$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: 9aUWceO3IvMgMP2cdJDt3efkgXVu93CQnj5UVh5vL4I= Subject key identifier: 44:08:CF:90:BF:CD:0A:0F:6B:8B:0F:D6:38:71:A2:12:9C:5C:85:BD Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0B59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0B45 Signing time: Sun 20 Jul 2025 19:15:27 +0000 Manifest this update: Sun 20 Jul 2025 19:15:27 +0000 Manifest next update: Sun 27 Jul 2025 19:15:27 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: rfl5nN37rg4aT1oJgK/SEhSlvc1mA/GorWC3y3+TC9w=) 2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: 2qnnF6MVOAPWKTwVx6xcANvt7+ipRsuxDi1zcVsoM90=) 3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: LHN9DyWzlGRcwkpXqFqZ90XaKLujDGwCFAysXhBXguc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2905 (0xb59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Jul 20 19:15:27 2025 GMT Not After : Jul 27 19:15:27 2025 GMT Subject: CN=687d404f-88e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f1:6e:13:db:39:31:34:9f:b3:8c:92:56:77: fa:21:65:4e:20:ea:da:6a:0a:00:84:37:29:06:cb: 4f:aa:5e:e5:cf:06:e3:b8:ad:25:ca:32:dd:70:8b: bf:d5:c4:29:83:3a:f4:d7:13:27:38:0c:5c:8c:d0: dd:26:2d:a7:b2:fe:82:e5:39:bb:31:95:45:3f:dc: a3:18:82:8b:eb:ca:f0:be:4c:76:7d:f2:6e:79:b7: 90:12:56:d3:ce:95:eb:ad:30:0a:1e:ea:47:ee:a3: ff:63:f1:ee:90:63:3b:68:26:6f:64:d3:93:37:3c: be:9a:d9:8d:7e:e8:c6:b0:77:85:9d:05:5b:e5:6c: 3c:c5:4c:84:ce:be:b0:58:10:10:8f:4a:50:bb:88: 88:ae:ce:51:90:4c:56:15:00:50:6f:db:86:c7:f4: fe:5f:81:b7:41:60:a1:3b:9a:57:d9:c9:02:f6:25: d8:c0:21:07:40:12:80:0c:b9:78:51:79:c2:95:7d: d4:18:d6:bf:d6:54:52:a7:bc:b8:fb:e6:c8:58:e8: 40:7b:7d:7c:bb:b4:55:b4:9b:55:95:1b:95:87:39: f4:c9:07:0e:06:51:df:81:b6:a0:ce:26:65:b2:d5: ed:e9:11:3a:01:f1:e5:a7:4a:e1:59:a2:9b:2e:5e: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:08:CF:90:BF:CD:0A:0F:6B:8B:0F:D6:38:71:A2:12:9C:5C:85:BD X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b2:d5:b4:4d:0a:6f:6e:b5:e5:b9:2b:2d:7f:59:7a:91:6f: 47:c5:95:4b:a8:4a:15:d4:7d:3f:a1:b0:ef:f0:07:9e:f5:a8: ac:d6:e2:30:8d:5b:7e:d4:d4:69:97:2e:20:67:6f:a8:81:e9: bc:8b:6e:17:1a:e3:9d:96:c2:0a:f4:c2:1f:69:57:77:c3:91: 84:46:3a:f7:49:53:4b:fd:6d:92:46:6f:ab:2f:9f:24:1e:9c: 11:31:3f:e6:5f:be:29:5c:8c:67:76:2b:ba:09:54:a2:f8:3f: 35:b0:ee:8a:f1:87:6f:1f:f9:2e:24:90:b9:75:0c:da:bd:cf: 23:16:3f:01:46:20:1c:0e:cf:3a:bc:85:c7:48:d4:56:cd:4a: f4:98:87:fd:b5:02:ab:e2:bf:17:42:22:88:3c:86:f3:71:eb: c5:d1:3b:94:aa:5e:91:fa:df:67:b4:04:56:8d:ed:cd:72:62: 6c:84:94:f8:4c:50:07:c6:a8:89:be:c8:51:2c:83:09:76:c1: fe:3f:48:0f:81:d1:8b:6e:23:27:e8:23:b0:94:ff:e2:b9:ee: ac:71:51:69:32:e7:73:9d:d1:e8:2d:a7:31:f2:01:83:4d:8a: 99:2b:cb:bf:52:4b:55:33:77:65:3c:73:3e:6a:b6:38:8a:cd: 15:8f:8f:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjUwNzIwMTkxNTI3WhcNMjUwNzI3MTkxNTI3WjAYMRYwFAYD VQQDEw02ODdkNDA0Zi04OGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvFuE9s5MTSfs4ySVnf6IWVOIOraagoAhDcpBstPql7lzwbjuK0lyjLdcIu/ 1cQpgzr01xMnOAxcjNDdJi2nsv6C5Tm7MZVFP9yjGIKL68rwvkx2ffJuebeQElbT zpXrrTAKHupH7qP/Y/HukGM7aCZvZNOTNzy+mtmNfujGsHeFnQVb5Ww8xUyEzr6w WBAQj0pQu4iIrs5RkExWFQBQb9uGx/T+X4G3QWChO5pX2ckC9iXYwCEHQBKADLl4 UXnClX3UGNa/1lRSp7y4++bIWOhAe318u7RVtJtVlRuVhzn0yQcOBlHfgbagziZl stXt6RE6AfHlp0rhWaKbLl6MVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQIz5C/ zQoPa4sP1jhxohKcXIW9MB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/stW0TQpvbrXluSstf1l6kW9HxZVLqEoV1H0/obDv8Aee9ais1uIw jVt+1NRply4gZ2+ogem8i24XGuOdlsIK9MIfaVd3w5GERjr3SVNL/W2SRm+rL58k HpwRMT/mX74pXIxndiu6CVSi+D81sO6K8YdvH/kuJJC5dQzavc8jFj8BRiAcDs86 vIXHSNRWzUr0mIf9tQKr4r8XQiKIPIbzcevF0TuUql6R+t9ntARWje3NcmJshJT4 TFAHxqiJvshRLIMJdsH+P0gPgdGLbiMn6COwlP/iue6scVFpMudzndHoLacx8gGD TYqZK8u/UktVM3dlPHM+arY4is0Vj48v -----END CERTIFICATE-----Generated at Mon Jul 21 12:52:00 2025 by rpki-client