$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: XeVBE6uFkQpdyBNeEXREGt2FXcNWo04vf2tV/5/dLhE= Subject key identifier: CA:2F:13:04:3D:A3:38:88:54:37:E7:79:72:0C:AA:A7:D2:96:39:6B Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0B3C Signing time: Wed 02 Jul 2025 19:24:08 +0000 Manifest this update: Wed 02 Jul 2025 19:24:07 +0000 Manifest next update: Wed 09 Jul 2025 19:24:07 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: RU64q1AMohhpZNgf3R6oP35OQGXert9TNWEu9PrIeIk=) 2: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: 2qnnF6MVOAPWKTwVx6xcANvt7+ipRsuxDi1zcVsoM90=) 3: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: LHN9DyWzlGRcwkpXqFqZ90XaKLujDGwCFAysXhBXguc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Jul 2 19:24:07 2025 GMT Not After : Jul 9 19:24:07 2025 GMT Subject: CN=68658758-d858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:22:48:96:21:c5:9f:2b:e6:ce:15:dd:1e: 9b:bf:56:7d:50:39:48:91:d1:71:ed:db:74:9f:bf: 38:ba:cd:5d:bb:9a:d8:3a:2a:ea:d2:3e:61:e8:e3: 3e:10:21:9c:c7:c5:e0:19:1c:c8:7c:93:d1:0f:43: 02:07:67:1b:b8:ab:1a:26:c8:9e:80:9c:89:6e:10: 23:26:f0:f4:6e:9f:70:12:84:e5:50:50:58:12:41: 62:ba:ec:70:7d:07:da:16:7e:e3:83:45:05:0d:15: 74:77:c9:b4:c5:00:7b:bb:aa:3a:73:a6:ab:f1:ec: 52:a2:96:70:f4:90:08:c3:b9:f7:43:b9:49:a2:f6: 27:89:f8:c0:df:89:75:34:1e:1d:72:07:30:b6:9f: 3c:cd:a0:44:f1:1f:9e:b8:82:8f:04:0d:6f:f8:3d: 1e:9d:57:6a:e0:84:3f:75:1b:d2:d6:55:6e:49:54: b2:90:9d:b1:b0:a1:4a:78:b4:4e:b3:fa:07:8d:a5: 86:37:a4:b5:b8:16:72:b9:d0:d3:d8:9e:5b:65:37: e3:2e:b7:0d:b4:71:49:22:86:70:e1:8c:40:01:04: f9:09:8b:5d:b2:74:86:c7:9d:4f:a1:82:bf:27:37: 50:b6:ee:88:82:a9:47:9e:69:9e:84:1b:7e:86:a5: d5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2F:13:04:3D:A3:38:88:54:37:E7:79:72:0C:AA:A7:D2:96:39:6B X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:00:33:bf:b3:49:82:80:e6:89:dd:d5:06:be:9a:ca:10:5c: cc:3f:49:12:26:e9:91:d8:88:d7:f2:60:90:13:47:39:3d:2c: a4:f4:d8:c1:b3:db:36:ac:58:49:79:5d:6a:87:d7:be:18:4a: ba:46:93:80:95:dc:24:f1:25:09:a1:66:11:1f:5d:2a:b6:cc: 24:89:54:93:d3:75:18:a2:4e:05:b1:1d:9b:f8:8d:58:e1:43: 59:19:2c:4a:fb:75:e8:a0:2a:53:0d:b8:63:8a:47:ca:04:30: 4a:e8:f6:00:8f:6d:7d:94:df:34:e0:71:25:20:c6:1e:9b:23: ab:e8:bd:b4:70:16:72:f1:60:eb:09:a1:80:e4:1f:b8:47:5d: 78:26:9f:a9:87:ff:b5:9f:fc:e6:78:bd:62:21:d7:4a:14:67: cb:39:73:e2:08:45:31:a7:bc:0b:b1:1d:52:f0:f6:4e:bb:d0: ea:f8:d8:3d:2a:9a:e5:db:81:b8:7c:af:db:ef:f5:3a:d3:a8: 84:85:b7:c3:bb:68:f3:c0:95:45:fe:4f:8d:0f:78:60:b9:c9: 7e:4c:b9:c0:aa:c4:63:1a:eb:d2:40:03:fb:76:75:b5:82:e5: 1d:db:3d:0b:b1:33:6e:d7:3a:63:af:38:5e:10:d0:63:f2:e0: 5a:48:9c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjUwNzAyMTkyNDA3WhcNMjUwNzA5MTkyNDA3WjAYMRYwFAYD VQQDEw02ODY1ODc1OC1kODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3L4iSJYhxZ8r5s4V3R6bv1Z9UDlIkdFx7dt0n784us1du5rYOirq0j5h6OM+ ECGcx8XgGRzIfJPRD0MCB2cbuKsaJsiegJyJbhAjJvD0bp9wEoTlUFBYEkFiuuxw fQfaFn7jg0UFDRV0d8m0xQB7u6o6c6ar8exSopZw9JAIw7n3Q7lJovYnifjA34l1 NB4dcgcwtp88zaBE8R+euIKPBA1v+D0enVdq4IQ/dRvS1lVuSVSykJ2xsKFKeLRO s/oHjaWGN6S1uBZyudDT2J5bZTfjLrcNtHFJIoZw4YxAAQT5CYtdsnSGx51PoYK/ JzdQtu6IgqlHnmmehBt+hqXVaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMovEwQ9 oziIVDfneXIMqqfSljlrMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXADO/s0mCgOaJ3dUGvprKEFzMP0kSJumR2IjX8mCQE0c5PSyk9NjB s9s2rFhJeV1qh9e+GEq6RpOAldwk8SUJoWYRH10qtswkiVST03UYok4FsR2b+I1Y 4UNZGSxK+3XooCpTDbhjikfKBDBK6PYAj219lN804HElIMYemyOr6L20cBZy8WDr CaGA5B+4R114Jp+ph/+1n/zmeL1iIddKFGfLOXPiCEUxp7wLsR1S8PZOu9Dq+Ng9 Kprl24G4fK/b7/U606iEhbfDu2jzwJVF/k+ND3hgucl+TLnAqsRjGuvSQAP7dnW1 guUd2z0LsTNu1zpjrzheENBj8uBaSJxE -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:22 2025 by rpki-client