$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: KlH2UCtW6ix+OeUpWwgOkkMjB3su7J7UcdkCKSoE3AI= Subject key identifier: 9C:55:2A:AF:FA:2E:24:19:4F:A6:1E:FD:77:84:03:72:B2:FF:C8:47 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 042E Signing time: Sat 09 Aug 2025 00:49:47 +0000 Manifest this update: Sat 09 Aug 2025 00:49:47 +0000 Manifest next update: Sat 16 Aug 2025 00:49:47 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: xvcRjSYJZgAJlLPLoozZk1k33pthnerkcWzrs04X628=) 2: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: iXt8wY4xDmSntkF4mr4ren6r7L4k9/tTpksHGcZedNM=) 3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: OtRC1FOzJ2VnQ1iDT/pgw77NVRkDqW1cgJOs0qquLx8=) 4: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: z9il2KLvmM35CEJ33D6dQT01IjqffT1KfUHR8PJEmYw=) 5: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: rDIkGkc5RWLLbbHLbXvxxPcvgv9UCQJUW3VRbKAdmkE=) 6: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: vJqrrt0bxSwZaP1IHOgSaljOyb8CxyRpUsYkTfCzlUg=) 7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: D86sbiTviOSy/5MbuHJAROiiKuXxKjWRrOsJTtvytBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: Aug 9 00:49:47 2025 GMT Not After : Aug 16 00:49:47 2025 GMT Subject: CN=68969b2b-5022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b8:3a:78:1d:35:2a:ec:4b:4a:25:30:ad:b0: 45:f4:ec:d5:4a:c3:78:c1:6a:92:a1:f4:9c:ba:78: 08:d7:6b:fb:2c:19:80:40:9b:0c:2b:cf:d4:ee:c5: 9e:28:84:60:05:95:4f:da:23:fd:6c:3d:ae:88:59: 2e:82:54:73:db:86:4a:14:88:be:fa:ef:6c:ed:e4: 3c:00:e2:dc:f1:b2:ac:b7:57:bd:22:cf:93:8c:b6: 3f:5e:0e:27:6d:7c:10:1c:0c:a1:cb:d0:6a:97:c7: ca:bc:05:08:60:fc:fa:f7:e5:af:a6:a9:09:b8:f5: 88:52:65:6c:61:fb:31:c7:c5:ef:b5:5e:b3:0b:25: 7f:91:31:57:60:15:05:49:e1:56:b9:36:97:8e:47: c1:71:b9:09:1d:0b:9d:85:b2:d9:89:10:3b:25:52: f0:55:57:ee:b9:4b:a4:0b:7f:57:b6:88:0e:10:c5: 1b:f1:d8:83:5e:4f:d4:63:15:d2:ca:f9:a5:cb:48: af:28:27:9f:85:58:31:14:d2:86:7d:f1:8a:7e:aa: 7b:3b:88:e4:4d:85:af:ab:32:de:cc:23:b0:54:99: 89:f7:1a:81:56:bd:7d:16:59:f0:12:ea:c9:7d:79: f7:f1:0e:c1:51:49:78:6f:3d:25:5f:53:bd:86:42: d9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:55:2A:AF:FA:2E:24:19:4F:A6:1E:FD:77:84:03:72:B2:FF:C8:47 X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:62:3b:84:e2:8b:d2:fb:50:35:e6:65:ed:24:cf:f7:14:08: b9:64:99:bd:a7:7c:c9:0d:de:6e:5c:35:ef:23:ec:8f:46:48: 63:96:06:46:05:2e:dd:a7:e3:17:0a:36:d3:80:2c:c4:56:02: cf:40:76:9d:44:16:91:4f:a0:12:49:79:40:e5:1e:c6:61:be: ab:ea:36:cd:86:31:ab:aa:5c:79:59:54:71:b9:03:69:33:5b: 59:07:20:0c:b2:6c:c4:c8:74:0d:86:dd:f0:b0:6f:6a:a4:d6: a1:5c:dc:c3:21:fd:70:3a:70:08:5d:b8:9a:d6:87:a6:9a:15: d0:b6:1d:9c:fb:ab:68:7f:3b:53:15:d5:b3:99:6c:a4:a5:c9: 57:b9:d9:cf:03:8e:06:f5:6e:0f:d0:6a:d1:4d:db:02:7f:03: b5:3e:37:11:04:84:04:5e:1b:95:3e:c1:68:6d:af:10:6a:e1: d5:a0:40:c2:ee:23:eb:72:c0:1a:b7:93:66:8a:7d:34:8f:c1: e8:f7:1f:c1:d0:de:ac:c8:20:1e:86:94:fc:53:5b:c2:38:1c: f8:8c:c0:09:31:77:9a:a6:bc:14:5c:9d:f2:b3:32:83:98:e5: 8e:ee:e0:97:fb:d5:bb:2b:15:ad:de:39:e6:3e:d6:cf:ee:8b: f7:e4:6a:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjUwODA5MDA0OTQ3WhcNMjUwODE2MDA0OTQ3WjAYMRYwFAYD VQQDEw02ODk2OWIyYi01MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87g6eB01KuxLSiUwrbBF9OzVSsN4wWqSofScungI12v7LBmAQJsMK8/U7sWe KIRgBZVP2iP9bD2uiFkuglRz24ZKFIi++u9s7eQ8AOLc8bKst1e9Is+TjLY/Xg4n bXwQHAyhy9Bql8fKvAUIYPz69+WvpqkJuPWIUmVsYfsxx8XvtV6zCyV/kTFXYBUF SeFWuTaXjkfBcbkJHQudhbLZiRA7JVLwVVfuuUukC39XtogOEMUb8diDXk/UYxXS yvmly0ivKCefhVgxFNKGffGKfqp7O4jkTYWvqzLezCOwVJmJ9xqBVr19FlnwEurJ fXn38Q7BUUl4bz0lX1O9hkLZbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxVKq/6 LiQZT6Ye/XeEA3Ky/8hHMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgYjuE4ovS+1A15mXtJM/3FAi5ZJm9p3zJDd5uXDXvI+yPRkhjlgZG BS7dp+MXCjbTgCzEVgLPQHadRBaRT6ASSXlA5R7GYb6r6jbNhjGrqlx5WVRxuQNp M1tZByAMsmzEyHQNht3wsG9qpNahXNzDIf1wOnAIXbia1oemmhXQth2c+6tofztT FdWzmWykpclXudnPA44G9W4P0GrRTdsCfwO1PjcRBIQEXhuVPsFoba8QauHVoEDC 7iPrcsAat5Nmin00j8Ho9x/B0N6syCAehpT8U1vCOBz4jMAJMXeaprwUXJ3yszKD mOWO7uCX+9W7KxWt3jnmPtbP7ov35Gqo -----END CERTIFICATE-----Generated at Sat Aug 9 10:48:51 2025 by rpki-client