$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft File: lAjp17bOuDTKkJAeRXhgEMBpwys.mft (raw, json) Hash identifier: 0GMmY8DQZ8yJSUvlHMOIjiLXvj5G0ANMDJu75RxkdqI= Subject key identifier: 26:8F:04:ED:5B:91:7D:A9:FC:5C:DD:72:1A:5D:CC:15:B1:56:F4:73 Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Certificate serial: 015C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft Manifest number: 0159 Signing time: Tue 05 Aug 2025 04:30:58 +0000 Manifest this update: Tue 05 Aug 2025 04:30:57 +0000 Manifest next update: Tue 12 Aug 2025 04:30:57 +0000 Files and hashes: 1: lAjp17bOuDTKkJAeRXhgEMBpwys.crl (hash: M4wC9/40ZqfkuXyLYph7Qe/KISjhSeJil27F5eXKmfk=) 2: 6015E82861B411EEBAA6AD59C4F9AE02.roa (hash: K2l/EtZxWeLVYqj5ycNq5EmQOfjL5aHh+ijS2CAjoJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 348 (0x15c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Validity Not Before: Aug 5 04:30:57 2025 GMT Not After : Aug 12 04:30:57 2025 GMT Subject: CN=68918901-4f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:77:d4:aa:0e:38:c5:a7:41:75:30:b3:da: a4:3d:92:cb:41:3b:2c:bc:7e:7e:c9:e2:41:cd:f2: 53:c5:3e:1a:3a:e9:ab:17:d0:4c:4a:3c:4f:d0:51: f2:60:6d:6c:bf:cf:6d:34:e9:e9:5b:85:ee:92:58: 98:4c:31:0c:a1:6a:a5:34:3f:0b:5d:c8:89:4f:20: fa:ae:12:80:f7:ba:2a:0a:9c:d3:71:d7:a4:6e:ee: 4e:0f:52:0a:6a:38:8d:f7:39:fb:2a:03:f1:b1:0e: 98:73:33:49:fc:0d:c3:03:ba:4e:69:d1:ca:57:56: 10:41:07:9d:d8:93:32:1a:41:88:8b:0b:c6:72:26: 57:c2:39:47:35:8e:57:75:85:d5:ac:77:98:b6:73: c6:9b:29:93:79:04:8d:fe:bf:27:25:a5:a2:89:25: 4d:0f:7f:8a:5a:76:d5:89:1a:1c:2f:e6:b3:61:6c: fe:10:e9:7e:a5:4f:bd:d5:01:18:e5:79:c7:6e:38: f1:00:73:31:58:fd:8e:77:07:22:43:b8:3e:a0:4f: e4:8d:3f:a8:41:86:90:17:67:eb:2b:6a:97:4b:6e: 3f:f4:20:51:9f:b0:d3:14:c8:44:bf:3d:b7:91:00: c4:da:a1:a2:f1:76:0c:72:31:47:fb:bc:84:3d:44: 74:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8F:04:ED:5B:91:7D:A9:FC:5C:DD:72:1A:5D:CC:15:B1:56:F4:73 X509v3 Authority Key Identifier: keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:52:f5:3a:75:a4:91:5e:b1:86:0c:fb:63:1f:b8:a4:60:70: 24:32:40:83:97:3f:17:a7:49:01:69:b3:78:0d:3a:f9:8b:ba: c7:b0:d7:63:d8:ec:43:27:5d:a9:27:8e:4c:31:5a:b8:c6:0d: e1:bd:7e:d4:ab:d2:41:e1:79:b8:6d:ea:e2:f6:6c:6b:77:91: 2e:f4:7f:33:3a:ac:e1:7f:2b:03:fd:c9:81:12:28:9c:5f:d6: 01:29:61:c8:44:86:6e:5b:c9:9c:ac:ab:87:d4:76:fe:dd:74: 52:bb:e1:ec:34:aa:59:08:b1:0c:3a:dd:9b:86:c4:a9:fb:ba: b7:6a:82:ed:34:12:90:3d:80:93:f8:89:84:07:3a:9a:a2:ef: aa:7e:be:77:2b:3d:23:a6:b2:94:82:f0:8c:4a:ac:45:68:26: 7e:f7:2d:e8:8d:65:1a:c9:a7:c3:36:90:df:ee:c6:0c:04:93: 87:0e:18:e3:23:57:c9:c7:fd:dc:14:e2:33:e1:57:3e:e9:17: 66:9c:c4:39:37:64:7e:6a:0d:5b:94:c0:3e:a5:06:58:0d:30: be:9d:f7:e7:cf:6c:70:8c:92:e5:2d:a8:8d:1a:fd:1d:f7:eb: ee:6b:d6:cb:1a:2c:0d:f0:d7:dc:f3:8b:26:36:e9:36:44:2e: 8e:7e:de:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw QzA2OUMzMkIwHhcNMjUwODA1MDQzMDU3WhcNMjUwODEyMDQzMDU3WjAYMRYwFAYD VQQDEw02ODkxODkwMS00Zjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAt31KoOOMWnQXUws9qkPZLLQTssvH5+yeJBzfJTxT4aOumrF9BMSjxP0FHy YG1sv89tNOnpW4XukliYTDEMoWqlND8LXciJTyD6rhKA97oqCpzTcdekbu5OD1IK ajiN9zn7KgPxsQ6YczNJ/A3DA7pOadHKV1YQQQed2JMyGkGIiwvGciZXwjlHNY5X dYXVrHeYtnPGmymTeQSN/r8nJaWiiSVND3+KWnbViRocL+azYWz+EOl+pU+91QEY 5XnHbjjxAHMxWP2OdwciQ7g+oE/kjT+oQYaQF2frK2qXS24/9CBRn7DTFMhEvz23 kQDE2qGi8XYMcjFH+7yEPUR0pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaPBO1b kX2p/FzdchpdzBWxVvRzMB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3 eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk0Qi8xMEFDQUIwQTYxQjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VE VEtrSkFlUlhoZ0VNQnB3eXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0UvU6daSRXrGGDPtjH7ikYHAkMkCDlz8Xp0kBabN4DTr5i7rHsNdj 2OxDJ12pJ45MMVq4xg3hvX7Uq9JB4Xm4beri9mxrd5Eu9H8zOqzhfysD/cmBEiic X9YBKWHIRIZuW8mcrKuH1Hb+3XRSu+HsNKpZCLEMOt2bhsSp+7q3aoLtNBKQPYCT +ImEBzqaou+qfr53Kz0jprKUgvCMSqxFaCZ+9y3ojWUayafDNpDf7sYMBJOHDhjj I1fJx/3cFOIz4Vc+6RdmnMQ5N2R+ag1blMA+pQZYDTC+nffnz2xwjJLlLaiNGv0d 9+vua9bLGiwN8Nfc84smNuk2RC6Oft5S -----END CERTIFICATE-----Generated at Thu Aug 7 03:59:23 2025 by rpki-client