$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json) Hash identifier: r9ptwItnXwyipMAOLx0zX1TPdUvz2jXXqfSflSyEgqE= Subject key identifier: A8:8E:67:54:18:84:6A:59:31:35:4F:D6:24:49:E2:1D:AF:08:20:D5 Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft Manifest number: 0215 Signing time: Sat 19 Jul 2025 02:24:13 +0000 Manifest this update: Sat 19 Jul 2025 02:24:13 +0000 Manifest next update: Sat 26 Jul 2025 02:24:13 +0000 Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: uU/7aC+cSFUGsZJIqYobSSX0HN2JE33IVdhg+duttlc=) 2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: Bpmtc+dst8i9fWSSTK2qFRlGSZiBtVfIZ/yU5akTF90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: Jul 19 02:24:13 2025 GMT Not After : Jul 26 02:24:13 2025 GMT Subject: CN=687b01cd-9b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:44:d7:ab:11:ce:c8:b6:e6:59:c3:b5:a9:fc: ba:66:53:07:5b:b6:67:a0:3c:10:45:80:f7:55:df: 00:5b:7d:66:c4:2e:e7:fb:8c:4d:59:8f:39:fd:74: 77:4b:5f:1c:04:56:9e:48:06:e4:c0:9f:75:f9:3c: b1:a2:32:46:7a:ce:02:04:d1:74:83:1b:e8:33:6f: 05:44:c6:58:1c:59:5c:ae:07:ce:50:1f:b4:7b:ae: 56:10:cd:20:16:2a:30:99:c7:3a:24:0e:e0:20:2d: 52:7c:58:82:7b:25:1a:cd:77:f3:9e:3f:e9:0a:f2: 86:da:ec:85:43:84:45:d8:b2:2c:6c:ef:75:6f:44: 36:4f:c4:8a:fb:27:be:a4:3f:3a:70:82:8a:2c:1c: fc:88:bf:38:61:28:19:33:c6:41:f3:b4:ff:5b:2c: 3a:a2:05:f8:53:dc:b5:3b:d1:37:bf:36:72:56:9d: ba:91:54:56:40:f7:f8:f1:e0:6f:62:1a:1b:78:b1: 42:21:14:2f:cb:c0:c6:0a:72:45:39:ea:d3:c7:a0: a3:f7:7f:73:7c:10:62:65:2d:ca:27:d5:e2:fe:ea: a2:7c:b5:b2:85:dd:d2:fb:91:1c:03:1e:f8:52:d1: 55:1d:64:fd:f4:33:dd:35:5b:6b:3c:5e:68:e7:e9: 43:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8E:67:54:18:84:6A:59:31:35:4F:D6:24:49:E2:1D:AF:08:20:D5 X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:7e:02:a2:fd:3e:d7:2f:e0:e9:76:7e:a6:8e:ec:42:4e:ee: eb:1a:11:dd:a6:4c:3a:b1:08:4e:06:af:0a:2f:31:cc:6a:ca: c2:3a:17:92:8c:76:cd:5e:f1:c4:54:4a:6e:3a:06:fe:1a:1f: e0:29:91:ec:15:a8:b0:e5:49:d2:e5:4e:17:cd:7e:88:82:d0: e2:05:ad:4d:92:fd:0f:7a:2c:09:c0:06:2d:12:62:68:a0:71: ac:d3:39:35:af:92:25:1c:b7:86:13:4f:6f:1a:15:ac:34:b8: 3a:c4:85:68:94:30:fd:9a:fe:22:a4:44:7a:39:37:16:91:f2: 96:b7:6c:8e:49:8b:8b:d8:b7:77:78:b6:16:ee:c5:b1:28:15: 3c:e8:ac:6b:f5:ca:ab:14:e4:6b:13:23:c3:44:20:06:ad:a6: 03:bf:58:de:b8:87:4c:b7:97:c2:67:ca:05:11:e8:2d:d3:0d: cc:8d:89:5c:66:eb:87:95:92:f2:7f:c0:9f:0a:2a:cd:44:fd: 5e:72:ff:1f:b6:31:6c:1e:d9:a2:94:01:3c:96:72:07:b8:bc: ad:be:9d:17:68:8f:bb:39:1e:59:b0:04:0a:be:4a:5e:01:25: 79:0c:ff:4c:db:78:a8:dc:c8:15:3b:f8:b0:3c:eb:4a:60:ac: 41:69:6d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjUwNzE5MDIyNDEzWhcNMjUwNzI2MDIyNDEzWjAYMRYwFAYD VQQDEw02ODdiMDFjZC05YjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ETXqxHOyLbmWcO1qfy6ZlMHW7ZnoDwQRYD3Vd8AW31mxC7n+4xNWY85/XR3 S18cBFaeSAbkwJ91+TyxojJGes4CBNF0gxvoM28FRMZYHFlcrgfOUB+0e65WEM0g Fiowmcc6JA7gIC1SfFiCeyUazXfznj/pCvKG2uyFQ4RF2LIsbO91b0Q2T8SK+ye+ pD86cIKKLBz8iL84YSgZM8ZB87T/Wyw6ogX4U9y1O9E3vzZyVp26kVRWQPf48eBv YhobeLFCIRQvy8DGCnJFOerTx6Cj939zfBBiZS3KJ9Xi/uqifLWyhd3S+5EcAx74 UtFVHWT99DPdNVtrPF5o5+lDVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiOZ1QY hGpZMTVP1iRJ4h2vCCDVMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1QS8wQUVGMEZEODNFMzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8t OWozbWdfUWtKSUpBLTNJcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyfgKi/T7XL+Dpdn6mjuxCTu7rGhHdpkw6sQhOBq8KLzHMasrCOheS jHbNXvHEVEpuOgb+Gh/gKZHsFaiw5UnS5U4XzX6IgtDiBa1Nkv0PeiwJwAYtEmJo oHGs0zk1r5IlHLeGE09vGhWsNLg6xIVolDD9mv4ipER6OTcWkfKWt2yOSYuL2Ld3 eLYW7sWxKBU86Kxr9cqrFORrEyPDRCAGraYDv1jeuIdMt5fCZ8oFEegt0w3MjYlc ZuuHlZLyf8CfCirNRP1ecv8ftjFsHtmilAE8lnIHuLytvp0XaI+7OR5ZsAQKvkpe ASV5DP9M23io3MgVO/iwPOtKYKxBaW2P -----END CERTIFICATE-----Generated at Sun Jul 20 06:14:56 2025 by rpki-client