$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json) Hash identifier: 6YxvsFTh7v7MCWJmkOtpnoIfev4fwuOO+rFMELPZgUo= Subject key identifier: AE:A9:2E:CC:E0:A5:AA:F1:3F:57:64:39:B0:1A:E3:37:D2:36:C3:DC Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft Manifest number: 2B Signing time: Sat 19 Jul 2025 08:01:39 +0000 Manifest this update: Sat 19 Jul 2025 08:01:39 +0000 Manifest next update: Sat 26 Jul 2025 08:01:39 +0000 Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: HYJQpoorCRDslwH4rWfX13JyeniVkhwW0P8g5XPMODY=) 2: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: xeAIE2lZn+YXNt0L7vlDN0DVHrs7CNulexHVxcXbegs=) 3: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: 1L8lUrtPjTnoEjcERsj866aTFLWQJPYnWRL13TGRub4=) 4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: Pfe2htQw7FQ69zCdUGOvP9JJR+bvYFVzLzCF/2HMviU=) 5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: 5FSb2Jsk8vMB09hl36LtVE9KBpWP+PzKRBhhPkFdcWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Validity Not Before: Jul 19 08:01:39 2025 GMT Not After : Jul 26 08:01:39 2025 GMT Subject: CN=687b50e3-5aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:e9:d8:d3:4f:0e:40:ec:89:f6:94:67:c8: 2c:18:03:b9:da:ba:98:62:1f:ee:6d:de:91:9a:a0: 78:7c:37:e4:e3:77:ff:91:2e:2e:df:49:d9:8f:30: eb:82:62:e1:bb:db:d1:e8:d7:a2:94:27:c2:b0:f0: 36:aa:bd:78:05:aa:de:62:53:02:dc:70:a9:85:cc: f7:51:97:7e:3d:b5:98:44:09:df:9d:27:79:90:0e: d8:03:72:71:65:11:1f:8c:42:df:ad:1b:20:a2:7e: 59:bc:e1:68:6c:13:7c:e5:7b:27:ab:26:dc:38:93: 6e:30:5f:05:54:86:52:ae:56:b4:3e:12:53:5b:88: f7:72:b0:66:1b:c2:46:1b:7a:ea:2c:65:60:9f:5c: 4f:ba:9a:57:f6:8d:17:da:5a:4d:8f:66:7f:bb:af: 16:b4:70:b4:89:5d:a1:d7:0d:65:81:3e:6b:fc:c5: 17:40:8f:33:5a:d8:d8:6b:8e:00:92:fa:8b:33:30: 6d:36:4c:aa:f0:68:48:56:a0:e7:03:06:dd:76:35: 2c:f0:40:f5:31:c4:f0:de:c7:9b:a1:5a:f7:80:ce: d4:7f:38:97:ef:69:7b:2c:7a:96:05:44:03:2d:de: 39:3a:7c:4b:29:93:7c:1b:9d:d9:14:bc:29:9e:a8: 78:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A9:2E:CC:E0:A5:AA:F1:3F:57:64:39:B0:1A:E3:37:D2:36:C3:DC X509v3 Authority Key Identifier: keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b9:ec:7e:7b:54:88:ab:5d:e0:27:a7:64:46:d4:3f:34:f3: 0e:97:a0:f0:65:bc:56:c7:e1:a7:b9:51:23:ca:c2:23:89:95: 65:70:6a:fd:a6:af:12:41:cd:09:fd:57:fe:30:34:36:74:d8: a6:fa:a5:97:9f:55:51:fa:dd:06:24:6d:de:33:83:cb:0d:c8: 7a:3f:b8:6f:fe:76:1d:45:6a:55:95:0b:a7:47:ed:1a:66:8a: 99:5c:fa:97:b2:6e:02:ad:c3:3b:24:68:ec:72:7c:e9:d6:ad: bb:e7:77:96:68:ae:d7:db:3d:4c:10:6e:fc:16:30:f9:f0:4b: e5:26:09:a2:bc:47:05:a2:e5:c3:2c:d9:76:47:ea:a1:ef:5c: b9:ac:20:d5:fe:b8:e0:bb:f4:54:db:c0:82:5c:8e:e8:a8:dc: ce:f0:33:f9:30:2d:e3:06:33:b9:e0:85:c0:d8:8f:3b:ed:88: 8c:0f:11:9b:8c:9c:e5:45:db:43:dd:cd:b3:0d:a8:97:85:11: 36:55:68:23:9b:ea:11:4e:46:d7:c9:07:35:2d:45:55:5e:c2: 68:26:e2:8e:ab:f3:49:2a:e0:ea:75:95:f1:c6:2c:a3:ba:3a: a1:d1:6e:6a:3f:e3:b7:92:6d:0a:bd:36:3c:0f:c7:8f:18:45: cf:4d:b8:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0E3NTExMC8GA1UEBRMoOTdBQ0RERTI5MTFBMDlGMzkzNUYxODYwREIwNTdENENG RjQ2QjJDNTAeFw0yNTA3MTkwODAxMzlaFw0yNTA3MjYwODAxMzlaMBgxFjAUBgNV BAMTDTY4N2I1MGUzLTVhYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjAenY008OQOyJ9pRnyCwYA7nauphiH+5t3pGaoHh8N+Tjd/+RLi7fSdmPMOuC YuG729Ho16KUJ8Kw8DaqvXgFqt5iUwLccKmFzPdRl349tZhECd+dJ3mQDtgDcnFl ER+MQt+tGyCiflm84WhsE3zleyerJtw4k24wXwVUhlKuVrQ+ElNbiPdysGYbwkYb euosZWCfXE+6mlf2jRfaWk2PZn+7rxa0cLSJXaHXDWWBPmv8xRdAjzNa2NhrjgCS +oszMG02TKrwaEhWoOcDBt12NSzwQPUxxPDex5uhWveAztR/OJfvaXssepYFRAMt 3jk6fEspk3wbndkUvCmeqHg1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrqkuzOCl qvE/V2Q5sBrjN9I2w9wwHwYDVR0jBBgwFoAUl6zd4pEaCfOTXxhg2wV9TP9GssUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3QTc1L0U2RjRCNkRBMjc1 MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3Nz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDZ6ZDRwRWFDZk9UWHhoZzJ3VjlUUDlHc3NVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 QTc1L0U2RjRCNkRBMjc1MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZP VFh4aGcyd1Y5VFA5R3NzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF+57H57VIirXeAnp2RG1D808w6XoPBlvFbH4ae5USPKwiOJlWVwav2m rxJBzQn9V/4wNDZ02Kb6pZefVVH63QYkbd4zg8sNyHo/uG/+dh1FalWVC6dH7Rpm iplc+peybgKtwzskaOxyfOnWrbvnd5ZortfbPUwQbvwWMPnwS+UmCaK8RwWi5cMs 2XZH6qHvXLmsINX+uOC79FTbwIJcjuio3M7wM/kwLeMGM7nghcDYjzvtiIwPEZuM nOVF20PdzbMNqJeFETZVaCOb6hFORtfJBzUtRVVewmgm4o6r80kq4Op1lfHGLKO6 OqHRbmo/47eSbQq9NjwPx48YRc9NuEo= -----END CERTIFICATE-----Generated at Mon Jul 21 06:05:19 2025 by rpki-client