$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft File: l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json) Hash identifier: 3LFGmtXNzH4jbKGf20nzFuWIbL3KPDFnK+eNWCQWVCE= Subject key identifier: 90:19:98:A4:17:1F:E8:BC:CE:EB:A5:6B:2E:0B:5F:7C:09:7E:1E:1B Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 Certificate issuer: /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Certificate serial: 0430 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft Manifest number: 042B Signing time: Wed 13 Aug 2025 00:50:25 +0000 Manifest this update: Wed 13 Aug 2025 00:50:25 +0000 Manifest next update: Wed 20 Aug 2025 00:50:25 +0000 Files and hashes: 1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: kWfS9XdIBb40qdXYpgYXVNvQrEP8sarn7MU6Q+vKWuU=) 2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: 6m2q3lRXLAFrPlHDZxzNnpenf3mKGBo+gMVhi6EnOZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 00:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1072 (0x430) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91309C9, serialNumber=97958FFFE696D80C57636524A46E18234176FBC1 Validity Not Before: Aug 13 00:50:25 2025 GMT Not After : Aug 20 00:50:25 2025 GMT Subject: CN=689be151-1055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:c5:b6:80:f4:2b:4e:9b:51:f5:be:03:ec: 1a:c4:bb:2d:59:c5:8e:20:bf:c1:f8:8c:ea:e0:cc: ed:d9:25:9b:b5:cb:3b:cd:7a:71:86:5d:ec:e6:fc: c4:08:90:bd:f7:2b:8b:90:69:d0:46:53:e7:d3:3b: 60:c5:57:08:d4:a7:a0:af:4d:79:dc:89:14:ef:90: e1:5c:71:f4:ca:76:51:cf:80:f9:21:69:1f:3f:52: d8:ae:0f:a8:22:0d:4c:72:1d:03:48:cd:9d:8a:8d: 02:85:a4:8e:b6:3f:44:07:1d:b5:49:c4:77:3b:a9: 06:38:80:86:bd:79:7e:df:37:a4:c4:01:c9:9a:fd: 52:a6:2d:80:d7:74:08:20:da:45:6e:7e:51:02:ba: ca:11:b6:58:06:83:41:61:2d:6c:ad:f4:87:f8:ef: 9e:c7:30:cf:f7:41:e9:f2:4f:e2:ba:7b:b4:50:c4: 73:d5:a1:5b:13:86:43:cb:b9:99:a9:a7:70:0b:8a: e6:25:c1:dc:7a:83:e0:c9:17:51:c5:e0:6c:b7:27: e5:09:5b:ba:a0:ad:3d:c7:c7:12:74:3d:07:df:88: 73:55:4c:1f:ce:39:ad:80:1e:0e:3d:80:96:bf:3e: 3d:f7:7e:2b:31:2f:a8:c4:b3:c4:a7:ee:6f:b8:c8: c8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:19:98:A4:17:1F:E8:BC:CE:EB:A5:6B:2E:0B:5F:7C:09:7E:1E:1B X509v3 Authority Key Identifier: keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:04:62:b9:ed:98:26:b5:14:4e:8b:22:13:18:2a:6c:7f:83: ea:84:62:06:dc:7e:76:bd:50:2d:92:d7:10:76:e2:66:24:c2: 33:68:d7:e7:2e:f2:a7:d9:d8:1d:48:90:4f:4b:a7:a5:06:b8: fe:a8:04:a9:34:69:e2:21:61:38:5c:80:45:9a:54:7b:40:42: 5b:29:a1:5e:6e:05:fa:84:a6:08:e0:95:a7:bb:3a:3c:79:21: 7a:6e:06:96:a9:71:e2:fc:55:00:6e:03:9b:69:4b:70:1a:ec: f6:82:8a:7f:32:f7:4c:dc:56:41:ae:3b:d1:65:e1:c9:0d:d5: 20:79:82:0b:fe:a6:97:cc:2d:8d:d9:7f:c0:34:26:82:8f:f3: 29:7d:09:76:fe:b1:6a:47:7b:5d:21:2f:7c:88:64:4b:4d:50: f0:5a:81:08:a1:98:5f:8e:43:71:4f:f7:da:81:d4:b0:b6:8b: af:19:73:8b:3e:ba:bb:82:9f:14:0e:cf:ee:41:d5:c6:6e:c6: 57:98:0a:f9:7e:04:a4:9f:2b:ad:9a:47:a9:12:a3:a3:0a:2e: 81:5f:8e:eb:23:6c:d6:2d:d5:03:51:55:01:6c:14:fc:87:0b: e7:b5:05:30:a7:53:a3:7e:0f:85:ee:5c:c8:89:c5:f3:3f:b9: 58:b6:69:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA5QzkxMTAvBgNVBAUTKDk3OTU4RkZGRTY5NkQ4MEM1NzYzNjUyNEE0NkUxODIz NDE3NkZCQzEwHhcNMjUwODEzMDA1MDI1WhcNMjUwODIwMDA1MDI1WjAYMRYwFAYD VQQDEw02ODliZTE1MS0xMDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArK7FtoD0K06bUfW+A+waxLstWcWOIL/B+Izq4Mzt2SWbtcs7zXpxhl3s5vzE CJC99yuLkGnQRlPn0ztgxVcI1Kegr0153IkU75DhXHH0ynZRz4D5IWkfP1LYrg+o Ig1Mch0DSM2dio0ChaSOtj9EBx21ScR3O6kGOICGvXl+3zekxAHJmv1Spi2A13QI INpFbn5RArrKEbZYBoNBYS1srfSH+O+exzDP90Hp8k/iunu0UMRz1aFbE4ZDy7mZ qadwC4rmJcHceoPgyRdRxeBstyflCVu6oK09x8cSdD0H34hzVUwfzjmtgB4OPYCW vz49934rMS+oxLPEp+5vuMjIewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAZmKQX H+i8zuulay4LX3wJfh4bMB8GA1UdIwQYMBaAFJeVj//mltgMV2NlJKRuGCNBdvvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDlDOS80NkQ3MkRFMjcz NjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJBeFhZMlVrcEc0WUkwRjIt OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w1V1BfLWFXMkF4WFkyVWtwRzRZSTBGMi04RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDlDOS80NkQ3MkRFMjczNjYxMUVDODk4MkJFMEFDNEY5QUUwMi9sNVdQXy1hVzJB eFhZMlVrcEc0WUkwRjItOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoBGK57ZgmtRROiyITGCpsf4PqhGIG3H52vVAtktcQduJmJMIzaNfn LvKn2dgdSJBPS6elBrj+qASpNGniIWE4XIBFmlR7QEJbKaFebgX6hKYI4JWnuzo8 eSF6bgaWqXHi/FUAbgObaUtwGuz2gop/MvdM3FZBrjvRZeHJDdUgeYIL/qaXzC2N 2X/ANCaCj/MpfQl2/rFqR3tdIS98iGRLTVDwWoEIoZhfjkNxT/fagdSwtouvGXOL Prq7gp8UDs/uQdXGbsZXmAr5fgSknyutmkepEqOjCi6BX47rI2zWLdUDUVUBbBT8 hwvntQUwp1Ojfg+F7lzIicXzP7lYtmlZ -----END CERTIFICATE-----Generated at Wed Aug 13 08:52:38 2025 by rpki-client