$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: 2Vbc6ShQGNro88MjwOsDlc7SxHcIoD5zlq9qt3F97uA= Subject key identifier: 1E:6B:28:53:DF:C0:9D:20:21:01:A0:5B:17:0B:61:FE:D8:0F:8D:28 Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 0166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 0162 Signing time: Mon 11 Aug 2025 04:07:26 +0000 Manifest this update: Mon 11 Aug 2025 04:07:26 +0000 Manifest next update: Mon 18 Aug 2025 04:07:25 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: +XghH9K+oNLWBmWc4TlM0Haiu/XQ/tL7hQQ9KozgnjQ=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 04:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 358 (0x166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: Aug 11 04:07:26 2025 GMT Not After : Aug 18 04:07:25 2025 GMT Subject: CN=68996c7e-3828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:09:05:8c:b6:1f:d8:23:bd:63:89:0f:7d: 4a:91:9b:b7:b7:e5:c1:aa:41:89:7e:d2:06:81:bd: 1a:87:81:ea:ea:1e:c5:40:45:71:a9:0e:51:73:56: 97:e6:58:09:a2:f6:51:3c:1e:c2:58:ca:dd:d7:67: ba:17:c5:98:f3:d1:23:b7:15:31:87:c9:90:69:a2: f8:74:60:bb:d9:93:84:27:ae:11:cb:13:cc:cb:59: 8c:bf:60:83:c3:b5:3d:cc:1f:c8:00:ad:ba:8c:45: 0c:bf:5f:2e:c7:6e:11:9b:9a:14:37:18:1b:a3:71: b8:f0:5d:44:20:d1:49:7f:bf:95:19:b8:9a:31:85: 08:a3:ab:d5:94:66:d9:78:75:52:f5:a9:16:09:48: dd:7d:96:c7:bd:1e:9e:00:7b:3b:5b:33:42:58:21: ad:f1:b5:43:8e:18:b2:a9:f3:27:20:ad:17:70:30: 64:1a:14:ca:9a:63:d6:fa:89:61:d6:02:08:78:78: 94:0b:2f:6f:75:7a:f3:42:3e:3d:60:b1:3b:b5:96: cb:08:9a:58:83:36:9c:52:f5:9a:b4:cd:2c:bc:7c: b8:33:fc:79:bd:97:1b:68:2a:54:e2:0a:f5:c7:f8: 09:0b:fa:38:98:63:3f:5e:9d:51:1e:45:61:4a:74: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6B:28:53:DF:C0:9D:20:21:01:A0:5B:17:0B:61:FE:D8:0F:8D:28 X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:89:20:2e:c6:50:55:a7:90:48:23:00:01:08:67:e2:c2:cf: f5:fe:ad:a0:5c:88:ec:db:ae:52:99:74:28:7f:ad:b1:ee:ba: 69:42:48:ab:61:dd:b1:2b:fc:b3:dc:50:6e:bc:9d:97:9e:38: 5e:03:0e:66:49:9b:47:7e:0f:17:71:13:9e:ae:7b:ac:95:54: 05:bc:98:48:61:c0:d4:5b:5b:d6:f5:fc:bb:f5:86:25:b4:94: 3b:70:25:9a:56:5e:9e:f4:ce:32:65:30:80:db:53:e1:42:3a: dc:22:1f:6a:01:a8:a3:93:56:cc:44:39:38:06:52:d7:3d:f0: df:b3:7c:dd:d5:4b:c8:79:1d:a5:15:1f:0d:fc:eb:b3:25:c6: 4d:f9:09:91:8b:29:0d:97:d8:47:64:d3:97:91:84:9e:4c:a2: fd:5e:0b:63:8f:62:39:82:04:1f:41:cf:7a:13:61:a3:99:53: 25:a8:5b:e9:cd:39:80:33:4e:3e:7d:73:67:b6:9a:72:31:a1: dc:38:94:81:ed:70:f3:cf:b8:17:2f:97:c7:cb:1f:27:96:ba: 95:f6:00:77:9e:4d:8c:e2:40:d9:5d:37:c0:a6:cc:a1:e1:36: 68:7d:b2:6d:0d:c0:4e:96:c5:9d:c4:7a:58:5d:29:28:2f:c3: 55:0e:66:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjUwODExMDQwNzI2WhcNMjUwODE4MDQwNzI1WjAYMRYwFAYD VQQDEw02ODk5NmM3ZS0zODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHoJBYy2H9gjvWOJD31KkZu3t+XBqkGJftIGgb0ah4Hq6h7FQEVxqQ5Rc1aX 5lgJovZRPB7CWMrd12e6F8WY89EjtxUxh8mQaaL4dGC72ZOEJ64RyxPMy1mMv2CD w7U9zB/IAK26jEUMv18ux24Rm5oUNxgbo3G48F1EINFJf7+VGbiaMYUIo6vVlGbZ eHVS9akWCUjdfZbHvR6eAHs7WzNCWCGt8bVDjhiyqfMnIK0XcDBkGhTKmmPW+olh 1gIIeHiUCy9vdXrzQj49YLE7tZbLCJpYgzacUvWatM0svHy4M/x5vZcbaCpU4gr1 x/gJC/o4mGM/Xp1RHkVhSnQzCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5rKFPf wJ0gIQGgWxcLYf7YD40oMB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCiSAuxlBVp5BIIwABCGfiws/1/q2gXIjs265SmXQof62x7rppQkir Yd2xK/yz3FBuvJ2XnjheAw5mSZtHfg8XcROernuslVQFvJhIYcDUW1vW9fy79YYl tJQ7cCWaVl6e9M4yZTCA21PhQjrcIh9qAaijk1bMRDk4BlLXPfDfs3zd1UvIeR2l FR8N/OuzJcZN+QmRiykNl9hHZNOXkYSeTKL9Xgtjj2I5ggQfQc96E2GjmVMlqFvp zTmAM04+fXNntppyMaHcOJSB7XDzz7gXL5fHyx8nlrqV9gB3nk2M4kDZXTfApsyh 4TZofbJtDcBOlsWdxHpYXSkoL8NVDmbl -----END CERTIFICATE-----Generated at Tue Aug 12 06:34:48 2025 by rpki-client