$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft File: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft (raw, json) Hash identifier: yo5fL+BhjG8AyVsYIR/nD2P87KWRlXHiRK5AJbLwjzk= Subject key identifier: 6B:C4:CF:91:2B:03:0E:B3:3C:1B:79:7E:52:2F:3A:48:77:42:94:EF Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft Manifest number: 05A0 Signing time: Wed 02 Jul 2025 23:34:51 +0000 Manifest this update: Wed 02 Jul 2025 23:34:51 +0000 Manifest next update: Wed 09 Jul 2025 23:34:51 +0000 Files and hashes: 1: mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl (hash: kxh1SGR1MPN8fqgQS5oef6UsAtX5kds0STsVDKsfqGw=) 2: E9C2CC6C29CC11F086897744C4F9AE02.roa (hash: uDhOs7m4hROOvuYbsNmfelIHLedEW+qbRLJoRWnov7k=) 3: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (hash: 2aWXQNNMXtNMfUOin6lgFHg66dnKR9UhJDXK2a/H1WM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: Jul 2 23:34:51 2025 GMT Not After : Jul 9 23:34:51 2025 GMT Subject: CN=6865c21b-7224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:1b:52:02:1b:70:a2:7f:52:7a:4e:44:2d: 75:32:07:08:7f:e2:72:3e:26:46:61:10:0e:01:7b: e2:62:64:f3:9f:52:77:29:ed:06:45:39:de:94:03: 38:26:1e:e2:39:05:2f:95:c3:cd:30:d5:34:98:52: c0:f0:b5:b7:2b:c4:6d:60:1b:5b:a7:ce:82:c0:c2: d0:06:a8:ad:ca:ca:09:1d:ea:53:17:00:09:89:02: 7c:48:3b:36:31:22:e5:fc:21:e2:45:c8:6e:e1:c3: 6a:5f:2b:e3:cc:1f:68:a5:38:22:a0:c7:27:97:f1: 93:79:2f:6b:43:2d:05:85:0e:9d:a0:b3:e8:f9:06: 96:8c:d6:e7:54:cd:fa:2b:ba:d2:0a:ac:65:9d:e8: 3f:9e:5e:6a:6f:60:a3:bc:6e:25:b4:46:13:05:9c: a6:5c:6e:5d:f9:fc:97:81:cc:02:82:54:39:ad:ea: 5f:f0:72:91:04:39:95:64:97:04:72:0c:65:d9:50: 4c:5c:b1:cc:3d:25:b5:8c:8d:d0:6d:0e:12:83:ed: 16:00:71:c7:70:3f:4a:46:ab:bc:95:99:ca:3b:81: f5:2c:a5:05:e5:1d:8b:68:07:1e:a0:a8:c9:d3:89: 49:da:66:c4:96:16:23:51:37:64:c2:18:1b:2e:0c: 4d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C4:CF:91:2B:03:0E:B3:3C:1B:79:7E:52:2F:3A:48:77:42:94:EF X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:ed:9b:54:b5:8b:b3:6d:cb:51:3b:7d:73:a4:8e:13:09:61: bc:bf:a9:c9:ed:a7:07:a7:c0:2a:4e:de:69:52:f3:e4:d8:c1: a9:39:97:cf:16:50:9c:b4:14:37:8e:ea:72:7c:77:58:85:be: 67:8d:f5:36:0d:91:70:f8:e8:2f:2e:eb:b2:ce:90:da:bb:2f: d2:55:9a:c4:30:23:cf:62:55:07:7b:a6:8e:8d:97:8b:bd:c5: 5f:37:21:93:3d:44:ea:37:bd:cf:a2:69:eb:3a:89:7d:ac:14: 38:d1:76:94:62:40:96:fa:e0:fe:e0:dd:97:18:1e:ee:38:81: 3b:ff:3b:ad:dd:d1:a4:97:72:3b:47:37:b1:00:11:33:51:72: 54:60:9e:f9:d1:0b:cf:eb:9b:a6:12:c7:f5:db:c3:bd:1c:f4: 9b:13:16:14:49:0c:82:87:cb:e8:fc:05:2b:c8:dd:2c:0d:4b: 09:b3:15:a5:98:cd:73:db:6e:84:75:1c:90:74:49:d0:82:9e: 80:9d:84:79:b6:a6:1a:82:c8:71:98:99:0a:cc:b3:ed:8f:71: 48:7a:3a:df:16:44:65:0a:50:3c:55:99:ab:c7:6f:70:72:b0: a5:0e:3a:a1:d3:64:74:51:f9:f7:2f:e5:86:2a:58:3f:90:e7: c5:a8:aa:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjUwNzAyMjMzNDUxWhcNMjUwNzA5MjMzNDUxWjAYMRYwFAYD VQQDEw02ODY1YzIxYi03MjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLUbUgIbcKJ/UnpORC11MgcIf+JyPiZGYRAOAXviYmTzn1J3Ke0GRTnelAM4 Jh7iOQUvlcPNMNU0mFLA8LW3K8RtYBtbp86CwMLQBqitysoJHepTFwAJiQJ8SDs2 MSLl/CHiRchu4cNqXyvjzB9opTgioMcnl/GTeS9rQy0FhQ6doLPo+QaWjNbnVM36 K7rSCqxlneg/nl5qb2CjvG4ltEYTBZymXG5d+fyXgcwCglQ5repf8HKRBDmVZJcE cgxl2VBMXLHMPSW1jI3QbQ4Sg+0WAHHHcD9KRqu8lZnKO4H1LKUF5R2LaAceoKjJ 04lJ2mbElhYjUTdkwhgbLgxNTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvEz5Er Aw6zPBt5flIvOkh3QpTvMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjhCQy8wRTdENjRENkRGMEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9M Wk1JVTNNd0hkMEV3aC1sM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX7ZtUtYuzbctRO31zpI4TCWG8v6nJ7acHp8AqTt5pUvPk2MGpOZfP FlCctBQ3jupyfHdYhb5njfU2DZFw+OgvLuuyzpDauy/SVZrEMCPPYlUHe6aOjZeL vcVfNyGTPUTqN73PomnrOol9rBQ40XaUYkCW+uD+4N2XGB7uOIE7/zut3dGkl3I7 RzexABEzUXJUYJ750QvP65umEsf128O9HPSbExYUSQyCh8vo/AUryN0sDUsJsxWl mM1z226EdRyQdEnQgp6AnYR5tqYagshxmJkKzLPtj3FIejrfFkRlClA8VZmrx29w crClDjqh02R0Ufn3L+WGKlg/kOfFqKrI -----END CERTIFICATE-----Generated at Thu Jul 3 10:26:46 2025 by rpki-client