$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft File: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft (raw, json) Hash identifier: 9ggs+GqTU5oBSckfYIL7zgCEHuIjh+zjgNu40NIDWM8= Subject key identifier: 2A:3D:05:19:2B:D9:A4:C2:98:D3:57:8B:C7:46:24:F1:7C:18:64:E8 Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Certificate serial: 14F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft Manifest number: 14EF Signing time: Wed 02 Jul 2025 16:59:22 +0000 Manifest this update: Wed 02 Jul 2025 16:59:21 +0000 Manifest next update: Wed 09 Jul 2025 16:59:21 +0000 Files and hashes: 1: _LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl (hash: evDiJQxFmF4Ooui3jHN8tG30ysb7PPp1g7yCWouBiRU=) 2: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (hash: ZrttKe2gUPdi3/NYLhVsPF2RlqfjZO1IxCJ4ZBHDkLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5368 (0x14f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D599B, serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Validity Not Before: Jul 2 16:59:21 2025 GMT Not After : Jul 9 16:59:21 2025 GMT Subject: CN=6865656a-8cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:2e:1d:e7:d0:c5:26:ec:06:b2:6d:66:37: 85:70:0a:56:7c:0b:a1:77:99:3e:9f:76:91:c6:8e: 42:6c:ef:ff:c0:c2:c7:70:d3:b2:3f:a9:fb:f7:f2: 46:3a:25:5e:a4:07:34:cd:4f:26:e0:28:25:38:b9: de:31:db:91:4b:80:3a:c5:6d:25:6f:d4:2a:02:b3: ae:fb:0a:3b:1e:c6:f2:9e:f1:1e:86:7a:c7:b2:37: ee:20:d3:09:38:8e:15:22:59:66:aa:9a:e1:fa:62: 70:a6:96:ce:fd:8a:82:43:1c:a2:e3:2f:fa:13:6c: 7b:e5:09:db:a7:52:41:b6:3e:a9:20:d6:d0:3d:69: 86:59:2a:30:3b:98:04:4d:d9:f0:ee:55:d8:96:51: 4f:6b:5f:95:3a:52:64:1e:0f:3e:ae:86:13:32:bc: b8:d1:e8:c0:e6:0e:e5:77:eb:48:ca:f9:65:67:07: a9:d8:c5:f3:70:25:ba:ba:4f:9d:fb:c2:bd:df:62: be:b4:78:59:ca:49:55:c3:36:23:e9:ff:24:b9:c1: 79:66:03:ff:71:ea:68:6d:56:db:aa:6d:c9:fd:53: 32:e8:0f:0e:b6:d4:4f:97:6a:1e:c7:8c:f1:7c:05: d7:57:4d:52:f7:6e:e9:61:90:9e:b8:ba:d2:d0:05: 6b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3D:05:19:2B:D9:A4:C2:98:D3:57:8B:C7:46:24:F1:7C:18:64:E8 X509v3 Authority Key Identifier: keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:69:47:04:14:06:72:31:ef:31:d8:ee:a9:55:72:be:5a:99: 05:e3:b6:07:d8:5e:57:cc:4e:1c:d2:3b:1d:be:3e:cc:b0:21: d1:d6:18:5b:64:22:33:98:f5:af:47:ba:4b:ad:09:8d:05:b6: 05:17:d6:06:f9:3c:4f:5b:8a:7e:0e:7a:e8:ab:1c:82:52:b1: 72:df:a5:8b:b5:ed:50:58:0e:aa:e8:96:b7:0a:b7:59:49:d5: f2:22:da:4b:ae:2a:f3:32:e8:5a:20:d8:22:5d:70:01:67:5d: 6b:63:fa:14:26:5d:24:43:20:c9:b0:be:ba:85:06:e4:9a:0f: 19:76:9a:fc:ed:b2:8c:42:55:40:ae:ca:e6:65:37:8d:57:5a: ee:0b:98:1c:c7:92:8a:9c:78:ef:22:45:0d:a8:00:a9:9d:27: f8:7c:98:70:c0:78:b6:eb:1b:62:eb:f8:35:86:6e:b4:5d:be: 70:94:80:5c:f8:73:34:34:21:7c:b7:fb:c7:12:99:c6:89:fc: 96:a9:a5:89:cc:9e:4b:a3:c9:c7:08:18:79:61:12:56:42:2d: f1:47:cb:80:57:2e:d2:65:a6:a0:d1:a2:5d:a3:04:37:93:21: eb:73:d0:80:ae:96:2f:87:ca:92:9a:b3:18:f8:43:ed:1e:e4: a0:38:b4:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU5OUIxMTAvBgNVBAUTKEZDQjIzQzdCRjVGMTkzNTYyNzVCQUNGNTdDREI1NUJG RDYwRTA0QUMwHhcNMjUwNzAyMTY1OTIxWhcNMjUwNzA5MTY1OTIxWjAYMRYwFAYD VQQDEw02ODY1NjU2YS04Y2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7guHefQxSbsBrJtZjeFcApWfAuhd5k+n3aRxo5CbO//wMLHcNOyP6n79/JG OiVepAc0zU8m4CglOLneMduRS4A6xW0lb9QqArOu+wo7HsbynvEehnrHsjfuINMJ OI4VIllmqprh+mJwppbO/YqCQxyi4y/6E2x75Qnbp1JBtj6pINbQPWmGWSowO5gE Tdnw7lXYllFPa1+VOlJkHg8+roYTMry40ejA5g7ld+tIyvllZwep2MXzcCW6uk+d +8K932K+tHhZyklVwzYj6f8kucF5ZgP/cepobVbbqm3J/VMy6A8OttRPl2oex4zx fAXXV01S927pYZCeuLrS0AVrzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo9BRkr 2aTCmNNXi8dGJPF8GGToMB8GA1UdIwQYMBaAFPyyPHv18ZNWJ1us9XzbVb/WDgSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk5Qi9ENzIyNEZGMjU0 QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsxWW5XNnoxZk50VnY5WU9C S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19MSThlX1h4azFZblc2ejFmTnRWdjlZT0JLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTk5Qi9ENzIyNEZGMjU0QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsx WW5XNnoxZk50VnY5WU9CS3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuaUcEFAZyMe8x2O6pVXK+WpkF47YH2F5XzE4c0jsdvj7MsCHR1hhb ZCIzmPWvR7pLrQmNBbYFF9YG+TxPW4p+DnroqxyCUrFy36WLte1QWA6q6Ja3CrdZ SdXyItpLrirzMuhaINgiXXABZ11rY/oUJl0kQyDJsL66hQbkmg8Zdpr87bKMQlVA rsrmZTeNV1ruC5gcx5KKnHjvIkUNqACpnSf4fJhwwHi26xti6/g1hm60Xb5wlIBc +HM0NCF8t/vHEpnGifyWqaWJzJ5Lo8nHCBh5YRJWQi3xR8uAVy7SZaag0aJdowQ3 kyHrc9CArpYvh8qSmrMY+EPtHuSgOLR6 -----END CERTIFICATE-----Generated at Thu Jul 3 09:12:35 2025 by rpki-client