$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json) Hash identifier: yn0Gg9dw/CN/bTMtNwoDb18lyQc+DB2kxjEPDBbItCA= Subject key identifier: 2A:E8:22:01:0C:69:B7:D2:AA:66:96:AF:88:17:79:90:9A:B3:D0:54 Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0E6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft Manifest number: 0E5D Signing time: Wed 02 Jul 2025 17:57:35 +0000 Manifest this update: Wed 02 Jul 2025 17:57:34 +0000 Manifest next update: Wed 09 Jul 2025 17:57:34 +0000 Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: UkAQeIviFerT2M0YACIPgIYPjFAx6HpwrwfJd+9BSAk=) 2: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: J9DgdD9cL2JfNJGX2KpEbeL9xCo98zH1CjpWmw6WEyg=) 3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: fVjIBFUgnQxd9qxxnDI3HntLIaXeeQgbbHy+hbpb2zg=) 4: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: oySlLPz0K/UmHCqFTFPFIY5DaigueFo/oV/JPUia/uU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3694 (0xe6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: Jul 2 17:57:34 2025 GMT Not After : Jul 9 17:57:34 2025 GMT Subject: CN=6865730f-1aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:01:1a:89:5d:81:8a:5c:29:c1:c0:3b:0e: a1:41:44:41:b8:8e:91:48:17:43:c1:6c:e2:25:f4: 30:15:d6:5f:9d:1b:ce:d7:83:e7:a2:1e:7a:d1:f5: d4:c0:e6:62:66:08:57:e8:6b:63:5f:30:6e:6c:61: 49:42:e8:45:c1:88:29:5e:b2:00:5c:fd:24:a3:e8: b7:83:2a:c2:76:25:34:4a:39:e2:06:02:42:1f:28: c1:ff:ae:62:c6:54:14:61:24:a4:52:44:45:f0:69: fb:21:2b:6e:9d:08:39:40:f0:5a:db:31:de:71:d9: 78:38:ce:9e:f3:6f:c5:a5:83:1a:0f:8d:99:e6:b1: c7:f5:23:02:64:09:2d:74:40:be:3f:6c:ec:17:9c: 85:5f:d6:cc:e7:c5:36:d4:67:e1:eb:f2:28:c5:17: 10:2c:6f:10:f5:b2:3f:68:24:de:c6:f5:c7:73:0e: ab:20:5b:89:37:2b:bc:57:3f:03:26:d8:be:0e:f0: 58:43:d4:11:ae:d9:ba:11:7a:e9:39:40:63:b9:21: 91:32:27:d7:81:f4:17:d8:83:db:fb:71:22:89:e6: 9a:eb:0b:c7:99:24:56:78:31:3d:b5:a4:6b:ef:95: 56:09:7a:f7:f2:24:27:48:f0:e2:42:c9:02:a4:c2: dc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E8:22:01:0C:69:B7:D2:AA:66:96:AF:88:17:79:90:9A:B3:D0:54 X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3b:b9:a2:6c:a7:0f:02:45:9a:4c:44:46:53:34:22:9c:31: 34:a4:69:d8:0c:a0:66:71:1e:a0:fa:91:6c:cf:73:2c:33:21: d6:8a:51:9f:8b:a6:74:1a:47:dc:54:3f:80:0e:0b:f7:53:e9: 80:00:2c:58:41:03:37:89:64:c5:0e:aa:fc:c2:8d:a4:99:fe: 28:68:e1:3a:05:0a:81:74:a5:69:8b:95:ef:e0:c2:c9:12:26: 6d:e7:76:9f:79:03:c1:d8:aa:be:a4:db:01:60:98:52:a3:be: dc:a8:21:62:44:7f:c5:1b:ab:a0:54:36:d9:a3:66:5b:09:1d: 34:78:92:90:4d:b6:5b:a5:4b:d1:85:9f:21:18:43:34:3f:ff: 49:68:97:87:26:33:a9:c0:3f:e6:51:67:ca:64:3a:af:9c:2d: 98:fb:36:72:c3:f4:80:c6:0b:fd:48:f4:21:0e:59:7d:00:1e: 96:15:30:77:80:50:41:55:43:5b:8a:3e:b2:09:1a:97:1e:32: cb:9e:28:36:c2:73:fc:75:71:80:97:22:05:66:b4:50:61:f8: a1:6c:6b:e3:32:b5:d8:cf:59:e0:e5:8f:41:2d:51:64:49:0d: 3a:4c:a7:89:a8:32:ad:93:7c:04:9c:2c:75:8d:fb:de:57:20: c7:48:8d:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjUwNzAyMTc1NzM0WhcNMjUwNzA5MTc1NzM0WjAYMRYwFAYD VQQDEw02ODY1NzMwZi0xYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpYBGoldgYpcKcHAOw6hQURBuI6RSBdDwWziJfQwFdZfnRvO14Pnoh560fXU wOZiZghX6GtjXzBubGFJQuhFwYgpXrIAXP0ko+i3gyrCdiU0SjniBgJCHyjB/65i xlQUYSSkUkRF8Gn7IStunQg5QPBa2zHecdl4OM6e82/FpYMaD42Z5rHH9SMCZAkt dEC+P2zsF5yFX9bM58U21Gfh6/IoxRcQLG8Q9bI/aCTexvXHcw6rIFuJNyu8Vz8D Jti+DvBYQ9QRrtm6EXrpOUBjuSGRMifXgfQX2IPb+3Eiieaa6wvHmSRWeDE9taRr 75VWCXr38iQnSPDiQskCpMLcSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCroIgEM abfSqmaWr4gXeZCas9BUMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l UzlialJib0pxZDZibkMwVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHO7mibKcPAkWaTERGUzQinDE0pGnYDKBmcR6g+pFsz3MsMyHWilGf i6Z0GkfcVD+ADgv3U+mAACxYQQM3iWTFDqr8wo2kmf4oaOE6BQqBdKVpi5Xv4MLJ EiZt53afeQPB2Kq+pNsBYJhSo77cqCFiRH/FG6ugVDbZo2ZbCR00eJKQTbZbpUvR hZ8hGEM0P/9JaJeHJjOpwD/mUWfKZDqvnC2Y+zZyw/SAxgv9SPQhDll9AB6WFTB3 gFBBVUNbij6yCRqXHjLLnig2wnP8dXGAlyIFZrRQYfihbGvjMrXYz1ng5Y9BLVFk SQ06TKeJqDKtk3wEnCx1jfveVyDHSI1D -----END CERTIFICATE-----Generated at Thu Jul 3 09:29:32 2025 by rpki-client