$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: rG9FB07BQW1KtIr7fVguCLfBsNilrd1dfl3S4sFR/w4= Subject key identifier: 89:75:64:9D:BC:CA:CC:5E:6E:3F:66:F5:8F:D5:2C:E0:89:1E:43:46 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0C71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0C6B Signing time: Fri 22 Aug 2025 18:30:39 +0000 Manifest this update: Fri 22 Aug 2025 18:30:39 +0000 Manifest next update: Fri 29 Aug 2025 18:30:39 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: vqdhRX2EDXl2nia9KrWhbnmEQKJ7c5XskoUgtmOhJfo=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: kw2eNb2EMSu9uzXccFSp6eZwzhS7sBm7WAl3fnQxLVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Aug 22 18:30:39 2025 GMT Not After : Aug 29 18:30:39 2025 GMT Subject: CN=68a8b74f-b7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0a:d0:26:72:ac:02:87:0b:98:89:b2:42:0f: f0:54:5a:60:53:c2:be:e5:e3:2c:1f:92:82:b4:a4: 27:8d:88:ed:8e:a3:fc:f9:20:5a:3b:9d:aa:05:40: 6f:23:d0:0d:54:21:16:6b:f9:fa:45:85:dd:0c:b9: 76:01:3e:6f:ab:f2:af:7a:c4:6b:ad:1e:f2:b3:92: a7:ce:87:f8:e5:03:df:d0:7b:13:29:33:01:75:26: 6d:19:65:97:e4:cb:e7:d3:bc:7d:15:17:bd:46:c9: 44:35:e5:8c:c0:82:c7:f9:47:db:73:26:45:1e:6a: 0e:17:61:67:b8:a0:fb:6f:1a:b7:8f:fb:39:37:c1: d0:7d:89:43:d1:2d:21:b6:d6:45:a6:b9:97:21:dc: d0:80:0f:3d:15:09:17:69:0c:2d:29:3b:e9:a0:4b: ea:78:69:28:bb:62:09:e7:8d:5a:e1:07:f0:8f:36: ab:f0:a2:40:6a:09:7a:e3:4d:c2:f1:b4:c4:da:c3: ec:e6:38:87:74:c7:18:ed:e8:58:78:17:05:49:a0: ac:c6:ba:6a:36:40:90:25:98:e0:3d:ae:a2:7e:bb: 7a:59:da:4d:b6:15:5e:4b:88:5b:de:9e:6c:19:5a: 02:5b:3f:47:48:9d:4d:ae:11:41:20:48:1d:6a:81: 04:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:75:64:9D:BC:CA:CC:5E:6E:3F:66:F5:8F:D5:2C:E0:89:1E:43:46 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:d1:c2:15:56:75:ca:e1:5c:37:34:f6:28:49:e3:a0:45:74: 05:bf:1d:b0:c4:3c:65:a1:a2:e0:99:28:f1:a7:2b:86:41:9b: eb:95:06:f7:82:aa:a8:b2:ad:27:b6:17:fd:a5:97:20:fb:92: e2:7f:01:a2:fe:e0:d8:3d:2c:09:33:15:e9:1d:29:e6:5f:b3: f4:fd:fc:32:a9:aa:9b:08:60:ad:83:b4:3c:02:82:3b:92:4e: 98:4c:d2:24:21:c0:97:a5:06:3b:f0:fe:36:e5:64:aa:97:41: d8:8c:c3:42:f4:81:b9:f6:91:89:6a:93:24:50:33:56:75:2a: b0:58:2e:92:47:82:29:ab:70:11:bc:a0:cd:3d:82:a9:05:1d: e7:6b:2c:0c:40:47:9a:44:13:6a:29:82:db:5d:7e:55:4d:52: 51:20:b0:de:44:d5:22:77:e6:96:c6:92:5b:c4:12:55:53:31: 31:df:98:1c:9a:5c:af:76:f8:e2:80:44:3c:2b:ae:c0:8c:f0: 4f:64:f1:94:7c:2a:78:75:97:1e:b3:44:be:78:72:d0:d3:36: b6:36:b8:f0:ff:51:e3:29:cf:5a:dc:64:63:32:12:1a:ba:1b: e5:87:75:45:6a:c2:2e:85:fd:af:4e:ca:de:e5:f4:f6:8c:99: a6:80:8e:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjUwODIyMTgzMDM5WhcNMjUwODI5MTgzMDM5WjAYMRYwFAYD VQQDEw02OGE4Yjc0Zi1iN2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wrQJnKsAocLmImyQg/wVFpgU8K+5eMsH5KCtKQnjYjtjqP8+SBaO52qBUBv I9ANVCEWa/n6RYXdDLl2AT5vq/KvesRrrR7ys5Knzof45QPf0HsTKTMBdSZtGWWX 5Mvn07x9FRe9RslENeWMwILH+UfbcyZFHmoOF2FnuKD7bxq3j/s5N8HQfYlD0S0h ttZFprmXIdzQgA89FQkXaQwtKTvpoEvqeGkou2IJ541a4Qfwjzar8KJAagl6403C 8bTE2sPs5jiHdMcY7ehYeBcFSaCsxrpqNkCQJZjgPa6ifrt6WdpNthVeS4hb3p5s GVoCWz9HSJ1NrhFBIEgdaoEEGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIl1ZJ28 ysxebj9m9Y/VLOCJHkNGMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS0cIVVnXK4Vw3NPYoSeOgRXQFvx2wxDxloaLgmSjxpyuGQZvrlQb3 gqqosq0nthf9pZcg+5LifwGi/uDYPSwJMxXpHSnmX7P0/fwyqaqbCGCtg7Q8AoI7 kk6YTNIkIcCXpQY78P425WSql0HYjMNC9IG59pGJapMkUDNWdSqwWC6SR4Ipq3AR vKDNPYKpBR3naywMQEeaRBNqKYLbXX5VTVJRILDeRNUid+aWxpJbxBJVUzEx35gc mlyvdvjigEQ8K67AjPBPZPGUfCp4dZces0S+eHLQ0za2Nrjw/1HjKc9a3GRjMhIa uhvlh3VFasIuhf2vTsre5fT2jJmmgI4D -----END CERTIFICATE-----Generated at Sat Aug 23 18:19:03 2025 by rpki-client