$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: zsZL21c09HWpgfKmGegwLG/qk0O70FnfPjjLhnuPZq4= Subject key identifier: 39:10:96:27:6C:DB:6F:A4:06:4C:FF:7B:70:6D:B6:6D:94:76:2D:1A Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0B6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0B5B Signing time: Sun 20 Jul 2025 19:12:09 +0000 Manifest this update: Sun 20 Jul 2025 19:12:08 +0000 Manifest next update: Sun 27 Jul 2025 19:12:08 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: Kx/0nJ3SbhKhyAwvTeKPhpG+0d+YmQtf9YM14c2kKfA=) 2: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: oocbcY3iFDyepn5SUv3wuDXzWJtrjmxt4UkH5Dd68Ak=) 3: 837821AA9B0811EDB5FDAF75C4F9AE02.roa (hash: kTlw3wh1lAf36RxrCeqt67ctmc2qb6ZS1z3/jQIhcLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2927 (0xb6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Jul 20 19:12:08 2025 GMT Not After : Jul 27 19:12:08 2025 GMT Subject: CN=687d3f88-252b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:96:6c:c9:ce:9a:d6:5e:02:73:9f:10:3e: 1a:8a:ed:dd:9c:3a:87:6d:21:33:ff:23:d0:05:72: 04:86:f8:93:a1:f0:99:8f:10:26:6c:97:fd:7d:5f: 21:18:96:b8:82:a1:bd:77:29:3e:ec:4c:54:8e:a1: 56:94:22:de:6d:f2:18:52:d9:49:34:af:5b:b8:58: 84:59:6d:86:f1:6f:dd:7b:a9:52:89:e6:48:06:7c: bb:2c:2b:a9:10:a5:3e:3b:81:bd:63:0b:70:3a:7a: d7:78:ce:35:fa:42:a7:74:74:8b:a9:09:91:90:98: 0c:e6:9b:b7:4c:ce:25:49:00:d3:2d:32:a6:89:30: e1:ac:52:00:de:95:f8:74:87:4c:40:cf:2e:83:2f: 01:25:48:1e:9f:b7:db:61:29:80:b1:74:fa:19:94: 79:90:21:4a:bb:6f:01:53:48:88:cf:e0:5c:c0:bb: e4:67:6b:42:94:fa:e6:98:db:19:71:7d:9b:2b:f0: 4a:eb:3a:69:29:65:aa:c5:d4:84:6a:5b:5b:4c:cc: 59:7d:aa:65:79:76:ae:03:d5:4e:09:e0:b5:1c:3c: 29:5f:3d:3d:a7:25:5b:97:81:53:46:40:77:6d:d0: 0e:45:c0:34:57:d7:44:32:88:e1:5f:2c:2b:00:b8: 85:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:10:96:27:6C:DB:6F:A4:06:4C:FF:7B:70:6D:B6:6D:94:76:2D:1A X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:df:ee:f9:81:01:1d:f1:9a:97:3b:c3:6a:5a:4b:38:55:35: 4e:de:c8:80:08:f8:81:5e:e6:c9:36:7c:c4:1b:be:6e:2f:2a: 2b:c5:cb:23:a0:e7:f7:98:7d:fa:9a:03:02:f5:58:24:06:8d: 8e:09:48:5e:75:0a:ee:60:34:35:56:e2:58:2c:c6:2b:ef:1a: e4:9e:17:68:00:63:ce:5b:11:9b:8b:74:77:a0:ff:f0:80:9c: 34:b7:9a:46:66:91:14:7c:87:56:7d:c3:ce:a9:26:2b:ac:80: bf:ba:d0:46:47:fe:34:e9:4b:0d:3a:49:fb:92:37:d7:5c:14: 5f:0b:a2:12:e0:eb:30:ae:62:82:59:a7:8e:21:43:3d:ed:54: d4:46:39:f5:33:02:45:5f:66:83:7a:b2:b9:42:0e:00:54:13: d6:7c:8d:fb:c7:cd:69:ba:c2:3a:c1:d2:39:0a:ab:bd:13:d9: 37:d9:52:37:54:ea:fa:35:26:c4:0f:b1:0d:78:86:00:74:7f: bd:56:fd:94:f8:80:45:02:0c:4e:72:a2:b0:a7:a0:6c:3e:57: a5:e6:35:b8:1b:32:08:e3:7e:fd:82:ac:db:e7:bd:a9:6f:74: f4:84:bd:07:32:89:fd:6a:5a:04:7a:03:3d:5e:f2:a5:cd:d0: 1b:6b:ec:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjUwNzIwMTkxMjA4WhcNMjUwNzI3MTkxMjA4WjAYMRYwFAYD VQQDEw02ODdkM2Y4OC0yNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx76WbMnOmtZeAnOfED4aiu3dnDqHbSEz/yPQBXIEhviTofCZjxAmbJf9fV8h GJa4gqG9dyk+7ExUjqFWlCLebfIYUtlJNK9buFiEWW2G8W/de6lSieZIBny7LCup EKU+O4G9YwtwOnrXeM41+kKndHSLqQmRkJgM5pu3TM4lSQDTLTKmiTDhrFIA3pX4 dIdMQM8ugy8BJUgen7fbYSmAsXT6GZR5kCFKu28BU0iIz+BcwLvkZ2tClPrmmNsZ cX2bK/BK6zppKWWqxdSEaltbTMxZfapleXauA9VOCeC1HDwpXz09pyVbl4FTRkB3 bdAORcA0V9dEMojhXywrALiFwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkQlids 22+kBkz/e3Bttm2Udi0aMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW3+75gQEd8ZqXO8NqWks4VTVO3siACPiBXubJNnzEG75uLyorxcsj oOf3mH36mgMC9VgkBo2OCUhedQruYDQ1VuJYLMYr7xrknhdoAGPOWxGbi3R3oP/w gJw0t5pGZpEUfIdWfcPOqSYrrIC/utBGR/406UsNOkn7kjfXXBRfC6IS4OswrmKC WaeOIUM97VTURjn1MwJFX2aDerK5Qg4AVBPWfI37x81pusI6wdI5Cqu9E9k32VI3 VOr6NSbED7ENeIYAdH+9Vv2U+IBFAgxOcqKwp6BsPlel5jW4GzII4379gqzb572p b3T0hL0HMon9aloEegM9XvKlzdAba+y2 -----END CERTIFICATE-----Generated at Mon Jul 21 07:02:21 2025 by rpki-client