:14:34:8d:20:a3:51:b6:ed:61:a4:90:e3: 63:ca:64:45:1c:09:4b:0a:a1:56:b0:07:84:a7:30:2f:dd:8b: b2:49:5b:e6:aa:7d:68:d9:04:66:14:b4:95:67:ae:23:07:12: 72:91:49:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFRkExMTAvBgNVBAUTKDk0OEZGODc2ODlGQTk0OTExNkY1RjdDODAwRUIxRDcw MUU2NUUzN0IwHhcNMjUwNzE4MTkxMjQ4WhcNMjUwNzI1MTkxMjQ4WjAYMRYwFAYD VQQDEw02ODdhOWNiMS01MzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAto1L6TNR1KHcsXRS2i6U3YgI8iC6NPZbJ0fwy/PFnlApakB5yo+8HvhPVyNa AqH+oako12790sZht92jC6ORpXColekAP/5Asds+sHLRH+R+cBOiDK4nBLii/ZFs 24EKmzKZLTwdeOtpmXrUq55h8Wn4psuYclvsOsjlbs6lXG2ScNkHLU6AZz6KPSpV uBJE5hyzulGXth4l0ZvzcS4hKUOiuvA1TCBz+/kLnvMVl5bxGuuddKlT9p6g39Bb K9sWrs+wnSC0oNmlBfrcu27+VXBS+ySYGsxy3HtU/PRU+HrTXIzA304mssHPQv8K PdfvQHv1GD3Xs3mNQa5LprV4YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAoCuHD G5bLhhaIRuZcyYz37Lo5MB8GA1UdIwQYMBaAFJSP+HaJ+pSRFvX3yADrHXAeZeN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEVGQS9FMEM5NTFDRTMw NjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxKRVc5ZmZJQU9zZGNCNWw0 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJXzRkb242bEpFVzlmZklBT3NkY0I1bDQzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEVGQS9FMEM5NTFDRTMwNjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxK RVc5ZmZJQU9zZGNCNWw0M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAmz2zdibRPrKtD5o9B+zueLlO/yBniob5k3UaRgU2sb0D5mdUPLWP gGGWtOxDUS+yzopv7MgnI+k5/IqTi1436wDaXlM9MJ76INaBAfcRcqRC4uBfuR8A nGBPe7C0RTXWpwCRYoO6WE0sYMiTzbb5oHcgN2Dd0+pm1U6G0FjpLQe5MuxN1FVu N4oXZZjrauxf0m6AVCq1b2g2p+NpQP6yz+606Iu5/RGQz+naE12c34RKpOmPajKC urPYqdYQ+o1aY6D65eU6/hnggdQUNI0go1G27WGkkONjymRFHAlLCqFWsAeEpzAv 3YuySVvmqn1o2QRmFLSVZ64jBxJykUlw -----END CERTIFICATE-----Generated at Sun Jul 20 03:27:53 2025 by rpki-client