$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: TeAGsJlF/rIw/zugMqfdPMBQNv5UtXe4NN/7NGbK2nE= Subject key identifier: A8:77:A7:19:90:A1:20:E1:3F:D8:55:9C:4C:2B:22:C9:00:7E:6C:6A Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 03FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 03F5 Signing time: Thu 19 Jun 2025 00:18:36 +0000 Manifest this update: Thu 19 Jun 2025 00:18:35 +0000 Manifest next update: Thu 26 Jun 2025 00:18:35 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: Z1cdGUGfR+RwtPDiSaUShgSMvGMMss4TH+CDuY0dKBs=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1018 (0x3fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: Jun 19 00:18:35 2025 GMT Not After : Jun 26 00:18:35 2025 GMT Subject: CN=6853575c-f770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fb:81:a7:c6:af:9b:b3:6c:b3:73:8b:69:f7: 9e:9c:66:c8:6b:b8:d5:94:43:bd:5d:97:f6:3a:2b: 70:71:f0:31:4c:5c:9b:0c:5d:cb:fd:e6:5d:9e:01: 56:f6:2b:6c:0f:65:dc:43:3e:1c:a8:b1:64:f6:67: 40:06:7a:6a:cf:cb:3b:5c:1e:eb:fd:f2:f5:44:fd: 56:a3:92:bf:61:2f:b0:e7:0b:e6:22:32:d2:b8:0a: 7e:a9:94:7c:4f:a1:3c:19:a3:c7:b3:eb:e3:47:45: 65:b1:7a:26:9a:84:1b:15:5a:f8:ce:7d:c7:37:2d: 6e:2c:1c:d1:78:1d:cf:68:b8:97:0b:a3:64:4c:4b: 7b:a0:19:12:bd:fb:a5:3d:87:32:9f:7b:87:7c:50: b0:f3:f0:05:ef:e5:c6:a9:29:19:db:08:3a:e5:44: 8a:18:8b:e8:7d:d2:d7:87:55:08:8f:fc:79:7a:c0: b4:78:70:a5:b9:6f:ab:90:6d:e6:0c:64:a8:41:3c: e3:cd:e2:8c:8f:5d:31:16:71:4e:a3:a0:15:2e:97: 15:5e:b4:f1:a8:39:ea:1e:89:be:a7:09:50:51:45: e0:d9:10:65:37:c6:b7:77:07:e3:13:39:de:c2:8d: f9:30:89:63:bd:5c:22:39:a6:9f:ce:05:7e:bd:b7: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:77:A7:19:90:A1:20:E1:3F:D8:55:9C:4C:2B:22:C9:00:7E:6C:6A X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ce:bf:10:f4:f0:79:7c:28:b5:5b:9e:b4:9a:6e:50:60:fb: 41:8a:3a:b9:ab:be:f6:c9:3e:99:97:e8:fd:b0:f1:52:94:a5: d3:34:78:75:63:57:64:07:1c:b8:e4:90:bc:bb:f3:07:b8:9b: 68:1a:fe:6d:27:92:4e:64:16:5f:d2:71:1d:48:2c:34:f9:80: 9a:dc:da:6e:fb:40:49:97:2b:d8:95:3e:d0:96:c8:e6:33:73: 83:44:08:e6:9d:d8:cb:cd:ff:21:d7:9c:dc:6e:99:e8:07:b9: a9:d3:3d:65:c6:6b:77:6e:e3:f7:c2:04:33:26:5a:f2:f2:e6: 38:a5:7a:7f:9a:d0:9b:8b:6f:f3:94:9f:bd:c8:1e:54:c4:10: 7c:6c:a0:4f:66:fb:39:22:62:93:18:6e:b6:f0:f4:84:cf:b2: 92:b7:67:86:7e:f7:36:4e:a9:44:b7:61:1e:f7:84:87:d8:12: ba:67:25:da:ee:4d:9e:03:f1:07:a1:1e:c7:f7:81:c8:4f:a0: ce:0f:fc:1e:aa:be:6d:13:c0:bb:23:cd:f8:01:32:a2:a8:4b: c8:1d:f8:d3:7e:0f:ab:2f:f2:0f:05:33:ce:ac:98:6b:06:c9: ef:11:a4:6b:aa:40:50:b8:b9:d2:88:29:f1:e1:a5:9f:c2:ce: 43:32:4d:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjUwNjE5MDAxODM1WhcNMjUwNjI2MDAxODM1WjAYMRYwFAYD VQQDEw02ODUzNTc1Yy1mNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPuBp8avm7Nss3OLafeenGbIa7jVlEO9XZf2OitwcfAxTFybDF3L/eZdngFW 9itsD2XcQz4cqLFk9mdABnpqz8s7XB7r/fL1RP1Wo5K/YS+w5wvmIjLSuAp+qZR8 T6E8GaPHs+vjR0VlsXommoQbFVr4zn3HNy1uLBzReB3PaLiXC6NkTEt7oBkSvful PYcyn3uHfFCw8/AF7+XGqSkZ2wg65USKGIvofdLXh1UIj/x5esC0eHCluW+rkG3m DGSoQTzjzeKMj10xFnFOo6AVLpcVXrTxqDnqHom+pwlQUUXg2RBlN8a3dwfjEzne wo35MIljvVwiOaafzgV+vbeVhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKh3pxmQ oSDhP9hVnEwrIskAfmxqMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAszr8Q9PB5fCi1W560mm5QYPtBijq5q772yT6Zl+j9sPFSlKXTNHh1 Y1dkBxy45JC8u/MHuJtoGv5tJ5JOZBZf0nEdSCw0+YCa3Npu+0BJlyvYlT7Qlsjm M3ODRAjmndjLzf8h15zcbpnoB7mp0z1lxmt3buP3wgQzJlry8uY4pXp/mtCbi2/z lJ+9yB5UxBB8bKBPZvs5ImKTGG628PSEz7KSt2eGfvc2TqlEt2Ee94SH2BK6ZyXa 7k2eA/EHoR7H94HIT6DOD/weqr5tE8C7I834ATKiqEvIHfjTfg+rL/IPBTPOrJhr BsnvEaRrqkBQuLnSiCnx4aWfws5DMk29 -----END CERTIFICATE-----Generated at Thu Jun 19 19:20:47 2025 by rpki-client