$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: o8HAqNURHaIGEA1g8l+dHDNl2iBkZITjyWynNrI9fpg= Subject key identifier: 32:B5:D8:48:FE:A9:27:3C:7D:C3:F8:15:4C:EF:71:FA:0F:5E:02:4B Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 03EA Signing time: Sat 23 Aug 2025 00:46:10 +0000 Manifest this update: Sat 23 Aug 2025 00:46:09 +0000 Manifest next update: Sat 30 Aug 2025 00:46:09 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: UksX6CG/CGiRGzBCO49nWInDw3PhYwFK8U6u9WoYW6k=) 2: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: 41dvwuGONsbAf2NNxcw97I3G8Q6DNf+rajP9T/KIeiw=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: q51gHdBYG+mFAHDh24P09p42ENPRR4e2b1fq2dGY3KM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Aug 23 00:46:09 2025 GMT Not After : Aug 30 00:46:09 2025 GMT Subject: CN=68a90f51-8065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:d6:f0:0c:4d:f3:a7:31:83:b3:eb:7e:da: 33:22:24:88:d9:ff:f2:b2:e8:f5:7c:4c:db:1b:40: 78:dd:fa:b1:d4:d9:b4:37:02:dd:81:db:f6:5e:7b: 06:0b:c8:8a:06:99:23:16:bf:0d:c7:d4:74:12:ca: 83:de:96:86:39:61:48:bf:71:e1:0f:07:43:ef:22: 9a:e7:6b:6f:9c:a1:95:62:76:b9:e3:41:93:79:b7: e1:4d:60:03:f8:b3:9f:de:48:13:a8:d1:d0:d4:bb: 80:cd:1e:6c:5d:1b:44:c5:e5:88:bb:15:be:17:c5: 97:7a:ac:57:ef:02:02:2a:33:27:5b:db:61:06:17: a9:98:ca:5e:20:5f:f0:a4:36:61:09:9f:f8:25:65: f6:58:ea:51:f9:a5:0d:92:e5:96:06:41:d7:1d:22: 27:0e:f2:14:cc:9e:6a:73:b7:65:bd:9b:2c:bc:99: 17:21:5f:e7:9d:b7:15:20:34:e0:0a:8d:99:70:9a: 33:de:4e:23:c9:7e:75:0c:14:e0:39:df:d1:9b:90: eb:b1:1d:10:0d:3f:bc:8a:f9:74:f0:99:db:1d:5e: bb:b3:fd:64:11:1c:36:73:78:f1:52:e8:fc:31:f9: af:46:38:87:1f:0e:16:f2:d4:76:f6:7d:5e:4c:07: 17:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B5:D8:48:FE:A9:27:3C:7D:C3:F8:15:4C:EF:71:FA:0F:5E:02:4B X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:19:95:8a:ac:37:09:a6:ce:9d:8b:71:d4:89:69:e1:68:cf: c9:f7:65:9b:f8:db:e6:fa:0f:cc:f9:9b:64:42:c5:4f:c5:df: e5:b2:61:af:74:46:b4:bd:10:f7:36:8c:37:d9:ca:ae:a9:c9: 6c:76:af:da:bc:54:b7:a9:45:71:2f:cc:1b:c2:7d:71:5f:72: 33:dc:7c:32:4e:0d:00:e7:55:f1:94:3f:c4:24:f2:87:ec:c0: 4f:71:81:89:ad:e0:64:c0:df:82:d7:c2:85:d2:b7:a5:78:48: b6:52:df:6a:6c:a9:bd:25:db:99:1c:69:66:28:a4:62:6c:23: d9:ee:3e:a4:fd:98:dd:1c:50:67:22:5a:b6:5a:bc:83:45:ca: 4e:00:42:97:b5:d7:a8:58:59:a1:8e:29:4a:1f:31:a6:b5:4e: 72:f1:91:ca:4a:fb:3b:60:1d:4a:ed:46:39:29:f7:6a:97:a6: 82:90:1b:4d:e7:b5:65:81:c7:3e:84:db:ad:92:fc:9e:81:bd: 4f:27:09:66:12:c1:b1:38:94:a3:a1:64:70:db:a3:6b:e8:1d: 7c:47:fc:4c:e8:0b:12:f1:1f:c4:bb:e7:59:d1:96:a6:74:fd: 3f:69:da:a7:a4:fb:a4:76:70:4e:d7:0c:50:03:64:c9:e7:16: fb:40:1d:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjUwODIzMDA0NjA5WhcNMjUwODMwMDA0NjA5WjAYMRYwFAYD VQQDEw02OGE5MGY1MS04MDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyDW8AxN86cxg7PrftozIiSI2f/ysuj1fEzbG0B43fqx1Nm0NwLdgdv2XnsG C8iKBpkjFr8Nx9R0EsqD3paGOWFIv3HhDwdD7yKa52tvnKGVYna540GTebfhTWAD +LOf3kgTqNHQ1LuAzR5sXRtExeWIuxW+F8WXeqxX7wICKjMnW9thBhepmMpeIF/w pDZhCZ/4JWX2WOpR+aUNkuWWBkHXHSInDvIUzJ5qc7dlvZssvJkXIV/nnbcVIDTg Co2ZcJoz3k4jyX51DBTgOd/Rm5DrsR0QDT+8ivl08JnbHV67s/1kERw2c3jxUuj8 MfmvRjiHHw4W8tR29n1eTAcXzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK12Ej+ qSc8fcP4FUzvcfoPXgJLMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7GZWKrDcJps6di3HUiWnhaM/J92Wb+Nvm+g/M+ZtkQsVPxd/lsmGv dEa0vRD3Now32cquqclsdq/avFS3qUVxL8wbwn1xX3Iz3HwyTg0A51XxlD/EJPKH 7MBPcYGJreBkwN+C18KF0releEi2Ut9qbKm9JduZHGlmKKRibCPZ7j6k/ZjdHFBn Ilq2WryDRcpOAEKXtdeoWFmhjilKHzGmtU5y8ZHKSvs7YB1K7UY5Kfdql6aCkBtN 57Vlgcc+hNutkvyegb1PJwlmEsGxOJSjoWRw26Nr6B18R/xM6AsS8R/Eu+dZ0Zam dP0/adqnpPukdnBO1wxQA2TJ5xb7QB26 -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:42 2025 by rpki-client