$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json) Hash identifier: kKTlxEa+TI+OdwkPZeR1kR5UHiIst+Po8GtwVbrpHJQ= Subject key identifier: 49:19:24:FF:F3:E8:30:50:16:D1:B7:D9:38:AB:71:B7:C1:BC:E7:33 Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0E77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft Manifest number: 0E66 Signing time: Sun 20 Jul 2025 17:46:16 +0000 Manifest this update: Sun 20 Jul 2025 17:46:16 +0000 Manifest next update: Sun 27 Jul 2025 17:46:16 +0000 Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: NBjEj7IUbxRp2A54rQBBlIttiPg5nSnWpLZSa/KOPsA=) 2: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: J9DgdD9cL2JfNJGX2KpEbeL9xCo98zH1CjpWmw6WEyg=) 3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: fVjIBFUgnQxd9qxxnDI3HntLIaXeeQgbbHy+hbpb2zg=) 4: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: oySlLPz0K/UmHCqFTFPFIY5DaigueFo/oV/JPUia/uU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3703 (0xe77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: Jul 20 17:46:16 2025 GMT Not After : Jul 27 17:46:16 2025 GMT Subject: CN=687d2b68-fd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:66:f5:37:d4:04:f2:8c:64:4d:5b:4f:f4: 67:c2:20:0d:7d:51:d7:b3:cc:f4:ee:ad:fc:8a:e6: 3f:54:51:ec:08:7b:eb:d5:f5:1a:98:b2:0d:69:79: 32:23:af:b5:a7:24:5f:31:e9:9f:39:79:78:89:8f: 22:e5:38:b7:b1:a9:de:7a:54:47:61:26:7d:85:07: 02:34:8f:85:52:ee:a2:26:53:57:1d:c9:55:15:f9: 02:63:75:8a:44:65:a3:d5:bb:86:85:3d:2d:ed:92: fe:44:ca:e5:04:c8:7a:8a:33:67:15:1f:15:64:dd: 8e:23:61:f4:b8:02:96:8c:ea:89:85:9b:c1:f2:b4: e5:3d:86:f9:bb:b7:e6:9e:10:35:c0:fd:fa:e9:b3: 93:c1:eb:8d:f8:ec:38:e7:d2:8a:14:95:c3:81:95: 49:ec:cc:df:40:d0:6a:c2:98:71:36:5c:6b:9a:0d: 11:4c:79:19:a4:36:5b:61:2d:5d:b5:d9:37:95:a7: 5a:6d:82:96:a9:a1:98:1e:14:e6:31:cf:36:31:c6: 86:47:99:28:22:b5:80:f7:d9:c8:f2:46:6e:1e:4e: 96:7b:44:27:1e:37:97:91:89:b3:fb:3b:02:87:2b: a5:27:47:f1:5e:8d:c6:c1:aa:e8:a7:2a:51:2d:53: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:19:24:FF:F3:E8:30:50:16:D1:B7:D9:38:AB:71:B7:C1:BC:E7:33 X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:6d:e1:d0:f2:b6:9a:e9:b2:a0:71:eb:03:45:4d:31:ab:ba: c2:b4:9a:7d:37:e9:27:83:d7:cd:a4:c5:89:a9:b1:1e:ad:82: bd:2e:60:f0:fb:bc:6f:66:ff:61:c0:1f:4f:b1:74:37:49:77: 2c:fd:0a:1d:05:59:52:e3:b6:47:84:87:ec:4a:d3:88:cf:02: c8:8a:4e:29:75:47:42:5c:8c:00:27:b0:10:4e:b8:3e:14:71: 32:5a:db:b6:58:45:f8:79:52:36:11:e7:79:de:70:f2:a2:48: c8:f5:f2:5f:11:7c:4a:2f:5e:77:0b:06:3d:23:a5:94:ac:31: 4b:d6:3f:d4:91:f9:a3:86:05:b7:53:74:79:de:ed:95:7e:8a: 0a:b7:16:a9:bb:95:35:17:37:6e:d8:2b:22:10:0e:f7:48:a0: c9:8c:f9:b5:7e:80:c2:ee:67:fb:75:0c:f4:17:09:06:bd:e6: cf:98:fe:f2:b2:44:5a:09:ef:1f:85:be:cc:64:33:9b:ef:f7: db:b4:5f:e4:e1:64:74:ea:7f:44:d6:cf:42:a5:b0:60:94:68: b1:03:b4:30:6e:bc:86:00:17:80:ad:77:9c:f4:34:7f:30:fa: 0d:71:b4:50:a6:3a:5c:4a:4e:29:18:4d:e2:0a:4e:27:3b:49: 5c:3c:ee:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjUwNzIwMTc0NjE2WhcNMjUwNzI3MTc0NjE2WjAYMRYwFAYD VQQDEw02ODdkMmI2OC1mZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNtm9TfUBPKMZE1bT/RnwiANfVHXs8z07q38iuY/VFHsCHvr1fUamLINaXky I6+1pyRfMemfOXl4iY8i5Ti3saneelRHYSZ9hQcCNI+FUu6iJlNXHclVFfkCY3WK RGWj1buGhT0t7ZL+RMrlBMh6ijNnFR8VZN2OI2H0uAKWjOqJhZvB8rTlPYb5u7fm nhA1wP366bOTweuN+Ow459KKFJXDgZVJ7MzfQNBqwphxNlxrmg0RTHkZpDZbYS1d tdk3ladabYKWqaGYHhTmMc82McaGR5koIrWA99nI8kZuHk6We0QnHjeXkYmz+zsC hyulJ0fxXo3GwaropypRLVOXoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkZJP/z 6DBQFtG32TircbfBvOczMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l UzlialJib0pxZDZibkMwVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAbeHQ8raa6bKgcesDRU0xq7rCtJp9N+kng9fNpMWJqbEerYK9LmDw +7xvZv9hwB9PsXQ3SXcs/QodBVlS47ZHhIfsStOIzwLIik4pdUdCXIwAJ7AQTrg+ FHEyWtu2WEX4eVI2Eed53nDyokjI9fJfEXxKL153CwY9I6WUrDFL1j/UkfmjhgW3 U3R53u2VfooKtxapu5U1Fzdu2CsiEA73SKDJjPm1foDC7mf7dQz0FwkGvebPmP7y skRaCe8fhb7MZDOb7/fbtF/k4WR06n9E1s9CpbBglGixA7QwbryGABeArXec9DR/ MPoNcbRQpjpcSk4pGE3iCk4nO0lcPO6Y -----END CERTIFICATE-----Generated at Tue Jul 22 05:10:22 2025 by rpki-client