$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: yZkX4NxwMgIXza3NUoYkBPeKGBbM84l4Dv5r9Kp8UxI= Subject key identifier: EE:80:2F:99:64:38:B4:04:9D:0D:18:8D:21:0D:85:CB:E1:28:46:2C Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 34B9 Signing time: Sun 20 Jul 2025 14:56:31 +0000 Manifest this update: Sun 20 Jul 2025 14:56:30 +0000 Manifest next update: Sun 27 Jul 2025 14:56:30 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: SaV/nNBPzlvdT98rqRfe/m4HtqxT4ccj1eIeezDyWcE=) 2: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: sDAVT78GpTIvV3Pk7DGbULa+i4kn7uu7qVMnxNmpH28=) 3: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: XuAw72l1y8+xZhjG02bLa91Tpql6DxMPw1rT8RJ+tTY=) 4: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: ZplEo/zP0jHGZr0dLBLSTaxCxcoclbSDg8qfGUwBkSQ=) 5: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: KUnun5lZEQw4kuW5EOrvbt/fHn0giqX+CGkWFRK4Ts8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Jul 20 14:56:30 2025 GMT Not After : Jul 27 14:56:30 2025 GMT Subject: CN=687d039e-a84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:47:9b:0e:29:f6:52:61:55:e0:f4:64:0a: 57:0d:f6:08:7a:79:cc:f7:8a:98:20:e0:87:9c:0f: 3d:f8:00:6c:bc:b9:d9:ce:a6:51:e1:28:96:2f:27: f0:c9:9b:1d:54:57:41:7b:d9:85:e3:94:e5:bf:5a: 76:99:15:29:b1:5f:d9:de:e4:c6:47:60:88:c2:4f: fb:bc:5e:7c:a3:2f:0d:64:0f:f9:59:01:99:f9:5e: 57:d8:1a:f1:7a:06:fd:f0:7f:50:62:9e:2a:0a:50: b6:81:fe:0a:a5:c0:09:48:cf:7d:78:b6:f6:75:d7: ea:91:e2:8b:cd:e1:10:33:f0:71:b8:d0:dd:c9:24: e4:d7:0c:c0:cf:c7:13:51:44:c6:9a:18:ea:67:3f: cc:ad:af:d1:df:dd:4a:36:17:78:ee:76:63:d5:cb: b9:3b:5d:20:2b:5c:ba:84:24:77:55:65:1b:35:83: 60:b5:9a:f6:36:94:1b:de:2c:3e:2a:84:97:24:52: ba:fc:cd:48:04:f9:7f:93:8d:14:b6:a7:ad:aa:6b: e2:f2:8f:45:8d:ec:f9:37:5a:3c:79:bc:f9:21:d7: bf:ce:58:b7:6d:b4:54:02:71:e0:28:93:19:46:7d: bf:ba:6d:90:2a:d4:7b:db:9c:58:36:7a:c1:b5:1e: f5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:80:2F:99:64:38:B4:04:9D:0D:18:8D:21:0D:85:CB:E1:28:46:2C X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:00:1a:a6:9d:cd:92:0e:92:65:3c:fb:25:67:41:ee:fb:2f: d4:09:87:be:4f:be:3d:79:d4:cc:77:26:92:0a:b0:ce:9a:3e: c0:82:62:9d:8a:c8:81:57:7c:5d:35:13:71:24:65:f1:ef:ce: 64:3c:6d:87:1d:80:22:82:e2:fc:0f:87:ba:26:18:99:ba:ee: 76:98:25:9a:b5:db:6a:82:4d:f5:2e:1b:b3:ed:08:5e:a7:d0: 8e:1a:82:24:3a:62:99:30:68:a0:c8:cd:d8:a6:4e:5d:11:5b: d9:6f:2e:e7:48:7c:7c:36:5f:9a:82:bf:43:df:0a:08:61:a1: 65:90:13:e3:aa:ef:78:66:8d:85:67:7c:d1:d3:d5:bc:ae:9a: bd:1e:3f:af:62:2a:12:e4:fe:c4:0d:80:c5:b4:9e:78:3f:68: ce:ba:b7:ec:16:c2:0d:46:70:bf:0d:25:be:f8:a2:9f:c5:c5: 37:b3:8b:bc:2b:24:fd:c3:a7:54:75:31:62:90:5c:92:fb:c5: a6:a9:ed:df:ca:3c:44:75:97:77:83:9e:4a:ae:3c:ea:8b:db: 4c:c6:32:f1:2c:e3:fd:85:a7:d6:89:5a:80:1c:f7:0d:f4:e4: f4:78:e6:41:8a:8e:09:8b:4b:b2:16:33:50:bc:6a:d0:ab:18: d1:76:45:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjUwNzIwMTQ1NjMwWhcNMjUwNzI3MTQ1NjMwWjAYMRYwFAYD VQQDEw02ODdkMDM5ZS1hODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbVHmw4p9lJhVeD0ZApXDfYIennM94qYIOCHnA89+ABsvLnZzqZR4SiWLyfw yZsdVFdBe9mF45Tlv1p2mRUpsV/Z3uTGR2CIwk/7vF58oy8NZA/5WQGZ+V5X2Brx egb98H9QYp4qClC2gf4KpcAJSM99eLb2ddfqkeKLzeEQM/BxuNDdySTk1wzAz8cT UUTGmhjqZz/Mra/R391KNhd47nZj1cu5O10gK1y6hCR3VWUbNYNgtZr2NpQb3iw+ KoSXJFK6/M1IBPl/k40Utqetqmvi8o9Fjez5N1o8ebz5Ide/zli3bbRUAnHgKJMZ Rn2/um2QKtR725xYNnrBtR71/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6AL5lk OLQEnQ0YjSENhcvhKEYsMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIABqmnc2SDpJlPPslZ0Hu+y/UCYe+T749edTMdyaSCrDOmj7AgmKd isiBV3xdNRNxJGXx785kPG2HHYAiguL8D4e6JhiZuu52mCWatdtqgk31Lhuz7Qhe p9COGoIkOmKZMGigyM3Ypk5dEVvZby7nSHx8Nl+agr9D3woIYaFlkBPjqu94Zo2F Z3zR09W8rpq9Hj+vYioS5P7EDYDFtJ54P2jOurfsFsINRnC/DSW++KKfxcU3s4u8 KyT9w6dUdTFikFyS+8Wmqe3fyjxEdZd3g55Krjzqi9tMxjLxLOP9hafWiVqAHPcN 9OT0eOZBio4Ji0uyFjNQvGrQqxjRdkXw -----END CERTIFICATE-----Generated at Sun Jul 20 18:02:37 2025 by rpki-client