$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft File: L927RfNPJhkzrCt9Z6xz05Op0WQ.mft (raw, json) Hash identifier: T5F8C76cguZCvwIpf1aFmJiapMSL39A3g5bXY7RpI/U= Subject key identifier: 20:96:C8:4A:3B:95:C2:0B:F4:FD:7A:27:7E:12:86:6E:C6:F3:D9:BA Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64 Certificate issuer: /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164 Certificate serial: 036C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft Manifest number: 0368 Signing time: Mon 21 Jul 2025 01:11:18 +0000 Manifest this update: Mon 21 Jul 2025 01:11:18 +0000 Manifest next update: Mon 28 Jul 2025 01:11:18 +0000 Files and hashes: 1: L927RfNPJhkzrCt9Z6xz05Op0WQ.crl (hash: rSCRAFDpyHQTWYHPn+lbHE9JNXTCwuDeKPALKXx7bdw=) 2: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (hash: +dFNC6bX5H+V6njzLbV2Ca6KkTrT3TtAm0EkKfPs5f0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ECB0, serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164 Validity Not Before: Jul 21 01:11:18 2025 GMT Not After : Jul 28 01:11:18 2025 GMT Subject: CN=687d93b6-78fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ed:54:11:24:41:8f:cd:94:e9:6f:c9:03:d7: b2:ac:22:d3:0b:be:10:82:19:54:5e:f9:44:65:de: 70:65:a8:3a:7c:39:d4:fa:df:ae:17:55:2a:34:fa: 05:a2:f1:98:0e:b2:a2:38:8a:94:ee:24:a8:25:b6: 35:3c:81:ae:42:a3:99:49:5d:62:e5:b2:48:d9:76: e2:1f:88:d6:e3:41:69:c3:e6:62:92:21:ef:eb:9b: 4f:05:8d:79:7e:c8:8e:07:5a:58:7e:b2:da:d2:51: 5b:ef:93:3e:74:9e:66:74:66:68:9e:53:f1:be:8a: 74:91:85:44:af:89:fb:e8:93:03:e6:8a:7d:ab:8b: 15:24:81:47:1d:13:12:c2:bf:91:07:a8:c3:c6:d4: cc:04:72:17:34:ac:c8:5b:2c:8b:30:51:1b:fa:98: 21:a5:17:51:1f:45:01:72:02:d4:2f:62:a9:d4:43: ea:78:22:38:8e:80:cc:c4:41:f1:41:67:09:02:e4: 25:a1:99:bf:7f:74:37:ef:95:a8:81:91:8d:eb:ca: 38:73:55:f4:ac:29:00:02:88:e7:a6:78:20:80:f2: b3:c9:53:87:60:78:e0:4a:df:07:82:b5:39:60:6e: b7:92:1c:5d:d9:54:73:55:c3:b0:62:0c:10:2e:df: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:C8:4A:3B:95:C2:0B:F4:FD:7A:27:7E:12:86:6E:C6:F3:D9:BA X509v3 Authority Key Identifier: keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:a1:56:ed:15:31:f0:aa:23:7d:3a:93:53:80:d3:30:bb:94: fa:5c:74:63:c3:e6:04:91:ec:30:9f:65:a1:15:85:48:83:90: 15:9d:d5:03:22:0a:82:c8:9d:46:d5:a4:fc:c7:71:66:c1:8d: 6b:6d:7d:47:34:cc:f9:a0:f2:6a:c5:24:c9:0a:03:c6:e2:ef: 75:01:ed:cd:de:e1:56:6c:d6:8f:ba:35:90:26:eb:5d:39:29: 8f:a7:bb:fc:7f:9f:ca:cf:75:f6:ae:65:64:19:7e:cc:d1:d1: fe:1a:70:52:bd:9a:2c:75:75:67:51:79:bb:71:77:20:14:fa: ec:1f:ef:5a:ba:f2:bb:ac:0a:a5:12:04:d4:a9:7b:77:72:7c: 78:f5:a1:2e:a0:5c:33:a9:2f:5e:2c:4a:5d:7b:41:0b:13:2a: 16:77:df:c3:39:8c:d1:8d:bb:58:91:5c:44:d6:6b:d9:d5:7a: 58:5a:a1:64:70:2e:03:27:f6:c0:02:4d:b8:8c:98:8d:17:3c: 34:86:c0:1e:97:75:95:08:6f:b0:1e:74:ff:93:fe:b9:b9:a1: f3:86:d8:bf:15:81:e4:87:80:9c:88:d5:b8:87:3d:4f:06:f0: d6:64:f7:c0:b5:64:1f:40:5f:22:3b:d0:bf:5d:6a:37:12:4f: bf:f0:aa:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VDQjAxMTAvBgNVBAUTKDJGRERCQjQ1RjM0RjI2MTkzM0FDMkI3RDY3QUM3M0Qz OTNBOUQxNjQwHhcNMjUwNzIxMDExMTE4WhcNMjUwNzI4MDExMTE4WjAYMRYwFAYD VQQDEw02ODdkOTNiNi03OGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7u1UESRBj82U6W/JA9eyrCLTC74QghlUXvlEZd5wZag6fDnU+t+uF1UqNPoF ovGYDrKiOIqU7iSoJbY1PIGuQqOZSV1i5bJI2XbiH4jW40Fpw+ZikiHv65tPBY15 fsiOB1pYfrLa0lFb75M+dJ5mdGZonlPxvop0kYVEr4n76JMD5op9q4sVJIFHHRMS wr+RB6jDxtTMBHIXNKzIWyyLMFEb+pghpRdRH0UBcgLUL2Kp1EPqeCI4joDMxEHx QWcJAuQloZm/f3Q375WogZGN68o4c1X0rCkAAojnpngggPKzyVOHYHjgSt8HgrU5 YG63khxd2VRzVcOwYgwQLt9FdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCWyEo7 lcIL9P16J34Shm7G89m6MB8GA1UdIwQYMBaAFC/du0XzTyYZM6wrfWesc9OTqdFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNCMC82MTg2NzMyQ0I5 MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZOUEpoa3pyQ3Q5WjZ4ejA1T3Aw V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5MjdSZk5QSmhrenJDdDlaNnh6MDVPcDBXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUNCMC82MTg2NzMyQ0I5MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZOUEpo a3pyQ3Q5WjZ4ejA1T3AwV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhoVbtFTHwqiN9OpNTgNMwu5T6XHRjw+YEkewwn2WhFYVIg5AVndUD IgqCyJ1G1aT8x3FmwY1rbX1HNMz5oPJqxSTJCgPG4u91Ae3N3uFWbNaPujWQJutd OSmPp7v8f5/Kz3X2rmVkGX7M0dH+GnBSvZosdXVnUXm7cXcgFPrsH+9auvK7rAql EgTUqXt3cnx49aEuoFwzqS9eLEpde0ELEyoWd9/DOYzRjbtYkVxE1mvZ1XpYWqFk cC4DJ/bAAk24jJiNFzw0hsAel3WVCG+wHnT/k/65uaHzhti/FYHkh4CciNW4hz1P BvDWZPfAtWQfQF8iO9C/XWo3Ek+/8Kq0 -----END CERTIFICATE-----Generated at Mon Jul 21 07:20:27 2025 by rpki-client