$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json) Hash identifier: 6yQm0GzA5nogE+Xu1A6/OW2LYDBbUPph0X60Ri5lw5g= Subject key identifier: 22:73:94:0A:18:DE:DC:D0:6B:AF:EC:08:79:32:AB:14:2E:D7:16:A7 Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Certificate serial: 05A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft Manifest number: 057E Signing time: Fri 18 Jul 2025 23:47:16 +0000 Manifest this update: Fri 18 Jul 2025 23:47:15 +0000 Manifest next update: Fri 25 Jul 2025 23:47:15 +0000 Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: gCNuuRmPT3WRlOFJC+per8dEoHl/SGqg5a+nQC0UkG4=) 2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: Ji5QHhKyC9d/xw16UVd29SWOnnXI9pwAI1DiN2SnuG0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1448 (0x5a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3 Validity Not Before: Jul 18 23:47:15 2025 GMT Not After : Jul 25 23:47:15 2025 GMT Subject: CN=687add04-d397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:e6:14:4a:2e:1b:9d:3d:69:5c:fd:3c:d4: dd:db:ba:91:66:df:5b:ed:6e:96:10:f1:58:4a:78: 6b:0b:18:a7:74:22:d4:38:bf:31:83:c3:85:ae:5b: e2:6e:11:56:66:bb:e5:ea:98:15:c6:83:65:82:53: 3a:fb:40:5f:a7:e5:e7:b2:15:6b:eb:fe:75:d2:be: b8:5b:5c:52:c6:f4:b5:71:74:9f:77:52:51:d7:93: f6:62:9a:5f:41:a4:20:08:ba:99:2f:ee:dc:9a:f6: 8e:c4:bb:0d:0b:b4:28:16:33:d4:3d:e0:a5:69:3d: 42:05:48:66:0c:8e:7a:91:ee:82:3f:ba:15:09:2b: 16:67:ac:eb:69:c7:13:a6:ed:9c:f7:23:9b:b2:cf: 9f:8d:34:e2:1c:4b:8c:d7:2a:5b:54:97:36:e9:00: 38:07:d0:a6:e2:88:0d:d8:40:2b:7d:86:da:1f:3c: c9:be:49:92:a8:e2:77:04:a1:9d:ae:66:74:66:b7: 2d:0c:7c:ee:4c:48:a1:1d:f1:e9:22:56:12:10:6d: d5:2a:31:52:88:7d:f8:ff:a1:33:63:c0:d0:12:e7: 2d:ba:40:8b:3f:11:25:ca:ba:3e:ae:e6:a4:cc:73: 97:8a:0c:b4:5f:83:b6:79:e2:25:91:b9:64:03:c9: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:73:94:0A:18:DE:DC:D0:6B:AF:EC:08:79:32:AB:14:2E:D7:16:A7 X509v3 Authority Key Identifier: keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:1c:d2:0e:20:59:e3:29:24:08:ae:ae:52:df:8b:1c:c0:28: b3:94:b2:5e:2f:ac:7d:1d:3d:b5:de:c5:47:04:f4:2e:13:c4: f5:9e:c3:04:86:76:f2:09:0d:79:64:04:65:4f:e3:a8:b9:5a: e5:92:9a:84:61:bd:d5:fb:c1:76:83:c7:6b:14:61:b6:b0:b2: 28:f0:65:9c:55:95:d0:48:fb:18:32:49:7d:60:c9:91:78:5f: c5:28:07:45:99:e0:86:97:22:83:8f:10:11:7e:d1:d7:ef:c9: 96:fb:36:1c:9d:df:3b:18:fe:a5:3c:44:bd:2f:8a:6f:99:5b: 28:ad:d8:a0:b8:f9:3b:f9:bb:2e:3e:d7:b9:10:44:f4:40:3c: ec:68:76:c4:b0:37:fe:8d:71:c7:cb:a1:f6:9b:c0:ae:22:42: e5:db:08:09:b8:bc:fd:3e:29:f4:8b:12:c3:12:57:a8:9d:f8: 50:42:46:ac:1a:f3:ef:a8:fc:57:1c:8c:af:05:16:18:af:ab: ff:75:db:02:01:03:54:4e:f2:ee:f5:0a:d6:f4:38:4f:01:13: 2e:bd:f4:48:22:17:13:fd:c4:e2:67:14:91:3b:67:84:27:e9: 2f:e6:26:88:cc:08:3a:bc:ff:dc:f6:2b:ac:ff:91:81:00:2c: 41:13:51:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QjExMTAvBgNVBAUTKEZFNTBDMzg1RDlFQjE5RTJFRkExNEZBMzVBREE1QkRF QTVCNDU2RDMwHhcNMjUwNzE4MjM0NzE1WhcNMjUwNzI1MjM0NzE1WjAYMRYwFAYD VQQDEw02ODdhZGQwNC1kMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpXmFEouG509aVz9PNTd27qRZt9b7W6WEPFYSnhrCxindCLUOL8xg8OFrlvi bhFWZrvl6pgVxoNlglM6+0Bfp+XnshVr6/510r64W1xSxvS1cXSfd1JR15P2Yppf QaQgCLqZL+7cmvaOxLsNC7QoFjPUPeClaT1CBUhmDI56ke6CP7oVCSsWZ6zraccT pu2c9yObss+fjTTiHEuM1ypbVJc26QA4B9Cm4ogN2EArfYbaHzzJvkmSqOJ3BKGd rmZ0ZrctDHzuTEihHfHpIlYSEG3VKjFSiH34/6EzY8DQEuctukCLPxElyro+ruak zHOXigy0X4O2eeIlkblkA8m1YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJzlAoY 3tzQa6/sCHkyqxQu1xanMB8GA1UdIwQYMBaAFP5Qw4XZ6xni76FPo1raW96ltFbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdCMS82NkU0RTRGNkZC NDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdlTHZvVS1qV3RwYjNxVzBW dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sRERoZG5yR2VMdm9VLWpXdHBiM3FXMFZ0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdCMS82NkU0RTRGNkZCNDAxMUVCQkFCMERBM0JDNEY5QUUwMi9fbEREaGRuckdl THZvVS1qV3RwYjNxVzBWdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHHNIOIFnjKSQIrq5S34scwCizlLJeL6x9HT213sVHBPQuE8T1nsME hnbyCQ15ZARlT+OouVrlkpqEYb3V+8F2g8drFGG2sLIo8GWcVZXQSPsYMkl9YMmR eF/FKAdFmeCGlyKDjxARftHX78mW+zYcnd87GP6lPES9L4pvmVsordiguPk7+bsu Pte5EET0QDzsaHbEsDf+jXHHy6H2m8CuIkLl2wgJuLz9Pin0ixLDEleonfhQQkas GvPvqPxXHIyvBRYYr6v/ddsCAQNUTvLu9QrW9DhPARMuvfRIIhcT/cTiZxSRO2eE J+kv5iaIzAg6vP/c9ius/5GBACxBE1EI -----END CERTIFICATE-----Generated at Sun Jul 20 03:26:05 2025 by rpki-client