$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json) Hash identifier: xSC/vlHEpM38y135fGfq7s6euazi5UdHYCB9/aCXOq4= Subject key identifier: AD:F9:9D:DF:BA:EB:A0:C3:C7:96:CF:E9:32:72:91:46:82:6B:EE:A0 Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Certificate serial: 0C59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft Manifest number: 0C49 Signing time: Fri 18 Jul 2025 18:42:28 +0000 Manifest this update: Fri 18 Jul 2025 18:42:27 +0000 Manifest next update: Fri 25 Jul 2025 18:42:27 +0000 Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: Q1i+ZnSEvUCqfK92En/oQe5L7buk0ZBUJvtIG+EAGIg=) 2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: gBEi2R13VWPv9ID88Yp79OfFGvAVYE/s6Ssf5W2fwwk=) 3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: LEAp/LEvn2wmVSYlgep7H8tvqMhftOe6qW5nlWlQ4tA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3161 (0xc59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192 Validity Not Before: Jul 18 18:42:27 2025 GMT Not After : Jul 25 18:42:27 2025 GMT Subject: CN=687a9593-9138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:8b:ec:c5:a7:1c:c8:c6:28:03:de:65:2f: b0:b4:eb:9f:60:ee:d8:d6:54:79:0d:d9:fd:56:2d: 09:f7:02:f9:00:f2:c1:66:e4:99:2f:32:bf:18:31: 81:19:51:00:06:62:06:33:6b:89:9e:1f:70:38:1c: 9d:c1:b3:42:d5:12:e0:f9:f3:bb:2b:fb:0c:7b:9b: fd:09:58:84:2c:ef:87:0b:bf:c6:e5:54:9e:14:9e: d8:6e:3d:37:5e:a8:7f:73:08:41:54:91:cc:8c:f5: 34:24:97:fb:50:fc:ed:f8:1f:14:0a:87:97:dc:0e: cd:57:71:43:7a:e1:23:ef:72:a1:bc:79:c9:3d:41: 19:54:e5:03:f8:1c:be:7e:0c:83:c5:9e:3f:cb:d1: c9:eb:1b:1a:5e:5f:1f:b0:b3:8d:63:2c:6c:24:87: ea:83:c2:2f:e0:b6:34:de:e9:a0:64:fe:b3:be:17: 2a:2a:ca:4d:30:c9:c3:26:69:ed:7d:9b:ac:72:3b: ec:cf:87:a1:3c:3a:35:6a:56:1b:e5:8c:b6:5c:ed: 35:b9:74:01:ad:1b:b6:6f:c4:92:12:fd:2e:90:6f: d6:68:e0:21:b1:40:e4:6a:3b:91:c4:fd:d9:8d:cc: 3b:84:4b:9b:61:15:de:15:e1:af:be:18:5a:1b:b2: 7f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F9:9D:DF:BA:EB:A0:C3:C7:96:CF:E9:32:72:91:46:82:6B:EE:A0 X509v3 Authority Key Identifier: keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:1f:de:1b:f8:67:f2:39:18:f0:d1:d2:c9:fe:fc:d9:93:fe: 6b:b0:df:4f:40:91:31:07:e5:c8:6c:6e:0d:89:87:1e:94:16: 55:a6:52:98:ad:02:d5:e1:07:79:1c:cb:a6:84:08:71:e5:96: 98:16:0d:74:41:45:ea:fd:d7:32:2e:af:38:88:2e:88:86:4e: f4:3c:ed:aa:fa:3b:77:13:69:8c:9c:df:c3:b4:b6:94:72:41: 71:c4:78:81:c5:aa:0e:cc:fc:c7:5e:94:b5:f4:df:2e:63:35: 99:80:7e:23:19:d8:7d:72:0f:31:7d:01:a1:d6:9a:f3:67:5b: 38:27:d4:5d:6e:9d:47:92:35:46:7c:2e:3e:2d:fa:57:7f:12: 60:80:b3:17:ff:d1:64:2c:35:e2:dd:4d:84:41:7c:56:5a:4d: c2:0e:65:99:48:51:76:c0:c2:3d:5a:c3:07:97:9c:25:c2:0d: 99:4e:09:81:ca:b0:8e:ec:c0:5b:d6:42:05:62:f7:61:bd:9a: c7:e7:5e:0f:84:2e:9a:66:b6:01:44:f8:6e:df:cd:42:dc:c5: c3:e8:4f:50:4a:e7:38:93:2b:15:7e:0c:74:86:3c:3e:a1:17: 1d:a9:dc:2b:ca:1a:64:26:ca:19:0b:50:54:90:d9:47:be:e1: a9:8b:a6:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRDOTIxMTAvBgNVBAUTKDk0NUQwOTdGMjI2M0QxNEMzNkI3QjY1QzJEQzBDMjVG OUVFNzcxOTIwHhcNMjUwNzE4MTg0MjI3WhcNMjUwNzI1MTg0MjI3WjAYMRYwFAYD VQQDEw02ODdhOTU5My05MTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiOL7MWnHMjGKAPeZS+wtOufYO7Y1lR5Ddn9Vi0J9wL5APLBZuSZLzK/GDGB GVEABmIGM2uJnh9wOBydwbNC1RLg+fO7K/sMe5v9CViELO+HC7/G5VSeFJ7Ybj03 Xqh/cwhBVJHMjPU0JJf7UPzt+B8UCoeX3A7NV3FDeuEj73KhvHnJPUEZVOUD+By+ fgyDxZ4/y9HJ6xsaXl8fsLONYyxsJIfqg8Iv4LY03umgZP6zvhcqKspNMMnDJmnt fZuscjvsz4ehPDo1alYb5Yy2XO01uXQBrRu2b8SSEv0ukG/WaOAhsUDkajuRxP3Z jcw7hEubYRXeFeGvvhhaG7J/CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK35nd+6 66DDx5bP6TJykUaCa+6gMB8GA1UdIwQYMBaAFJRdCX8iY9FMNre2XC3Awl+e53GS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REM5Mi8wRjREN0I0NjA5 RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBVdzJ0N1pjTGNEQ1g1N25j WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGMEpmeUpqMFV3MnQ3WmNMY0RDWDU3bmNaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REM5Mi8wRjREN0I0NjA5RDgxMUVBOUZFOERCMUVDNEY5QUUwMi9sRjBKZnlKajBV dzJ0N1pjTGNEQ1g1N25jWkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXH94b+GfyORjw0dLJ/vzZk/5rsN9PQJExB+XIbG4NiYcelBZVplKY rQLV4Qd5HMumhAhx5ZaYFg10QUXq/dcyLq84iC6Ihk70PO2q+jt3E2mMnN/DtLaU ckFxxHiBxaoOzPzHXpS19N8uYzWZgH4jGdh9cg8xfQGh1przZ1s4J9Rdbp1HkjVG fC4+LfpXfxJggLMX/9FkLDXi3U2EQXxWWk3CDmWZSFF2wMI9WsMHl5wlwg2ZTgmB yrCO7MBb1kIFYvdhvZrH514PhC6aZrYBRPhu381C3MXD6E9QSuc4kysVfgx0hjw+ oRcdqdwryhpkJsoZC1BUkNlHvuGpi6aE -----END CERTIFICATE-----Generated at Sun Jul 20 07:41:44 2025 by rpki-client