$ rpki-client -vvf rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft File: nLIZXrqiCWDa-IL7X0frVaGdIuw.mft (raw, json) Hash identifier: foS7UmmDNTfeQVt+pxbggit9lTsNJfa0vP4EamsOJug= Subject key identifier: 1F:8F:3F:E2:7C:60:55:92:91:A6:01:C5:26:4E:77:8B:1D:33:60:49 Authority key identifier: 9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC Certificate issuer: /CN=A91C862F/serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft Manifest number: 03BE Signing time: Thu 03 Jul 2025 01:02:38 +0000 Manifest this update: Thu 03 Jul 2025 01:02:38 +0000 Manifest next update: Thu 10 Jul 2025 01:02:38 +0000 Files and hashes: 1: nLIZXrqiCWDa-IL7X0frVaGdIuw.crl (hash: N6sG88dVysiGrVqlSgeVTNfHKXNuL3K8qLfPRD9Neg0=) 2: 437E6F641A2A11ED8E5B3178C4F9AE02.roa (hash: W2t7cvkTvvu4tLiipq3paLT/+ja5H4MoySHQU+pxdNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C862F, serialNumber=9CB2195EBAA20960DAF882FB5F47EB55A19D22EC Validity Not Before: Jul 3 01:02:38 2025 GMT Not After : Jul 10 01:02:38 2025 GMT Subject: CN=6865d6ae-2097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b6:49:fd:f9:ea:3e:fe:e0:3d:e8:7c:8a:9b: 65:b3:10:49:00:63:1e:b3:27:86:20:16:b0:11:22: ce:fc:b7:70:ab:53:23:5c:a0:49:56:8d:a8:71:c7: de:78:03:8f:a8:c9:12:f6:e4:5a:48:03:a9:29:5a: a0:4d:e9:cf:67:26:43:76:fc:fc:56:f5:f0:fe:16: 76:f5:a3:a1:4a:37:21:bb:70:c7:76:60:ee:70:cf: 72:6d:07:b6:2c:35:82:16:4f:a4:d3:82:f9:a0:d7: b1:d4:15:86:92:22:7b:f2:b6:1f:c1:51:7e:2d:35: 00:14:43:35:96:a9:42:a1:9c:d8:12:f8:ca:2d:57: 03:df:70:cc:7c:91:7c:c7:75:54:9d:f4:27:e0:e1: 0c:aa:10:bf:f8:60:16:ff:ff:8d:8d:54:14:02:92: 97:ae:23:a8:ed:f8:34:86:d2:e2:6e:51:b2:27:f5: ac:b0:40:f4:11:c9:bf:f2:a0:63:cb:01:da:b5:5d: 5e:bc:62:6b:70:58:6d:6f:c4:7d:7c:80:c9:84:ae: 9b:3d:15:03:f6:93:b7:9d:ed:0e:88:09:c9:71:59: 11:38:04:1a:8b:3d:1c:50:4f:24:bf:8e:d4:8f:b8: 71:bb:77:25:ff:e7:25:a3:55:15:01:23:e1:3d:cb: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:8F:3F:E2:7C:60:55:92:91:A6:01:C5:26:4E:77:8B:1D:33:60:49 X509v3 Authority Key Identifier: keyid:9C:B2:19:5E:BA:A2:09:60:DA:F8:82:FB:5F:47:EB:55:A1:9D:22:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLIZXrqiCWDa-IL7X0frVaGdIuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C862F/D5E1DDEA965F11ECAD217376C4F9AE02/nLIZXrqiCWDa-IL7X0frVaGdIuw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ea:62:e1:27:77:a9:f1:9d:65:c1:91:cb:b6:bf:6a:fa:ba: ec:8b:7f:10:11:55:7d:15:9c:39:50:1e:fc:9b:ed:fb:e3:a4: df:0b:e6:a4:63:f6:d4:7f:b4:9a:66:98:42:1a:c8:70:70:1d: 5e:85:7b:4e:42:e6:89:5a:ae:65:78:c5:14:c4:78:6f:39:b0: b1:42:52:56:4e:8e:2d:e7:a0:e6:8e:72:61:22:e7:17:c1:54: fc:88:cc:a7:66:d0:a4:99:74:dc:be:f9:f0:42:e5:35:e7:a0: e0:ac:22:6e:1e:5f:81:cb:4a:e4:29:7a:62:66:e3:2c:25:fb: e5:2a:81:c8:5c:f0:52:40:bf:ef:2b:f9:32:32:c5:a2:f2:99: 75:d3:0d:fd:e4:21:c3:24:12:03:53:fd:42:07:78:94:78:b9: 4a:97:b2:dd:c4:dd:a7:e4:bc:8e:8c:b7:6e:90:b7:10:c4:8a: 3c:ab:47:1c:0e:f5:f8:0c:98:6d:d4:c6:b9:cc:53:34:29:e4: 60:46:8e:7b:23:f1:27:0b:e7:81:9b:98:d9:64:66:9f:b8:5c: 7d:bb:b4:86:58:90:f2:ee:c6:de:9b:67:69:5f:ac:56:b9:33: f3:72:f6:bd:55:83:fe:2b:4b:a3:c5:22:e1:54:78:66:05:81: e3:71:b0:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg2MkYxMTAvBgNVBAUTKDlDQjIxOTVFQkFBMjA5NjBEQUY4ODJGQjVGNDdFQjU1 QTE5RDIyRUMwHhcNMjUwNzAzMDEwMjM4WhcNMjUwNzEwMDEwMjM4WjAYMRYwFAYD VQQDEw02ODY1ZDZhZS0yMDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7ZJ/fnqPv7gPeh8iptlsxBJAGMesyeGIBawESLO/Ldwq1MjXKBJVo2occfe eAOPqMkS9uRaSAOpKVqgTenPZyZDdvz8VvXw/hZ29aOhSjchu3DHdmDucM9ybQe2 LDWCFk+k04L5oNex1BWGkiJ78rYfwVF+LTUAFEM1lqlCoZzYEvjKLVcD33DMfJF8 x3VUnfQn4OEMqhC/+GAW//+NjVQUApKXriOo7fg0htLiblGyJ/WssED0Ecm/8qBj ywHatV1evGJrcFhtb8R9fIDJhK6bPRUD9pO3ne0OiAnJcVkROAQaiz0cUE8kv47U j7hxu3cl/+clo1UVASPhPcvaJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+PP+J8 YFWSkaYBxSZOd4sdM2BJMB8GA1UdIwQYMBaAFJyyGV66oglg2viC+19H61WhnSLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODYyRi9ENUUxRERFQTk2 NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNXRGEtSUw3WDBmclZhR2RJ dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25MSVpYcnFpQ1dEYS1JTDdYMGZyVmFHZEl1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODYyRi9ENUUxRERFQTk2NUYxMUVDQUQyMTczNzZDNEY5QUUwMi9uTElaWHJxaUNX RGEtSUw3WDBmclZhR2RJdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl6mLhJ3ep8Z1lwZHLtr9q+rrsi38QEVV9FZw5UB78m+3746TfC+ak Y/bUf7SaZphCGshwcB1ehXtOQuaJWq5leMUUxHhvObCxQlJWTo4t56DmjnJhIucX wVT8iMynZtCkmXTcvvnwQuU156DgrCJuHl+By0rkKXpiZuMsJfvlKoHIXPBSQL/v K/kyMsWi8pl10w395CHDJBIDU/1CB3iUeLlKl7LdxN2n5LyOjLdukLcQxIo8q0cc DvX4DJht1Ma5zFM0KeRgRo57I/EnC+eBm5jZZGafuFx9u7SGWJDy7sbem2dpX6xW uTPzcva9VYP+K0ujxSLhVHhmBYHjcbDc -----END CERTIFICATE-----Generated at Thu Jul 3 10:08:58 2025 by rpki-client