$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: /O0mZZP/XK3DG1ebz2ErpvZQAdG+8IMAEkUQ+Hkrasg= Subject key identifier: 97:D7:DC:0C:1D:24:B8:FB:88:79:78:3F:33:95:16:DA:E3:74:FC:F2 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0B5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0B4B Signing time: Fri 18 Jul 2025 19:19:53 +0000 Manifest this update: Fri 18 Jul 2025 19:19:52 +0000 Manifest next update: Fri 25 Jul 2025 19:19:52 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: RIFy4XmWtp+nUO8yQOAUtoTu/ikJ9f8nwaavRr94J9c=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: isFXn22manatugHafRu2hqpuY348jCwEcI/j4K+wcRU=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: EpjCnlsJkfHNtp2vFgzZPfvRv085L5br2n3beV/fvF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2908 (0xb5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Jul 18 19:19:52 2025 GMT Not After : Jul 25 19:19:52 2025 GMT Subject: CN=687a9e59-f92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:76:05:be:a6:b1:12:6f:3f:24:98:2b:f8: 94:c2:4e:cd:cd:ee:79:d4:84:b0:e6:f4:33:be:9e: b0:d0:c6:fb:7f:38:f0:91:34:fb:b6:5d:a2:bb:79: 86:70:fc:9a:b3:80:5a:97:a8:36:21:47:ab:97:26: db:8d:11:23:87:68:db:58:ab:bf:85:b8:19:b5:3e: d8:af:2b:fd:b6:f2:37:91:7c:54:5b:c8:e0:4c:5d: ff:85:5d:5e:88:65:3b:4b:53:fb:17:96:44:c7:fc: 17:05:0d:81:f9:b2:d4:e2:9a:da:0c:42:b2:39:ce: ee:a9:fa:a0:a6:76:16:12:16:1c:4e:46:72:4b:4b: 43:06:d5:dd:8d:d2:e3:4b:b5:c8:a1:f9:2d:3f:61: a3:cd:ee:19:4c:a3:6f:a3:91:fe:b5:a5:df:3b:89: 55:ed:d0:1b:8f:05:e2:b1:ca:5d:a7:ff:16:35:93: 80:a4:87:63:04:b5:48:bc:c9:7f:81:83:ab:4b:31: 2f:78:6c:cc:3a:d1:99:06:1a:24:72:c7:17:99:27: a4:a8:e5:c3:43:bd:7b:e4:c4:f7:08:5a:e9:7e:e2: 28:03:bf:07:04:bd:ee:62:c3:a3:bb:1a:41:0d:69: 49:30:54:d7:44:ae:5a:cc:e2:67:3a:65:19:22:a8: 23:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D7:DC:0C:1D:24:B8:FB:88:79:78:3F:33:95:16:DA:E3:74:FC:F2 X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:df:ca:78:a2:23:7c:68:78:ae:e6:55:6f:dc:39:5f:7e:3d: ba:7e:3a:90:84:74:c1:c7:94:1c:a3:93:ae:54:91:20:74:62: 38:9c:63:72:66:c7:ac:96:09:2d:ea:a5:c0:eb:9b:e5:9a:e8: 3c:b9:e9:70:98:5c:3b:e9:bc:9c:79:18:be:14:68:50:b4:1e: 7a:9f:e3:d5:2c:35:79:e3:71:05:d3:af:67:6a:73:26:d7:a2: ff:40:06:32:c4:01:c8:70:22:e8:01:df:23:5e:09:a7:d9:f5: 63:02:e7:9e:3b:de:a8:d1:01:67:38:31:cf:13:42:a0:10:a5: 84:22:a9:59:25:34:ce:1e:16:8f:ee:59:b0:89:22:83:88:78: 9d:98:78:13:fc:00:9a:d6:40:cb:e7:bb:51:10:54:b0:52:5d: d6:e4:b3:87:84:36:dc:a3:3d:e8:ad:1f:fe:f1:78:1e:3a:6d: 1b:67:94:d0:bf:9c:aa:19:42:8f:24:10:b6:81:25:8e:93:8d: 69:a3:d6:79:6b:c1:a7:de:d6:3a:aa:54:3d:ce:0a:f8:c5:b7: f4:77:78:0a:e0:6d:b7:9f:bc:9a:9b:eb:75:69:9c:7e:89:9a: b8:d9:c7:fc:93:1a:0a:f8:46:1a:35:97:39:49:d7:fa:00:bb: 01:ad:6d:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUwNzE4MTkxOTUyWhcNMjUwNzI1MTkxOTUyWjAYMRYwFAYD VQQDEw02ODdhOWU1OS1mOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYV2Bb6msRJvPySYK/iUwk7Nze551ISw5vQzvp6w0Mb7fzjwkTT7tl2iu3mG cPyas4Bal6g2IUerlybbjREjh2jbWKu/hbgZtT7Yryv9tvI3kXxUW8jgTF3/hV1e iGU7S1P7F5ZEx/wXBQ2B+bLU4praDEKyOc7uqfqgpnYWEhYcTkZyS0tDBtXdjdLj S7XIofktP2Gjze4ZTKNvo5H+taXfO4lV7dAbjwXiscpdp/8WNZOApIdjBLVIvMl/ gYOrSzEveGzMOtGZBhokcscXmSekqOXDQ7175MT3CFrpfuIoA78HBL3uYsOjuxpB DWlJMFTXRK5azOJnOmUZIqgjkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfX3Awd JLj7iHl4PzOVFtrjdPzyMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl38p4oiN8aHiu5lVv3Dlffj26fjqQhHTBx5Qco5OuVJEgdGI4nGNy Zseslgkt6qXA65vlmug8uelwmFw76byceRi+FGhQtB56n+PVLDV543EF069nanMm 16L/QAYyxAHIcCLoAd8jXgmn2fVjAueeO96o0QFnODHPE0KgEKWEIqlZJTTOHhaP 7lmwiSKDiHidmHgT/ACa1kDL57tREFSwUl3W5LOHhDbcoz3orR/+8XgeOm0bZ5TQ v5yqGUKPJBC2gSWOk41po9Z5a8Gn3tY6qlQ9zgr4xbf0d3gK4G23n7yam+t1aZx+ iZq42cf8kxoK+EYaNZc5Sdf6ALsBrW3M -----END CERTIFICATE-----Generated at Sun Jul 20 03:46:39 2025 by rpki-client