$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: sVtvzChvnHWX8Knr4bNTFGzhMUIppvb4xMyAmSVxYDY= Subject key identifier: 5E:09:E6:B7:47:C4:5B:85:72:29:5E:1B:2C:E3:5C:FD:C3:C0:F9:CB Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0C6A Signing time: Wed 20 Aug 2025 18:28:38 +0000 Manifest this update: Wed 20 Aug 2025 18:28:38 +0000 Manifest next update: Wed 27 Aug 2025 18:28:38 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: y5s28rGODHBzTlVUHosrlyXeq+/sUu/KyObmjeT8Ulc=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: kw2eNb2EMSu9uzXccFSp6eZwzhS7sBm7WAl3fnQxLVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Aug 20 18:28:38 2025 GMT Not After : Aug 27 18:28:38 2025 GMT Subject: CN=68a613d6-e4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:70:10:60:7f:89:d5:a4:10:3d:14:ce:ae: 6b:c6:2f:55:ec:ae:97:5f:3e:8b:66:ce:b1:c8:55: 14:7c:c2:c2:cb:50:6b:fd:5a:39:74:69:ba:88:c1: 9c:3c:c9:f5:9d:16:aa:8f:29:b4:41:a0:60:75:16: ca:90:ea:0c:18:2d:4a:4c:b9:28:98:fc:b1:56:2b: de:df:37:e0:77:3d:13:f8:43:88:b3:fa:51:e9:62: c8:de:69:1a:22:4e:f1:29:30:f5:db:29:a0:91:50: 0b:2d:ee:d5:4a:ae:bb:5a:0f:48:d5:cc:9e:be:ee: 22:d0:99:94:89:cd:16:f7:96:99:51:75:cc:5f:76: 32:fa:af:0e:1c:d3:62:c4:7f:a3:c1:36:6e:5b:2f: 93:a8:89:21:1f:ef:42:89:65:d9:ff:70:5b:72:ba: 1c:64:4f:a8:96:96:58:b5:bb:d0:2f:c6:de:ac:41: eb:8a:3b:ee:0c:05:11:e5:5f:0e:11:52:e0:25:c6: cf:34:f4:03:ee:7d:2c:da:d9:e3:01:f6:8e:09:0b: 6b:1b:26:43:39:fd:b8:1d:a2:a3:f7:8d:e1:d2:4a: 3c:c5:07:18:c4:12:10:c8:f1:87:b9:31:36:68:e4: fd:8a:21:81:0e:83:4b:af:1f:f7:1d:72:d0:f8:3d: 8f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:09:E6:B7:47:C4:5B:85:72:29:5E:1B:2C:E3:5C:FD:C3:C0:F9:CB X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:b5:91:a4:56:fb:0a:5a:6b:8f:51:b7:e0:b5:a6:95:36:f6: 11:f3:09:79:eb:fa:04:d3:a9:3b:9a:5f:82:38:83:29:58:6c: 16:65:21:fb:1c:da:53:d3:b8:da:d2:85:38:50:2a:1c:cd:f6: 43:a2:83:ea:10:3e:c4:a2:0b:da:42:32:b0:2a:74:35:b2:5f: 12:f6:b8:09:c0:97:05:74:9f:ac:ca:8d:90:7a:64:e8:43:fe: 19:54:6a:83:a1:ef:c1:a1:ce:72:ea:a8:77:ad:19:fc:f4:b5: 8c:78:dc:81:b6:d9:43:a1:61:5e:c4:93:63:1d:9c:c5:6e:78: 00:6d:13:44:ef:3f:0c:ba:d7:5c:e8:af:4e:d6:17:d8:a6:86: 09:89:de:e8:a4:59:17:05:b7:cb:83:d8:05:17:ee:c8:14:30: d6:db:1c:95:82:bb:6b:64:8b:4b:2c:46:c0:13:01:97:41:9e: 87:f7:59:75:3f:c6:1e:4b:28:41:18:ee:3c:7c:5c:3f:e4:f1: cb:16:54:4c:91:16:12:d5:50:09:04:c0:cb:d5:0f:b2:7b:b0: 87:9b:12:ff:38:e1:b7:d0:b0:15:99:b8:69:40:6f:2c:b3:c1: 44:8a:f3:b1:6e:40:e5:62:e7:2b:89:4d:c1:f2:11:df:35:d1: 44:fa:21:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjUwODIwMTgyODM4WhcNMjUwODI3MTgyODM4WjAYMRYwFAYD VQQDEw02OGE2MTNkNi1lNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6JwEGB/idWkED0Uzq5rxi9V7K6XXz6LZs6xyFUUfMLCy1Br/Vo5dGm6iMGc PMn1nRaqjym0QaBgdRbKkOoMGC1KTLkomPyxVive3zfgdz0T+EOIs/pR6WLI3mka Ik7xKTD12ymgkVALLe7VSq67Wg9I1cyevu4i0JmUic0W95aZUXXMX3Yy+q8OHNNi xH+jwTZuWy+TqIkhH+9CiWXZ/3BbcrocZE+olpZYtbvQL8berEHrijvuDAUR5V8O EVLgJcbPNPQD7n0s2tnjAfaOCQtrGyZDOf24HaKj943h0ko8xQcYxBIQyPGHuTE2 aOT9iiGBDoNLrx/3HXLQ+D2P6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4J5rdH xFuFcileGyzjXP3DwPnLMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxtZGkVvsKWmuPUbfgtaaVNvYR8wl56/oE06k7ml+COIMpWGwWZSH7 HNpT07ja0oU4UCoczfZDooPqED7EogvaQjKwKnQ1sl8S9rgJwJcFdJ+syo2QemTo Q/4ZVGqDoe/Boc5y6qh3rRn89LWMeNyBttlDoWFexJNjHZzFbngAbRNE7z8Mutdc 6K9O1hfYpoYJid7opFkXBbfLg9gFF+7IFDDW2xyVgrtrZItLLEbAEwGXQZ6H91l1 P8YeSyhBGO48fFw/5PHLFlRMkRYS1VAJBMDL1Q+ye7CHmxL/OOG30LAVmbhpQG8s s8FEivOxbkDlYucriU3B8hHfNdFE+iFE -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:42 2025 by rpki-client