$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft File: l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft (raw, json) Hash identifier: VmheNvN0nC8BznVvJ/pkB1I/Ge6aXQCLuQOfNluFsfA= Subject key identifier: CD:26:74:FD:7B:D8:A8:B2:DD:2D:0A:A5:90:A4:B8:C0:59:81:A5:78 Authority key identifier: 97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 Certificate issuer: /CN=A91D46B0/serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6 Certificate serial: 07D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft Manifest number: 07CA Signing time: Fri 22 Aug 2025 21:19:33 +0000 Manifest this update: Fri 22 Aug 2025 21:19:33 +0000 Manifest next update: Fri 29 Aug 2025 21:19:33 +0000 Files and hashes: 1: l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl (hash: DjVuW8t253upV3tGMLIE9+liFJX4YJ43SXfKeky6+mY=) 2: 63B4DD1ADA2311EB8A4EC13BC4F9AE02.roa (hash: Xox0RKn25c/NtUoE1hfxgdRKbyAd4ZoK4OD14DUbhsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D46B0, serialNumber=9761FF5F3F8416BE01E23FC705847DFA94484DB6 Validity Not Before: Aug 22 21:19:33 2025 GMT Not After : Aug 29 21:19:33 2025 GMT Subject: CN=68a8dee5-69bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:62:0d:59:84:19:b5:aa:aa:46:bc:82:35: 73:14:63:86:6c:b0:ba:30:70:0a:ed:70:a8:a9:be: da:a0:ab:b7:42:37:36:53:07:36:06:c5:40:83:b8: 4e:96:7d:b8:ca:4c:00:5f:7d:77:0c:42:94:78:fc: 9a:53:4d:4f:87:b2:40:fb:c7:41:e9:88:4e:83:0c: 4c:98:6d:bf:77:9d:07:da:29:a5:ec:de:ea:8e:08: 8a:fd:41:e1:f6:9b:08:c5:6b:d8:8b:c2:50:ba:80: a3:e7:e4:89:55:3c:ef:a7:51:e1:62:69:2f:0d:c5: b9:20:38:70:1a:ae:89:96:00:8c:df:23:e4:dd:a0: 19:2f:e2:a9:3a:55:57:52:39:b1:84:62:09:14:b8: 79:27:f4:0f:da:eb:65:e2:12:04:09:dd:f7:42:8e: 60:8e:03:df:bb:04:61:bb:7a:55:29:72:76:18:4e: ce:22:45:d8:db:3b:74:84:30:e3:37:7c:18:39:fe: 1b:99:76:5b:59:36:08:9d:e4:77:e2:8b:84:f2:f2: 5c:b4:ff:23:33:44:b8:68:30:de:7d:4e:1c:5a:c9: ac:58:85:a1:5c:f1:5b:a7:8f:61:1d:96:c1:2d:bb: 4e:a0:27:7a:b7:8c:37:d9:24:c6:25:fd:25:0f:70: af:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:26:74:FD:7B:D8:A8:B2:DD:2D:0A:A5:90:A4:B8:C0:59:81:A5:78 X509v3 Authority Key Identifier: keyid:97:61:FF:5F:3F:84:16:BE:01:E2:3F:C7:05:84:7D:FA:94:48:4D:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2H_Xz-EFr4B4j_HBYR9-pRITbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46B0/E50902B6079B11EB8A1F2732C4F9AE02/l2H_Xz-EFr4B4j_HBYR9-pRITbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:4d:a9:82:6a:39:28:25:b7:52:32:0e:fe:3d:b2:fa:0e:00: ef:6d:af:92:14:f0:5e:84:59:6a:84:bb:35:b8:c2:89:fe:20: 9f:3a:d2:b9:df:95:c0:c5:68:b1:cd:be:62:27:72:cf:df:d5: 41:4d:4c:0e:45:54:02:41:fd:dd:04:53:a7:a8:fb:f6:1c:7b: 2f:f3:36:91:2e:42:84:f3:ee:1d:5a:4f:c4:6d:01:3a:d6:29: 2b:d5:33:62:1e:c3:79:25:ae:20:83:22:ca:22:21:f9:d9:ba: 8b:eb:6e:eb:20:22:18:68:45:a2:aa:83:5c:55:f5:77:c1:f4: da:43:0c:57:f9:76:92:03:a5:c5:ec:e5:0f:10:fc:4a:61:23: f9:82:c1:4f:b1:ec:a4:cf:ce:65:c2:f5:10:1a:0e:9e:04:4a: 31:a7:c5:d9:8a:83:99:e0:c7:b5:cb:4d:58:6f:18:09:1b:ac: 60:49:4f:77:09:eb:17:bd:79:04:e6:c5:ee:a1:bc:30:58:34: 93:97:9b:d5:0e:c8:6e:5f:3d:83:6c:f1:86:0d:e4:26:08:85: 72:6b:60:e9:61:dd:91:a8:66:f7:d8:34:29:a1:b3:7a:a9:13: 82:d6:ff:d4:81:2e:a4:27:75:c8:b1:dc:fa:ba:e0:21:c1:46: 6f:fc:10:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2QjAxMTAvBgNVBAUTKDk3NjFGRjVGM0Y4NDE2QkUwMUUyM0ZDNzA1ODQ3REZB OTQ0ODREQjYwHhcNMjUwODIyMjExOTMzWhcNMjUwODI5MjExOTMzWjAYMRYwFAYD VQQDEw02OGE4ZGVlNS02OWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyApiDVmEGbWqqka8gjVzFGOGbLC6MHAK7XCoqb7aoKu3Qjc2Uwc2BsVAg7hO ln24ykwAX313DEKUePyaU01Ph7JA+8dB6YhOgwxMmG2/d50H2iml7N7qjgiK/UHh 9psIxWvYi8JQuoCj5+SJVTzvp1HhYmkvDcW5IDhwGq6JlgCM3yPk3aAZL+KpOlVX UjmxhGIJFLh5J/QP2utl4hIECd33Qo5gjgPfuwRhu3pVKXJ2GE7OIkXY2zt0hDDj N3wYOf4bmXZbWTYIneR34ouE8vJctP8jM0S4aDDefU4cWsmsWIWhXPFbp49hHZbB LbtOoCd6t4w32STGJf0lD3CvWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0mdP17 2Kiy3S0KpZCkuMBZgaV4MB8GA1UdIwQYMBaAFJdh/18/hBa+AeI/xwWEffqUSE22 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZCMC9FNTA5MDJCNjA3 OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZyNEI0al9IQllSOS1wUklU YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wySF9Yei1FRnI0QjRqX0hCWVI5LXBSSVRiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDZCMC9FNTA5MDJCNjA3OUIxMUVCOEExRjI3MzJDNEY5QUUwMi9sMkhfWHotRUZy NEI0al9IQllSOS1wUklUYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHTamCajkoJbdSMg7+PbL6DgDvba+SFPBehFlqhLs1uMKJ/iCfOtK5 35XAxWixzb5iJ3LP39VBTUwORVQCQf3dBFOnqPv2HHsv8zaRLkKE8+4dWk/EbQE6 1ikr1TNiHsN5Ja4ggyLKIiH52bqL627rICIYaEWiqoNcVfV3wfTaQwxX+XaSA6XF 7OUPEPxKYSP5gsFPseykz85lwvUQGg6eBEoxp8XZioOZ4Me1y01YbxgJG6xgSU93 CesXvXkE5sXuobwwWDSTl5vVDshuXz2DbPGGDeQmCIVya2DpYd2RqGb32DQpobN6 qROC1v/UgS6kJ3XIsdz6uuAhwUZv/BCp -----END CERTIFICATE-----Generated at Sat Aug 23 23:58:03 2025 by rpki-client