$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: rDkIfSg+wH47oi/jzZaoyIpIa1jEJ4hQBzQKMV7svQ0= Subject key identifier: B3:7F:C4:43:4D:CE:AC:9F:F0:4C:7C:05:82:2A:6B:18:BB:24:74:10 Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 52 Signing time: Sat 09 Aug 2025 07:55:10 +0000 Manifest this update: Sat 09 Aug 2025 07:55:09 +0000 Manifest next update: Sat 16 Aug 2025 07:55:09 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: KKbPk50xz7Ul11vAqu246bUk6zlrGaakPpW3XBB1pfA=) 2: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) 3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=) 4: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Aug 9 07:55:09 2025 GMT Not After : Aug 16 07:55:09 2025 GMT Subject: CN=6896fedd-170a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:5a:d6:af:6d:68:2f:9d:15:5a:37:64:ff: 8c:79:84:84:eb:91:93:e3:12:ee:a0:83:8f:89:37: 87:f8:59:8a:41:7c:f8:67:bb:3e:0f:d1:45:5d:9a: b4:a1:b7:71:24:fc:49:da:e9:d1:f8:43:02:83:8a: 88:cd:64:41:5c:64:8f:3c:0c:ad:94:c5:be:8c:29: 61:f2:2a:a1:bb:36:eb:72:b1:43:db:39:93:db:61: f0:42:fe:1b:01:de:68:cf:78:f5:23:bf:16:c0:1c: be:5e:52:65:50:ab:1b:51:41:37:44:7e:39:74:ec: 97:6f:a7:79:ed:6f:ff:6f:d0:3f:90:14:eb:79:91: 23:a7:81:0e:71:6d:0b:3c:59:55:fd:0d:d2:ec:1e: 15:cb:2e:08:00:e0:4a:d2:7a:b9:3d:17:72:69:fd: 8a:f8:2d:6d:3b:9a:33:7b:ef:bc:19:7a:2b:e7:35: 58:02:b4:98:81:37:e2:f1:ee:4a:0b:63:dd:be:96: 19:89:1b:3f:a2:5f:85:32:20:7b:75:2e:40:07:88: 3e:c2:39:0e:49:04:2c:ac:b8:5a:15:1e:90:fa:1a: eb:b4:64:7d:10:df:da:c2:b2:32:3a:81:4c:72:23: 31:fe:d2:c4:b8:be:21:cd:31:ce:dd:b6:86:ab:0a: 2e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7F:C4:43:4D:CE:AC:9F:F0:4C:7C:05:82:2A:6B:18:BB:24:74:10 X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d6:68:af:d4:22:28:46:e9:e4:4d:09:bb:b4:c5:85:0a:11: ff:ee:57:2a:51:74:7e:58:f7:ad:a5:ae:47:d4:02:db:23:1d: a9:3a:76:c1:c3:b7:ab:09:6b:86:b3:1a:23:94:63:31:6e:08: e6:2d:e9:48:3d:d8:b5:8c:52:e3:f6:ce:33:e4:58:b0:76:08: 45:2b:a6:a5:a5:ce:bc:e3:cd:02:f8:83:9b:82:2f:c7:2a:e7: d5:81:61:af:e1:4a:f6:ec:11:68:20:17:19:82:c6:b0:6e:1f: 00:ab:4a:99:ab:8f:c4:46:55:f9:19:51:18:b0:1f:1c:d0:33: 0b:fb:c7:71:5f:5e:2b:fc:d6:7f:dc:b8:48:84:d1:9f:ac:66: 83:6c:d0:0d:37:02:39:09:81:dc:41:ad:7b:9a:72:8b:b4:06: fb:d0:ad:1c:32:84:28:bd:5f:c1:fb:06:f7:c0:95:96:00:ba: 6e:96:be:c4:bf:6e:88:5a:00:a6:ee:ca:01:7c:43:0c:d9:6b: 4a:1b:21:5e:7c:5f:ca:93:60:1a:19:af:38:40:e7:ce:84:f6: 4d:b1:7a:25:45:dc:a6:cd:20:54:fa:52:04:d1:93:53:32:a9: 0d:52:a1:77:89:59:0d:92:71:96:3d:40:a3:2c:1f:ac:57:f4: 3e:1c:a4:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoM0QxRkNCNzI1NUM1MjUwM0UxMEFFNTg0QjExODlBMTVD RjU2MDc0RTAeFw0yNTA4MDkwNzU1MDlaFw0yNTA4MTYwNzU1MDlaMBgxFjAUBgNV BAMTDTY4OTZmZWRkLTE3MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC28FrWr21oL50VWjdk/4x5hITrkZPjEu6gg4+JN4f4WYpBfPhnuz4P0UVdmrSh t3Ek/Ena6dH4QwKDiojNZEFcZI88DK2Uxb6MKWHyKqG7NutysUPbOZPbYfBC/hsB 3mjPePUjvxbAHL5eUmVQqxtRQTdEfjl07Jdvp3ntb/9v0D+QFOt5kSOngQ5xbQs8 WVX9DdLsHhXLLggA4ErSerk9F3Jp/Yr4LW07mjN777wZeivnNVgCtJiBN+Lx7koL Y92+lhmJGz+iX4UyIHt1LkAHiD7COQ5JBCysuFoVHpD6Guu0ZH0Q39rCsjI6gUxy IzH+0sS4viHNMc7dtoarCi79AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs3/EQ03O rJ/wTHwFgiprGLskdBAwHwYDVR0jBBgwFoAUPR/LclXFJQPhCuWEsRiaFc9WB04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0M0NTYxMDJFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0Iw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJfTGNsWEZKUVBoQ3VXRXNSaWFGYzlXQjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0M0NTYxMDJFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQ aEN1V0VzUmlhRmM5V0IwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIDWaK/UIihG6eRNCbu0xYUKEf/uVypRdH5Y962lrkfUAtsjHak6dsHD t6sJa4azGiOUYzFuCOYt6Ug92LWMUuP2zjPkWLB2CEUrpqWlzrzjzQL4g5uCL8cq 59WBYa/hSvbsEWggFxmCxrBuHwCrSpmrj8RGVfkZURiwHxzQMwv7x3FfXiv81n/c uEiE0Z+sZoNs0A03AjkJgdxBrXuacou0BvvQrRwyhCi9X8H7BvfAlZYAum6WvsS/ bohaAKbuygF8QwzZa0obIV58X8qTYBoZrzhA586E9k2xeiVF3KbNIFT6UgTRk1My qQ1SoXeJWQ2ScZY9QKMsH6xX9D4cpOE= -----END CERTIFICATE-----Generated at Sat Aug 9 14:23:58 2025 by rpki-client