$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json) Hash identifier: /r8rqxlQAtqgRaJy+53/xN0CiHPjWPIikRI9DBos2ek= Subject key identifier: E7:E9:FE:9C:A2:1D:68:2A:56:D9:13:D4:A7:44:DE:3A:30:4D:DA:40 Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Certificate serial: 064F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft Manifest number: 063E Signing time: Sun 20 Jul 2025 22:54:47 +0000 Manifest this update: Sun 20 Jul 2025 22:54:47 +0000 Manifest next update: Sun 27 Jul 2025 22:54:47 +0000 Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: FNs/vWy4psqwQzsAGIOw2+nDH5ttKDTdpc+wNyKDsxU=) 2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: syoIEmBkPUbXHyU102SwHVQfhD/obq6DIZMw3IYU94w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1615 (0x64f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Validity Not Before: Jul 20 22:54:47 2025 GMT Not After : Jul 27 22:54:47 2025 GMT Subject: CN=687d73b7-7b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:e9:64:6b:3a:50:69:ab:d8:03:b4:d3:4a: e0:1a:54:ca:78:54:32:8e:5b:2f:97:12:29:a5:69: 0b:5e:10:02:96:55:aa:b2:bd:b6:c9:59:50:c2:8b: 66:06:7f:83:c0:2e:3d:d8:4b:7a:5d:42:aa:d1:e4: 3f:54:3b:9a:92:45:22:23:bf:3a:ff:5b:84:c8:40: a5:2b:c1:e4:4c:4e:37:df:63:46:cf:11:41:dd:a5: de:c9:ca:07:cf:63:4c:90:7a:19:8e:4c:18:ad:cb: aa:32:d2:6a:bd:9d:c3:81:21:0a:4a:75:d4:21:65: f6:33:c6:3f:a4:fc:08:c4:d2:d0:e8:97:1a:22:e3: b0:7d:99:88:53:0c:54:c7:4a:83:b6:7b:38:4a:39: e1:6a:7d:03:37:78:6e:0e:4d:ad:2a:3a:86:86:9f: bc:4c:c8:90:54:97:a2:e4:46:3e:ee:49:2e:c9:73: d3:57:97:b8:d2:80:0e:81:45:b5:3c:fa:4d:18:ed: c3:4b:e7:b5:be:bf:46:cc:0c:37:d6:45:5b:e1:52: bb:ce:6e:f9:e3:d2:8b:67:60:76:0e:3b:85:0a:e2: 1c:88:6e:44:1a:87:ac:69:93:78:46:1f:f7:ee:ee: e2:b9:6d:0f:38:6e:15:71:8c:1d:60:58:49:68:06: 97:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E9:FE:9C:A2:1D:68:2A:56:D9:13:D4:A7:44:DE:3A:30:4D:DA:40 X509v3 Authority Key Identifier: keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:7c:c1:75:24:0f:5e:b9:00:ea:66:3f:a4:3a:fa:3b:6b:d4: 54:2d:83:89:24:b4:6f:c8:52:e9:45:25:41:fb:9d:d8:6b:07: 01:58:f3:ab:89:64:33:35:c7:bc:73:c2:b9:2e:12:d5:bb:11: 06:73:e3:a7:27:bf:14:de:a8:f2:87:19:c1:bd:75:0e:4f:65: 4e:0b:6d:d2:be:bc:f9:33:1a:c3:ca:9f:43:45:12:a5:28:82: 2a:54:9a:d6:97:68:b3:01:34:8b:04:a5:3e:62:10:55:4a:bd: 49:06:f0:d4:47:ba:df:55:2a:96:f4:31:90:fe:64:44:02:63: ee:98:41:a3:2d:8f:83:44:29:f8:d7:7f:be:da:86:c6:48:69: 57:8e:ce:6b:ac:34:29:7c:ab:f2:e9:ce:71:51:0b:fc:da:d1: f8:fb:b7:10:14:9b:ee:10:90:ab:12:4f:5c:2f:5d:cb:73:04: 84:1a:78:7c:a2:91:c6:99:9e:f1:1c:e8:bd:1f:bc:39:c1:4c: 6a:ec:e7:7e:c7:ec:d7:82:91:52:f8:cb:3e:e1:01:be:46:34: ac:70:46:b5:e4:cf:9c:0b:48:01:d8:64:e5:05:57:69:47:e7: 2b:6a:10:77:84:82:56:ef:14:8c:b0:7d:f9:07:b2:24:57:a8: 58:73:98:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUyRTMxMTAvBgNVBAUTKDJDRkE0RDhGNDQxMEE5NTFBQTE2NEU1NTRDNjU4MDVE OENGODg5NUMwHhcNMjUwNzIwMjI1NDQ3WhcNMjUwNzI3MjI1NDQ3WjAYMRYwFAYD VQQDEw02ODdkNzNiNy03YjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAua/pZGs6UGmr2AO000rgGlTKeFQyjlsvlxIppWkLXhACllWqsr22yVlQwotm Bn+DwC492Et6XUKq0eQ/VDuakkUiI786/1uEyEClK8HkTE4332NGzxFB3aXeycoH z2NMkHoZjkwYrcuqMtJqvZ3DgSEKSnXUIWX2M8Y/pPwIxNLQ6JcaIuOwfZmIUwxU x0qDtns4Sjnhan0DN3huDk2tKjqGhp+8TMiQVJei5EY+7kkuyXPTV5e40oAOgUW1 PPpNGO3DS+e1vr9GzAw31kVb4VK7zm7549KLZ2B2DjuFCuIciG5EGoesaZN4Rh/3 7u7iuW0POG4VcYwdYFhJaAaX+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfp/pyi HWgqVtkT1KdE3jowTdpAMB8GA1UdIwQYMBaAFCz6TY9EEKlRqhZOVUxlgF2M+Ilc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTJFMy8yOTQ1M0I3NEEw NzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFWR3FGazVWVEdXQVhZejRp VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQcE5qMFFRcVZHcUZrNVZUR1dBWFl6NGlWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTJFMy8yOTQ1M0I3NEEwNzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFW R3FGazVWVEdXQVhZejRpVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+fMF1JA9euQDqZj+kOvo7a9RULYOJJLRvyFLpRSVB+53YawcBWPOr iWQzNce8c8K5LhLVuxEGc+OnJ78U3qjyhxnBvXUOT2VOC23Svrz5MxrDyp9DRRKl KIIqVJrWl2izATSLBKU+YhBVSr1JBvDUR7rfVSqW9DGQ/mREAmPumEGjLY+DRCn4 13++2obGSGlXjs5rrDQpfKvy6c5xUQv82tH4+7cQFJvuEJCrEk9cL13LcwSEGnh8 opHGmZ7xHOi9H7w5wUxq7Od+x+zXgpFS+Ms+4QG+RjSscEa15M+cC0gB2GTlBVdp R+crahB3hIJW7xSMsH35B7IkV6hYc5jC -----END CERTIFICATE-----Generated at Mon Jul 21 12:48:02 2025 by rpki-client