$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft File: L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json) Hash identifier: vY3zpFnXAkFl9avtKxMEFRmX12yZtdC/qwu3QycAOmU= Subject key identifier: 4F:02:53:C6:BD:3C:E1:28:8C:DD:D6:A1:17:38:8B:52:D4:73:E7:09 Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 Certificate issuer: /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Certificate serial: 07BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft Manifest number: 07B4 Signing time: Wed 02 Jul 2025 21:29:35 +0000 Manifest this update: Wed 02 Jul 2025 21:29:35 +0000 Manifest next update: Wed 09 Jul 2025 21:29:35 +0000 Files and hashes: 1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: nahQ+cyO/vPcQ6SHBZtn4gxijuKVu1XjdKcSosZLiKE=) 2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: nrFCEo7GcK2eALmFz5c2iHIjlVAiVLpJmfCmZn/cv3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1978 (0x7ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Validity Not Before: Jul 2 21:29:35 2025 GMT Not After : Jul 9 21:29:35 2025 GMT Subject: CN=6865a4bf-490d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:38:99:94:3a:b3:8f:39:ea:02:c9:f3:c6: ea:23:b7:e8:d6:11:1b:01:d1:51:cf:2a:4b:09:00: 6f:7a:e2:58:eb:c9:87:f6:69:1e:9f:cc:3d:87:34: 87:f8:03:92:9f:7e:5f:2a:04:69:51:32:83:85:06: 48:6a:9d:17:1f:51:50:29:01:f3:a2:72:ca:a1:ab: 92:e4:90:8f:64:17:da:d2:d2:3a:7f:a0:cb:e9:06: 21:69:a8:9c:4a:d0:23:22:4c:90:11:e9:0f:e4:c8: e2:64:3e:3f:bf:af:3d:bc:6f:72:71:94:5a:4f:96: 21:3b:47:c1:47:43:b9:2a:a9:be:9c:d8:f9:df:4a: 5e:b1:f1:f1:e5:9c:3c:23:5c:3b:b9:80:f6:59:bf: 7c:1d:f0:a6:d5:1d:e6:f3:07:15:d4:a9:e1:82:12: 0b:7a:70:81:53:50:31:de:d9:0a:0d:c0:36:87:47: e5:5b:68:c8:0b:52:7d:53:77:60:9c:55:15:66:c1: 91:5a:86:45:6a:cf:e0:bc:67:94:54:46:84:1f:bc: de:dd:8c:b1:56:41:8e:44:56:7f:a4:8f:e3:53:0d: 21:9e:4a:35:06:7d:cb:ca:55:69:9f:05:62:2f:6c: 9f:e9:b2:90:96:90:09:df:ea:3f:09:2b:c6:21:0b: 4a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:02:53:C6:BD:3C:E1:28:8C:DD:D6:A1:17:38:8B:52:D4:73:E7:09 X509v3 Authority Key Identifier: keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a5:5c:19:52:c4:74:6b:21:ec:a8:5e:7c:0f:e9:da:dd:a6: 38:0b:74:8a:1d:b2:7c:de:b7:c9:8f:5f:46:05:52:21:0f:ba: 4b:5d:4b:b5:24:5a:ca:8a:e3:99:b7:93:2f:98:9e:3b:7d:92: 92:0f:8a:28:d7:26:8e:69:30:44:64:ea:ef:20:5a:38:f1:b3: 58:2e:5a:05:16:b0:04:4a:ab:3c:aa:ff:03:bf:e3:6c:2c:df: 7b:75:b2:e2:6d:4c:7f:cb:1f:1b:96:8e:d6:5c:38:1d:05:3d: 7f:3c:b2:bd:65:8e:be:96:8e:fd:ed:e9:d3:1a:d8:99:4f:00: 31:2c:f5:88:64:3d:3e:61:5c:b9:c9:9e:2c:1c:c4:7d:1f:67: a3:f2:98:32:44:f2:69:0b:49:e4:0e:8f:e9:17:38:e7:64:39: 3d:21:e7:eb:6d:82:ae:ba:97:ab:e6:74:e2:ef:3a:54:17:d6: fc:81:36:e7:09:09:09:93:ad:2e:27:2a:89:ac:78:93:cb:b8: 0b:ca:3d:53:41:ec:f3:d9:b5:ca:55:c7:bb:68:e8:4a:a9:ec: 95:d7:3a:32:e1:30:02:fd:ec:a3:31:36:9b:7c:75:ed:21:80: ec:68:d4:7f:15:5c:8b:e5:de:36:ca:cc:ff:92:cb:ee:9f:3d: 0f:0c:46:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRDYxMTAvBgNVBAUTKDJGREY3QTZBRjkwNERGMkNENDdFNjVDQ0MwQzlDNUND QkYyMzk4RTUwHhcNMjUwNzAyMjEyOTM1WhcNMjUwNzA5MjEyOTM1WjAYMRYwFAYD VQQDEw02ODY1YTRiZi00OTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdM4mZQ6s4856gLJ88bqI7fo1hEbAdFRzypLCQBveuJY68mH9mken8w9hzSH +AOSn35fKgRpUTKDhQZIap0XH1FQKQHzonLKoauS5JCPZBfa0tI6f6DL6QYhaaic StAjIkyQEekP5MjiZD4/v689vG9ycZRaT5YhO0fBR0O5Kqm+nNj530pesfHx5Zw8 I1w7uYD2Wb98HfCm1R3m8wcV1KnhghILenCBU1Ax3tkKDcA2h0flW2jIC1J9U3dg nFUVZsGRWoZFas/gvGeUVEaEH7ze3YyxVkGORFZ/pI/jUw0hnko1Bn3LylVpnwVi L2yf6bKQlpAJ3+o/CSvGIQtK3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8CU8a9 POEojN3WoRc4i1LUc+cJMB8GA1UdIwQYMBaAFC/femr5BN8s1H5lzMDJxcy/I5jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNENi8xMzlFMTI0NDA1 MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5elVmbVhNd01uRnpMOGpt T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5OTZhdmtFM3l6VWZtWE13TW5Gekw4am1PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNENi8xMzlFMTI0NDA1MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5 elVmbVhNd01uRnpMOGptT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdpVwZUsR0ayHsqF58D+na3aY4C3SKHbJ83rfJj19GBVIhD7pLXUu1 JFrKiuOZt5MvmJ47fZKSD4oo1yaOaTBEZOrvIFo48bNYLloFFrAESqs8qv8Dv+Ns LN97dbLibUx/yx8blo7WXDgdBT1/PLK9ZY6+lo797enTGtiZTwAxLPWIZD0+YVy5 yZ4sHMR9H2ej8pgyRPJpC0nkDo/pFzjnZDk9IefrbYKuuper5nTi7zpUF9b8gTbn CQkJk60uJyqJrHiTy7gLyj1TQezz2bXKVce7aOhKqeyV1zoy4TAC/eyjMTabfHXt IYDsaNR/FVyL5d42ysz/ksvunz0PDEaq -----END CERTIFICATE-----Generated at Thu Jul 3 18:08:13 2025 by rpki-client