$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json) Hash identifier: NyFNtObimuqZho/b6tHsGIaaZJWcUXJMrzUl/3pChMQ= Subject key identifier: D2:25:4A:8A:4C:89:DF:D7:05:FA:B6:C7:FA:EF:A4:39:DC:38:9F:54 Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft Manifest number: 49 Signing time: Sat 19 Jul 2025 07:39:39 +0000 Manifest this update: Sat 19 Jul 2025 07:39:39 +0000 Manifest next update: Sat 26 Jul 2025 07:39:38 +0000 Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: Z3uAr0wlJ76umNUn6EiVDKbhqzQFpfUe2J5fA7xn+j8=) 2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Validity Not Before: Jul 19 07:39:39 2025 GMT Not After : Jul 26 07:39:38 2025 GMT Subject: CN=687b4bbb-6e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:0d:34:38:d9:3d:2b:98:ea:4c:07:71:93: 98:25:84:7d:eb:f5:c4:e6:9e:87:0d:c7:db:14:b4: 20:3b:b9:23:49:c2:5c:c2:bd:23:9d:00:12:45:e9: d3:b2:19:e8:cd:07:e8:b9:87:e5:d5:30:7c:79:d9: d7:9f:d9:bb:2e:39:8c:fd:e9:cb:e6:d1:34:e9:1d: 3e:9d:ef:be:96:1a:da:59:9e:d8:ec:98:76:eb:7c: 89:d1:3b:61:7c:33:a1:3a:4d:ac:60:fa:6b:fc:8b: f4:92:0a:84:d3:a3:fe:57:07:25:a0:6a:a3:f7:fc: 45:d6:99:ff:f6:7e:12:9e:75:dd:48:fc:3b:0a:fa: 11:61:07:eb:b4:3d:16:b3:1b:8e:2a:d1:67:d0:b4: 8f:62:5f:ee:0c:85:c1:6a:c8:3e:43:aa:c3:d8:8d: e3:0b:28:6a:3f:fd:51:99:16:30:42:c6:8b:5c:de: 44:88:ef:37:a3:c1:0f:99:06:c1:3d:b0:6d:66:cb: c5:9d:8c:62:5c:9f:a6:a9:e5:0c:79:9d:f9:b7:b5: c2:5a:0a:61:ec:13:ee:c2:f8:66:0c:ea:67:19:63: 49:d8:18:b3:e5:c0:63:8a:19:30:be:4a:3c:22:8f: 16:b0:c2:c7:13:20:1c:5e:58:e9:98:1c:42:13:c0: 52:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:25:4A:8A:4C:89:DF:D7:05:FA:B6:C7:FA:EF:A4:39:DC:38:9F:54 X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:53:c6:f2:36:b7:cb:0f:3b:fa:cf:c2:0e:d8:e4:a9:a7:e1: a4:c3:42:a2:a7:cf:6b:31:74:d6:c4:8e:dc:49:9c:bd:65:3d: d5:2b:b9:10:37:4b:89:b4:d1:09:86:60:6e:38:df:6a:02:14: 4d:18:62:da:e6:cd:02:68:3c:8e:33:7f:66:38:82:dc:96:2d: 5b:fe:65:c4:04:48:83:ed:15:d6:93:50:45:48:98:9f:30:ec: 5c:e6:29:0c:7b:ae:db:ba:21:42:a8:e9:1e:43:d2:cb:af:5c: 32:58:ce:e8:76:51:02:45:84:a7:c5:40:1c:f8:2a:3d:33:58: d7:95:0e:f2:15:f7:49:71:6d:94:87:36:1a:d9:44:9b:65:4d: 11:d1:67:f1:7e:47:a5:c1:87:ff:7f:c2:16:7b:e9:a9:28:0f: 1f:f2:14:3b:01:d0:8f:ce:44:63:e1:fd:a2:98:24:10:6d:8a: 4a:89:5c:0a:2e:5d:0a:c9:80:6e:ff:c9:17:8b:37:85:a5:12: e8:4b:97:8a:65:9c:0b:56:54:08:ec:cb:42:30:e6:e2:d2:c6: da:52:d5:bd:0e:3c:33:31:8f:b0:c9:de:b2:48:1c:19:44:1e: 46:1f:71:0d:52:27:b6:fb:33:04:98:68:01:9c:3a:05:a0:a9: 86:82:e7:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDc2OTExMC8GA1UEBRMoMkZDQjNDMjU1NjVDOTQwNDE3QkVFMkFBRjg4MzhDRTQz M0UyQjgzQTAeFw0yNTA3MTkwNzM5MzlaFw0yNTA3MjYwNzM5MzhaMBgxFjAUBgNV BAMTDTY4N2I0YmJiLTZlNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiSw00ONk9K5jqTAdxk5glhH3r9cTmnocNx9sUtCA7uSNJwlzCvSOdABJF6dOy GejNB+i5h+XVMHx52def2bsuOYz96cvm0TTpHT6d776WGtpZntjsmHbrfInRO2F8 M6E6Taxg+mv8i/SSCoTTo/5XByWgaqP3/EXWmf/2fhKedd1I/DsK+hFhB+u0PRaz G44q0WfQtI9iX+4MhcFqyD5DqsPYjeMLKGo//VGZFjBCxotc3kSI7zejwQ+ZBsE9 sG1my8WdjGJcn6ap5Qx5nfm3tcJaCmHsE+7C+GYM6mcZY0nYGLPlwGOKGTC+Sjwi jxawwscTIBxeWOmYHEITwFIFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0iVKikyJ 39cF+rbH+u+kOdw4n1QwHwYDVR0jBBgwFoAUL8s8JVZclAQXvuKq+IOM5DPiuDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNzY5LzU0NTY4OENBRkIy NDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDhzOEpWWmNsQVFYdnVLcS1JT001RFBpdURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NzY5LzU0NTY4OENBRkIyNDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFR WHZ1S3EtSU9NNURQaXVEby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKVTxvI2t8sPO/rPwg7Y5Kmn4aTDQqKnz2sxdNbEjtxJnL1lPdUruRA3 S4m00QmGYG4432oCFE0YYtrmzQJoPI4zf2Y4gtyWLVv+ZcQESIPtFdaTUEVImJ8w 7FzmKQx7rtu6IUKo6R5D0suvXDJYzuh2UQJFhKfFQBz4Kj0zWNeVDvIV90lxbZSH NhrZRJtlTRHRZ/F+R6XBh/9/whZ76akoDx/yFDsB0I/ORGPh/aKYJBBtikqJXAou XQrJgG7/yReLN4WlEuhLl4plnAtWVAjsy0Iw5uLSxtpS1b0OPDMxj7DJ3rJIHBlE HkYfcQ1SJ7b7MwSYaAGcOgWgqYaC56g= -----END CERTIFICATE-----Generated at Sun Jul 20 14:18:45 2025 by rpki-client