$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft File: 0Ll9wB2J8jqAX75YYe43vwmcP_A.mft (raw, json) Hash identifier: H3y4CL9hLt09fad1uU4uRr+XFsCGP07JHIRUWoy1LWA= Subject key identifier: 65:CC:87:15:A2:84:E7:E4:83:94:49:30:27:4D:30:B7:15:EF:A0:8D Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Certificate serial: 0C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft Manifest number: 0C2C Signing time: Fri 04 Jul 2025 19:00:01 +0000 Manifest this update: Fri 04 Jul 2025 19:00:00 +0000 Manifest next update: Fri 11 Jul 2025 19:00:00 +0000 Files and hashes: 1: 0Ll9wB2J8jqAX75YYe43vwmcP_A.crl (hash: ZY2Yj8SxXp64+qUBuAxlxFzRBxAUiL9ryayImRjEVYg=) 2: 498ED6046FD011EDA007D478C4F9AE02.roa (hash: lwkH9V+4ruYpDtKVAny/uyyCWO7r9GoTBPNu4gEXlEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3134 (0xc3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62BF, serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Validity Not Before: Jul 4 19:00:00 2025 GMT Not After : Jul 11 19:00:00 2025 GMT Subject: CN=686824b0-cd9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:ed:8e:f5:2b:41:49:25:5f:f0:31:b5:97: 5b:5b:f6:4d:c4:74:40:02:d1:b1:e8:46:2f:e0:56: 2b:a6:77:6b:7a:7b:81:d5:c4:df:14:84:6c:17:17: f4:83:f3:d6:86:2e:84:16:bb:b6:2a:64:7c:e3:65: 77:d1:5f:de:d2:c0:e1:b0:46:b0:d2:bd:4f:e3:7f: 3e:f9:98:11:62:dd:ae:c0:9a:07:65:54:52:8e:89: ce:b5:5f:69:eb:26:f6:0e:38:b3:11:d2:48:c1:97: a2:20:6e:98:33:3a:6c:87:05:e9:d7:45:48:53:e4: 26:8a:99:56:3a:c5:e6:c6:25:d3:75:e1:32:20:c4: 2a:6d:38:00:a2:38:83:07:02:af:a0:aa:86:fe:b0: d3:b7:a2:93:45:92:4f:5c:3f:81:e2:7f:c3:a6:7d: fd:7c:19:93:41:ef:85:3a:08:de:32:c8:0b:53:e2: f1:6b:41:47:3c:2a:71:e3:aa:9c:1a:e5:cf:b0:47: 1e:43:92:be:b0:d0:9b:d0:53:3e:f5:5a:a2:e2:ad: 49:b3:0e:84:ce:c9:b8:5c:b4:a0:42:20:ee:c2:d4: b8:2d:fd:47:35:02:3f:65:fb:fd:76:35:30:29:c2: 38:ff:06:cb:27:e8:60:6a:b9:04:10:5e:7d:2d:65: 45:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CC:87:15:A2:84:E7:E4:83:94:49:30:27:4D:30:B7:15:EF:A0:8D X509v3 Authority Key Identifier: keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:32:71:25:db:ab:46:03:79:e5:7a:96:a1:df:f4:ed:53:f1: 77:4d:17:39:d8:f6:39:5b:0f:dd:1c:0d:7e:2a:1a:da:51:eb: 75:ef:c6:a0:db:3d:32:4c:02:f1:26:ca:6d:fc:f4:22:39:72: a0:9b:f6:5b:0d:50:33:a8:ec:12:ae:d6:bd:e1:13:b2:5b:a6: d7:f0:42:36:ea:8c:9c:19:53:e9:28:ac:01:ec:80:cf:4f:cc: 63:0c:d5:57:f9:5d:73:65:1b:fd:b6:25:29:4e:07:fa:88:74: 6c:8a:24:53:1c:d5:d9:34:92:d5:af:ac:d1:40:ff:a0:22:ea: 30:52:13:8f:09:4f:dc:02:8e:90:3d:98:2f:fd:05:6f:57:6c: ea:cf:88:89:65:aa:bd:90:b1:b1:02:c6:a5:f4:d3:64:c4:26: 68:a9:85:88:5b:f8:ed:49:c9:11:d3:11:2f:df:2c:01:1a:6e: 8d:91:55:86:78:dc:ad:19:8f:dd:e6:4f:df:8e:23:4a:19:14: 74:e8:cd:63:ab:f4:ce:8c:91:76:ff:84:02:d8:99:f4:f8:36: b4:89:53:8f:ed:78:21:f6:4d:36:f2:0b:26:f2:a4:f4:6e:5f: d5:a3:78:03:89:8b:da:72:bb:f2:0a:a8:68:b6:06:68:01:ae: 70:18:0a:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG MDk5QzNGRjAwHhcNMjUwNzA0MTkwMDAwWhcNMjUwNzExMTkwMDAwWjAYMRYwFAYD VQQDEw02ODY4MjRiMC1jZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDjtjvUrQUklX/AxtZdbW/ZNxHRAAtGx6EYv4FYrpndrenuB1cTfFIRsFxf0 g/PWhi6EFru2KmR842V30V/e0sDhsEaw0r1P438++ZgRYt2uwJoHZVRSjonOtV9p 6yb2DjizEdJIwZeiIG6YMzpshwXp10VIU+QmiplWOsXmxiXTdeEyIMQqbTgAojiD BwKvoKqG/rDTt6KTRZJPXD+B4n/Dpn39fBmTQe+FOgjeMsgLU+Lxa0FHPCpx46qc GuXPsEceQ5K+sNCb0FM+9Vqi4q1Jsw6Ezsm4XLSgQiDuwtS4Lf1HNQI/Zfv9djUw KcI4/wbLJ+hgarkEEF59LWVFdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXMhxWi hOfkg5RJMCdNMLcV76CNMB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjJCRi80NEVDNTEwNjEwMzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhq cUFYNzVZWWU0M3Z3bWNQX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRMnEl26tGA3nlepah3/TtU/F3TRc52PY5Ww/dHA1+KhraUet178ag 2z0yTALxJspt/PQiOXKgm/ZbDVAzqOwSrta94ROyW6bX8EI26oycGVPpKKwB7IDP T8xjDNVX+V1zZRv9tiUpTgf6iHRsiiRTHNXZNJLVr6zRQP+gIuowUhOPCU/cAo6Q PZgv/QVvV2zqz4iJZaq9kLGxAsal9NNkxCZoqYWIW/jtSckR0xEv3ywBGm6NkVWG eNytGY/d5k/fjiNKGRR06M1jq/TOjJF2/4QC2Jn0+Da0iVOP7Xgh9k028gsm8qT0 bl/Vo3gDiYvacrvyCqhotgZoAa5wGAps -----END CERTIFICATE-----Generated at Sat Jul 5 22:19:55 2025 by rpki-client