$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: DLvaKAZMXklqkVQhJFCPcJN2GnVN4qC3uXfpAcH9x5Y= Subject key identifier: B9:B3:77:4C:66:32:90:1E:5E:3D:4B:40:55:02:AE:D2:69:D0:E4:11 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0B72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0B5F Signing time: Fri 22 Aug 2025 19:14:35 +0000 Manifest this update: Fri 22 Aug 2025 19:14:35 +0000 Manifest next update: Fri 29 Aug 2025 19:14:35 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: 6YSTHU7gqnk17+C56M/cK61cgD/HOpYE210E6lajgqY=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: orMTuhNCmn5/4lVWP0hvNJHm2iToMZFaKY4Tk1oMp1M=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: DQ4zjVC/izJ/mpi1KCeEh40z0Ktl3VHP629G9xZ43Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2930 (0xb72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Aug 22 19:14:35 2025 GMT Not After : Aug 29 19:14:35 2025 GMT Subject: CN=68a8c19b-8664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:64:ba:9d:13:76:8f:67:a9:c3:5f:80:5b: 36:9b:b6:f9:c5:bb:16:69:de:b2:64:e7:52:82:89: b2:39:e3:92:7b:13:de:3a:80:b8:7b:db:3a:f8:b1: 60:c2:c7:1d:8e:d7:3a:d6:4b:99:04:81:10:e9:e4: aa:51:16:1d:ed:e5:06:ae:ed:6d:47:2d:3f:69:68: c2:d6:25:e8:57:57:7c:dc:8c:51:60:d5:38:e6:e3: 1b:61:66:fa:a2:9e:0a:53:f8:93:19:e6:09:dc:66: c8:f5:7e:9c:91:c2:77:f1:2b:07:60:a4:20:92:0b: f7:b9:9e:1e:2e:dd:8d:93:d4:14:05:e5:c5:74:dd: d3:0d:2e:46:98:30:9b:4f:f3:51:41:1f:dc:4f:9b: 73:5c:6a:80:1d:54:ea:42:36:fa:83:23:07:00:4f: 7b:eb:dd:d8:71:07:09:87:df:ad:90:ec:f0:94:81: 32:6c:a0:8c:49:c9:73:d6:ec:ab:85:af:ad:97:86: 02:ca:cb:bc:6e:57:d9:2a:a4:a7:e6:ea:21:65:92: a3:0e:64:82:c0:34:3e:9a:46:91:83:dc:29:7c:95: 4d:42:d3:57:97:a5:61:6c:af:02:28:67:bd:ff:6d: 63:82:7e:58:ea:0c:3d:e5:80:be:d2:d2:1e:8a:9f: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B3:77:4C:66:32:90:1E:5E:3D:4B:40:55:02:AE:D2:69:D0:E4:11 X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c8:b9:24:d7:3c:84:09:7c:d2:2b:1a:05:54:f5:ce:95:cc: 08:2d:36:77:16:a6:47:c5:e9:a0:3d:49:9e:64:34:2e:ab:d3: 7e:8d:38:26:1d:a0:bd:c9:be:51:d7:49:7e:32:43:8e:99:2e: 80:5e:07:68:de:c2:e6:05:03:33:d4:78:4d:77:95:ed:f2:54: be:62:17:46:ee:cf:2e:a5:f0:fa:d8:1f:dc:c7:1d:c0:65:67: 81:cd:dc:83:a3:41:03:57:b7:cd:f2:4a:ba:e2:1c:06:28:c7: 46:d1:2d:a3:80:1e:3c:99:e4:7b:cb:ff:ea:eb:2e:a7:63:35: fd:27:6a:57:75:36:14:40:93:24:51:16:00:ef:14:9c:9b:32: af:6a:5a:31:a3:d5:9c:9f:a1:b4:f4:02:06:f1:4d:21:bd:5e: 50:50:04:1e:e0:75:0a:88:50:2a:3a:aa:17:47:13:ee:44:fe: 02:ee:55:f3:67:7e:31:00:60:00:bf:83:ad:39:55:55:a2:fd: 10:26:16:c6:a7:e8:ea:a5:98:e9:60:a7:84:2e:38:38:bb:41: 13:aa:fb:46:57:e4:9d:34:a5:48:50:97:d3:d0:d7:8f:7b:01: fb:bc:b2:8a:8d:ff:dc:79:28:7b:7c:f3:d2:6a:d3:63:46:df: cf:3f:b7:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUwODIyMTkxNDM1WhcNMjUwODI5MTkxNDM1WjAYMRYwFAYD VQQDEw02OGE4YzE5Yi04NjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMBkup0Tdo9nqcNfgFs2m7b5xbsWad6yZOdSgomyOeOSexPeOoC4e9s6+LFg wscdjtc61kuZBIEQ6eSqURYd7eUGru1tRy0/aWjC1iXoV1d83IxRYNU45uMbYWb6 op4KU/iTGeYJ3GbI9X6ckcJ38SsHYKQgkgv3uZ4eLt2Nk9QUBeXFdN3TDS5GmDCb T/NRQR/cT5tzXGqAHVTqQjb6gyMHAE97693YcQcJh9+tkOzwlIEybKCMSclz1uyr ha+tl4YCysu8blfZKqSn5uohZZKjDmSCwDQ+mkaRg9wpfJVNQtNXl6VhbK8CKGe9 /21jgn5Y6gw95YC+0tIeip/TjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmzd0xm MpAeXj1LQFUCrtJp0OQRMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBByLkk1zyECXzSKxoFVPXOlcwILTZ3FqZHxemgPUmeZDQuq9N+jTgm HaC9yb5R10l+MkOOmS6AXgdo3sLmBQMz1HhNd5Xt8lS+YhdG7s8upfD62B/cxx3A ZWeBzdyDo0EDV7fN8kq64hwGKMdG0S2jgB48meR7y//q6y6nYzX9J2pXdTYUQJMk URYA7xScmzKvaloxo9Wcn6G09AIG8U0hvV5QUAQe4HUKiFAqOqoXRxPuRP4C7lXz Z34xAGAAv4OtOVVVov0QJhbGp+jqpZjpYKeELjg4u0ETqvtGV+SdNKVIUJfT0NeP ewH7vLKKjf/ceSh7fPPSatNjRt/PP7fR -----END CERTIFICATE-----Generated at Sun Aug 24 01:02:58 2025 by rpki-client