$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: b6305aeOgCjsLQr6hGkFxxjLdQPmfWBBTC/eoB/56Gg= Subject key identifier: 40:3A:B1:81:2D:BD:75:83:0A:68:43:B1:65:37:4F:96:2F:76:DB:12 Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 03DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 03D8 Signing time: Sat 19 Jul 2025 00:59:54 +0000 Manifest this update: Sat 19 Jul 2025 00:59:53 +0000 Manifest next update: Sat 26 Jul 2025 00:59:53 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: XDThmpq9bQMcVQqb77OcWHTW59f33nepN0mU7xrNsr8=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 991 (0x3df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Jul 19 00:59:53 2025 GMT Not After : Jul 26 00:59:53 2025 GMT Subject: CN=687aee09-73e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:c1:88:ec:e0:ca:e9:b6:5a:b1:ce:a0:2a: d3:98:27:38:48:7a:7e:8b:68:4a:54:ee:0b:f4:e0: 17:c4:5a:96:41:21:9c:52:1f:ae:25:97:ab:fc:3c: c7:5a:7c:7b:d8:c0:53:b5:dc:78:f9:9b:33:71:d3: 4e:77:f8:f0:14:ad:cd:da:19:49:c2:37:f7:96:4a: bb:37:3b:94:54:48:d5:2d:2e:e3:8f:7d:d5:9a:38: 8b:06:4c:f4:b6:d5:12:b1:25:16:2f:da:36:be:52: 85:33:61:04:18:95:22:2b:bd:fe:b7:f6:4d:22:6d: db:07:ca:b1:95:8e:ca:25:c7:7f:f2:07:c6:cb:ac: 28:de:c5:2a:14:ee:19:f0:c5:80:ce:04:88:17:75: 3e:f2:8b:eb:79:c3:99:6d:56:2d:65:da:27:1a:15: 62:9d:52:59:39:ab:ad:27:91:4f:bd:d8:50:40:31: 4c:65:be:a3:ef:76:12:8e:5d:e0:e3:ae:f0:bf:94: 53:6e:a6:f1:72:f1:a0:71:8c:68:3c:7c:18:ec:63: 16:26:8a:b9:4c:19:09:68:66:f3:78:17:e4:45:ef: 41:b0:1a:79:c9:5b:a5:8b:bb:71:f5:a0:2f:0e:88: 7a:81:db:ab:b3:a4:ad:c3:75:9a:85:da:1b:1b:65: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3A:B1:81:2D:BD:75:83:0A:68:43:B1:65:37:4F:96:2F:76:DB:12 X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:eb:58:30:eb:5f:77:10:e3:e8:dd:3d:cb:9d:45:04:43:60: 36:82:73:fc:3d:38:3c:f9:38:bc:50:cf:7b:4b:0d:bb:be:a2: c8:7d:93:87:59:e3:0c:d2:93:2a:ec:9e:b1:9d:f8:ee:60:18: 22:be:1e:7c:82:4c:ba:77:a5:bf:bc:5e:3d:62:48:48:b2:af: 5e:e4:d5:f4:be:28:af:67:85:4f:eb:54:90:1b:1b:e9:09:de: 56:ec:6e:90:db:d3:20:70:75:49:65:76:c8:1d:0f:97:f2:ec: 08:5b:3f:ed:8d:e4:a6:88:1b:eb:dc:b5:f0:10:ad:96:82:07: 61:87:5f:0d:93:ac:c7:cb:03:77:06:c1:c5:2b:7a:09:2a:16: 40:6f:37:e1:01:37:f3:43:a8:66:a9:24:1c:6b:b1:c8:a9:13: 48:d2:8c:b8:f5:ce:04:88:dd:3c:34:63:5e:3c:ec:fe:ef:25: 0f:ea:aa:b4:c8:46:d3:ba:b6:f3:f8:2a:32:21:bb:88:36:d8: d0:1a:5a:c9:d1:4c:a9:6f:3b:a9:d1:46:37:75:62:5a:86:e8: 71:af:62:c8:fe:6c:9b:87:d9:d0:bd:80:8b:a2:81:91:d3:90: 81:e0:3a:6f:1d:08:d3:c9:53:e0:b1:23:05:5c:b1:27:af:01: e6:2d:cb:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjUwNzE5MDA1OTUzWhcNMjUwNzI2MDA1OTUzWjAYMRYwFAYD VQQDEw02ODdhZWUwOS03M2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxefBiOzgyum2WrHOoCrTmCc4SHp+i2hKVO4L9OAXxFqWQSGcUh+uJZer/DzH Wnx72MBTtdx4+ZszcdNOd/jwFK3N2hlJwjf3lkq7NzuUVEjVLS7jj33VmjiLBkz0 ttUSsSUWL9o2vlKFM2EEGJUiK73+t/ZNIm3bB8qxlY7KJcd/8gfGy6wo3sUqFO4Z 8MWAzgSIF3U+8ovrecOZbVYtZdonGhVinVJZOautJ5FPvdhQQDFMZb6j73YSjl3g 467wv5RTbqbxcvGgcYxoPHwY7GMWJoq5TBkJaGbzeBfkRe9BsBp5yVuli7tx9aAv Doh6gdurs6Stw3WahdobG2V5LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEA6sYEt vXWDCmhDsWU3T5YvdtsSMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+61gw6193EOPo3T3LnUUEQ2A2gnP8PTg8+Ti8UM97Sw27vqLIfZOH WeMM0pMq7J6xnfjuYBgivh58gky6d6W/vF49YkhIsq9e5NX0viivZ4VP61SQGxvp Cd5W7G6Q29MgcHVJZXbIHQ+X8uwIWz/tjeSmiBvr3LXwEK2Wggdhh18Nk6zHywN3 BsHFK3oJKhZAbzfhATfzQ6hmqSQca7HIqRNI0oy49c4EiN08NGNePOz+7yUP6qq0 yEbTurbz+CoyIbuINtjQGlrJ0Uypbzup0UY3dWJahuhxr2LI/mybh9nQvYCLooGR 05CB4DpvHQjTyVPgsSMFXLEnrwHmLcvl -----END CERTIFICATE-----Generated at Sun Jul 20 10:08:00 2025 by rpki-client