$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json) Hash identifier: evuQQDY9UDFLr6M9HqKR/S9WDXphSnZFCI7GtlUQn1o= Subject key identifier: 0E:0A:EF:0A:23:DB:60:03:6A:25:B1:0B:F3:7D:7A:98:2F:1E:8E:F4 Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft Manifest number: 0188 Signing time: Mon 21 Jul 2025 03:35:07 +0000 Manifest this update: Mon 21 Jul 2025 03:35:07 +0000 Manifest next update: Mon 28 Jul 2025 03:35:07 +0000 Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: N5PgJBqWG/JFJHqXjTpy5wEgAnQ4YlCfm0jH8wAdOCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Validity Not Before: Jul 21 03:35:07 2025 GMT Not After : Jul 28 03:35:07 2025 GMT Subject: CN=687db56b-5149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:9d:0d:2c:aa:e4:27:60:b6:42:60:8c:dc: 62:4f:69:31:63:33:af:53:c9:67:4b:3e:65:34:43: 8e:bd:d1:7e:96:17:21:74:7e:53:c3:47:23:54:04: 8a:aa:0d:b0:c4:97:fe:30:e7:57:b6:9b:e0:73:0d: 07:df:c7:8b:3e:b1:2a:1f:4c:b9:09:d8:39:38:d1: a1:3f:9f:79:f7:1c:c1:68:fd:a8:27:d1:2f:50:71: 94:5f:eb:5e:ae:b2:1e:e9:c8:64:36:48:5d:03:16: 4c:6f:81:1e:f5:96:54:d6:bf:2d:37:3a:58:81:02: 6d:f6:bd:dd:6c:06:21:b5:d8:c0:79:6c:24:fc:7e: f1:06:3b:99:e5:d1:72:9a:07:e4:5d:c4:1c:ba:28: 5c:64:98:1c:4c:79:3b:07:ac:53:a7:44:eb:bb:c1: b0:7e:aa:33:cc:86:89:ae:23:ad:5a:dd:e8:e9:21: a5:ba:80:f2:f6:de:cc:5f:21:85:53:2a:80:f5:fc: eb:79:bf:9d:75:ed:74:7c:bb:02:16:0f:7b:58:13: 56:bb:27:0c:af:79:7a:4a:01:5d:28:b6:6c:49:6e: 84:e9:b2:44:8f:3e:a1:13:3c:d4:17:1e:66:d1:57: 56:2c:97:d7:e9:f5:62:7d:1c:4d:4e:42:06:fd:78: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:0A:EF:0A:23:DB:60:03:6A:25:B1:0B:F3:7D:7A:98:2F:1E:8E:F4 X509v3 Authority Key Identifier: keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:4d:c5:60:79:94:61:c8:9d:54:11:8a:d1:bb:f3:9b:8d:43: 24:f2:28:b0:3e:c3:af:38:83:ad:93:f9:f2:e2:1c:aa:bc:7b: 65:11:7e:c0:d2:8d:e8:3a:59:2d:56:cf:7b:95:b9:a3:12:f2: 83:b4:17:0e:3b:3d:83:12:8c:92:ca:3a:6f:51:d7:e2:76:87: a9:67:1f:0b:05:a4:22:fa:1c:0c:4c:3a:89:da:d6:45:c1:8f: cc:44:ac:38:1e:c5:c7:e5:7f:1f:89:b9:aa:64:85:3d:17:dc: f6:ec:e4:fa:a2:84:87:27:a1:14:60:33:09:42:f4:72:37:fa: ef:62:69:c1:4a:2c:66:55:18:76:63:1c:a7:d0:48:b6:e4:1d: 10:80:52:9f:d5:70:75:4b:8b:5e:25:dc:08:a1:a0:c8:e7:b8: d4:02:2e:8e:b2:ae:02:6c:f8:f6:17:ff:f2:5d:69:5b:81:71: 1d:25:2e:74:0a:eb:f6:5e:b8:9b:42:fb:0a:14:5f:d8:45:8c: ad:73:e0:33:01:e9:15:fa:7e:2e:44:c5:c6:f2:3b:c2:d7:6f: 24:64:e2:21:af:b6:e8:1f:a2:03:96:31:27:f4:df:e8:6f:21: 42:7e:5f:66:95:ef:14:37:f2:ac:e2:f0:fa:7f:81:2c:12:13: bc:05:a0:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDMxMTAvBgNVBAUTKDc1QUI0QjhEQjMwMTUzQkQ3MjZDRjlGOTYyNTBCRTA0 MDREODhCMUEwHhcNMjUwNzIxMDMzNTA3WhcNMjUwNzI4MDMzNTA3WjAYMRYwFAYD VQQDEw02ODdkYjU2Yi01MTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4OdDSyq5CdgtkJgjNxiT2kxYzOvU8lnSz5lNEOOvdF+lhchdH5Tw0cjVASK qg2wxJf+MOdXtpvgcw0H38eLPrEqH0y5Cdg5ONGhP5959xzBaP2oJ9EvUHGUX+te rrIe6chkNkhdAxZMb4Ee9ZZU1r8tNzpYgQJt9r3dbAYhtdjAeWwk/H7xBjuZ5dFy mgfkXcQcuihcZJgcTHk7B6xTp0Tru8GwfqozzIaJriOtWt3o6SGluoDy9t7MXyGF UyqA9fzreb+dde10fLsCFg97WBNWuycMr3l6SgFdKLZsSW6E6bJEjz6hEzzUFx5m 0VdWLJfX6fVifRxNTkIG/Xg2cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4K7woj 22ADaiWxC/N9epgvHo70MB8GA1UdIwQYMBaAFHWrS42zAVO9cmz5+WJQvgQE2Isa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENEMy83RjYwMEVDQTA4 RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3MXliUG41WWxDLUJBVFlp eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhdExqYk1CVTcxeWJQbjVZbEMtQkFUWWl4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENEMy83RjYwMEVDQTA4RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3 MXliUG41WWxDLUJBVFlpeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiTcVgeZRhyJ1UEYrRu/ObjUMk8iiwPsOvOIOtk/ny4hyqvHtlEX7A 0o3oOlktVs97lbmjEvKDtBcOOz2DEoySyjpvUdfidoepZx8LBaQi+hwMTDqJ2tZF wY/MRKw4HsXH5X8fibmqZIU9F9z27OT6ooSHJ6EUYDMJQvRyN/rvYmnBSixmVRh2 Yxyn0Ei25B0QgFKf1XB1S4teJdwIoaDI57jUAi6Osq4CbPj2F//yXWlbgXEdJS50 Cuv2XribQvsKFF/YRYytc+AzAekV+n4uRMXG8jvC128kZOIhr7boH6IDljEn9N/o byFCfl9mle8UN/Ks4vD6f4EsEhO8BaCO -----END CERTIFICATE-----Generated at Mon Jul 21 05:41:33 2025 by rpki-client