$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json) Hash identifier: V5kYJZaSIRc6elNiicrx5jDPn0ihHvh3BqHsylgGiGg= Subject key identifier: CE:91:CC:BC:A2:A2:F1:90:14:91:6B:05:14:5E:15:7D:02:97:A3:8F Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Certificate serial: 047A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft Manifest number: 0476 Signing time: Tue 01 Jul 2025 00:36:21 +0000 Manifest this update: Tue 01 Jul 2025 00:36:20 +0000 Manifest next update: Tue 08 Jul 2025 00:36:20 +0000 Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: 4woH9n5gdIfub8TWmZyEy4AdHAPGtvJgnBTI63bV8YY=) 2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: dphkC3ssGJ+iIglODQswGH04mVygF6iWdjby9ZvopB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:36:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1146 (0x47a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Validity Not Before: Jul 1 00:36:20 2025 GMT Not After : Jul 8 00:36:20 2025 GMT Subject: CN=68632d84-794e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:67:57:eb:ab:c9:0d:99:86:b3:d6:ae:f0:b9: 0c:83:c2:39:5e:51:f7:d9:e1:c9:2a:c4:3e:23:c9: 04:af:15:bb:4e:c4:a3:87:bb:21:4c:73:96:6f:a9: 90:24:95:fd:c9:33:77:e5:09:53:02:76:7e:49:bb: 95:6d:32:d8:2c:77:39:41:e6:45:d4:53:db:71:24: df:5c:88:be:34:31:ec:aa:0c:22:ec:8a:93:f4:ef: 3e:7a:52:53:09:46:6f:1b:08:35:e7:f9:6b:f8:39: b0:d1:0c:80:45:83:c4:80:31:45:42:71:b4:22:79: f6:10:88:8b:df:f9:4c:38:76:38:67:ee:72:56:74: c5:0f:6a:1f:fe:5f:ae:9a:f5:4b:7f:cb:13:cf:93: 07:31:ea:d0:16:da:02:97:fe:af:32:55:1b:2d:11: e4:15:e1:7a:64:ab:65:13:54:dc:cb:d6:fc:33:d3: 5e:31:1e:90:b1:91:63:26:a2:ff:b1:7b:31:05:a2: 91:58:0f:51:cd:35:5d:e1:89:16:2f:36:8b:ac:cb: 9e:41:ca:4c:1d:39:49:3a:3b:c0:69:8f:0d:ac:14: 13:49:ac:68:b8:da:52:15:ed:36:e4:f1:59:72:5c: e3:17:20:dc:0f:bc:42:97:59:af:c4:52:2f:0d:2f: c4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:91:CC:BC:A2:A2:F1:90:14:91:6B:05:14:5E:15:7D:02:97:A3:8F X509v3 Authority Key Identifier: keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d6:0d:c8:1f:2d:90:dd:71:e8:eb:26:73:10:51:f1:2e:4c: ce:e5:b8:c0:16:26:8a:49:99:b3:5f:7f:7d:44:b8:1b:07:3a: 89:6f:5a:ae:e5:b4:c1:26:15:c8:82:55:c1:cf:25:be:d1:94: 30:b9:84:68:1a:db:23:bf:4c:4f:d7:2a:1d:61:7f:23:d4:2b: e9:a0:aa:63:15:8d:1f:0d:96:67:ec:a2:a6:50:ac:fe:bd:14: 3a:87:a8:4d:c5:78:33:9e:32:f4:43:af:53:bd:44:ed:10:a4: 2d:99:27:5f:51:c7:f8:53:43:48:e8:26:61:90:b9:60:ce:03: 36:f2:f4:27:ca:46:4c:dc:d7:e4:47:b1:1a:c1:db:80:0f:01: d1:e6:67:31:46:79:28:b7:95:da:44:ac:99:d1:b0:51:d0:19: c7:b8:de:97:4f:2f:87:e5:7b:b7:8f:c1:cd:33:00:6e:78:fb: 78:d0:94:21:36:1e:d4:2d:5c:b0:0f:31:de:6a:2c:e1:09:5c: e7:64:ad:3d:7a:99:e2:d6:1b:84:23:75:7e:b5:4e:41:26:e5: f2:49:02:19:62:2d:42:8e:11:85:23:1e:23:f1:e1:81:0b:dc: 49:c9:2e:92:cf:cf:97:6f:cf:e3:d4:a2:8b:d3:7b:44:78:0d: fc:71:18:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NUIxMTAvBgNVBAUTKDk1M0VDMkExQkU3MDI1OUU2QTJGRDlDRThENDgzQkQ5 QkQxQUUzM0YwHhcNMjUwNzAxMDAzNjIwWhcNMjUwNzA4MDAzNjIwWjAYMRYwFAYD VQQDEw02ODYzMmQ4NC03OTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WdX66vJDZmGs9au8LkMg8I5XlH32eHJKsQ+I8kErxW7TsSjh7shTHOWb6mQ JJX9yTN35QlTAnZ+SbuVbTLYLHc5QeZF1FPbcSTfXIi+NDHsqgwi7IqT9O8+elJT CUZvGwg15/lr+Dmw0QyARYPEgDFFQnG0Inn2EIiL3/lMOHY4Z+5yVnTFD2of/l+u mvVLf8sTz5MHMerQFtoCl/6vMlUbLRHkFeF6ZKtlE1Tcy9b8M9NeMR6QsZFjJqL/ sXsxBaKRWA9RzTVd4YkWLzaLrMueQcpMHTlJOjvAaY8NrBQTSaxouNpSFe025PFZ clzjFyDcD7xCl1mvxFIvDS/EjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6RzLyi ovGQFJFrBRReFX0Cl6OPMB8GA1UdIwQYMBaAFJU+wqG+cCWeai/Zzo1IO9m9GuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc1Qi80NEExM0I0RTRD MTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0paNXFMOW5PalVnNzJiMGE0 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUN0NvYjV3Slo1cUw5bk9qVWc3MmIwYTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc1Qi80NEExM0I0RTRDMTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0pa NXFMOW5PalVnNzJiMGE0ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk1g3IHy2Q3XHo6yZzEFHxLkzO5bjAFiaKSZmzX399RLgbBzqJb1qu 5bTBJhXIglXBzyW+0ZQwuYRoGtsjv0xP1yodYX8j1CvpoKpjFY0fDZZn7KKmUKz+ vRQ6h6hNxXgznjL0Q69TvUTtEKQtmSdfUcf4U0NI6CZhkLlgzgM28vQnykZM3Nfk R7EawduADwHR5mcxRnkot5XaRKyZ0bBR0BnHuN6XTy+H5Xu3j8HNMwBuePt40JQh Nh7ULVywDzHeaizhCVznZK09epni1huEI3V+tU5BJuXySQIZYi1CjhGFIx4j8eGB C9xJyS6Sz8+Xb8/j1KKL03tEeA38cRj3 -----END CERTIFICATE-----Generated at Wed Jul 2 19:16:25 2025 by rpki-client