$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: D4YBnhlzdKp2m1c9+wRrRN+qT+kzOMlNaE088RKteXo= Subject key identifier: 54:3C:77:83:7C:7B:70:B8:F3:EF:14:10:78:2F:EE:0B:88:C6:8A:36 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 092C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 129B Signing time: Wed 02 Jul 2025 20:16:26 +0000 Manifest this update: Wed 02 Jul 2025 20:16:26 +0000 Manifest next update: Wed 09 Jul 2025 20:16:26 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: ifVi7M4W6W8XpQfxrg6katl2Z/RtY2Nub5Kw0d7AX7k=) 2: 38548A62EDC011EF82A1C85BC4F9AE02.roa (hash: U0zd0ajPJef71s0NXBX+K8FghsVdpyFA7/S7d/R/cG0=) 3: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: FTbrrJwavqP08/0mEs3AawfzqRid/QkcdkFOFXsnwUI=) 4: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: X9FUZvXw3xYym+gKphnPApVeFORX8RZUTOXm3OpSzcU=) 5: F585B320A4ED11EFBA65C13CC4F9AE02.roa (hash: SIPjhCdz0Zmm6RS8ib8g9TJ4IJCqMFvTR5HVH5hTjJk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2348 (0x92c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Jul 2 20:16:26 2025 GMT Not After : Jul 9 20:16:26 2025 GMT Subject: CN=6865939a-e620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a7:e4:a0:41:52:85:75:85:81:e5:92:ab:33: 9d:8b:dd:85:9f:ff:76:28:e9:25:7a:58:d5:20:4b: 31:8b:06:de:09:a8:8d:fa:0c:46:53:0e:2d:ec:c2: 3d:eb:ef:58:ff:2b:e2:63:c5:7f:95:6b:e2:83:76: ec:28:ca:9a:33:4e:7b:6e:12:cc:25:a2:93:eb:29: a2:cc:9c:bc:e0:48:bc:34:fa:7d:87:54:59:67:77: a6:9f:93:5e:16:bb:4d:55:7d:22:45:8c:4f:99:dc: 77:b1:a7:95:a8:6a:b4:df:7a:1a:61:2e:0e:b7:52: d4:56:1b:19:bf:66:e4:60:65:bd:b7:ac:1d:69:23: c4:34:69:39:1e:76:c3:c6:74:a3:02:6b:e4:24:60: 10:65:19:db:b0:aa:2e:1c:e0:08:b9:62:8a:23:6c: f2:1e:19:20:36:2d:f1:37:49:47:da:37:f1:70:e3: ba:b6:19:fe:b4:c4:7f:07:1e:6c:16:88:4f:ee:e5: 18:31:5d:2e:09:f9:46:f9:d6:23:2a:9e:cf:d2:4c: 27:7e:6b:c5:7d:46:43:eb:4e:f1:08:ca:c3:99:46: b1:46:0e:f5:b4:f5:31:3f:64:86:29:25:bf:33:0c: 3f:52:e4:d4:a5:d4:2b:0f:00:1f:44:d7:bf:45:3a: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3C:77:83:7C:7B:70:B8:F3:EF:14:10:78:2F:EE:0B:88:C6:8A:36 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:82:a3:ca:e7:48:18:7b:99:ed:f4:09:13:0f:11:be:2c:62: 6e:10:f8:06:18:4e:ef:6e:6a:1a:86:5c:a8:4b:c6:02:38:bf: 32:1b:0e:94:a1:78:f1:52:b8:50:74:4a:16:cf:55:3f:1b:08: fd:aa:05:a6:e9:af:dc:4e:bf:cf:cd:b2:5f:ed:4a:63:90:f4: 22:b7:c9:ed:cd:14:ab:41:5d:9c:c0:bb:e8:0a:5c:f2:f0:cb: 04:7a:07:e2:08:06:35:03:bc:34:32:d5:c5:c8:c4:4b:c1:f2: eb:a9:2f:53:87:08:e8:42:81:e8:34:f7:db:16:8c:01:92:12: 5b:18:24:b6:65:86:f8:43:5b:49:20:83:ad:40:94:97:83:66: 4c:78:b0:46:2a:83:74:8d:7d:c8:3e:1d:44:92:11:90:e4:8c: d4:f8:70:94:a2:d7:05:1b:36:3f:09:1c:8a:7a:f8:de:3a:54: 4a:39:97:a1:d0:72:17:a1:4b:48:5d:e0:90:45:9b:24:c0:66: ce:f0:8c:73:a7:b2:4a:c1:38:1e:93:4e:9d:1f:a4:71:02:9c: d3:7e:ac:fe:6e:2a:c3:60:e4:38:1e:bf:40:a3:9a:28:52:b0: d5:47:05:a9:1c:65:0c:a0:e4:27:db:4d:e0:a1:ad:2a:f0:d1: 30:63:2a:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwNzAyMjAxNjI2WhcNMjUwNzA5MjAxNjI2WjAYMRYwFAYD VQQDEw02ODY1OTM5YS1lNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KfkoEFShXWFgeWSqzOdi92Fn/92KOkleljVIEsxiwbeCaiN+gxGUw4t7MI9 6+9Y/yviY8V/lWvig3bsKMqaM057bhLMJaKT6ymizJy84Ei8NPp9h1RZZ3emn5Ne FrtNVX0iRYxPmdx3saeVqGq033oaYS4Ot1LUVhsZv2bkYGW9t6wdaSPENGk5HnbD xnSjAmvkJGAQZRnbsKouHOAIuWKKI2zyHhkgNi3xN0lH2jfxcOO6thn+tMR/Bx5s FohP7uUYMV0uCflG+dYjKp7P0kwnfmvFfUZD607xCMrDmUaxRg71tPUxP2SGKSW/ Mww/UuTUpdQrDwAfRNe/RTqAXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQ8d4N8 e3C48+8UEHgv7guIxoo2MB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjgqPK50gYe5nt9AkTDxG+LGJuEPgGGE7vbmoahlyoS8YCOL8yGw6U oXjxUrhQdEoWz1U/Gwj9qgWm6a/cTr/PzbJf7UpjkPQit8ntzRSrQV2cwLvoClzy 8MsEegfiCAY1A7w0MtXFyMRLwfLrqS9ThwjoQoHoNPfbFowBkhJbGCS2ZYb4Q1tJ IIOtQJSXg2ZMeLBGKoN0jX3IPh1EkhGQ5IzU+HCUotcFGzY/CRyKevjeOlRKOZeh 0HIXoUtIXeCQRZskwGbO8Ixzp7JKwTgek06dH6RxApzTfqz+birDYOQ4Hr9Ao5oo UrDVRwWpHGUMoOQn203goa0q8NEwYyoU -----END CERTIFICATE-----Generated at Thu Jul 3 07:19:59 2025 by rpki-client