$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft File: loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft (raw, json) Hash identifier: 1oXy1osceMcaYiPei+midINNeF7NRg2TQNOl09MvYTA= Subject key identifier: 21:F0:93:6B:8D:F2:F1:95:B9:FD:D8:68:DA:5C:35:0E:07:10:7F:4B Authority key identifier: 96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 Certificate issuer: /CN=A91534B8/serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft Manifest number: 02B5 Signing time: Thu 07 Aug 2025 02:08:26 +0000 Manifest this update: Thu 07 Aug 2025 02:08:25 +0000 Manifest next update: Thu 14 Aug 2025 02:08:25 +0000 Files and hashes: 1: loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl (hash: JU830Gd2iD8IdvFoX26Bh/2OXTBiR5Ok7/mdzxR4iv0=) 2: E52CB968094711EDA5B20C0AC4F9AE02.roa (hash: +DAM4u0XWzGXzujdBmpBOJBuyDMu2NVi0XXcoENn480=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91534B8, serialNumber=96800573018C7C2FB5A0081E63C63F4DA4403CB6 Validity Not Before: Aug 7 02:08:25 2025 GMT Not After : Aug 14 02:08:25 2025 GMT Subject: CN=68940a9a-ba44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:71:18:55:d0:50:87:83:3a:77:7c:bc:86:0b: 9e:dd:25:62:4f:ad:bc:ad:f9:4d:4e:c6:86:8c:c3: ab:a7:1d:c5:e5:24:60:6a:c1:b9:f5:74:a6:3f:a7: 1f:c1:0a:60:5b:09:9f:62:39:85:6a:2b:e5:54:d4: 6f:5c:6a:94:11:f2:57:9f:30:1c:21:8e:b1:cc:77: 1b:fc:71:f0:75:af:b2:6d:7f:bd:50:7c:79:20:0d: 12:21:75:ae:9a:58:5e:f1:61:59:0c:aa:83:8c:48: 6f:1b:9a:7e:f8:cb:34:9d:c9:a7:d6:1d:17:0c:ad: 23:68:e9:3d:b6:44:67:2f:04:5f:a8:02:af:39:f5: 77:e1:96:c0:ca:aa:76:49:17:45:5f:bf:eb:e0:0d: c8:fe:78:64:46:f6:57:97:06:6a:ae:55:74:55:ff: 10:51:e3:92:3a:8c:2f:43:7a:3b:90:89:46:5b:0b: b8:be:db:69:a5:e8:54:bc:83:61:fe:d2:ff:99:38: 50:f9:3d:d5:b6:c5:13:99:e5:61:2d:b7:6c:0e:0a: df:77:44:fd:74:09:7e:4e:7d:42:6e:a4:f4:7c:00: 6a:1c:a5:75:48:4f:e4:d9:a2:ce:d1:12:2f:4c:8e: da:36:d2:25:ee:72:ca:3c:1e:7b:b0:fe:55:9f:bd: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F0:93:6B:8D:F2:F1:95:B9:FD:D8:68:DA:5C:35:0E:07:10:7F:4B X509v3 Authority Key Identifier: keyid:96:80:05:73:01:8C:7C:2F:B5:A0:08:1E:63:C6:3F:4D:A4:40:3C:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loAFcwGMfC-1oAgeY8Y_TaRAPLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/A86B375A094411ED8DD10971C4F9AE02/loAFcwGMfC-1oAgeY8Y_TaRAPLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b0:36:9a:80:45:84:68:92:5b:28:8d:c2:3b:14:7a:cd:0b: 64:87:97:cb:c8:c6:cb:8a:f2:39:64:ce:e4:19:93:3f:e1:60: d3:5d:1a:8d:26:3b:4c:62:88:40:77:44:91:5e:22:f5:3b:a1: 1e:f7:9a:e7:7c:2a:a7:9c:8e:54:c8:d6:40:5c:a1:c3:e3:42: b1:ba:bd:06:b3:97:7a:43:e9:6f:c7:d6:0e:eb:0d:d8:37:76: 97:3d:fd:db:e7:0c:15:c2:85:7f:5f:02:93:c4:16:cb:d2:01: cf:5b:f1:69:36:11:8f:48:95:58:57:f2:c9:60:44:38:01:15: a6:92:b9:04:34:fa:44:fe:7f:e1:19:40:23:dd:94:18:7e:08: 1b:f5:2a:51:df:12:09:99:07:f0:33:1b:e3:c6:ef:7b:cf:63: 67:8a:3c:28:b2:98:1d:d3:3e:8f:d1:d5:e9:d5:a0:15:cf:ea: 77:25:bf:f6:8f:9d:3f:07:ae:39:7e:a0:8c:e4:79:79:e4:43: 79:2e:f5:ef:1f:f0:c0:28:fa:dd:58:56:73:b3:c6:b3:08:93: 35:67:59:10:64:02:1e:ce:79:17:b3:b2:d9:de:b0:7d:a3:dc: 79:a8:65:b0:bb:af:7f:8a:90:8f:e9:a9:36:33:c6:e6:c0:98: 72:77:a3:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0QjgxMTAvBgNVBAUTKDk2ODAwNTczMDE4QzdDMkZCNUEwMDgxRTYzQzYzRjRE QTQ0MDNDQjYwHhcNMjUwODA3MDIwODI1WhcNMjUwODE0MDIwODI1WjAYMRYwFAYD VQQDEw02ODk0MGE5YS1iYTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3EYVdBQh4M6d3y8hgue3SViT628rflNTsaGjMOrpx3F5SRgasG59XSmP6cf wQpgWwmfYjmFaivlVNRvXGqUEfJXnzAcIY6xzHcb/HHwda+ybX+9UHx5IA0SIXWu mlhe8WFZDKqDjEhvG5p++Ms0ncmn1h0XDK0jaOk9tkRnLwRfqAKvOfV34ZbAyqp2 SRdFX7/r4A3I/nhkRvZXlwZqrlV0Vf8QUeOSOowvQ3o7kIlGWwu4vttppehUvINh /tL/mThQ+T3VtsUTmeVhLbdsDgrfd0T9dAl+Tn1CbqT0fABqHKV1SE/k2aLO0RIv TI7aNtIl7nLKPB57sP5Vn71OdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHwk2uN 8vGVuf3YaNpcNQ4HEH9LMB8GA1UdIwQYMBaAFJaABXMBjHwvtaAIHmPGP02kQDy2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC9BODZCMzc1QTA5 NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZDLTFvQWdlWThZX1RhUkFQ TFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvQUZjd0dNZkMtMW9BZ2VZOFlfVGFSQVBMWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzRCOC9BODZCMzc1QTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi9sb0FGY3dHTWZD LTFvQWdlWThZX1RhUkFQTFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0sDaagEWEaJJbKI3COxR6zQtkh5fLyMbLivI5ZM7kGZM/4WDTXRqN JjtMYohAd0SRXiL1O6Ee95rnfCqnnI5UyNZAXKHD40Kxur0Gs5d6Q+lvx9YO6w3Y N3aXPf3b5wwVwoV/XwKTxBbL0gHPW/FpNhGPSJVYV/LJYEQ4ARWmkrkENPpE/n/h GUAj3ZQYfggb9SpR3xIJmQfwMxvjxu97z2Nnijwospgd0z6P0dXp1aAVz+p3Jb/2 j50/B645fqCM5Hl55EN5LvXvH/DAKPrdWFZzs8azCJM1Z1kQZAIeznkXs7LZ3rB9 o9x5qGWwu69/ipCP6ak2M8bmwJhyd6OY -----END CERTIFICATE-----Generated at Fri Aug 8 00:39:42 2025 by rpki-client