$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json) Hash identifier: vmmELLnB5d6fquGetfuxWHqcmHC4PP7ECzFwOnrwCf8= Subject key identifier: 9B:9D:61:28:44:CC:82:4E:1C:67:DE:D7:1C:7D:D2:58:9D:58:74:98 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 044D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft Manifest number: 042D Signing time: Sat 19 Jul 2025 00:46:15 +0000 Manifest this update: Sat 19 Jul 2025 00:46:14 +0000 Manifest next update: Sat 26 Jul 2025 00:46:14 +0000 Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: rfAFBdxCyMZwGp2RrjsTVPuPJcMZ3y6sPKhQek8jT8A=) 2: A8827568116911EEBB241C32C4F9AE02.roa (hash: ePscgiftvgu3AgZJRcwiRUYhc5l5akEknNm+3bxCM0A=) 3: A6FA9A4A116911EEBB241C32C4F9AE02.roa (hash: RgkBiig85GBTWo6hrTV95O/BhHQIjrp9qKOVuIGC96Q=) 4: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: uCKPAwy0X3Z4CL+hlBr0CZ+w6vMoqyCthCGEPEwyTxY=) 5: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: 1RhS2h2tWn1m1rNY8jrx9gtNAHNEkDyNHgYU79X2jK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Jul 19 00:46:14 2025 GMT Not After : Jul 26 00:46:14 2025 GMT Subject: CN=687aead6-6414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:d6:75:f5:7a:e0:6e:9d:e6:a9:cd:f1:96: 02:c2:40:0b:1d:6d:86:25:35:0b:02:70:e5:e3:5d: cd:fe:ee:85:55:8e:eb:41:a5:62:cd:94:17:83:6b: 28:25:9d:7b:6c:cc:06:0a:a3:52:01:84:64:c2:3c: 7c:47:ab:89:b0:9a:a7:c7:88:70:80:0e:4f:1d:05: c8:b5:5d:d2:be:47:1e:3c:b5:30:7e:68:41:37:e8: 3b:69:86:1b:fc:b5:e7:da:36:e2:5a:a6:d3:35:a1: 63:d7:49:93:95:26:1d:df:8b:eb:75:5f:8f:c3:6f: ee:74:1a:4e:f0:88:59:29:96:ae:06:2c:d2:90:f8: a2:e1:1a:66:68:eb:98:c2:4d:91:73:ae:81:6f:7c: 0d:08:2e:bc:38:1e:77:13:fa:b7:af:ac:8c:74:6c: 95:38:e3:d7:20:9b:c6:37:e9:0e:3d:a9:7a:c4:85: 2e:1b:9a:10:79:d7:01:3a:e6:c5:ec:de:29:c0:b4: e0:43:95:41:a3:bf:4d:bd:36:82:3d:3d:75:3a:94: 4a:04:61:a8:c2:a6:7b:4b:72:c4:76:e3:90:eb:22: f9:0a:be:73:17:60:90:20:73:9c:dd:fa:3d:6b:e5: 10:80:6f:b0:05:94:c1:7e:be:8a:27:d2:57:e3:46: 5d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9D:61:28:44:CC:82:4E:1C:67:DE:D7:1C:7D:D2:58:9D:58:74:98 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:11:61:9d:9d:30:52:aa:9b:51:9b:61:58:e1:66:44:61:08: b9:01:d1:31:95:bc:ed:ed:aa:6d:fc:47:31:30:9e:99:99:21: 0c:d1:75:9c:ac:d9:fd:c7:4d:2b:e8:2c:de:fb:8d:e6:32:f4: 19:5f:a3:c9:ee:6b:91:e9:f2:79:03:8f:12:d2:d6:77:94:49: b5:1e:22:e5:fd:76:2a:4d:66:bf:bd:ee:6d:3b:8d:2c:08:0f: 5e:8c:c7:2f:04:4a:d5:f5:54:5e:15:0f:dd:7c:f6:99:30:d0: 41:ed:b5:90:d7:a1:94:ee:41:06:fd:1a:ad:f9:c0:b7:11:cf: f9:e9:45:60:85:c3:15:9a:76:ad:fa:3b:2c:39:1a:0c:2b:8c: c9:52:55:4b:e0:8b:b9:ca:a2:09:b1:af:01:4e:3d:81:b9:2b: 16:5e:fb:8d:94:32:d9:8f:11:c4:57:54:ac:a0:6b:f6:dc:80: cb:17:0f:9d:5a:07:1d:f4:1b:d8:64:31:9e:db:e8:a3:41:57: 2b:4a:e2:01:1b:97:e6:99:2a:32:78:4a:ad:34:44:e5:9a:f0: 54:e6:b4:7d:0f:35:2f:69:3d:d3:c1:7b:ea:ed:8a:16:5f:aa: 4c:45:75:ad:37:69:06:59:18:62:61:24:4e:48:33:db:3c:a4: dc:13:d2:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjUwNzE5MDA0NjE0WhcNMjUwNzI2MDA0NjE0WjAYMRYwFAYD VQQDEw02ODdhZWFkNi02NDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2TWdfV64G6d5qnN8ZYCwkALHW2GJTULAnDl413N/u6FVY7rQaVizZQXg2so JZ17bMwGCqNSAYRkwjx8R6uJsJqnx4hwgA5PHQXItV3SvkcePLUwfmhBN+g7aYYb /LXn2jbiWqbTNaFj10mTlSYd34vrdV+Pw2/udBpO8IhZKZauBizSkPii4RpmaOuY wk2Rc66Bb3wNCC68OB53E/q3r6yMdGyVOOPXIJvGN+kOPal6xIUuG5oQedcBOubF 7N4pwLTgQ5VBo79NvTaCPT11OpRKBGGowqZ7S3LEduOQ6yL5Cr5zF2CQIHOc3fo9 a+UQgG+wBZTBfr6KJ9JX40ZdKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJudYShE zIJOHGfe1xx90lidWHSYMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEM4RS8wMzJFNTdCODc0MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendD bkZoVnRNRjBVRnIyRVo4d3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDEWGdnTBSqptRm2FY4WZEYQi5AdExlbzt7apt/EcxMJ6ZmSEM0XWc rNn9x00r6Cze+43mMvQZX6PJ7muR6fJ5A48S0tZ3lEm1HiLl/XYqTWa/ve5tO40s CA9ejMcvBErV9VReFQ/dfPaZMNBB7bWQ16GU7kEG/Rqt+cC3Ec/56UVghcMVmnat +jssORoMK4zJUlVL4Iu5yqIJsa8BTj2BuSsWXvuNlDLZjxHEV1SsoGv23IDLFw+d Wgcd9BvYZDGe2+ijQVcrSuIBG5fmmSoyeEqtNETlmvBU5rR9DzUvaT3TwXvq7YoW X6pMRXWtN2kGWRhiYSROSDPbPKTcE9IH -----END CERTIFICATE-----Generated at Sun Jul 20 10:22:06 2025 by rpki-client