$ rpki-client -vvf rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft File: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft (raw, json) Hash identifier: PnxxVeiN6sr7zbEpq90H2dDrAD/zxso+ELEPR4KqKzI= Subject key identifier: F4:14:BE:E7:66:74:4E:41:DB:9D:13:24:B0:BA:9F:B5:38:6D:B5:FA Authority key identifier: FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 Certificate issuer: /CN=A91216AC/serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Certificate serial: 0551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft Manifest number: 054D Signing time: Wed 02 Jul 2025 23:43:58 +0000 Manifest this update: Wed 02 Jul 2025 23:43:57 +0000 Manifest next update: Wed 09 Jul 2025 23:43:57 +0000 Files and hashes: 1: _l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl (hash: 0e+GU4GEWnT30up/PaiUjPVY26CyJui3XN3XuUq1h9I=) 2: AE1E5A1AF61C11EBAB08AF17C4F9AE02.roa (hash: L6NkrUDLV6Dmkk8kbRWqS9urNPurijV7bD/FqK/kzIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91216AC, serialNumber=FE5F1C750048BB54E01373AC3EDD4B777D888E79 Validity Not Before: Jul 2 23:43:57 2025 GMT Not After : Jul 9 23:43:57 2025 GMT Subject: CN=6865c43d-2cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:02:de:b6:2c:83:25:35:ca:d8:29:65:31:13: ef:06:d1:ac:b6:9b:bf:bb:d3:af:46:fe:ce:ff:4d: 4b:69:73:45:71:9a:96:be:8c:d2:92:90:05:83:10: 42:35:d1:b7:f6:71:f6:5c:27:36:29:cb:4e:1a:5d: 8a:02:44:62:64:c0:78:21:77:20:35:8e:1a:7f:d8: 65:fa:f9:78:0c:c1:42:0a:d1:0c:04:b8:86:06:82: 04:fc:c7:ae:a8:d4:7e:5f:e5:7d:14:8e:d3:c1:06: 02:67:f8:0d:5e:da:ed:c0:66:e8:68:f5:b7:c4:e3: e5:6a:e3:29:84:cc:c7:3c:67:a3:66:f5:fc:78:ab: a9:f0:89:6c:ae:4c:57:9a:d9:98:ca:89:a1:7f:cd: 25:05:f9:0c:85:83:2b:ef:9a:56:65:06:6f:76:ab: 9e:1d:bc:83:f5:40:48:61:9b:26:92:59:73:58:2c: ef:28:b7:4c:b9:22:16:93:82:a5:1a:49:4d:19:3a: 46:cd:ed:e4:d0:6f:9c:b6:7a:d5:f0:6a:9c:43:02: 44:a3:4b:50:59:4d:9c:7f:8c:e3:65:82:c1:37:d9: 69:f4:3c:4c:db:9a:d3:2b:ef:38:18:d1:0d:3b:b0: 08:51:4f:82:b9:80:42:a9:f1:ad:5a:9c:de:a3:d0: dc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:14:BE:E7:66:74:4E:41:DB:9D:13:24:B0:BA:9F:B5:38:6D:B5:FA X509v3 Authority Key Identifier: keyid:FE:5F:1C:75:00:48:BB:54:E0:13:73:AC:3E:DD:4B:77:7D:88:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91216AC/38D23722F61711EBB20F1A4EC4F9AE02/_l8cdQBIu1TgE3OsPt1Ld32Ijnk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b3:40:7f:8c:ae:21:ed:45:47:c6:63:06:f6:f7:b4:9b:f6: a9:4e:ca:b6:9d:83:53:d4:36:aa:e0:cc:00:a4:19:f5:a8:64: f7:f7:78:9c:33:38:a7:d6:56:ea:1f:bf:cc:bc:60:a3:7d:df: 38:7b:bb:18:1e:e4:df:6a:14:a7:90:74:38:a1:48:65:ce:03: ea:68:bd:36:df:5e:f5:70:9a:ed:a6:0b:2d:40:16:cf:7f:d8: b8:7e:3c:86:a8:c8:75:e4:bf:03:f8:e8:39:c8:9e:08:f8:2c: 2f:c6:3d:d5:a2:9f:2a:b7:2b:3a:25:b4:41:b8:87:d1:1e:68: 47:b0:d0:a8:96:32:82:68:a5:8c:ba:ef:3a:b7:15:10:5b:ff: 4f:22:a9:be:c1:df:4e:4f:9c:c7:1f:63:27:90:29:4b:94:88: 57:10:22:76:9b:a1:5a:9b:ab:b7:8d:c2:fb:e6:94:42:9a:6f: ea:de:6e:56:98:6e:71:db:5f:e4:74:96:0e:80:f3:fe:ec:36: 81:96:fa:39:67:12:06:87:d9:b0:3e:3f:48:81:d1:a1:88:26: 0e:7b:7d:12:b0:79:39:d8:8d:ff:be:40:32:19:0d:2a:73:b8: 24:ed:a8:ae:f7:5f:9d:58:01:7b:fa:76:9a:d2:7d:7a:26:c3: 6c:8b:f8:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE2QUMxMTAvBgNVBAUTKEZFNUYxQzc1MDA0OEJCNTRFMDEzNzNBQzNFREQ0Qjc3 N0Q4ODhFNzkwHhcNMjUwNzAyMjM0MzU3WhcNMjUwNzA5MjM0MzU3WjAYMRYwFAYD VQQDEw02ODY1YzQzZC0yY2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QLetiyDJTXK2CllMRPvBtGstpu/u9OvRv7O/01LaXNFcZqWvozSkpAFgxBC NdG39nH2XCc2KctOGl2KAkRiZMB4IXcgNY4af9hl+vl4DMFCCtEMBLiGBoIE/Meu qNR+X+V9FI7TwQYCZ/gNXtrtwGboaPW3xOPlauMphMzHPGejZvX8eKup8IlsrkxX mtmYyomhf80lBfkMhYMr75pWZQZvdqueHbyD9UBIYZsmkllzWCzvKLdMuSIWk4Kl GklNGTpGze3k0G+ctnrV8GqcQwJEo0tQWU2cf4zjZYLBN9lp9DxM25rTK+84GNEN O7AIUU+CuYBCqfGtWpzeo9DcLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQUvudm dE5B250TJLC6n7U4bbX6MB8GA1UdIwQYMBaAFP5fHHUASLtU4BNzrD7dS3d9iI55 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTZBQy8zOEQyMzcyMkY2 MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUxVGdFM09zUHQxTGQzMklq bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19sOGNkUUJJdTFUZ0UzT3NQdDFMZDMySWpuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTZBQy8zOEQyMzcyMkY2MTcxMUVCQjIwRjFBNEVDNEY5QUUwMi9fbDhjZFFCSXUx VGdFM09zUHQxTGQzMklqbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIs0B/jK4h7UVHxmMG9ve0m/apTsq2nYNT1Daq4MwApBn1qGT393ic Mzin1lbqH7/MvGCjfd84e7sYHuTfahSnkHQ4oUhlzgPqaL023171cJrtpgstQBbP f9i4fjyGqMh15L8D+Og5yJ4I+Cwvxj3Vop8qtys6JbRBuIfRHmhHsNColjKCaKWM uu86txUQW/9PIqm+wd9OT5zHH2MnkClLlIhXECJ2m6Fam6u3jcL75pRCmm/q3m5W mG5x21/kdJYOgPP+7DaBlvo5ZxIGh9mwPj9IgdGhiCYOe30SsHk52I3/vkAyGQ0q c7gk7aiu91+dWAF7+naa0n16JsNsi/jy -----END CERTIFICATE-----Generated at Thu Jul 3 11:57:29 2025 by rpki-client