$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft File: 1lqpVdfmLHHFqyu3GgydwnKqlGU.mft (raw, json) Hash identifier: bg7ach5Hbq/cpRunWqF2RGibT/e9qLVeNNeoaHA2uLw= Subject key identifier: 38:F0:3D:75:89:E6:DF:33:C8:8C:79:BD:D7:E8:45:FC:B5:B1:FE:22 Authority key identifier: D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 Certificate issuer: /CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft Manifest number: 016D Signing time: Thu 03 Jul 2025 03:57:29 +0000 Manifest this update: Thu 03 Jul 2025 03:57:29 +0000 Manifest next update: Thu 10 Jul 2025 03:57:29 +0000 Files and hashes: 1: 1lqpVdfmLHHFqyu3GgydwnKqlGU.crl (hash: clzpNh/h1RmaQt+M+P4PpW/CQPf/gMe+xImQnOwVGnM=) 2: AE8AEA702C3111EE94A5056FC4F9AE02.roa (hash: DhIch+RxWIpV0kjM6MCCA7OP7UDRbGyuOsypw/t/DWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6A5, serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Validity Not Before: Jul 3 03:57:29 2025 GMT Not After : Jul 10 03:57:29 2025 GMT Subject: CN=6865ffa9-ae35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:60:53:0b:75:dd:c0:25:d8:bd:f0:bf:aa: f1:0d:ec:63:84:39:37:c1:e0:43:ab:51:ec:f8:fe: 78:64:f7:80:c1:aa:4b:59:6d:80:1f:93:06:59:8a: 91:62:f7:e0:24:42:ed:4f:07:ea:ee:33:1a:d8:11: 35:a3:1a:9a:d1:a0:20:90:bb:58:08:9f:e7:05:ad: 83:85:3a:b2:30:88:37:a9:6a:d9:b6:eb:9d:37:0c: 1b:9e:21:9c:39:a3:0e:e5:79:ad:d1:f2:bf:a5:a4: f6:2c:c0:70:60:13:ef:ba:9d:f2:f6:2f:98:81:2f: 7d:97:65:ca:f1:0a:80:df:c0:b2:ea:57:f5:ea:47: b0:f6:4d:a1:36:e1:71:a0:f0:d3:6a:ed:8d:26:af: 55:6c:c8:96:fd:a3:b0:cc:d5:5c:e4:e1:e1:4f:03: d5:75:84:d9:f6:88:7e:1b:46:4c:10:6f:5e:ec:a8: ab:e1:a1:e7:ef:18:5d:0b:ba:dc:25:9f:80:68:65: 08:03:9c:3f:5e:c9:3c:d9:c0:10:41:c3:36:77:6f: aa:35:34:aa:c0:b3:b1:a6:0c:63:0b:f3:73:6f:35: 19:7d:d6:b6:76:e9:de:87:e1:8e:2e:98:15:7f:2c: 8e:79:c7:b0:33:11:94:84:61:5e:f6:97:67:de:f4: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F0:3D:75:89:E6:DF:33:C8:8C:79:BD:D7:E8:45:FC:B5:B1:FE:22 X509v3 Authority Key Identifier: keyid:D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ab:e7:15:1d:8f:3c:0d:e5:3f:05:83:c1:9b:57:15:5e:49: bf:b9:9f:21:1a:8b:c4:e4:0f:12:35:d5:7b:61:5d:53:46:f9: a1:1e:e6:23:12:27:15:68:33:81:fc:1e:d0:b5:18:f8:2e:2d: f1:8c:a2:1d:e9:24:ec:40:38:07:71:81:23:f9:15:4e:cc:1c: 53:07:2d:42:f3:ce:fa:1b:fc:c8:ad:2f:88:66:4a:51:08:02: b8:81:e8:b1:f1:b0:24:cb:9e:0a:6d:d0:cb:58:0c:ec:1e:fb: 5d:07:ae:3b:3f:3b:a0:d5:8d:0d:7f:6d:8d:0d:e9:ef:d1:a0: 29:e2:39:49:56:d7:16:40:a1:b3:de:ed:86:27:40:78:65:e7: 64:f9:e0:4c:1f:0f:37:71:fc:2d:e8:dd:3e:ab:f4:b0:d1:b3: d9:ea:96:d4:2a:b1:e0:0d:88:bc:d7:7e:62:51:b0:b7:f1:ef: 89:13:d2:90:e8:64:34:d0:89:3e:69:89:e1:4f:c0:73:d1:c4: b7:63:b6:9b:f2:ab:d4:7b:82:4f:f6:09:6f:00:71:b8:5e:52: 14:73:50:15:cf:39:07:07:00:f1:a7:60:50:3d:3f:42:e2:85: 15:ed:c4:16:cf:cc:9a:3c:1a:43:fd:dc:a8:3c:62:84:f7:96: 43:96:97:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QTUxMTAvBgNVBAUTKEQ2NUFBOTU1RDdFNjJDNzFDNUFCMkJCNzFBMEM5REMy NzJBQTk0NjUwHhcNMjUwNzAzMDM1NzI5WhcNMjUwNzEwMDM1NzI5WjAYMRYwFAYD VQQDEw02ODY1ZmZhOS1hZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsdgUwt13cAl2L3wv6rxDexjhDk3weBDq1Hs+P54ZPeAwapLWW2AH5MGWYqR YvfgJELtTwfq7jMa2BE1oxqa0aAgkLtYCJ/nBa2DhTqyMIg3qWrZtuudNwwbniGc OaMO5Xmt0fK/paT2LMBwYBPvup3y9i+YgS99l2XK8QqA38Cy6lf16kew9k2hNuFx oPDTau2NJq9VbMiW/aOwzNVc5OHhTwPVdYTZ9oh+G0ZMEG9e7Kir4aHn7xhdC7rc JZ+AaGUIA5w/Xsk82cAQQcM2d2+qNTSqwLOxpgxjC/NzbzUZfda2duneh+GOLpgV fyyOecewMxGUhGFe9pdn3vS8EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjwPXWJ 5t8zyIx5vdfoRfy1sf4iMB8GA1UdIwQYMBaAFNZaqVXX5ixxxasrtxoMncJyqpRl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBNS80QTkzRjY0MjJD MzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxISEZxeXUzR2d5ZHduS3Fs R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFscXBWZGZtTEhIRnF5dTNHZ3lkd25LcWxHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBNS80QTkzRjY0MjJDMzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxI SEZxeXUzR2d5ZHduS3FsR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFq+cVHY88DeU/BYPBm1cVXkm/uZ8hGovE5A8SNdV7YV1TRvmhHuYj EicVaDOB/B7QtRj4Li3xjKId6STsQDgHcYEj+RVOzBxTBy1C8876G/zIrS+IZkpR CAK4geix8bAky54KbdDLWAzsHvtdB647Pzug1Y0Nf22NDenv0aAp4jlJVtcWQKGz 3u2GJ0B4Zedk+eBMHw83cfwt6N0+q/Sw0bPZ6pbUKrHgDYi8135iUbC38e+JE9KQ 6GQ00Ik+aYnhT8Bz0cS3Y7ab8qvUe4JP9glvAHG4XlIUc1AVzzkHBwDxp2BQPT9C 4oUV7cQWz8yaPBpD/dyoPGKE95ZDlpfd -----END CERTIFICATE-----Generated at Sat Jul 5 04:59:28 2025 by rpki-client