$ rpki-client -vvf rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft File: ld96gQDZeVNoc6wP-Z9uRyhSupk.mft (raw, json) Hash identifier: et5MJt6YMh8kgG1fknLN3RPMu4MCBU3H3lgIdNheTe0= Subject key identifier: 0C:8F:21:10:45:2E:11:90:A9:DA:95:D0:E6:4E:5E:DF:FB:CF:DA:0C Authority key identifier: 95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 Certificate issuer: /CN=A91987D0/serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Certificate serial: 072D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft Manifest number: 0727 Signing time: Fri 08 Aug 2025 22:12:45 +0000 Manifest this update: Fri 08 Aug 2025 22:12:44 +0000 Manifest next update: Fri 15 Aug 2025 22:12:44 +0000 Files and hashes: 1: ld96gQDZeVNoc6wP-Z9uRyhSupk.crl (hash: xZFyaR6fGODaSMYsqXgqKZThLBmF4/8VJ3jsB7LCaFc=) 2: 02DAC07852C611ED845AB22BC4F9AE02.roa (hash: qvspaedVSxXhNT9OPfm4dmWtO2TlaRcmc3pC2Y/603Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1837 (0x72d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91987D0, serialNumber=95DF7A8100D979536873AC0FF99F6E472852BA99 Validity Not Before: Aug 8 22:12:44 2025 GMT Not After : Aug 15 22:12:44 2025 GMT Subject: CN=6896765d-d7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:75:79:10:f8:58:0d:b7:1e:78:4b:57:46:04: 32:91:68:0e:8b:25:4e:46:68:74:ab:61:57:87:3e: d1:47:8f:e0:63:53:77:c4:eb:e9:da:ab:e0:21:4e: 3e:85:c1:79:ed:57:e2:f1:00:bf:26:f7:1e:d4:90: 25:d1:c9:e4:04:31:44:fc:98:0a:39:09:0d:f6:89: 84:a1:d4:84:e0:3c:07:ea:d2:05:c0:ff:8b:17:fa: 1b:66:fc:0e:69:e2:38:5e:69:87:c7:7b:a1:47:e7: 17:a6:19:cd:fe:46:6d:8b:c1:b7:30:10:b5:c3:ef: 3b:37:d7:2e:a6:3e:e9:d4:f7:10:72:16:2a:4a:f9: ae:d8:c4:cf:be:16:e5:83:e5:3b:b3:8e:b6:53:97: 90:73:c2:48:7f:9c:bf:21:a5:22:70:08:1b:2c:f3: 58:0d:f0:e1:14:81:67:05:de:27:bd:ab:08:9d:60: a6:e4:30:22:74:8c:47:47:5f:84:34:a8:ce:42:96: 36:c2:df:61:b3:37:29:1a:24:e5:f3:16:25:40:05: d7:5c:dc:41:5b:f4:fb:41:c8:1c:b9:58:79:69:97: b7:73:5c:80:31:f0:91:dd:ea:78:54:14:85:29:1e: 1f:ee:d1:49:2c:bc:44:b2:d0:cb:56:f8:41:d2:e3: c3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8F:21:10:45:2E:11:90:A9:DA:95:D0:E6:4E:5E:DF:FB:CF:DA:0C X509v3 Authority Key Identifier: keyid:95:DF:7A:81:00:D9:79:53:68:73:AC:0F:F9:9F:6E:47:28:52:BA:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ld96gQDZeVNoc6wP-Z9uRyhSupk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91987D0/18EB075242BE11EBBC1FEC1FC4F9AE02/ld96gQDZeVNoc6wP-Z9uRyhSupk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c9:48:16:91:6e:cc:10:8e:96:a8:b4:5e:a7:ae:5c:12:c6: 66:f8:77:94:45:4b:72:fe:d8:26:41:64:21:18:92:19:29:e3: 78:81:c0:ee:2f:fc:10:0c:d3:08:3d:a4:73:73:2e:80:4b:6d: c7:e7:3b:59:93:d4:55:b7:27:b8:58:d8:30:b2:bb:26:5d:c3: 23:0a:40:bf:af:c1:14:af:ac:5c:a4:0d:41:25:d9:61:fa:f8: a8:8d:af:d8:64:97:66:88:25:06:17:62:76:55:bc:52:1a:27: 9d:08:35:cd:a4:e2:65:65:03:b2:67:4e:1d:22:74:99:0a:41: 59:30:9b:8d:71:bf:b3:17:31:e4:be:f0:2d:16:6f:d7:11:bb: 1e:19:8d:9e:1a:b2:02:85:44:1d:61:3a:51:00:ac:c4:3e:1c: c6:d0:55:27:98:56:9c:a5:b1:d6:3f:a5:ba:ef:64:96:a3:54: 19:40:be:9e:25:e8:f7:f1:a6:c5:05:82:54:7a:57:99:6c:40: 42:86:3a:fc:0c:99:9a:78:f9:09:71:27:4f:66:28:eb:f0:0f: 2a:98:c9:c3:0d:d7:2a:49:19:52:53:eb:28:ec:b8:d4:a6:15: a9:47:36:e7:6e:10:58:a0:9f:d2:b5:08:de:53:8d:d8:c3:38: b8:e4:cb:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg3RDAxMTAvBgNVBAUTKDk1REY3QTgxMDBEOTc5NTM2ODczQUMwRkY5OUY2RTQ3 Mjg1MkJBOTkwHhcNMjUwODA4MjIxMjQ0WhcNMjUwODE1MjIxMjQ0WjAYMRYwFAYD VQQDEw02ODk2NzY1ZC1kN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HV5EPhYDbceeEtXRgQykWgOiyVORmh0q2FXhz7RR4/gY1N3xOvp2qvgIU4+ hcF57Vfi8QC/Jvce1JAl0cnkBDFE/JgKOQkN9omEodSE4DwH6tIFwP+LF/obZvwO aeI4XmmHx3uhR+cXphnN/kZti8G3MBC1w+87N9cupj7p1PcQchYqSvmu2MTPvhbl g+U7s462U5eQc8JIf5y/IaUicAgbLPNYDfDhFIFnBd4nvasInWCm5DAidIxHR1+E NKjOQpY2wt9hszcpGiTl8xYlQAXXXNxBW/T7QcgcuVh5aZe3c1yAMfCR3ep4VBSF KR4f7tFJLLxEstDLVvhB0uPDhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyPIRBF LhGQqdqV0OZOXt/7z9oMMB8GA1UdIwQYMBaAFJXfeoEA2XlTaHOsD/mfbkcoUrqZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODdEMC8xOEVCMDc1MjQy QkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVWTm9jNndQLVo5dVJ5aFN1 cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xkOTZnUURaZVZOb2M2d1AtWjl1UnloU3Vway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODdEMC8xOEVCMDc1MjQyQkUxMUVCQkMxRkVDMUZDNEY5QUUwMi9sZDk2Z1FEWmVW Tm9jNndQLVo5dVJ5aFN1cGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfyUgWkW7MEI6WqLRep65cEsZm+HeURUty/tgmQWQhGJIZKeN4gcDu L/wQDNMIPaRzcy6AS23H5ztZk9RVtye4WNgwsrsmXcMjCkC/r8EUr6xcpA1BJdlh +vioja/YZJdmiCUGF2J2VbxSGiedCDXNpOJlZQOyZ04dInSZCkFZMJuNcb+zFzHk vvAtFm/XEbseGY2eGrIChUQdYTpRAKzEPhzG0FUnmFacpbHWP6W672SWo1QZQL6e Jej38abFBYJUeleZbEBChjr8DJmaePkJcSdPZijr8A8qmMnDDdcqSRlSU+so7LjU phWpRzbnbhBYoJ/StQjeU43Ywzi45Mt1 -----END CERTIFICATE-----Generated at Sat Aug 9 01:22:49 2025 by rpki-client