$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json) Hash identifier: Wmu36j+JIWNmR2+n/u7cj8MeFmBSWjIGR6wc47a2Ha8= Subject key identifier: EB:DE:54:0E:67:82:81:FD:57:06:DF:0D:01:C0:1D:97:9E:66:AB:02 Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft Manifest number: 0489 Signing time: Thu 07 Aug 2025 00:33:15 +0000 Manifest this update: Thu 07 Aug 2025 00:33:14 +0000 Manifest next update: Thu 14 Aug 2025 00:33:14 +0000 Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: vNVbpDpb1ZcIWmsWc77tvNpvkMmN/9dnme1vBrx121Y=) 2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: dphkC3ssGJ+iIglODQswGH04mVygF6iWdjby9ZvopB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Validity Not Before: Aug 7 00:33:14 2025 GMT Not After : Aug 14 00:33:14 2025 GMT Subject: CN=6893f44a-781c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b9:5f:79:26:86:0b:cf:30:88:d5:18:c9:27: fd:f6:72:45:f8:3b:d3:41:e8:44:a7:51:9a:a7:b2: ee:5e:b9:06:3b:57:94:be:88:5e:fe:60:7d:09:44: 99:98:51:0d:fa:2f:de:c6:19:9e:6d:ec:04:c3:db: 84:f0:85:9b:c6:f3:d0:cb:5c:af:31:ce:69:4e:55: d0:d9:c1:f4:30:c4:88:23:6c:42:8a:54:50:27:a2: ad:f9:d6:b7:83:48:ea:a9:76:35:80:03:ea:d5:4b: 4a:b4:53:11:d6:40:25:8b:54:14:28:e2:47:8d:1f: 4e:a1:cb:90:2d:79:0f:6c:8a:ee:8d:66:cf:72:24: c0:14:d3:e7:4b:1d:5d:d3:40:f9:3f:12:f3:97:99: 55:cd:e9:fc:78:80:d4:0c:da:99:2b:69:5d:1a:9f: 37:4d:a8:f0:4f:19:a4:3e:66:c0:73:af:8a:b2:db: c3:17:c6:d3:8d:e0:d5:31:f3:bf:c5:b0:44:64:69: c1:88:b4:95:e9:c9:f3:c9:3d:5d:49:60:f0:ea:7e: 1f:80:cb:8e:cc:e6:09:9a:82:41:89:15:04:ff:12: 4c:06:09:b9:32:cd:b5:57:ac:e1:ad:96:57:a3:1d: 0c:6a:9d:59:2b:fa:4b:2c:47:d1:1c:49:bb:36:3c: db:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DE:54:0E:67:82:81:FD:57:06:DF:0D:01:C0:1D:97:9E:66:AB:02 X509v3 Authority Key Identifier: keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:e0:84:0e:45:ec:80:67:df:b9:af:af:0a:d7:81:54:18:54: 6b:59:f0:6f:6e:45:e1:50:76:75:59:71:a7:59:ea:ff:60:6e: 43:8f:8b:3d:8d:9e:b6:72:71:e9:0a:33:0e:32:0e:09:be:db: 90:a2:59:71:2f:44:a8:9a:51:00:3b:ed:9b:66:93:10:39:7f: eb:d8:c0:ed:bf:eb:ba:cf:f3:4b:6f:f4:82:19:36:fd:20:ef: 6f:fc:51:57:7a:40:1b:db:b1:ee:81:64:88:6d:50:3f:ab:55: ea:fe:09:bd:69:b3:cf:ba:e9:3b:ed:48:0c:72:32:e0:3c:5c: 30:31:f2:e1:ed:ac:db:b9:25:90:c5:13:fe:f7:94:fa:84:5f: 5e:cb:51:99:00:94:fd:27:49:af:58:66:26:50:be:1b:8e:30: e9:74:d0:38:a4:2a:a7:d4:fe:27:a3:38:7a:ff:6a:e8:0b:50: 81:6d:17:16:3c:cb:2c:fd:df:88:e7:82:fc:ea:3c:0f:55:fb: b5:18:01:b5:c6:ba:bf:b2:30:8b:ae:d9:ed:b3:0e:a5:b7:90: 3e:a1:f6:18:97:72:16:bf:05:ed:57:cb:0d:a9:c7:90:5f:18: 33:1a:9a:10:a4:14:a1:ef:fc:09:a8:19:61:e7:ee:a2:4d:63: 16:99:b0:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NUIxMTAvBgNVBAUTKDk1M0VDMkExQkU3MDI1OUU2QTJGRDlDRThENDgzQkQ5 QkQxQUUzM0YwHhcNMjUwODA3MDAzMzE0WhcNMjUwODE0MDAzMzE0WjAYMRYwFAYD VQQDEw02ODkzZjQ0YS03ODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9LlfeSaGC88wiNUYySf99nJF+DvTQehEp1Gap7LuXrkGO1eUvohe/mB9CUSZ mFEN+i/exhmebewEw9uE8IWbxvPQy1yvMc5pTlXQ2cH0MMSII2xCilRQJ6Kt+da3 g0jqqXY1gAPq1UtKtFMR1kAli1QUKOJHjR9OocuQLXkPbIrujWbPciTAFNPnSx1d 00D5PxLzl5lVzen8eIDUDNqZK2ldGp83TajwTxmkPmbAc6+KstvDF8bTjeDVMfO/ xbBEZGnBiLSV6cnzyT1dSWDw6n4fgMuOzOYJmoJBiRUE/xJMBgm5Ms21V6zhrZZX ox0Map1ZK/pLLEfRHEm7NjzbIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOveVA5n goH9VwbfDQHAHZeeZqsCMB8GA1UdIwQYMBaAFJU+wqG+cCWeai/Zzo1IO9m9GuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc1Qi80NEExM0I0RTRD MTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0paNXFMOW5PalVnNzJiMGE0 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUN0NvYjV3Slo1cUw5bk9qVWc3MmIwYTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc1Qi80NEExM0I0RTRDMTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0pa NXFMOW5PalVnNzJiMGE0ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT4IQOReyAZ9+5r68K14FUGFRrWfBvbkXhUHZ1WXGnWer/YG5Dj4s9 jZ62cnHpCjMOMg4JvtuQollxL0SomlEAO+2bZpMQOX/r2MDtv+u6z/NLb/SCGTb9 IO9v/FFXekAb27HugWSIbVA/q1Xq/gm9abPPuuk77UgMcjLgPFwwMfLh7azbuSWQ xRP+95T6hF9ey1GZAJT9J0mvWGYmUL4bjjDpdNA4pCqn1P4nozh6/2roC1CBbRcW PMss/d+I54L86jwPVfu1GAG1xrq/sjCLrtntsw6lt5A+ofYYl3IWvwXtV8sNqceQ XxgzGpoQpBSh7/wJqBlh5+6iTWMWmbBa -----END CERTIFICATE-----Generated at Fri Aug 8 20:52:11 2025 by rpki-client