$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: GENIvdCGTyhHIBrzYX9aWhvU+6a9LCLj8mGNF7EANpw= Subject key identifier: D7:11:D5:7F:3B:A4:73:16:92:5D:8E:76:C9:BC:02:D7:4E:76:77:66 Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 0409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 0404 Signing time: Sat 19 Jul 2025 00:49:30 +0000 Manifest this update: Sat 19 Jul 2025 00:49:29 +0000 Manifest next update: Sat 26 Jul 2025 00:49:29 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: HzbgQ5Zb2s8EZ0gdz8lBttNCj801lDzDNEyYGBB51kk=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1033 (0x409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: Jul 19 00:49:29 2025 GMT Not After : Jul 26 00:49:29 2025 GMT Subject: CN=687aeb9a-1914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:4b:44:c1:55:bf:32:bf:f1:cc:3d:bb:f0: 55:c2:66:5d:0d:d3:1c:46:e5:15:01:af:2e:ea:0a: 99:33:3b:35:93:c4:a3:b6:5f:90:fa:03:cd:b9:98: 73:43:36:cd:56:db:ca:17:78:a8:27:3d:ad:c4:dc: a3:65:fd:26:a7:e8:f6:b4:64:71:18:68:ac:6b:c3: 01:d5:fb:df:85:59:c4:d4:2b:8a:7d:05:21:60:e5: 08:36:b0:7f:f9:e1:0f:7a:d2:fc:fb:aa:0f:ff:c8: 74:50:0c:57:ee:bb:27:df:59:e2:6a:3d:ea:f0:e8: af:22:c4:f4:be:40:94:91:cf:8d:b5:b0:3a:4b:05: 04:d1:bc:4d:ab:62:8c:5f:2a:e3:fd:e0:8c:01:27: f3:4e:9f:d2:e4:1b:50:85:35:ac:3c:33:ab:39:95: 59:db:cf:eb:a5:76:25:69:be:9d:20:a0:5b:0f:96: fc:9e:cf:ad:05:e0:e5:c1:4f:bc:94:7d:78:67:23: ac:69:20:3f:bf:a0:e0:e5:2a:4b:65:31:8c:5e:f7: 75:8d:2c:08:ac:2c:96:c7:84:ca:fc:9e:62:ff:bf: 87:e3:e7:48:ba:e5:ad:a3:f1:81:21:69:fa:9c:d5: e2:83:fc:dd:2f:e4:31:c5:67:53:0e:19:e7:52:dc: 89:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:11:D5:7F:3B:A4:73:16:92:5D:8E:76:C9:BC:02:D7:4E:76:77:66 X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:89:f3:b0:56:80:ce:00:c5:01:a6:5b:78:79:fe:c3:23:88: 50:ab:26:ea:7c:62:5d:d1:6a:50:4e:70:23:05:0d:b1:ad:18: 0e:7c:a2:f4:70:22:78:a4:58:f0:65:0e:91:3d:c8:dc:77:99: 5d:e8:2e:d8:f6:77:34:32:9f:32:2a:21:3b:da:4b:b5:19:52: b9:86:da:d5:b7:b3:62:49:a8:dd:8b:6c:5b:ef:55:02:21:09: fc:c2:2b:81:12:92:27:21:b2:76:df:b0:f6:72:d5:9e:73:a6: d0:b0:55:ef:e6:5a:cb:67:06:51:c1:65:ea:7b:75:38:c9:0e: 25:7d:a2:5f:de:79:03:ef:78:48:42:42:e2:20:18:31:21:40: 84:a7:97:81:91:93:d8:f0:0a:95:7e:33:5a:ee:22:a2:8e:e8: 05:66:aa:84:8a:1a:a3:e6:b1:96:11:8e:b2:a9:b5:06:62:b0: 58:da:12:e6:05:5e:27:b4:60:0c:01:f6:c8:e6:2b:66:42:9b: 40:69:6b:7e:3a:9c:4b:70:ef:58:ad:4f:13:64:4b:66:15:02: bc:0c:71:c1:7d:7e:f1:66:4d:96:bc:41:2b:e3:c6:8a:f5:65: d7:a7:eb:20:42:18:ae:05:1d:67:e6:6a:85:8c:9a:fc:2c:77: 8b:4e:3b:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjUwNzE5MDA0OTI5WhcNMjUwNzI2MDA0OTI5WjAYMRYwFAYD VQQDEw02ODdhZWI5YS0xOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqItLRMFVvzK/8cw9u/BVwmZdDdMcRuUVAa8u6gqZMzs1k8Sjtl+Q+gPNuZhz QzbNVtvKF3ioJz2txNyjZf0mp+j2tGRxGGisa8MB1fvfhVnE1CuKfQUhYOUINrB/ +eEPetL8+6oP/8h0UAxX7rsn31niaj3q8OivIsT0vkCUkc+NtbA6SwUE0bxNq2KM Xyrj/eCMASfzTp/S5BtQhTWsPDOrOZVZ28/rpXYlab6dIKBbD5b8ns+tBeDlwU+8 lH14ZyOsaSA/v6Dg5SpLZTGMXvd1jSwIrCyWx4TK/J5i/7+H4+dIuuWto/GBIWn6 nNXig/zdL+QxxWdTDhnnUtyJ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcR1X87 pHMWkl2Odsm8AtdOdndmMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUifOwVoDOAMUBplt4ef7DI4hQqybqfGJd0WpQTnAjBQ2xrRgOfKL0 cCJ4pFjwZQ6RPcjcd5ld6C7Y9nc0Mp8yKiE72ku1GVK5htrVt7NiSajdi2xb71UC IQn8wiuBEpInIbJ237D2ctWec6bQsFXv5lrLZwZRwWXqe3U4yQ4lfaJf3nkD73hI QkLiIBgxIUCEp5eBkZPY8AqVfjNa7iKijugFZqqEihqj5rGWEY6yqbUGYrBY2hLm BV4ntGAMAfbI5itmQptAaWt+OpxLcO9YrU8TZEtmFQK8DHHBfX7xZk2WvEEr48aK 9WXXp+sgQhiuBR1n5mqFjJr8LHeLTjv8 -----END CERTIFICATE-----Generated at Sun Jul 20 07:25:17 2025 by rpki-client