$ rpki-client -vvf rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft File: lRKAntQ1o2QK-bdfCvspKNQWPDE.mft (raw, json) Hash identifier: 5p52rrPiK9+VoJ+IYj+VAlLtCexlD9N+HPvJKfcMny8= Subject key identifier: 7A:15:62:82:AD:56:2E:5D:93:C1:A1:B7:6F:D7:94:EE:14:1E:49:01 Authority key identifier: 95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 Certificate issuer: /CN=A91B45C0/serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Certificate serial: 1211 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft Manifest number: 120D Signing time: Sat 02 Aug 2025 17:18:07 +0000 Manifest this update: Sat 02 Aug 2025 17:18:07 +0000 Manifest next update: Sat 09 Aug 2025 17:18:07 +0000 Files and hashes: 1: lRKAntQ1o2QK-bdfCvspKNQWPDE.crl (hash: AWrdssIOSh30U/rfR8Zqvvf7/uxEmIV59uHC9MF4elQ=) 2: 9995A38CFADC11EF87E86958C4F9AE02.roa (hash: K7HgxObw49ZENnGpFVCXkeOTW3f6OFaznJ55myfPQSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4625 (0x1211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B45C0, serialNumber=9512809ED435A3640AF9B75F0AFB2928D4163C31 Validity Not Before: Aug 2 17:18:07 2025 GMT Not After : Aug 9 17:18:07 2025 GMT Subject: CN=688e484f-5dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:95:e4:d5:2f:b5:0f:1b:96:39:e2:2e:7b:93: 53:6d:78:02:4d:42:01:44:a5:61:f6:5f:2d:69:2c: 2a:5b:ed:7c:21:b9:3f:14:5f:58:fa:b3:99:ef:28: 8e:51:ed:01:4b:b3:a6:28:96:c7:bb:7d:8b:28:e5: 0f:0f:d5:08:19:7c:83:05:ae:bb:c6:5d:15:2a:dd: c0:fb:e6:9a:70:73:8f:e8:09:d3:c5:4d:14:25:df: c1:43:7d:90:36:c0:22:1d:64:c3:a6:fe:6f:9e:3d: 4e:5e:c5:c0:6c:71:87:32:d1:72:97:6b:62:fe:2f: 9a:19:c1:3a:d2:5a:bc:b1:7d:09:14:ca:16:50:c4: 55:b5:69:e2:c1:fd:c4:90:7b:09:c9:63:95:3f:f0: a3:7c:d1:d8:a4:bf:85:e2:03:8a:ab:c4:27:7b:d8: ab:6f:f9:64:e0:13:d5:2f:38:9f:b0:44:d4:37:af: ff:90:16:8f:db:91:72:1c:26:37:ac:a3:c9:68:cd: c0:6a:6d:f7:2e:55:b5:61:40:24:81:6b:c5:d2:6a: e6:9e:04:85:d7:b7:e3:6a:d2:d8:0e:4f:06:67:55: f0:56:44:34:20:c7:6c:c3:8b:5f:cd:8b:b5:b6:64: bb:df:b2:99:da:7d:36:51:1f:37:22:63:b1:e0:3e: 36:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:15:62:82:AD:56:2E:5D:93:C1:A1:B7:6F:D7:94:EE:14:1E:49:01 X509v3 Authority Key Identifier: keyid:95:12:80:9E:D4:35:A3:64:0A:F9:B7:5F:0A:FB:29:28:D4:16:3C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKAntQ1o2QK-bdfCvspKNQWPDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B45C0/BDEE729AE6D911E88B8BF77CC4F9AE02/lRKAntQ1o2QK-bdfCvspKNQWPDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b7:47:e7:f9:18:ca:51:4d:2a:d1:bc:04:dc:14:ba:a8:64: 89:be:6c:56:17:c9:6a:a2:9f:0d:6d:c5:cd:b6:f8:dd:2b:0a: df:d6:c1:f8:3f:0a:62:53:41:cd:64:af:40:9e:68:f5:a6:c2: 80:ba:c2:28:27:08:9b:5f:aa:36:3b:98:a0:0f:dc:1e:29:bd: f3:52:3f:b1:73:ec:2e:c7:bb:16:85:dc:b2:da:a0:51:eb:c5: 1d:a3:84:49:fd:5c:9e:56:4c:ef:54:a6:13:e9:b2:45:ad:9d: 00:7a:23:3c:cb:e0:23:40:03:29:43:03:13:af:ad:51:b2:bc: 03:67:e0:c1:cb:07:93:32:2f:2e:fa:11:f4:58:a6:60:ff:30: 0b:dd:2c:f5:49:f9:b3:26:34:26:e5:fa:14:7f:fc:f4:25:de: 91:e4:3d:98:25:bb:a6:7a:d9:0a:4f:5e:27:47:c4:24:d5:63: 11:29:dc:10:d5:59:ae:db:7d:03:4b:8b:39:f5:15:ae:9b:fb: 4e:a7:98:88:13:1d:ad:0f:25:b7:b7:54:40:9a:6b:24:5d:91: 37:9c:cd:d6:be:9a:fd:bd:5b:d5:dd:c8:15:af:d1:c4:1f:64: d3:f6:28:bb:dc:55:7a:cf:c6:37:a0:0c:2e:8e:a7:e9:43:b4: 83:6c:72:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ1QzAxMTAvBgNVBAUTKDk1MTI4MDlFRDQzNUEzNjQwQUY5Qjc1RjBBRkIyOTI4 RDQxNjNDMzEwHhcNMjUwODAyMTcxODA3WhcNMjUwODA5MTcxODA3WjAYMRYwFAYD VQQDEw02ODhlNDg0Zi01ZGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZXk1S+1DxuWOeIue5NTbXgCTUIBRKVh9l8taSwqW+18Ibk/FF9Y+rOZ7yiO Ue0BS7OmKJbHu32LKOUPD9UIGXyDBa67xl0VKt3A++aacHOP6AnTxU0UJd/BQ32Q NsAiHWTDpv5vnj1OXsXAbHGHMtFyl2ti/i+aGcE60lq8sX0JFMoWUMRVtWniwf3E kHsJyWOVP/CjfNHYpL+F4gOKq8Qne9irb/lk4BPVLzifsETUN6//kBaP25FyHCY3 rKPJaM3Aam33LlW1YUAkgWvF0mrmngSF17fjatLYDk8GZ1XwVkQ0IMdsw4tfzYu1 tmS737KZ2n02UR83ImOx4D42WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoVYoKt Vi5dk8Ght2/XlO4UHkkBMB8GA1UdIwQYMBaAFJUSgJ7UNaNkCvm3Xwr7KSjUFjwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDVDMC9CREVFNzI5QUU2 RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8yUUstYmRmQ3ZzcEtOUVdQ REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0FudFExbzJRSy1iZGZDdnNwS05RV1BERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDVDMC9CREVFNzI5QUU2RDkxMUU4OEI4QkY3N0NDNEY5QUUwMi9sUktBbnRRMW8y UUstYmRmQ3ZzcEtOUVdQREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSt0fn+RjKUU0q0bwE3BS6qGSJvmxWF8lqop8NbcXNtvjdKwrf1sH4 PwpiU0HNZK9Anmj1psKAusIoJwibX6o2O5igD9weKb3zUj+xc+wux7sWhdyy2qBR 68Udo4RJ/VyeVkzvVKYT6bJFrZ0AeiM8y+AjQAMpQwMTr61RsrwDZ+DByweTMi8u +hH0WKZg/zAL3Sz1SfmzJjQm5foUf/z0Jd6R5D2YJbumetkKT14nR8Qk1WMRKdwQ 1Vmu230DS4s59RWum/tOp5iIEx2tDyW3t1RAmmskXZE3nM3Wvpr9vVvV3cgVr9HE H2TT9ii73FV6z8Y3oAwujqfpQ7SDbHLR -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:22 2025 by rpki-client