$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: FYEMa55AApwc5H5Rx8krzcMN37PmcFMFWr6zPVHuPUg= Subject key identifier: 27:DE:87:89:46:4E:E7:22:15:8E:B4:9B:06:85:A7:1A:57:90:84:DF Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 0885 Signing time: Sun 20 Jul 2025 20:43:19 +0000 Manifest this update: Sun 20 Jul 2025 20:43:18 +0000 Manifest next update: Sun 27 Jul 2025 20:43:18 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: fjgW6UKOinSzwTfbiuBeUMwJo87XcHHO7l9LRtBmchQ=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: qM1JVSXdUTQJnIVxaVxQsaSGw94EgaLnOqmc/M2SNDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: Jul 20 20:43:18 2025 GMT Not After : Jul 27 20:43:18 2025 GMT Subject: CN=687d54e6-08e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:36:e1:0a:d7:b8:69:70:72:ec:bf:df:aa: 49:1d:ae:f1:50:6d:80:23:74:4d:31:cd:85:a4:c9: 61:9b:7a:54:04:56:98:73:0f:6e:aa:9c:29:cc:40: e4:70:a2:ae:c2:51:b3:52:79:24:fb:2d:9c:7e:a4: 77:a9:f9:39:22:f8:61:64:8e:ab:6a:26:85:af:c2: ee:27:0b:9c:56:60:ea:c8:ef:ac:1e:58:f9:bb:f1: 2b:08:60:18:4d:25:f9:65:14:2d:a8:83:ac:eb:95: 31:2a:d7:81:2d:15:61:c6:cb:ad:53:0b:cc:2f:5e: 2d:de:fe:54:90:15:65:e7:af:66:84:1d:9d:7a:a6: 16:57:b9:3c:99:d2:eb:3b:48:33:ae:47:b3:1e:be: 63:7b:ad:d0:7c:7b:a9:93:39:db:39:5a:cd:ca:47: 2e:32:83:e9:bc:bb:2c:c8:37:50:a5:70:53:8e:68: 4e:c7:49:c9:f8:1f:e0:92:f1:ef:89:d5:6a:28:55: 44:26:68:33:62:7d:8e:0f:3e:69:bd:46:69:bf:5c: d3:93:78:fa:17:3f:db:dd:b4:3c:af:b6:a7:bb:20: c6:10:b2:f4:d4:d3:e3:8f:98:1b:9a:a0:96:5d:65: e3:d9:75:ec:5d:95:b7:22:45:70:20:68:38:45:d0: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DE:87:89:46:4E:E7:22:15:8E:B4:9B:06:85:A7:1A:57:90:84:DF X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c9:77:5f:13:be:96:3a:db:cd:41:12:2e:90:d9:51:d7:c5: b4:de:6f:db:f6:4b:14:9a:17:98:d7:a5:4e:6f:2c:72:f2:b0: 69:75:0f:c7:f9:67:11:f5:90:07:41:ad:45:9c:71:11:8d:f6: d1:69:dc:98:62:c0:d8:93:38:63:6a:72:3d:43:65:2c:11:17: a7:e1:65:f9:af:d1:5f:b5:5b:e3:41:25:db:cf:a4:63:15:76: 6f:90:62:ad:dc:85:00:a3:13:4e:c2:64:51:b2:2c:ce:a4:76: 5c:8f:58:33:a4:5c:ce:b5:e5:b8:67:e6:48:66:4b:7b:55:9a: 67:1d:f4:40:99:fe:3c:0e:7c:8a:07:a3:6b:46:0e:b2:21:9e: ce:62:72:b5:b7:3d:d5:66:40:4a:be:f6:0c:70:70:66:83:c0: ab:a4:84:ee:ca:05:2b:5e:eb:39:78:da:cb:25:9b:82:40:63: 43:9f:b2:bc:09:95:c5:a6:d6:41:a6:25:13:3b:cf:8d:3c:5e: 70:91:73:cc:7e:5d:32:32:b2:33:8d:52:bd:63:87:87:cb:92: e8:b8:dc:7a:58:70:bd:1d:67:6c:2f:d7:44:57:76:57:7f:e0: 35:0c:18:95:ff:ea:5d:17:03:ff:1d:92:c4:6b:41:8f:42:32: 95:94:e3:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjUwNzIwMjA0MzE4WhcNMjUwNzI3MjA0MzE4WjAYMRYwFAYD VQQDEw02ODdkNTRlNi0wOGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbQ24QrXuGlwcuy/36pJHa7xUG2AI3RNMc2FpMlhm3pUBFaYcw9uqpwpzEDk cKKuwlGzUnkk+y2cfqR3qfk5IvhhZI6raiaFr8LuJwucVmDqyO+sHlj5u/ErCGAY TSX5ZRQtqIOs65UxKteBLRVhxsutUwvML14t3v5UkBVl569mhB2deqYWV7k8mdLr O0gzrkezHr5je63QfHupkznbOVrNykcuMoPpvLssyDdQpXBTjmhOx0nJ+B/gkvHv idVqKFVEJmgzYn2ODz5pvUZpv1zTk3j6Fz/b3bQ8r7anuyDGELL01NPjj5gbmqCW XWXj2XXsXZW3IkVwIGg4RdDs/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfeh4lG TuciFY60mwaFpxpXkITfMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClyXdfE76WOtvNQRIukNlR18W03m/b9ksUmheY16VObyxy8rBpdQ/H +WcR9ZAHQa1FnHERjfbRadyYYsDYkzhjanI9Q2UsERen4WX5r9FftVvjQSXbz6Rj FXZvkGKt3IUAoxNOwmRRsizOpHZcj1gzpFzOteW4Z+ZIZkt7VZpnHfRAmf48DnyK B6NrRg6yIZ7OYnK1tz3VZkBKvvYMcHBmg8CrpITuygUrXus5eNrLJZuCQGNDn7K8 CZXFptZBpiUTO8+NPF5wkXPMfl0yMrIzjVK9Y4eHy5LouNx6WHC9HWdsL9dEV3ZX f+A1DBiV/+pdFwP/HZLEa0GPQjKVlOM4 -----END CERTIFICATE-----Generated at Mon Jul 21 13:27:48 2025 by rpki-client