$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft File: lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft (raw, json) Hash identifier: bXGrV2eQ/RKROXY4x5kOiRHPe+2NSlsU/rrJoLO7Hq8= Subject key identifier: F8:3E:64:ED:A9:20:F7:0D:0D:19:25:4A:A9:76:A2:B2:19:E9:E1:3F Authority key identifier: 94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 Certificate issuer: /CN=A91A3E3F/serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft Manifest number: 01FA Signing time: Thu 07 Aug 2025 02:55:55 +0000 Manifest this update: Thu 07 Aug 2025 02:55:54 +0000 Manifest next update: Thu 14 Aug 2025 02:55:54 +0000 Files and hashes: 1: lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl (hash: 3D1lNG4/vPEZzx6EfzoxQim6zECJzwT9sZKMCUXBAPM=) 2: 0DCBAC3863C111EE9A8AA77AC4F9AE02.roa (hash: inCWlFg4eyi3SZb4mhg7QgWhnaX3zI3I9iGqmhoauLc=) 3: 9ADB02A27F4E11EDB22F3582C4F9AE02.roa (hash: 9Oyy54xhiWuTllhGlORwlpgALp6JCiYOJTYLu9JoBj0=) 4: 5420A28C7F5211ED8A16EF81C4F9AE02.roa (hash: 5EKiWHDPeMiKNhe7uJ6GnZoz2bb2Ob3eC5qrY4BOvLk=) 5: 912586FA7F4F11ED96FDE369C4F9AE02.roa (hash: vg/uug9ogWENghuoz8JvK8TWhFT7WTN1jNAJcLX1AUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3E3F, serialNumber=943D3E10B8BBE138B47734554B69053110D45BE3 Validity Not Before: Aug 7 02:55:54 2025 GMT Not After : Aug 14 02:55:54 2025 GMT Subject: CN=689415bb-f6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ca:56:32:81:79:08:e9:aa:b3:7f:a3:b9:40: 38:12:bd:9b:6d:5f:eb:d7:e8:6a:2e:8c:33:24:6c: f8:10:87:63:6a:78:e8:68:a0:9e:dc:30:63:1f:12: 16:d7:4a:e8:44:1e:b3:86:c9:a6:ab:71:d7:c1:ff: d0:cd:0f:6e:63:c5:b8:28:62:ac:65:b9:4c:5f:31: 73:8a:86:b6:97:46:8d:b4:12:86:45:83:b3:0c:d4: 7e:cf:23:ac:69:f0:85:4f:ab:db:c3:82:04:da:25: af:08:a5:ba:37:44:bc:fb:fb:69:f9:4e:9f:c5:32: d7:9a:6d:a5:ce:6a:48:12:7a:4d:0d:81:bd:4a:76: ff:62:c7:8a:69:67:2c:d6:52:36:24:f0:7e:c4:be: 13:8c:c4:a4:42:fd:34:6b:a3:92:8b:0c:d2:d5:a1: 6d:ec:1a:47:a1:ba:cf:d6:3a:4c:5f:2e:ef:fb:8d: c1:b1:79:f6:f8:c2:f5:7f:c6:e4:9a:2e:2f:15:2d: 23:04:6d:74:41:e1:c1:01:e7:e4:5a:80:9c:02:0c: f7:56:7e:50:eb:4d:5b:41:d9:16:c8:b3:f1:56:c6: 4b:63:bb:ed:57:80:72:d9:0b:b4:26:1b:30:34:35: 91:9f:d0:a2:d5:6a:ff:ca:6f:58:75:0d:47:2c:b8: a0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3E:64:ED:A9:20:F7:0D:0D:19:25:4A:A9:76:A2:B2:19:E9:E1:3F X509v3 Authority Key Identifier: keyid:94:3D:3E:10:B8:BB:E1:38:B4:77:34:55:4B:69:05:31:10:D4:5B:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lD0-ELi74Ti0dzRVS2kFMRDUW-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3E3F/305EB8767CDB11EDAB844C19C4F9AE02/lD0-ELi74Ti0dzRVS2kFMRDUW-M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:36:67:b9:c2:b7:df:74:62:67:da:db:ac:dc:62:3d:82:d2: e2:9e:00:81:c2:3c:20:ec:fa:b0:af:7b:f7:c0:7e:11:3c:40: 9d:46:ee:ba:d2:06:ba:05:72:da:a8:d2:91:09:76:ee:17:bc: e1:4f:07:bb:58:09:8f:a6:98:4b:7c:b7:05:e0:e6:66:4b:33: 1f:11:dd:02:cf:1f:b3:30:3d:e7:90:5a:f9:da:e1:0a:8d:9d: f6:27:b8:2c:92:8f:83:c1:fa:5d:52:7b:c5:1c:9e:e0:ac:69: da:9c:8b:9a:94:3f:dd:29:fd:5c:31:7e:c1:a4:98:54:c7:c5: b4:1e:40:8e:d2:fd:50:b5:ac:83:84:34:86:76:41:f3:9b:01: a4:20:3e:58:0a:59:8d:df:b6:51:d1:9b:d6:e9:c8:7c:eb:5e: 7a:2f:2d:b4:0c:18:a9:66:d0:7d:f1:9c:06:de:44:52:02:f2: 32:35:e3:07:8f:aa:6f:b0:9f:61:58:ff:b6:26:0e:d9:0d:5a: 83:71:54:73:14:38:96:67:70:0d:bf:fa:18:9c:46:b9:29:40: 7c:b0:ad:a3:ec:f4:dc:a2:f6:f1:d7:f2:ac:d8:f9:39:ca:00: 9d:e2:02:52:dc:02:5b:dc:e3:72:70:70:a5:30:c3:ff:0b:f9: df:05:16:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNFM0YxMTAvBgNVBAUTKDk0M0QzRTEwQjhCQkUxMzhCNDc3MzQ1NTRCNjkwNTMx MTBENDVCRTMwHhcNMjUwODA3MDI1NTU0WhcNMjUwODE0MDI1NTU0WjAYMRYwFAYD VQQDEw02ODk0MTViYi1mNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxspWMoF5COmqs3+juUA4Er2bbV/r1+hqLowzJGz4EIdjanjoaKCe3DBjHxIW 10roRB6zhsmmq3HXwf/QzQ9uY8W4KGKsZblMXzFzioa2l0aNtBKGRYOzDNR+zyOs afCFT6vbw4IE2iWvCKW6N0S8+/tp+U6fxTLXmm2lzmpIEnpNDYG9Snb/YseKaWcs 1lI2JPB+xL4TjMSkQv00a6OSiwzS1aFt7BpHobrP1jpMXy7v+43BsXn2+ML1f8bk mi4vFS0jBG10QeHBAefkWoCcAgz3Vn5Q601bQdkWyLPxVsZLY7vtV4By2Qu0Jhsw NDWRn9Ci1Wr/ym9YdQ1HLLig7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPg+ZO2p IPcNDRklSql2orIZ6eE/MB8GA1UdIwQYMBaAFJQ9PhC4u+E4tHc0VUtpBTEQ1Fvj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0UzRi8zMDVFQjg3NjdD REIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRUaTBkelJWUzJrRk1SRFVX LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xEMC1FTGk3NFRpMGR6UlZTMmtGTVJEVVctTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0UzRi8zMDVFQjg3NjdDREIxMUVEQUI4NDRDMTlDNEY5QUUwMi9sRDAtRUxpNzRU aTBkelJWUzJrRk1SRFVXLU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQNme5wrffdGJn2tus3GI9gtLingCBwjwg7Pqwr3v3wH4RPECdRu66 0ga6BXLaqNKRCXbuF7zhTwe7WAmPpphLfLcF4OZmSzMfEd0Czx+zMD3nkFr52uEK jZ32J7gsko+DwfpdUnvFHJ7grGnanIualD/dKf1cMX7BpJhUx8W0HkCO0v1QtayD hDSGdkHzmwGkID5YClmN37ZR0ZvW6ch86156Ly20DBipZtB98ZwG3kRSAvIyNeMH j6pvsJ9hWP+2Jg7ZDVqDcVRzFDiWZ3ANv/oYnEa5KUB8sK2j7PTcovbx1/Ks2Pk5 ygCd4gJS3AJb3ONycHClMMP/C/nfBRZT -----END CERTIFICATE-----Generated at Sat Aug 9 01:05:02 2025 by rpki-client