$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json) Hash identifier: 7DQgifut73a72Ejdwo1s0mq24WzPxWgZiHcQIA0We00= Subject key identifier: 42:57:62:C6:C5:3F:B6:D5:3B:2E:05:F2:02:B6:22:A7:3E:A1:10:94 Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Certificate serial: 088B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft Manifest number: 0883 Signing time: Tue 22 Jul 2025 20:51:16 +0000 Manifest this update: Tue 22 Jul 2025 20:51:16 +0000 Manifest next update: Tue 29 Jul 2025 20:51:16 +0000 Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: dYQ5lWzikFoR87d52ALUMLABswa64XaukCXeJAEClAI=) 2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: nVx5Y0jzC9bHhMI0JsTAXXHXSiIymADxDx7MlszHZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Validity Not Before: Jul 22 20:51:16 2025 GMT Not After : Jul 29 20:51:16 2025 GMT Subject: CN=687ff9c4-a881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:82:c5:45:2f:ba:22:6c:78:9e:ae:30:6a: dc:40:60:c5:13:50:60:a6:8f:8f:ee:5e:6b:52:71: 92:29:84:58:c5:50:1e:98:48:23:48:7d:32:de:0c: cd:a2:7f:4f:a3:c2:13:73:f3:7b:d5:17:33:4a:54: 63:ea:3b:aa:8f:29:0b:ef:62:7a:53:51:0b:01:17: d5:d5:7e:03:5d:ff:b7:a7:ce:da:5e:b4:1f:75:9d: e2:be:83:2d:ac:84:14:18:a1:45:be:b3:73:2a:ef: 8d:79:1a:0c:3d:b1:b1:b2:44:ba:c6:2a:0e:4e:38: ba:e7:67:16:bd:94:18:8f:7c:d2:79:fc:88:ff:89: 40:11:1e:8d:79:17:b7:ae:06:23:b5:e6:8b:dc:2b: 2b:43:cd:1c:16:da:43:31:80:8a:40:71:de:c1:ed: 55:a6:65:38:27:5e:af:15:99:d6:14:4d:95:58:9d: 80:6e:68:68:d9:31:f2:69:06:24:71:2b:fb:0f:ce: 23:79:d3:aa:1c:e2:b5:e6:d1:eb:7b:00:71:9a:51: 2f:cd:65:1f:62:c1:57:eb:2c:d6:b4:d4:f3:e8:c8: 2e:e3:7d:b2:6a:b5:ac:c9:cd:33:9e:7f:67:bd:aa: 96:7e:1a:46:2f:38:a8:40:8b:dc:5c:dc:92:d7:67: 0d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:57:62:C6:C5:3F:B6:D5:3B:2E:05:F2:02:B6:22:A7:3E:A1:10:94 X509v3 Authority Key Identifier: keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:89:c4:bd:d0:81:c0:70:de:45:e4:2b:1b:16:07:bb:df:bf: 42:55:22:3c:78:8d:b8:f8:76:e5:c8:54:1b:9f:44:74:bd:ad: e0:1d:25:bc:19:b5:d8:03:5b:39:99:23:91:12:4f:85:87:b7: 25:d0:9f:50:7c:62:9d:86:38:d3:20:91:e1:02:71:10:ee:e0: 22:b7:ea:ee:25:64:25:aa:96:2b:c9:cd:59:fe:17:01:30:7d: b2:fe:a9:43:44:22:ce:3a:c5:7e:d7:43:c3:c9:fb:a8:7f:ce: 15:34:1d:17:a3:6b:62:1c:25:c7:60:16:81:ea:69:10:dc:00: 2a:25:0a:fb:70:88:32:c2:cf:69:9d:67:bf:68:47:9c:f5:a1: 5b:a7:ac:f4:7a:92:3c:30:60:35:e8:45:a2:e4:e1:85:27:4e: 99:2d:0f:19:54:13:6e:0c:53:fd:d0:ed:cf:c6:4e:97:9d:f2: 13:c2:55:92:6c:ea:92:a3:90:bc:2c:31:b9:15:32:73:4c:06: 75:6b:d7:67:60:78:05:22:06:f1:a2:75:3a:52:cc:f0:53:f3: 06:aa:77:ab:aa:18:02:c4:fb:07:41:74:96:92:76:3d:8a:0d: 50:2e:ab:ac:b1:56:c2:01:0a:61:ca:6a:bc:25:9f:13:9e:47: f0:b4:4d:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwRjMxMTAvBgNVBAUTKEIwQjQwMDc2NTJGQjNEMTQzMjg4MTNCM0U1N0VFRkYx Nzc1OUNGRjIwHhcNMjUwNzIyMjA1MTE2WhcNMjUwNzI5MjA1MTE2WjAYMRYwFAYD VQQDEw02ODdmZjljNC1hODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXeCxUUvuiJseJ6uMGrcQGDFE1Bgpo+P7l5rUnGSKYRYxVAemEgjSH0y3gzN on9Po8ITc/N71RczSlRj6juqjykL72J6U1ELARfV1X4DXf+3p87aXrQfdZ3ivoMt rIQUGKFFvrNzKu+NeRoMPbGxskS6xioOTji652cWvZQYj3zSefyI/4lAER6NeRe3 rgYjteaL3CsrQ80cFtpDMYCKQHHewe1VpmU4J16vFZnWFE2VWJ2Abmho2THyaQYk cSv7D84jedOqHOK15tHrewBxmlEvzWUfYsFX6yzWtNTz6Mgu432yarWsyc0znn9n vaqWfhpGLzioQIvcXNyS12cNeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJXYsbF P7bVOy4F8gK2Iqc+oRCUMB8GA1UdIwQYMBaAFLC0AHZS+z0UMogTs+V+7/F3Wc/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTBGMy84RTFDMUU3NkM1 NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BSUXlpQk96NVg3djhYZFp6 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMUUFkbEw3UFJReWlCT3o1WDd2OFhkWnpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTBGMy84RTFDMUU3NkM1NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BS UXlpQk96NVg3djhYZFp6X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQicS90IHAcN5F5CsbFge7379CVSI8eI24+HblyFQbn0R0va3gHSW8 GbXYA1s5mSOREk+Fh7cl0J9QfGKdhjjTIJHhAnEQ7uAit+ruJWQlqpYryc1Z/hcB MH2y/qlDRCLOOsV+10PDyfuof84VNB0Xo2tiHCXHYBaB6mkQ3AAqJQr7cIgyws9p nWe/aEec9aFbp6z0epI8MGA16EWi5OGFJ06ZLQ8ZVBNuDFP90O3Pxk6XnfITwlWS bOqSo5C8LDG5FTJzTAZ1a9dnYHgFIgbxonU6UszwU/MGqnerqhgCxPsHQXSWknY9 ig1QLqussVbCAQphymq8JZ8TnkfwtE0B -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:52 2025 by rpki-client