$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: fUVrptbuE5mhmdzd4e+084G2qYb/8R2X659AVAEQaq4= Subject key identifier: A6:AD:39:F5:16:B2:9A:27:80:E7:AE:12:DD:A4:4F:2C:23:D2:2B:E3 Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 0400 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 03FB Signing time: Tue 01 Jul 2025 01:00:34 +0000 Manifest this update: Tue 01 Jul 2025 01:00:34 +0000 Manifest next update: Tue 08 Jul 2025 01:00:34 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: NLGj2o7aHssVW34665+QE08M+Kl7/kZkUEOKXkvwqsY=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1024 (0x400) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: Jul 1 01:00:34 2025 GMT Not After : Jul 8 01:00:34 2025 GMT Subject: CN=68633332-dea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:25:28:23:05:07:15:8d:6d:db:ad:c2:a3:f0: b4:ef:62:f1:47:e3:c3:7a:c6:2f:89:6d:5c:05:2e: a5:e4:e5:00:a3:a5:f5:ec:75:7f:cf:78:55:00:65: 6e:7e:4e:e7:34:d3:8c:1f:d8:88:ab:21:ce:83:62: 99:81:bf:ea:87:6d:eb:75:9f:18:ce:2c:97:53:c1: e5:ea:b7:81:36:24:df:78:4a:c6:04:b7:d7:43:74: 24:22:17:01:ed:3b:11:11:4f:ae:ed:7c:c6:e1:60: f7:34:cc:0f:75:c5:c3:b7:34:e9:70:8c:3a:3c:f2: c4:24:ae:c3:1c:2e:0d:ea:69:6e:4e:13:e0:d1:2b: 72:4e:4c:d5:8d:9d:b0:c6:c3:49:63:50:fb:b7:bf: f8:3a:44:52:83:ff:3c:06:4a:8a:c6:52:7f:23:41: 4f:d3:fe:4e:f5:98:0f:c8:35:f7:1d:6e:3c:ba:76: a7:e5:90:17:d8:0f:01:1e:f3:ac:ad:8d:3b:61:a6: d6:c2:3d:4f:f9:d5:51:a7:dc:e7:3a:b7:74:2a:0b: 97:d0:65:6f:52:de:91:74:fc:a5:ff:fc:2a:a8:0e: cf:04:97:4e:ee:cd:f9:09:ff:9c:5e:47:98:4f:66: c9:cf:6e:9f:bd:f7:da:a5:a8:db:5b:16:3b:8c:a5: 03:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AD:39:F5:16:B2:9A:27:80:E7:AE:12:DD:A4:4F:2C:23:D2:2B:E3 X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:17:f0:5e:5f:bc:cc:76:40:aa:82:f1:9e:96:23:d7:8d:23: d1:ac:c3:e3:1c:fa:2b:b5:fc:98:d9:d3:f8:fb:f3:29:39:e4: e3:f7:19:76:68:c8:b6:82:22:ad:9f:8f:0a:da:5e:c3:08:94: 3f:ba:19:98:62:99:21:f4:86:f0:0a:91:1b:d4:a7:ba:9d:df: 23:a5:83:8e:95:77:b2:d6:bd:be:64:97:57:5b:09:12:70:c6: 07:8e:7c:3c:44:01:7d:e4:0a:e5:4f:1d:27:48:16:62:a8:e9: 7d:e5:45:2b:2d:f5:a7:cb:2d:39:3b:b3:89:03:87:4e:4b:95: a1:07:7c:7f:f0:3e:16:c0:66:4c:e1:ea:f1:c4:d1:13:69:e4: f0:f1:29:70:6f:29:55:84:59:45:4f:6e:15:bc:91:0f:5d:8a: da:6d:86:1f:4e:64:c1:49:a0:f9:a1:c9:88:fe:c1:8a:a1:61: 5b:48:c7:51:98:2b:fb:ac:31:d6:22:14:34:a0:a0:b5:fa:35: be:32:1c:23:c5:56:35:28:77:39:56:3b:7f:bf:6e:b0:1a:42: e6:04:e5:5d:0b:a3:06:cf:c8:ec:36:50:a1:34:6f:25:cf:7d: 99:c0:ef:ed:f3:57:6b:f2:21:a8:b2:fd:4d:cd:5b:59:f5:51: 87:ee:56:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjUwNzAxMDEwMDM0WhcNMjUwNzA4MDEwMDM0WjAYMRYwFAYD VQQDEw02ODYzMzMzMi1kZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSUoIwUHFY1t263Co/C072LxR+PDesYviW1cBS6l5OUAo6X17HV/z3hVAGVu fk7nNNOMH9iIqyHOg2KZgb/qh23rdZ8YziyXU8Hl6reBNiTfeErGBLfXQ3QkIhcB 7TsREU+u7XzG4WD3NMwPdcXDtzTpcIw6PPLEJK7DHC4N6mluThPg0StyTkzVjZ2w xsNJY1D7t7/4OkRSg/88BkqKxlJ/I0FP0/5O9ZgPyDX3HW48unan5ZAX2A8BHvOs rY07YabWwj1P+dVRp9znOrd0KguX0GVvUt6RdPyl//wqqA7PBJdO7s35Cf+cXkeY T2bJz26fvffapajbWxY7jKUDEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKatOfUW spongOeuEt2kTywj0ivjMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDnF/BeX7zMdkCqgvGeliPXjSPRrMPjHPortfyY2dP4+/MpOeTj9xl2 aMi2giKtn48K2l7DCJQ/uhmYYpkh9IbwCpEb1Ke6nd8jpYOOlXey1r2+ZJdXWwkS cMYHjnw8RAF95ArlTx0nSBZiqOl95UUrLfWnyy05O7OJA4dOS5WhB3x/8D4WwGZM 4erxxNETaeTw8SlwbylVhFlFT24VvJEPXYrabYYfTmTBSaD5ocmI/sGKoWFbSMdR mCv7rDHWIhQ0oKC1+jW+MhwjxVY1KHc5Vjt/v26wGkLmBOVdC6MGz8jsNlChNG8l z32ZwO/t81dr8iGosv1NzVtZ9VGH7lZ4 -----END CERTIFICATE-----Generated at Wed Jul 2 12:33:53 2025 by rpki-client