$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft File: lX5Qp1--UC844-2_P0qq5mWuFIs.mft (raw, json) Hash identifier: 75m3FQGehDeo2HL4QhuqARLF01Jq13W2kWq7kMvzl3k= Subject key identifier: 83:32:B4:94:25:C6:51:7C:93:4B:07:58:66:D5:89:3B:30:9D:68:52 Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B Certificate issuer: /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft Manifest number: 98 Signing time: Sat 19 Jul 2025 06:35:36 +0000 Manifest this update: Sat 19 Jul 2025 06:35:36 +0000 Manifest next update: Sat 26 Jul 2025 06:35:36 +0000 Files and hashes: 1: lX5Qp1--UC844-2_P0qq5mWuFIs.crl (hash: RuR6xpv3NORCoz/hcwoONm8VF1EKg9bBkwfnXgFeMhE=) 2: A0A9D60C807511EFAD8C4257C4F9AE02.roa (hash: ItObitSQLkGH+talVc8PNR7Z2o8Aby5tjfREkgGvzVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B0E, serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B Validity Not Before: Jul 19 06:35:36 2025 GMT Not After : Jul 26 06:35:36 2025 GMT Subject: CN=687b3cb8-b261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:d8:e2:fa:eb:20:1b:6f:e2:52:23:22:10: b7:ba:ae:81:c9:79:8f:b9:1e:a4:1f:31:3d:fc:5c: 9c:7e:bb:a4:8e:da:c7:61:e7:e9:92:be:aa:76:02: 51:44:b5:09:a7:6e:94:9b:73:33:83:45:59:e3:7a: d2:4c:4d:e2:40:d5:21:df:23:e4:bf:f9:9c:e1:7d: 58:42:02:3f:be:75:ad:cb:64:db:e7:86:49:5e:9b: 36:4b:05:ef:a7:b0:92:23:5e:a5:19:8d:7e:56:a9: 7b:0f:e2:95:f2:7f:e0:c3:ce:47:5e:36:43:7a:6c: 99:6a:07:4e:09:98:03:cd:16:cb:2d:b2:fb:8f:3b: b6:2c:37:94:3f:23:fd:9b:e4:01:99:ee:3c:5c:93: 22:38:b6:f4:f0:67:68:45:7b:0b:1d:89:38:65:66: 55:ca:db:18:87:02:49:72:38:34:9f:e3:26:62:29: 49:c9:63:dc:23:23:d4:76:09:5d:35:66:3f:8b:db: 08:f3:2d:2a:af:41:71:84:8b:c8:84:23:9a:9c:ad: 70:3e:e9:01:78:04:3e:fc:65:94:2e:06:8b:57:f8: 58:5b:2e:e9:72:69:55:51:1f:9b:4c:bb:ed:c6:c6: df:cb:8f:bd:1c:1c:92:90:1c:1f:75:44:0d:69:de: af:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:32:B4:94:25:C6:51:7C:93:4B:07:58:66:D5:89:3B:30:9D:68:52 X509v3 Authority Key Identifier: keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:f0:85:f4:aa:de:28:98:0a:0f:0e:80:c7:fa:23:3b:1a:bc: 5b:6c:84:fa:10:5f:53:4f:af:d5:6f:a2:ec:84:70:ca:0d:3c: 84:1d:57:a6:19:b8:1a:d2:32:af:1e:6b:af:f7:0a:50:3a:45: a3:06:51:d7:84:5c:a7:74:27:ff:ca:27:d3:c5:63:c2:04:62: 38:da:0e:53:94:2d:24:fc:fa:1a:40:2c:0c:17:22:43:27:8c: ce:77:98:e6:de:e0:86:1c:57:ca:a4:5c:58:70:42:d6:ee:08: 19:63:98:ce:2c:b8:87:cc:c5:30:db:bc:62:37:80:72:cc:2d: 5b:fe:34:31:e3:6b:e1:00:5f:a3:48:49:d2:5e:f0:3b:d9:18: 90:78:a4:68:25:27:80:1a:0e:ae:dc:13:a9:04:07:2c:c7:89: 59:1a:3f:35:9e:9b:47:52:e0:1e:ef:20:98:c1:c4:6c:2b:8f: 0d:d8:88:e1:d9:20:68:03:ad:e1:26:d2:fe:e2:2d:34:f0:53: b5:6c:2e:a4:f6:d9:8a:1c:1b:7b:d5:07:ac:da:44:2f:25:d6: 02:5c:c8:b4:2a:7f:84:3b:b7:24:92:db:42:6c:ca:18:09:81: b4:c6:79:8e:4f:57:10:53:89:65:d4:fc:e5:c5:52:8d:ce:05: e9:59:9c:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMEUxMTAvBgNVBAUTKDk1N0U1MEE3NUZCRTUwMkYzOEUzRURCRjNGNEFBQUU2 NjVBRTE0OEIwHhcNMjUwNzE5MDYzNTM2WhcNMjUwNzI2MDYzNTM2WjAYMRYwFAYD VQQDEw02ODdiM2NiOC1iMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0/Y4vrrIBtv4lIjIhC3uq6ByXmPuR6kHzE9/FycfrukjtrHYefpkr6qdgJR RLUJp26Um3Mzg0VZ43rSTE3iQNUh3yPkv/mc4X1YQgI/vnWty2Tb54ZJXps2SwXv p7CSI16lGY1+Vql7D+KV8n/gw85HXjZDemyZagdOCZgDzRbLLbL7jzu2LDeUPyP9 m+QBme48XJMiOLb08GdoRXsLHYk4ZWZVytsYhwJJcjg0n+MmYilJyWPcIyPUdgld NWY/i9sI8y0qr0FxhIvIhCOanK1wPukBeAQ+/GWULgaLV/hYWy7pcmlVUR+bTLvt xsbfy4+9HBySkBwfdUQNad6vvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMytJQl xlF8k0sHWGbViTswnWhSMB8GA1UdIwQYMBaAFJV+UKdfvlAvOOPtvz9KquZlrhSL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIwRS80RTZDQjRGNjgw NjkxMUVGODg3QjcwM0NDNEY5QUUwMi9sWDVRcDEtLVVDODQ0LTJfUDBxcTVtV3VG SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xYNVFwMS0tVUM4NDQtMl9QMHFxNW1XdUZJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIwRS80RTZDQjRGNjgwNjkxMUVGODg3QjcwM0NDNEY5QUUwMi9sWDVRcDEtLVVD ODQ0LTJfUDBxcTVtV3VGSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx8IX0qt4omAoPDoDH+iM7GrxbbIT6EF9TT6/Vb6LshHDKDTyEHVem Gbga0jKvHmuv9wpQOkWjBlHXhFyndCf/yifTxWPCBGI42g5TlC0k/PoaQCwMFyJD J4zOd5jm3uCGHFfKpFxYcELW7ggZY5jOLLiHzMUw27xiN4ByzC1b/jQx42vhAF+j SEnSXvA72RiQeKRoJSeAGg6u3BOpBAcsx4lZGj81nptHUuAe7yCYwcRsK48N2Ijh 2SBoA63hJtL+4i008FO1bC6k9tmKHBt71Qes2kQvJdYCXMi0Kn+EO7ckkttCbMoY CYG0xnmOT1cQU4ll1PzlxVKNzgXpWZyo -----END CERTIFICATE-----Generated at Mon Jul 21 06:55:13 2025 by rpki-client