$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: OH8xQkq9r12NzwFW3XeCg7wNYlYJkwY1LjtM91J6ZP4= Subject key identifier: A6:6E:72:8D:8A:74:97:61:2A:2E:BD:3D:87:D3:46:16:6F:2B:3A:1B Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 087C Signing time: Wed 02 Jul 2025 20:54:02 +0000 Manifest this update: Wed 02 Jul 2025 20:54:01 +0000 Manifest next update: Wed 09 Jul 2025 20:54:01 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: TugQSFsLgOP5FzvxMpKaI/qQKiWX/P1buOz/lYCLrxw=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: qM1JVSXdUTQJnIVxaVxQsaSGw94EgaLnOqmc/M2SNDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: Jul 2 20:54:01 2025 GMT Not After : Jul 9 20:54:01 2025 GMT Subject: CN=68659c69-027f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e8:5d:87:72:7d:37:9d:5b:8b:e3:c2:14:fe: cd:b9:6e:ca:90:9d:37:81:52:72:bf:e5:fa:9a:49: 82:ef:da:4a:41:38:08:dd:ba:bd:e2:88:83:09:e0: 6c:99:52:3e:5c:91:e6:44:3c:11:c8:16:34:a2:6b: 0b:72:e0:c4:dc:d1:49:6c:2b:5a:c3:b3:23:2b:c7: eb:28:f5:06:ea:f0:ae:3d:f7:42:c9:96:3e:1f:dd: fb:ce:0d:83:17:92:ad:6f:f1:e9:e8:43:c2:58:4f: c4:4c:fb:63:52:17:be:e9:4b:9a:f3:40:e1:0f:db: 43:c1:16:ab:90:00:2f:1b:34:77:c2:10:40:b9:e0: 01:9c:82:c7:4f:ac:8e:91:e8:b2:7c:db:95:2f:8d: f2:67:4e:45:fc:d1:72:f2:fb:2c:44:98:8f:0b:32: d8:9c:58:9f:e7:ef:b0:5a:b3:10:34:f0:4c:74:3e: 3b:39:6e:26:bc:dc:13:1e:e7:e1:fe:36:d1:e5:88: 29:06:43:ac:ed:7d:9e:9b:9b:ba:08:17:7e:37:69: 5d:6a:04:81:04:26:4a:28:a6:f3:e0:ff:18:3f:cd: ef:f1:60:41:01:98:7a:39:ec:32:2b:fe:98:91:32: 4d:4a:d7:e2:c3:fe:53:7d:ff:0a:bb:42:1b:b5:04: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6E:72:8D:8A:74:97:61:2A:2E:BD:3D:87:D3:46:16:6F:2B:3A:1B X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f8:ce:28:19:04:76:12:e8:a3:29:60:63:42:05:8d:65:6d: 33:6d:da:ba:07:b5:5b:f9:eb:fe:c1:14:76:d8:c0:37:e5:16: 91:c1:4d:f8:eb:8a:58:1c:e1:84:3f:c0:e4:1e:5c:9e:70:b0: 89:91:a3:8e:3a:88:78:e7:ed:69:4a:99:0a:92:73:f9:8a:cc: 29:e1:bf:13:47:56:b6:ff:de:47:18:b2:36:46:0b:01:0a:5b: e9:38:30:22:61:40:0c:96:fd:f7:f1:cb:11:5f:a0:eb:be:f2: df:95:08:99:68:f9:8d:60:24:98:92:6f:50:bb:d6:e4:4f:a8: e4:b4:fa:73:f7:f7:4d:72:3f:45:e4:97:a5:3d:73:9c:db:de: 8c:f1:db:97:22:5c:ba:e0:53:f1:8d:37:2a:e9:83:b6:f3:48: 01:f3:46:e3:9e:37:f3:09:18:39:7d:70:38:40:d8:78:bd:8a: 1c:5e:e7:c4:54:13:ef:5e:bb:d8:67:d6:6a:27:9e:79:ea:5a: b9:4f:ad:67:aa:0d:62:a7:c0:11:a9:02:e7:58:a5:0c:55:b3: 8b:07:66:ca:cd:e5:c7:5e:40:53:4b:3e:be:dd:8f:e7:a8:87: 1e:a9:e8:ee:ce:48:51:86:72:56:a5:4e:95:53:69:8d:0e:71: cb:51:78:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjUwNzAyMjA1NDAxWhcNMjUwNzA5MjA1NDAxWjAYMRYwFAYD VQQDEw02ODY1OWM2OS0wMjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ehdh3J9N51bi+PCFP7NuW7KkJ03gVJyv+X6mkmC79pKQTgI3bq94oiDCeBs mVI+XJHmRDwRyBY0omsLcuDE3NFJbCtaw7MjK8frKPUG6vCuPfdCyZY+H937zg2D F5Ktb/Hp6EPCWE/ETPtjUhe+6Uua80DhD9tDwRarkAAvGzR3whBAueABnILHT6yO keiyfNuVL43yZ05F/NFy8vssRJiPCzLYnFif5++wWrMQNPBMdD47OW4mvNwTHufh /jbR5YgpBkOs7X2em5u6CBd+N2ldagSBBCZKKKbz4P8YP83v8WBBAZh6OewyK/6Y kTJNStfiw/5Tff8Ku0IbtQRihQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZuco2K dJdhKi69PYfTRhZvKzobMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN+M4oGQR2EuijKWBjQgWNZW0zbdq6B7Vb+ev+wRR22MA35RaRwU34 64pYHOGEP8DkHlyecLCJkaOOOoh45+1pSpkKknP5iswp4b8TR1a2/95HGLI2RgsB ClvpODAiYUAMlv338csRX6DrvvLflQiZaPmNYCSYkm9Qu9bkT6jktPpz9/dNcj9F 5JelPXOc296M8duXIly64FPxjTcq6YO280gB80bjnjfzCRg5fXA4QNh4vYocXufE VBPvXrvYZ9ZqJ5556lq5T61nqg1ip8ARqQLnWKUMVbOLB2bKzeXHXkBTSz6+3Y/n qIceqejuzkhRhnJWpU6VU2mNDnHLUXiW -----END CERTIFICATE-----Generated at Thu Jul 3 12:22:53 2025 by rpki-client