$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft File: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json) Hash identifier: 0OJMU0AR6SMyfv1nTTvdhYTm979SE0t0aAS7MMIKcfI= Subject key identifier: AF:73:FA:DA:6D:AC:5F:4C:68:4D:AF:83:9C:16:1C:7B:54:8E:D6:91 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0949 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft Manifest number: 12D1 Signing time: Fri 22 Aug 2025 20:06:47 +0000 Manifest this update: Fri 22 Aug 2025 20:06:46 +0000 Manifest next update: Fri 29 Aug 2025 20:06:46 +0000 Files and hashes: 1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: MaVmx3tTdsWCUho3E5dio+J+w4kUx5/xQ9eEvD4xAcc=) 2: 32751AAE67B811F0962F0730C4F9AE02.roa (hash: kJ2W8ZtT3EcqQ65yuXA6cG7VqVTYhapLGWIeTZI80LI=) 3: 38548A62EDC011EF82A1C85BC4F9AE02.roa (hash: U0zd0ajPJef71s0NXBX+K8FghsVdpyFA7/S7d/R/cG0=) 4: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: FTbrrJwavqP08/0mEs3AawfzqRid/QkcdkFOFXsnwUI=) 5: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: X9FUZvXw3xYym+gKphnPApVeFORX8RZUTOXm3OpSzcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2377 (0x949) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Aug 22 20:06:46 2025 GMT Not After : Aug 29 20:06:46 2025 GMT Subject: CN=68a8cdd7-ec4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:b9:b8:b2:c8:f5:db:24:c9:8e:3d:b7:9f: 6e:a9:ec:fa:d2:66:4f:88:59:d5:1c:3c:82:5f:b4: fe:8c:04:91:0b:47:b7:52:24:99:40:78:d0:f3:34: 70:d3:5c:36:c6:f3:44:04:e0:db:6e:76:51:81:b7: 93:a5:a1:b1:c4:41:5b:52:67:66:e2:6c:43:8f:18: 6b:11:69:f1:a0:2d:50:7b:56:2d:aa:c9:86:97:dd: f1:4a:ba:43:cb:83:5d:f3:5c:f1:e6:e3:16:87:21: 84:c1:e7:7b:c9:82:b6:ef:a7:44:69:f5:2f:39:82: ef:97:5b:d0:20:25:8a:88:a8:4c:21:00:72:5b:ef: 9a:6c:b4:b9:a3:fa:e1:cd:de:42:b8:25:52:6e:3d: 1f:ea:f5:95:95:64:4f:9e:9d:8d:ce:1a:af:d3:96: e2:c9:17:22:6d:ae:72:68:d1:56:b9:6c:9b:4b:2e: 03:3e:df:d1:8d:25:72:91:45:3d:23:86:34:ee:2c: 92:1f:5d:ab:7a:67:62:4f:c3:1f:58:6f:f5:1d:ba: 4c:63:cd:fe:f4:b4:f3:d4:5d:7a:f2:91:15:41:18: 0d:b8:7e:76:b2:4d:49:41:58:c5:83:84:c3:79:5f: 6b:cc:6a:89:52:14:b7:77:27:4b:71:d6:40:8b:c0: 17:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:73:FA:DA:6D:AC:5F:4C:68:4D:AF:83:9C:16:1C:7B:54:8E:D6:91 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:13:d6:84:45:f6:38:6d:f3:8d:20:8e:51:d2:c0:45:ca:d2: da:76:d9:fa:0e:2f:0a:b7:9a:76:fb:20:aa:84:2f:73:db:5d: 3b:03:1e:90:eb:11:30:3c:95:79:65:3f:c0:56:ac:3f:d4:21: 55:96:d0:f2:c6:64:a3:8b:2b:9b:89:69:99:b2:ce:1e:fe:ae: 39:66:fc:d9:f5:9f:21:4b:0f:18:14:70:2a:71:ef:2f:28:1e: 03:40:a0:f9:4c:98:2f:23:a1:b8:0b:cc:c6:0f:ad:4f:ef:f6: 2c:ee:c4:0c:f2:53:e5:0a:e5:d5:ce:5b:61:9d:a2:32:39:c4: 3f:a2:96:81:56:25:2b:fd:0d:f7:d8:79:f5:13:ad:31:f1:5b: 59:45:e5:63:a2:6f:2d:a0:52:ed:6b:27:75:27:eb:65:31:ea: 26:98:6c:0e:d8:4f:d8:e5:42:42:b8:96:76:1b:5f:a6:ed:8f: 76:85:79:27:3b:e7:90:c1:53:26:b1:37:74:29:5d:9b:1b:e0: 7b:4f:ae:33:66:40:f2:31:2f:32:bc:63:c1:63:40:3e:6b:81: 30:d2:30:a4:bf:a6:8e:6e:50:0a:91:88:2f:ac:e4:3f:52:00: 88:52:71:02:4f:a8:1e:39:ee:65:f8:f1:d1:36:28:27:5c:0a: 46:5a:d5:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjUwODIyMjAwNjQ2WhcNMjUwODI5MjAwNjQ2WjAYMRYwFAYD VQQDEw02OGE4Y2RkNy1lYzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviG5uLLI9dskyY49t59uqez60mZPiFnVHDyCX7T+jASRC0e3UiSZQHjQ8zRw 01w2xvNEBODbbnZRgbeTpaGxxEFbUmdm4mxDjxhrEWnxoC1Qe1YtqsmGl93xSrpD y4Nd81zx5uMWhyGEwed7yYK276dEafUvOYLvl1vQICWKiKhMIQByW++abLS5o/rh zd5CuCVSbj0f6vWVlWRPnp2Nzhqv05biyRciba5yaNFWuWybSy4DPt/RjSVykUU9 I4Y07iySH12remdiT8MfWG/1HbpMY83+9LTz1F168pEVQRgNuH52sk1JQVjFg4TD eV9rzGqJUhS3dydLcdZAi8AXKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9z+tpt rF9MaE2vg5wWHHtUjtaRMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlE9aERfY4bfONII5R0sBFytLadtn6Di8Kt5p2+yCqhC9z2107Ax6Q 6xEwPJV5ZT/AVqw/1CFVltDyxmSjiyubiWmZss4e/q45ZvzZ9Z8hSw8YFHAqce8v KB4DQKD5TJgvI6G4C8zGD61P7/Ys7sQM8lPlCuXVzlthnaIyOcQ/opaBViUr/Q33 2Hn1E60x8VtZReVjom8toFLtayd1J+tlMeommGwO2E/Y5UJCuJZ2G1+m7Y92hXkn O+eQwVMmsTd0KV2bG+B7T64zZkDyMS8yvGPBY0A+a4Ew0jCkv6aOblAKkYgvrOQ/ UgCIUnECT6geOe5l+PHRNignXApGWtUt -----END CERTIFICATE-----Generated at Sun Aug 24 08:32:10 2025 by rpki-client