$ rpki-client -vvf rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft File: lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft (raw, json) Hash identifier: GTOY9JGe3PZy/sRZZE2l8LSwHBWG92soEZpF3Bn9868= Subject key identifier: C8:35:03:05:A0:F1:77:98:32:4A:C3:DD:29:B7:5D:4D:C5:A4:D9:6D Authority key identifier: 96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B Certificate issuer: /CN=A91818BD/serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft Manifest number: 02BC Signing time: Sat 19 Jul 2025 01:51:50 +0000 Manifest this update: Sat 19 Jul 2025 01:51:50 +0000 Manifest next update: Sat 26 Jul 2025 01:51:50 +0000 Files and hashes: 1: lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl (hash: DeUPFK5PF8Hp5PGETRWhqNAbAs/HG5xAppIuHHOy9r0=) 2: B83B7E0C065511EDB3E94E54C4F9AE02.roa (hash: tal6R2lkJBoeIIUyi6mdxCD2dqzkhyqrKbW//gzTT04=) 3: 481545DEFE8211ECBAB0E13FC4F9AE02.roa (hash: Qlo4+mbKJCym2bywU9/+B9nSR/lgPkj3tiR7WBd3VEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91818BD, serialNumber=96B80C37C6613D14A92CDBEC662821643E8AF11B Validity Not Before: Jul 19 01:51:50 2025 GMT Not After : Jul 26 01:51:50 2025 GMT Subject: CN=687afa36-0378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0b:48:b6:55:d5:38:df:bd:21:17:2a:99:74: 1a:e6:06:19:97:13:df:3f:07:85:03:a4:f0:ad:b6: e8:20:d8:1b:8c:ca:36:0f:1e:f8:8b:3e:bf:2d:08: 65:0b:2c:58:be:8e:f7:93:03:b6:b9:9d:02:22:95: d3:79:72:79:89:89:31:5c:88:30:6d:06:df:65:86: bc:2e:5d:94:e4:13:0a:d0:cb:61:0b:23:f7:58:c5: ec:ce:f2:4b:79:53:ec:75:a1:74:1e:15:91:80:53: 64:c4:6b:10:2c:81:2f:f3:94:3a:46:06:bb:55:79: 22:84:99:c0:90:5c:f5:7d:7e:ed:2c:77:43:b7:80: b6:bb:ae:f8:35:7a:04:63:92:a9:3c:df:b2:71:fc: 02:60:af:54:83:24:9c:ea:55:32:07:23:ba:07:db: ba:11:b6:4a:1a:3b:10:25:aa:95:59:20:3a:66:0b: a5:bd:89:94:f6:c5:31:50:c1:3c:2f:3e:e2:a0:f1: 56:02:f8:af:cd:63:d2:92:d6:d5:62:58:b9:ef:86: 1f:3c:ec:6c:c0:6a:be:34:09:d7:3a:07:24:09:bc: c2:02:97:84:5b:e6:49:1d:83:9a:8b:9a:3f:96:35: 79:ec:79:d1:62:22:1b:24:da:3b:39:2a:10:0c:8b: 7a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:35:03:05:A0:F1:77:98:32:4A:C3:DD:29:B7:5D:4D:C5:A4:D9:6D X509v3 Authority Key Identifier: keyid:96:B8:0C:37:C6:61:3D:14:A9:2C:DB:EC:66:28:21:64:3E:8A:F1:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrgMN8ZhPRSpLNvsZighZD6K8Rs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91818BD/414D5BDAFE8011EC9F317A3FC4F9AE02/lrgMN8ZhPRSpLNvsZighZD6K8Rs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d5:bd:74:85:87:5f:1f:98:62:5d:d8:06:2f:3a:0b:c3:2c: 0f:59:e7:85:ff:f2:bf:19:a6:7e:46:91:23:ca:c0:d1:15:2a: 82:98:46:6f:08:42:cf:76:4d:54:df:75:b1:56:62:cc:a2:da: c3:0f:f5:5a:ce:c8:92:e6:61:53:8c:71:15:e8:1a:bd:c3:da: 2b:e4:3f:58:34:e1:e5:f7:8f:93:43:3b:e0:b7:22:ef:42:74: 98:5b:e2:91:3e:38:e7:e8:7a:dc:a3:21:ab:05:1e:0d:8a:98: da:56:1f:ee:3c:2f:04:ea:17:ea:ac:35:72:38:1a:f8:48:44: cb:6c:17:0d:60:32:14:29:39:75:99:9f:79:44:17:19:6c:28: a3:31:bf:24:2e:9f:d2:a4:20:4e:b1:2d:64:2b:ac:c8:e4:3e: 02:67:d2:08:ce:00:33:43:6c:df:35:75:8a:4a:6e:b7:6a:40: 2f:96:98:5a:01:92:03:a3:d0:64:57:ec:0e:b2:25:0d:d2:06: c3:98:e7:d4:04:d0:32:aa:58:3a:e7:2e:51:5b:71:9f:f3:51: 0f:cc:2a:6d:65:cd:42:3c:d1:8c:ce:82:53:6a:1e:cf:74:82: ee:3a:ca:0c:3d:00:f0:62:d3:49:c0:ba:cc:fa:b4:9a:3b:be: 56:f5:6e:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE4QkQxMTAvBgNVBAUTKDk2QjgwQzM3QzY2MTNEMTRBOTJDREJFQzY2MjgyMTY0 M0U4QUYxMUIwHhcNMjUwNzE5MDE1MTUwWhcNMjUwNzI2MDE1MTUwWjAYMRYwFAYD VQQDEw02ODdhZmEzNi0wMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQtItlXVON+9IRcqmXQa5gYZlxPfPweFA6TwrbboINgbjMo2Dx74iz6/LQhl CyxYvo73kwO2uZ0CIpXTeXJ5iYkxXIgwbQbfZYa8Ll2U5BMK0MthCyP3WMXszvJL eVPsdaF0HhWRgFNkxGsQLIEv85Q6Rga7VXkihJnAkFz1fX7tLHdDt4C2u674NXoE Y5KpPN+ycfwCYK9UgySc6lUyByO6B9u6EbZKGjsQJaqVWSA6ZgulvYmU9sUxUME8 Lz7ioPFWAvivzWPSktbVYli574YfPOxswGq+NAnXOgckCbzCApeEW+ZJHYOai5o/ ljV57HnRYiIbJNo7OSoQDIt6FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMg1AwWg 8XeYMkrD3Sm3XU3FpNltMB8GA1UdIwQYMBaAFJa4DDfGYT0UqSzb7GYoIWQ+ivEb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MThCRC80MTRENUJEQUZF ODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBSU3BMTnZzWmlnaFpENks4 UnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyZ01OOFpoUFJTcExOdnNaaWdoWkQ2SzhScy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MThCRC80MTRENUJEQUZFODAxMUVDOUYzMTdBM0ZDNEY5QUUwMi9scmdNTjhaaFBS U3BMTnZzWmlnaFpENks4UnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj1b10hYdfH5hiXdgGLzoLwywPWeeF//K/GaZ+RpEjysDRFSqCmEZv CELPdk1U33WxVmLMotrDD/VazsiS5mFTjHEV6Bq9w9or5D9YNOHl94+TQzvgtyLv QnSYW+KRPjjn6HrcoyGrBR4NipjaVh/uPC8E6hfqrDVyOBr4SETLbBcNYDIUKTl1 mZ95RBcZbCijMb8kLp/SpCBOsS1kK6zI5D4CZ9IIzgAzQ2zfNXWKSm63akAvlpha AZIDo9BkV+wOsiUN0gbDmOfUBNAyqlg65y5RW3Gf81EPzCptZc1CPNGMzoJTah7P dILuOsoMPQDwYtNJwLrM+rSaO75W9W71 -----END CERTIFICATE-----Generated at Sun Jul 20 07:35:24 2025 by rpki-client