$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft File: L904BNZFjq8cs5F7XjMvulxxX5E.mft (raw, json) Hash identifier: 5r8J0Ndh6Ekm8Ryv9xXCu8EHOuflBajvSwo7HXJAHrw= Subject key identifier: CF:47:20:E3:C8:F4:98:94:85:07:49:FC:4B:90:F8:A9:28:41:68:7F Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91 Certificate issuer: /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft Manifest number: 3C Signing time: Thu 07 Aug 2025 08:10:08 +0000 Manifest this update: Thu 07 Aug 2025 08:10:07 +0000 Manifest next update: Thu 14 Aug 2025 08:10:07 +0000 Files and hashes: 1: L904BNZFjq8cs5F7XjMvulxxX5E.crl (hash: MMKlTwdrWaUEJgvHJ5j+eXaNnavIIV0Xnk/8pG2/xC0=) 2: DE917E7016C511F085B4FF6FC4F9AE02.roa (hash: gTUMCdfGUWrs1q6ayMOBwf36vGkRjWbK2xqTfFcnmzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91 Validity Not Before: Aug 7 08:10:07 2025 GMT Not After : Aug 14 08:10:07 2025 GMT Subject: CN=68945f5f-0ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ce:1c:62:b2:af:3d:c4:01:b2:35:68:ea:fc: 14:09:a8:0f:c3:45:19:33:c6:f6:44:94:ce:12:8c: c0:31:51:0e:36:bf:b2:d1:8c:7d:e7:4a:6c:78:67: 39:fa:34:85:12:7b:9e:bb:16:08:af:ed:5d:cb:c7: 8a:0e:87:db:29:c0:78:05:1d:97:26:e5:6a:22:0e: 1e:a6:37:4c:32:a7:06:f2:9b:c1:7b:de:cb:d4:93: 3c:42:98:bc:13:32:6a:b0:82:49:00:65:ee:70:67: 7d:a1:50:b4:24:74:e6:62:77:0f:00:bf:04:42:90: cc:33:f0:56:2d:3a:bd:bb:c2:0a:e5:f9:eb:fd:74: 9e:88:ab:58:1c:48:a7:de:61:21:2d:c4:33:57:f1: 85:61:62:25:9b:c2:52:49:40:5a:9a:06:ef:b1:ee: 39:5c:83:ff:4f:b3:5b:07:60:09:85:0d:41:98:d4: bc:9e:f3:60:37:50:35:3c:0c:fe:2f:e7:a7:c0:32: 09:52:37:df:21:c8:f2:71:ca:09:cc:b5:85:10:df: 56:98:0b:ef:39:48:1c:ce:7b:34:4f:21:2d:8b:88: dd:ca:bc:04:6f:e2:7d:5d:87:8e:0a:4b:9c:a9:85: 0a:aa:32:72:56:40:b3:63:67:d8:ea:59:db:74:73: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:47:20:E3:C8:F4:98:94:85:07:49:FC:4B:90:F8:A9:28:41:68:7F X509v3 Authority Key Identifier: keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a1:83:e1:bc:05:83:42:5a:bb:56:92:2f:e9:79:b9:da:b2: 5d:73:9c:9c:74:62:ef:f4:7f:df:ef:52:8b:b7:99:a2:5e:5f: 80:67:0f:c1:b3:c1:72:4d:e7:36:dc:7d:f8:a7:ec:18:79:9d: 64:ea:09:5c:1f:e7:4d:ea:8a:f6:7e:1a:7c:06:e4:bb:4a:82: 1c:6c:7d:0a:19:ff:6f:63:db:ff:d7:e8:8d:47:bb:69:d4:26: 33:e6:f5:21:c6:44:65:0a:59:95:c9:47:40:1b:03:42:e1:15: ac:7a:43:dc:74:40:62:1b:8b:4b:4e:57:3f:c3:ad:5b:79:c9: 55:28:96:bd:e8:af:f7:85:22:af:e7:de:df:60:ad:83:13:a7: da:3e:28:af:a3:a7:98:e7:ef:e8:b1:e6:e2:c7:1c:ec:5f:82: f1:e5:da:16:1e:4b:c8:f0:3a:c2:20:56:0b:12:96:b7:85:b8: e2:1c:f6:d2:b7:a6:d0:7e:c7:ca:8b:27:30:d4:37:be:cc:87: 9c:4d:f9:cd:c2:10:8e:23:6c:f4:bc:c8:0a:c1:f2:0c:0e:37: 42:1e:28:01:cf:8b:75:81:39:c4:2b:05:c3:01:97:e8:41:14: 3b:89:8a:d0:5d:a0:84:ad:b3:05:2e:2a:4f:c6:e6:fe:24:8b: 47:a2:99:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjU1MTExMC8GA1UEBRMoMkZERDM4MDRENjQ1OEVBRjFDQjM5MTdCNUUzMzJGQkE1 QzcxNUY5MTAeFw0yNTA4MDcwODEwMDdaFw0yNTA4MTQwODEwMDdaMBgxFjAUBgNV BAMTDTY4OTQ1ZjVmLTBlY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkzhxisq89xAGyNWjq/BQJqA/DRRkzxvZElM4SjMAxUQ42v7LRjH3nSmx4Zzn6 NIUSe567Fgiv7V3Lx4oOh9spwHgFHZcm5WoiDh6mN0wypwbym8F73svUkzxCmLwT MmqwgkkAZe5wZ32hULQkdOZidw8AvwRCkMwz8FYtOr27wgrl+ev9dJ6Iq1gcSKfe YSEtxDNX8YVhYiWbwlJJQFqaBu+x7jlcg/9Ps1sHYAmFDUGY1Lye82A3UDU8DP4v 56fAMglSN98hyPJxygnMtYUQ31aYC+85SBzOezRPIS2LiN3KvARv4n1dh44KS5yp hQqqMnJWQLNjZ9jqWdt0c6O9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz0cg48j0 mJSFB0n8S5D4qShBaH8wHwYDVR0jBBgwFoAUL904BNZFjq8cs5F7XjMvulxxX5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCNTUxLzVBQjE5MjAyMTZD NTExRjA4ODE1RjQ2RUM0RjlBRTAyL0w5MDRCTlpGanE4Y3M1RjdYak12dWx4eFg1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDkwNEJOWkZqcThjczVGN1hqTXZ1bHh4WDVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVC NTUxLzVBQjE5MjAyMTZDNTExRjA4ODE1RjQ2RUM0RjlBRTAyL0w5MDRCTlpGanE4 Y3M1RjdYak12dWx4eFg1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ2hg+G8BYNCWrtWki/pebnasl1znJx0Yu/0f9/vUou3maJeX4BnD8Gz wXJN5zbcffin7Bh5nWTqCVwf503qivZ+GnwG5LtKghxsfQoZ/29j2//X6I1Hu2nU JjPm9SHGRGUKWZXJR0AbA0LhFax6Q9x0QGIbi0tOVz/DrVt5yVUolr3or/eFIq/n 3t9grYMTp9o+KK+jp5jn7+ix5uLHHOxfgvHl2hYeS8jwOsIgVgsSlreFuOIc9tK3 ptB+x8qLJzDUN77Mh5xN+c3CEI4jbPS8yArB8gwON0IeKAHPi3WBOcQrBcMBl+hB FDuJitBdoIStswUuKk/G5v4ki0eimUs= -----END CERTIFICATE-----Generated at Fri Aug 8 12:56:09 2025 by rpki-client