$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: JElflsaIVIBq6niPgvxSBRBYOdjGX87pjMzRszPJMsw= Subject key identifier: 7A:5C:DF:48:27:12:1B:E9:AB:1A:5E:FB:A8:B7:89:13:47:70:16:7D Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0934 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 12AB Signing time: Fri 18 Jul 2025 20:15:07 +0000 Manifest this update: Fri 18 Jul 2025 20:15:07 +0000 Manifest next update: Fri 25 Jul 2025 20:15:07 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: rUXfo2xduJgKQJ6CYtqE8Vxccv90F8ZegxZyUlcCobs=) 2: 38548A62EDC011EF82A1C85BC4F9AE02.roa (hash: U0zd0ajPJef71s0NXBX+K8FghsVdpyFA7/S7d/R/cG0=) 3: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: FTbrrJwavqP08/0mEs3AawfzqRid/QkcdkFOFXsnwUI=) 4: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: X9FUZvXw3xYym+gKphnPApVeFORX8RZUTOXm3OpSzcU=) 5: F585B320A4ED11EFBA65C13CC4F9AE02.roa (hash: SIPjhCdz0Zmm6RS8ib8g9TJ4IJCqMFvTR5HVH5hTjJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2356 (0x934) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Jul 18 20:15:07 2025 GMT Not After : Jul 25 20:15:07 2025 GMT Subject: CN=687aab4b-65e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:27:17:f7:d7:60:83:bb:17:c5:f1:5a:24: 4e:81:3c:87:44:30:da:56:d5:11:34:c4:f5:68:d0: c6:d4:e9:c4:2d:c1:82:ff:2b:27:78:18:70:8a:fc: b0:c9:2f:5b:d6:6e:41:38:42:58:92:12:23:87:80: 49:11:10:e2:8c:40:8d:5c:b9:79:d3:32:f2:23:0a: 3f:b2:5f:89:01:bd:8d:b6:f8:1d:0a:78:1f:d8:cc: 30:30:14:6e:08:3a:90:a8:15:c8:d3:88:ce:85:0d: b1:a7:5c:35:49:fb:93:7e:03:8d:01:19:b4:28:81: 2f:ec:94:29:df:c3:e2:1c:2b:0a:f2:b7:f9:f6:48: 99:b4:e5:e8:7f:00:9c:2d:ed:45:56:e6:d5:3b:c6: dd:3d:1a:7c:b9:e4:94:ac:13:4d:48:b9:13:f1:f9: 74:5c:8f:59:da:9b:93:44:05:8d:35:16:41:ec:a0: 53:2a:1a:a1:be:0e:1a:65:e1:7f:61:cf:b5:4f:6f: c3:26:43:d5:44:3d:e0:e4:09:d6:e2:bd:52:b8:72: 75:61:07:f1:a2:27:f1:16:f4:67:70:8f:97:26:52: 68:00:31:57:fe:d4:da:bd:d0:9e:b6:96:d1:73:9d: 55:a1:d0:67:50:65:4d:6a:48:b3:4b:98:25:da:7d: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5C:DF:48:27:12:1B:E9:AB:1A:5E:FB:A8:B7:89:13:47:70:16:7D X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:39:85:1a:bd:df:2e:f8:7a:19:7c:b6:28:03:27:01:00:24: 12:84:0e:b9:fc:0f:cb:05:ff:a6:5e:a1:e7:6c:b5:12:2f:93: 92:51:89:d7:2e:01:cd:92:af:82:24:1c:07:00:7c:66:39:4c: e1:f7:c7:e7:df:e5:9c:d4:a4:48:ba:44:9a:39:1a:af:d9:d0: ec:77:db:9a:9c:47:9a:86:f4:4f:aa:6a:c0:1f:ca:ad:44:27: 47:0c:be:55:ad:13:f4:92:0f:77:ac:93:48:26:67:25:fb:a5: 5e:7d:34:fe:ad:ee:ab:26:de:54:2f:ed:83:fa:dd:35:9d:39: 1d:aa:d7:03:3b:0b:53:51:8b:27:ca:47:d6:86:88:b6:31:6e: 60:34:6f:25:36:68:fb:bc:ee:b2:f1:a9:6a:45:b2:aa:d8:c2: 9c:14:14:e3:f2:45:75:ee:32:bc:a8:0b:23:84:d5:dd:18:c4: ab:e3:71:a2:0a:4c:50:0c:8a:ca:1b:40:38:bc:ee:ff:68:04: 85:82:4e:cb:89:3b:b8:44:07:aa:f3:e2:83:c0:15:f5:c1:a2: 07:5b:ac:1f:51:e4:a4:22:95:7a:8d:45:c8:c0:6d:35:a8:f2: 46:6f:32:be:5c:1f:f9:17:ce:b2:01:3e:26:c4:1f:fe:5a:a8: 07:88:06:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwNzE4MjAxNTA3WhcNMjUwNzI1MjAxNTA3WjAYMRYwFAYD VQQDEw02ODdhYWI0Yi02NWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyasnF/fXYIO7F8XxWiROgTyHRDDaVtURNMT1aNDG1OnELcGC/ysneBhwivyw yS9b1m5BOEJYkhIjh4BJERDijECNXLl50zLyIwo/sl+JAb2NtvgdCngf2MwwMBRu CDqQqBXI04jOhQ2xp1w1SfuTfgONARm0KIEv7JQp38PiHCsK8rf59kiZtOXofwCc Le1FVubVO8bdPRp8ueSUrBNNSLkT8fl0XI9Z2puTRAWNNRZB7KBTKhqhvg4aZeF/ Yc+1T2/DJkPVRD3g5AnW4r1SuHJ1YQfxoifxFvRncI+XJlJoADFX/tTavdCetpbR c51VodBnUGVNakizS5gl2n0pNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpc30gn Ehvpqxpe+6i3iRNHcBZ9MB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9OYUavd8u+HoZfLYoAycBACQShA65/A/LBf+mXqHnbLUSL5OSUYnX LgHNkq+CJBwHAHxmOUzh98fn3+Wc1KRIukSaORqv2dDsd9uanEeahvRPqmrAH8qt RCdHDL5VrRP0kg93rJNIJmcl+6VefTT+re6rJt5UL+2D+t01nTkdqtcDOwtTUYsn ykfWhoi2MW5gNG8lNmj7vO6y8alqRbKq2MKcFBTj8kV17jK8qAsjhNXdGMSr43Gi CkxQDIrKG0A4vO7/aASFgk7LiTu4RAeq8+KDwBX1waIHW6wfUeSkIpV6jUXIwG01 qPJGbzK+XB/5F86yAT4mxB/+WqgHiAYZ -----END CERTIFICATE-----Generated at Sun Jul 20 03:23:22 2025 by rpki-client