$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft File: L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json) Hash identifier: 9Fepc4rK2lASw+jyHPjrL3J+RQyW5HPMu4pKTz7oIiw= Subject key identifier: 87:BD:12:7B:9F:7D:BC:CA:EF:6F:18:E9:6C:E0:4F:EB:C3:53:0D:99 Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91 Certificate issuer: /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft Manifest number: 32 Signing time: Sat 19 Jul 2025 07:54:34 +0000 Manifest this update: Sat 19 Jul 2025 07:54:34 +0000 Manifest next update: Sat 26 Jul 2025 07:54:33 +0000 Files and hashes: 1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: 1ZR3aChwXRvGCbj2aI6VzfVA2X97nFpiYQGwo2DPTFU=) 2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: gTUMCdfGUWrs1q6ayMOBwf36vGkRjWbK2xqTfFcnmzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91 Validity Not Before: Jul 19 07:54:34 2025 GMT Not After : Jul 26 07:54:33 2025 GMT Subject: CN=687b4f3a-6e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3d:64:fd:05:49:b4:70:b5:ac:fe:e3:0d:93: 24:73:b8:55:80:07:35:1d:e9:3b:c2:a2:07:55:d5: 97:24:1f:6e:e9:97:cc:5b:f4:2e:2e:f3:83:b6:a2: da:10:33:6e:5d:e1:74:af:77:39:7b:8d:f9:67:5d: 42:8d:0d:42:7a:cb:15:15:01:8f:53:f5:cb:94:76: 8a:f6:e3:31:b3:ac:f8:b3:da:f0:14:97:82:a1:62: 6f:af:81:67:d4:42:a7:23:16:c1:53:2c:50:4b:b5: 16:bb:91:72:fd:10:f5:0d:f2:39:48:f0:6b:cf:d7: 0c:57:77:2e:1b:34:ec:36:e4:b9:53:df:15:93:aa: 53:9b:d6:1f:c3:ca:29:9d:49:6b:ba:dd:37:1a:1d: e5:ce:b7:1e:50:e5:fa:93:25:e6:a8:55:32:e3:2c: 56:77:99:ae:61:ec:6c:08:f9:24:af:5f:c0:11:a7: 6f:03:74:e4:4d:2b:9c:c0:9a:e7:c7:f8:15:12:78: f3:ed:fd:b4:d1:f8:c1:22:86:81:b3:fe:7e:eb:be: 05:db:22:29:19:64:55:f6:a1:e6:ab:eb:71:fb:10: 5b:9e:64:a7:56:fd:51:e6:87:0f:b0:4a:3c:4d:6c: e6:5c:73:d3:2c:82:6c:57:97:38:46:3a:d5:68:c8: 56:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BD:12:7B:9F:7D:BC:CA:EF:6F:18:E9:6C:E0:4F:EB:C3:53:0D:99 X509v3 Authority Key Identifier: keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:df:98:57:bf:c3:e3:b5:61:48:fb:81:d0:4d:c9:19:e5:88: 46:b3:8b:35:50:a1:b4:b6:ed:91:9e:f0:e4:c0:bc:a4:6b:cf: 3f:5e:1d:03:13:40:e5:8a:03:c1:a2:2a:2a:42:83:49:e5:bb: 27:ca:19:16:cc:5f:ff:b4:da:0e:71:fe:70:6c:fe:6a:12:76: a3:8a:19:18:35:0f:61:56:f0:c5:2c:7d:5f:11:ed:d9:88:11: 0e:cd:f1:2a:91:fb:b1:ef:1f:e8:f1:29:60:11:18:54:d4:b7: e6:56:52:0a:29:35:2f:e2:b8:dc:61:4f:60:49:64:3a:1e:9a: f7:b2:07:58:b2:d8:66:a5:34:e0:e1:4f:e4:0d:5c:41:f0:e5: 03:1d:5f:b1:f3:a9:4e:d9:bd:35:0b:60:93:88:da:ff:83:4b: 6c:17:2a:f8:dc:f6:e7:8a:d3:f6:70:e8:68:c6:43:88:93:e8: a0:e6:d7:05:eb:b8:12:c7:ea:3e:c8:6f:f5:68:73:c4:c6:7c: b9:45:3e:2e:49:ac:f7:8e:c6:b0:a0:4f:84:c0:75:01:13:0d: 86:da:f7:81:b2:af:99:7d:8d:ae:f9:04:2f:a9:7b:69:a9:e2: 41:a1:54:09:4e:e1:0b:62:fa:75:1b:e7:9f:eb:04:a5:88:b3: f2:e6:53:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjU1MTExMC8GA1UEBRMoMkZERDM4MDRENjQ1OEVBRjFDQjM5MTdCNUUzMzJGQkE1 QzcxNUY5MTAeFw0yNTA3MTkwNzU0MzRaFw0yNTA3MjYwNzU0MzNaMBgxFjAUBgNV BAMTDTY4N2I0ZjNhLTZlMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjPWT9BUm0cLWs/uMNkyRzuFWABzUd6TvCogdV1ZckH27pl8xb9C4u84O2otoQ M25d4XSvdzl7jflnXUKNDUJ6yxUVAY9T9cuUdor24zGzrPiz2vAUl4KhYm+vgWfU QqcjFsFTLFBLtRa7kXL9EPUN8jlI8GvP1wxXdy4bNOw25LlT3xWTqlOb1h/Dyimd SWu63TcaHeXOtx5Q5fqTJeaoVTLjLFZ3ma5h7GwI+SSvX8ARp28DdORNK5zAmufH +BUSePPt/bTR+MEihoGz/n7rvgXbIikZZFX2oear63H7EFueZKdW/VHmhw+wSjxN bOZcc9MsgmxXlzhGOtVoyFYRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUh70Se599 vMrvbxjpbOBP68NTDZkwHwYDVR0jBBgwFoAUL904BNZFjq8cs5F7XjMvulxxX5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNTUxLzVBQjE5MjAyMTZD NTExRjA4ODE1RjQ2RUM0RjlBRTAyL0w5MDRCTlpGanE4Y3M1RjdYak12dWx4eFg1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDkwNEJOWkZqcThjczVGN1hqTXZ1bHh4WDVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC NTUxLzVBQjE5MjAyMTZDNTExRjA4ODE1RjQ2RUM0RjlBRTAyL0w5MDRCTlpGanE4 Y3M1RjdYak12dWx4eFg1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKHfmFe/w+O1YUj7gdBNyRnliEazizVQobS27ZGe8OTAvKRrzz9eHQMT QOWKA8GiKipCg0nluyfKGRbMX/+02g5x/nBs/moSdqOKGRg1D2FW8MUsfV8R7dmI EQ7N8SqR+7HvH+jxKWARGFTUt+ZWUgopNS/iuNxhT2BJZDoemveyB1iy2GalNODh T+QNXEHw5QMdX7HzqU7ZvTULYJOI2v+DS2wXKvjc9ueK0/Zw6GjGQ4iT6KDm1wXr uBLH6j7Ib/Voc8TGfLlFPi5JrPeOxrCgT4TAdQETDYba94Gyr5l9ja75BC+pe2mp 4kGhVAlO4Qti+nUb55/rBKWIs/LmU1s= -----END CERTIFICATE-----Generated at Sun Jul 20 07:32:12 2025 by rpki-client