$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: 9I2zMoYdjZXbtb65C2i7jE758VKsyg6NjMIATmSepok= Subject key identifier: 41:E0:90:1B:2D:7E:09:C3:E4:63:FD:11:73:64:EE:88:F1:FB:EE:14 Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: B3 Signing time: Sun 27 Jul 2025 06:19:43 +0000 Manifest this update: Sun 27 Jul 2025 06:19:43 +0000 Manifest next update: Sun 03 Aug 2025 06:19:43 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: iTDwIUIgef6YYp7ItrbEIG/HzZnknLTiW7ptyu1k9ZA=) 2: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: Cl2PJo7826qehYKKSG2/VdHV6kV/QSQl5KdRQS87oS0=) 3: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: 7jEw+cOkWTAknu5PcBj2MNehVkDO0rbITl2EdNIaO7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 Aug 2025 06:19:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Jul 27 06:19:43 2025 GMT Not After : Aug 3 06:19:43 2025 GMT Subject: CN=6885c4ff-69fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:68:0d:66:00:7f:f9:7e:9b:9e:3e:9f:ee:74: e8:d6:c0:ea:6f:69:17:65:42:98:ff:94:7d:6d:ea: 4e:b6:00:af:68:c4:a3:cd:24:b5:23:43:cc:2c:44: ca:f1:ee:9a:b4:7b:94:a7:cb:62:cc:a4:7f:64:73: d7:60:1d:5b:56:7e:3b:13:50:54:dd:87:08:61:19: 3b:c1:7f:e4:76:6f:d9:ca:c4:18:25:88:41:3c:81: c8:3a:a5:3e:be:1b:da:4a:bc:b6:09:fc:fe:75:9a: 08:f3:f6:b5:b1:cd:eb:5e:b7:c8:f7:c2:b8:90:5d: 97:4c:7d:3b:bd:01:c9:be:d9:3a:32:93:cd:ae:41: f7:7a:82:30:10:f9:20:e9:4a:e9:4a:24:33:65:57: 2c:a0:3e:05:a1:a0:79:f7:6c:ba:d6:f0:3c:5a:45: 82:e6:37:f2:f9:82:40:56:96:b4:19:df:5c:c2:4a: 9a:b1:8b:93:4a:b9:19:18:44:a4:9f:9e:96:c3:93: ec:32:39:de:78:ab:84:ac:ef:bf:dd:ec:64:dd:f9: a5:ad:4d:03:c3:cd:44:1d:e3:5a:8c:a4:68:14:3b: e6:dc:cc:b3:5b:58:3b:73:5e:b1:0e:ec:2b:c1:3b: f0:23:0f:a7:33:4c:4d:9d:2f:3a:04:bc:37:6d:17: c5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E0:90:1B:2D:7E:09:C3:E4:63:FD:11:73:64:EE:88:F1:FB:EE:14 X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:8c:b8:f3:d5:94:ff:e7:0a:a9:73:31:b9:46:51:25:2e:9d: fa:f5:9f:8e:4c:ad:d6:f7:ef:d1:d5:f0:f9:d0:3b:3e:9f:70: 5e:18:81:bb:00:94:7e:99:ea:11:77:46:e0:40:ea:c3:ba:0f: 83:c5:0b:1d:2b:9e:b9:78:f6:15:ca:73:09:77:00:03:86:d7: 66:78:bd:84:53:e6:44:fb:6b:cc:8d:d5:83:de:96:e5:f3:dd: 75:02:ee:d6:55:fa:ce:2f:6b:38:51:4c:65:ac:1b:28:ea:7b: 3c:1b:4a:cd:0f:85:19:e4:8f:46:a0:14:2c:df:1a:ce:6f:6e: 72:6f:5f:86:ae:7a:56:bb:06:ed:55:3f:3b:5a:ad:ce:65:3d: 30:e3:27:a4:4e:0b:0f:bb:ba:15:b0:2b:66:5c:78:11:48:3a: 67:37:41:14:f4:db:98:d4:81:82:2c:f4:fd:db:e2:85:a7:0c: e7:4c:35:15:d3:f4:5b:89:f1:b1:a5:6a:e5:7d:b8:c6:12:ef: a3:f6:8f:73:2a:90:98:d0:bb:ec:f0:9d:a4:1c:1e:37:ea:5a: 6b:73:89:98:c6:ee:05:0b:79:e9:84:cb:84:59:22:46:d7:09: 03:8e:e1:08:bf:16:f5:d4:92:f4:85:b1:14:01:d5:98:5e:1c: 6a:3c:c0:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjUwNzI3MDYxOTQzWhcNMjUwODAzMDYxOTQzWjAYMRYwFAYD VQQDEw02ODg1YzRmZi02OWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWgNZgB/+X6bnj6f7nTo1sDqb2kXZUKY/5R9bepOtgCvaMSjzSS1I0PMLETK 8e6atHuUp8tizKR/ZHPXYB1bVn47E1BU3YcIYRk7wX/kdm/ZysQYJYhBPIHIOqU+ vhvaSry2Cfz+dZoI8/a1sc3rXrfI98K4kF2XTH07vQHJvtk6MpPNrkH3eoIwEPkg 6UrpSiQzZVcsoD4FoaB592y61vA8WkWC5jfy+YJAVpa0Gd9cwkqasYuTSrkZGESk n56Ww5PsMjneeKuErO+/3exk3fmlrU0Dw81EHeNajKRoFDvm3MyzW1g7c16xDuwr wTvwIw+nM0xNnS86BLw3bRfF0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHgkBst fgnD5GP9EXNk7ojx++4UMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEjLjz1ZT/5wqpczG5RlElLp369Z+OTK3W9+/R1fD50Ds+n3BeGIG7 AJR+meoRd0bgQOrDug+DxQsdK565ePYVynMJdwADhtdmeL2EU+ZE+2vMjdWD3pbl 8911Au7WVfrOL2s4UUxlrBso6ns8G0rND4UZ5I9GoBQs3xrOb25yb1+GrnpWuwbt VT87Wq3OZT0w4yekTgsPu7oVsCtmXHgRSDpnN0EU9NuY1IGCLPT92+KFpwznTDUV 0/RbifGxpWrlfbjGEu+j9o9zKpCY0Lvs8J2kHB436lprc4mYxu4FC3nphMuEWSJG 1wkDjuEIvxb11JL0hbEUAdWYXhxqPMD7 -----END CERTIFICATE-----Generated at Tue Jul 29 00:15:27 2025 by rpki-client