$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json) Hash identifier: EI5vw/O1+MZmD48LstagSvE2fg85wskLKsIxQCvmU0w= Subject key identifier: C3:1C:6C:65:C1:5A:70:A4:EF:BD:0C:FA:B7:BF:5A:7C:9A:7D:0E:91 Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft Manifest number: F0 Signing time: Mon 21 Jul 2025 05:27:56 +0000 Manifest this update: Mon 21 Jul 2025 05:27:55 +0000 Manifest next update: Mon 28 Jul 2025 05:27:55 +0000 Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: tE+quLKHOLziy82j8Ljnesg/NxoaB3ujrEqMgwCMNUk=) 2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: IP1a/8lP5y1+PqhZxCqrwDfR6kczV/2vje4JuA8lz28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: Jul 21 05:27:55 2025 GMT Not After : Jul 28 05:27:55 2025 GMT Subject: CN=687dcfdb-2f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:b9:45:3e:69:d2:b3:d6:8f:63:d5:89:32: 2b:3a:2e:80:f6:28:7f:29:8d:5c:86:7f:4f:c6:eb: 6a:22:5c:a3:46:92:ac:1e:f3:d3:eb:1f:ad:ba:54: d7:04:c5:0c:70:8b:17:2d:a1:33:d3:ef:32:a6:06: a2:bd:7f:4d:20:7b:6d:5e:c2:72:14:4a:2b:0b:96: 56:33:84:08:15:8a:8f:f4:fc:5d:5c:45:4f:e7:3a: 9b:f1:d7:a3:90:5a:6b:20:fe:08:55:3b:03:91:39: 57:67:8e:5c:bb:bd:4f:c9:5b:c8:42:64:5f:16:f8: ef:ba:b6:be:7c:0c:58:de:68:25:2c:6e:fb:ed:4d: 91:2d:bf:73:af:c4:f5:ca:2d:5e:9f:d2:d4:4a:20: f9:37:15:09:7c:c5:d9:08:aa:14:cf:48:fb:6e:78: 67:66:b9:a2:42:0f:c3:ce:6c:05:7a:18:23:63:36: c7:51:60:8e:ac:b3:8f:e0:54:02:50:ce:80:a9:10: 72:7d:a4:b3:ea:33:cf:69:c6:a0:33:da:15:27:34: 96:c5:3b:23:e4:c0:c8:c5:9a:90:4d:d5:35:85:47: 0f:cf:4a:93:d4:5d:d5:cc:24:26:6a:23:3b:5e:f3: da:e3:f2:5d:0e:1b:52:49:55:e2:aa:a2:e8:0d:3d: 25:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1C:6C:65:C1:5A:70:A4:EF:BD:0C:FA:B7:BF:5A:7C:9A:7D:0E:91 X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ad:78:40:d8:80:a0:86:24:a4:ec:96:0b:11:a2:20:bb:5e: ad:51:72:bf:3c:1f:f8:2c:a7:e0:e2:4f:d3:92:5d:b6:dd:56: 6c:07:69:41:6a:6b:fc:9f:8c:8c:a5:8c:14:39:91:df:ca:58: 30:f5:5d:d5:9e:ac:67:86:b3:8a:06:cc:86:dc:86:53:7e:6f: c5:d4:2b:6a:e0:2b:d7:74:39:63:03:b1:d3:c2:8e:58:bc:e2: cc:9e:6d:e1:58:04:a2:27:59:2d:61:9c:ec:98:b1:0a:3a:0f: 31:5f:40:b7:04:3f:c9:08:b8:fe:9b:eb:56:2a:b2:ee:0e:6c: 7b:5f:9f:84:4e:70:e1:08:d2:98:6a:1f:ef:2c:1b:4a:11:cd: c9:f5:e4:28:7a:2b:a8:0a:9f:c2:f9:79:b9:ae:be:25:04:3a: f6:bd:8b:84:60:69:be:f1:b4:85:ed:0f:70:70:53:d5:6c:21: 1f:9a:2d:ba:20:5c:4e:98:35:a7:79:3c:c4:23:00:c4:36:b1: a2:42:09:c4:94:78:28:51:9c:79:ae:96:77:ac:ca:65:73:e3: 00:d9:a4:5d:d1:bf:70:f4:e6:0c:32:55:f3:0b:75:ff:d0:23: f8:63:5e:cf:3f:45:19:38:8a:6a:a7:a5:45:9d:7c:98:30:65: c5:47:0f:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4MkQxMTAvBgNVBAUTKDk1MjI4MzM4QTg1RjI0ODIzMDMxMkNGMzk4QjI0Rjgx MTlEODIzMkYwHhcNMjUwNzIxMDUyNzU1WhcNMjUwNzI4MDUyNzU1WjAYMRYwFAYD VQQDEw02ODdkY2ZkYi0yZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugu5RT5p0rPWj2PViTIrOi6A9ih/KY1chn9PxutqIlyjRpKsHvPT6x+tulTX BMUMcIsXLaEz0+8ypgaivX9NIHttXsJyFEorC5ZWM4QIFYqP9PxdXEVP5zqb8dej kFprIP4IVTsDkTlXZ45cu71PyVvIQmRfFvjvura+fAxY3mglLG777U2RLb9zr8T1 yi1en9LUSiD5NxUJfMXZCKoUz0j7bnhnZrmiQg/DzmwFehgjYzbHUWCOrLOP4FQC UM6AqRByfaSz6jPPacagM9oVJzSWxTsj5MDIxZqQTdU1hUcPz0qT1F3VzCQmaiM7 XvPa4/JdDhtSSVXiqqLoDT0lXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMcbGXB WnCk770M+re/WnyafQ6RMB8GA1UdIwQYMBaAFJUigzioXySCMDEs85iyT4EZ2CMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjgyRC8wQUMyMkFDNEY4 QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJSXdNU3p6bUxKUGdSbllJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjgyRC8wQUMyMkFDNEY4QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJ SXdNU3p6bUxKUGdSbllJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANrXhA2ICghiSk7JYLEaIgu16tUXK/PB/4LKfg4k/Tkl223VZsB2lB amv8n4yMpYwUOZHfylgw9V3VnqxnhrOKBsyG3IZTfm/F1Ctq4CvXdDljA7HTwo5Y vOLMnm3hWASiJ1ktYZzsmLEKOg8xX0C3BD/JCLj+m+tWKrLuDmx7X5+ETnDhCNKY ah/vLBtKEc3J9eQoeiuoCp/C+Xm5rr4lBDr2vYuEYGm+8bSF7Q9wcFPVbCEfmi26 IFxOmDWneTzEIwDENrGiQgnElHgoUZx5rpZ3rMplc+MA2aRd0b9w9OYMMlXzC3X/ 0CP4Y17PP0UZOIpqp6VFnXyYMGXFRw/L -----END CERTIFICATE-----Generated at Mon Jul 21 07:04:28 2025 by rpki-client