$ rpki-client -vvf rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft File: rljj8yTZRsaD9KOPjU4c1yV0gwo.mft (raw, json) Hash identifier: 29coFnCOV5+aAAW1r7vYypSlEQpeGa5bc1gtwnttB/4= Subject key identifier: 91:8C:1F:06:0D:64:7B:00:49:2A:45:53:5B:60:82:51:B3:C5:06:3D Authority key identifier: AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A Certificate issuer: /CN=A9191885/serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft Manifest number: 010D Signing time: Fri 25 Jul 2025 05:12:49 +0000 Manifest this update: Fri 25 Jul 2025 05:12:48 +0000 Manifest next update: Fri 01 Aug 2025 05:12:48 +0000 Files and hashes: 1: rljj8yTZRsaD9KOPjU4c1yV0gwo.crl (hash: 5sApJHSJS4wfd02lK62yeBfQp1X4rEmOFicOoKTHheY=) 2: 8EAC3DDCC9FF11EEA53CA25CC4F9AE02.roa (hash: 3XSRq2gf3Qq1teYkUqCY6q4aLkAm0S7clGDEwM9Zv2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 05:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191885, serialNumber=AE58E3F324D946C683F4A38F8D4E1CD72574830A Validity Not Before: Jul 25 05:12:48 2025 GMT Not After : Aug 1 05:12:48 2025 GMT Subject: CN=68831250-2aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:67:3e:33:d9:3e:29:4a:3f:17:cf:a3:59:f4: d0:b4:c6:de:ad:e1:21:cc:9b:51:3f:d5:9d:9d:41: 9d:8c:0e:d8:6c:d1:24:7d:0d:fd:0d:a1:6c:0d:a3: 19:31:48:7e:86:22:ee:d4:34:d5:42:7a:81:b2:32: 90:ba:67:cd:ce:94:aa:55:fa:db:42:b6:68:b9:6d: 7a:36:4a:58:1b:0e:1d:d2:21:53:64:f3:10:28:d6: e6:33:fe:f1:2a:a6:c0:50:76:15:a7:2a:6f:55:87: 5b:be:82:ae:b3:e3:26:08:bb:ae:24:9e:0f:1b:27: cc:ae:b4:ab:45:bc:56:1d:6a:8d:98:68:51:5e:9b: 50:06:b9:8e:75:cf:d8:34:4a:47:99:8e:2a:9f:5f: 31:95:21:12:65:df:e7:4f:ca:c7:6f:1d:54:b0:f4: 24:ce:25:82:f9:cd:50:5b:86:f3:04:43:7d:c1:e5: df:dd:31:ae:e4:a9:b8:f1:8f:6e:6c:92:86:28:bb: a8:b9:b4:0b:f3:29:26:d0:a0:f3:3f:38:6d:23:5b: 43:3a:0a:51:39:28:b5:82:bf:e4:c0:4f:76:3c:34: 52:09:c3:9a:8d:73:1f:4c:56:73:70:37:00:5c:9b: c4:27:70:2f:53:d3:ba:c0:45:82:99:93:87:c4:81: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8C:1F:06:0D:64:7B:00:49:2A:45:53:5B:60:82:51:B3:C5:06:3D X509v3 Authority Key Identifier: keyid:AE:58:E3:F3:24:D9:46:C6:83:F4:A3:8F:8D:4E:1C:D7:25:74:83:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rljj8yTZRsaD9KOPjU4c1yV0gwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191885/DFA04078C9FD11EEA677793BC4F9AE02/rljj8yTZRsaD9KOPjU4c1yV0gwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b7:82:25:8b:75:50:32:67:0c:ee:22:4a:96:e3:7f:72:d1: a8:62:52:e4:34:d1:c0:b8:2f:53:04:6d:7c:0f:38:2d:75:c8: 38:07:4e:a9:f4:30:8d:f9:85:fd:4a:0c:8d:77:02:45:21:06: d3:d9:14:b7:63:1b:85:55:22:b4:6d:c9:86:0f:76:33:76:eb: f3:9b:df:45:82:dd:5d:80:97:b6:5a:a5:24:7e:b9:a9:75:26: b7:57:75:60:1e:34:79:d4:9d:d6:57:c0:87:ca:f0:e5:10:28: 8f:7a:f8:7b:38:02:0e:95:bf:7d:df:bf:d5:80:2c:81:d9:f5: a4:aa:63:40:07:94:d0:09:f8:4f:1a:89:d3:26:fb:e7:64:61: 1c:b2:f3:92:31:d2:cf:3d:ee:6b:e6:15:27:84:d9:1d:f0:77: fc:b8:34:36:0a:f1:43:a6:5d:0d:54:ea:cf:9f:de:c6:e7:16: cd:36:82:bd:61:75:3e:36:3b:72:39:38:1e:53:0b:14:28:db: f0:8f:a5:3f:e9:5e:24:52:8e:54:25:7c:ae:d4:1c:cc:c2:33: 4a:0c:26:51:75:6a:49:a2:df:52:ba:03:d6:e4:38:55:c1:02: 52:ba:7e:9b:59:36:fc:34:8c:85:1c:a8:16:95:ba:2b:41:97: 44:3d:e2:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE4ODUxMTAvBgNVBAUTKEFFNThFM0YzMjREOTQ2QzY4M0Y0QTM4RjhENEUxQ0Q3 MjU3NDgzMEEwHhcNMjUwNzI1MDUxMjQ4WhcNMjUwODAxMDUxMjQ4WjAYMRYwFAYD VQQDEw02ODgzMTI1MC0yYWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmc+M9k+KUo/F8+jWfTQtMbereEhzJtRP9WdnUGdjA7YbNEkfQ39DaFsDaMZ MUh+hiLu1DTVQnqBsjKQumfNzpSqVfrbQrZouW16NkpYGw4d0iFTZPMQKNbmM/7x KqbAUHYVpypvVYdbvoKus+MmCLuuJJ4PGyfMrrSrRbxWHWqNmGhRXptQBrmOdc/Y NEpHmY4qn18xlSESZd/nT8rHbx1UsPQkziWC+c1QW4bzBEN9weXf3TGu5Km48Y9u bJKGKLuoubQL8ykm0KDzPzhtI1tDOgpROSi1gr/kwE92PDRSCcOajXMfTFZzcDcA XJvEJ3AvU9O6wEWCmZOHxIFmSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGMHwYN ZHsASSpFU1tgglGzxQY9MB8GA1UdIwQYMBaAFK5Y4/Mk2UbGg/Sjj41OHNcldIMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTg4NS9ERkEwNDA3OEM5 RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJzYUQ5S09QalU0YzF5VjBn d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Jsamo4eVRaUnNhRDlLT1BqVTRjMXlWMGd3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTg4NS9ERkEwNDA3OEM5RkQxMUVFQTY3Nzc5M0JDNEY5QUUwMi9ybGpqOHlUWlJz YUQ5S09QalU0YzF5VjBnd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVt4Ili3VQMmcM7iJKluN/ctGoYlLkNNHAuC9TBG18Dzgtdcg4B06p 9DCN+YX9SgyNdwJFIQbT2RS3YxuFVSK0bcmGD3Yzduvzm99Fgt1dgJe2WqUkfrmp dSa3V3VgHjR51J3WV8CHyvDlECiPevh7OAIOlb9937/VgCyB2fWkqmNAB5TQCfhP GonTJvvnZGEcsvOSMdLPPe5r5hUnhNkd8Hf8uDQ2CvFDpl0NVOrPn97G5xbNNoK9 YXU+NjtyOTgeUwsUKNvwj6U/6V4kUo5UJXyu1BzMwjNKDCZRdWpJot9SugPW5DhV wQJSun6bWTb8NIyFHKgWlborQZdEPeJV -----END CERTIFICATE-----Generated at Fri Jul 25 11:09:43 2025 by rpki-client