$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: SoH1NvTGdO9mU9WV4NtFjTmgFpifNlbRRxxK2exaBLk= Subject key identifier: 74:84:F3:4C:B7:BA:F9:A4:41:FB:D4:37:FD:71:66:DD:83:40:59:60 Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 0414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 040F Signing time: Sat 09 Aug 2025 00:53:50 +0000 Manifest this update: Sat 09 Aug 2025 00:53:49 +0000 Manifest next update: Sat 16 Aug 2025 00:53:49 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: iYjNX9wLIuEvWaEl8xIKJ+RF6GONZi+Bx7s8B5fByoU=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1044 (0x414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: Aug 9 00:53:49 2025 GMT Not After : Aug 16 00:53:49 2025 GMT Subject: CN=68969c1d-9e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:24:57:3a:b3:61:0b:cb:f1:7c:02:57:e4:b7: 47:e3:cb:77:d2:59:91:8b:86:29:39:56:c0:f1:a0: 7a:50:88:55:0f:ba:5b:a7:82:47:61:7a:35:54:6e: d4:01:9e:7a:3b:71:d8:92:7c:94:f8:be:2c:cb:c0: 0b:32:e0:8e:75:78:75:be:0c:71:08:3f:24:16:09: 0c:6f:98:64:e6:ed:5e:5b:fd:f6:69:ec:21:9a:64: dc:bd:6f:e1:b1:0e:12:d0:ac:21:86:1a:f5:42:e6: a0:0a:54:34:d4:7e:89:80:25:e0:98:a6:aa:07:f6: a6:54:9a:c1:bb:48:b7:9c:d0:c1:b5:ae:83:4c:0d: c4:24:a5:04:d3:bc:80:a6:97:86:a9:34:f6:bb:6f: 64:4e:15:0c:80:ff:2b:46:02:52:a1:5f:be:1e:2b: 47:06:d7:a4:8f:a4:23:dd:1c:ef:ca:e7:65:87:44: be:a2:90:46:6c:c0:9f:d8:92:7a:34:69:db:37:5d: be:0f:31:32:d1:d5:3e:6f:0a:ba:10:5b:59:8c:ef: f4:f0:a5:8d:3b:9f:32:69:33:81:d5:71:70:c6:da: a9:8c:f1:cc:d2:c9:ea:ec:e8:8f:6a:2f:6b:73:82: 46:19:d7:0a:8e:36:35:3b:79:50:1e:be:8a:c2:89: 7b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:84:F3:4C:B7:BA:F9:A4:41:FB:D4:37:FD:71:66:DD:83:40:59:60 X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:6b:f5:a7:37:e9:ad:8c:d3:9a:cf:5b:d0:c6:28:55:02:b7: a5:13:6d:c1:7d:f8:29:52:72:52:7e:1f:dd:98:86:43:63:ea: 10:96:e3:b0:ff:ac:f9:ad:e5:a8:76:3b:5f:c0:6d:50:99:d0: 96:b9:b3:2d:cb:17:bb:f4:33:d9:cf:28:6d:3a:83:6c:9e:93: b9:2a:85:2b:aa:58:69:c3:a0:94:5f:df:92:95:de:9f:2c:02: 5e:ae:cd:e6:4c:f8:ec:97:58:22:e3:d3:8c:f0:8c:f0:8c:ab: 9b:a2:00:60:0a:2b:28:ca:ee:c2:34:7d:1b:9d:c0:3e:6e:7f: fd:86:01:c2:e8:e9:1e:bf:bd:67:1a:2a:88:a9:b1:5c:2b:52: c7:65:84:d0:49:75:ee:d2:a6:a5:32:27:e3:f0:97:e4:80:ef: ef:a0:22:8e:22:a4:8c:49:6c:b6:7e:eb:d9:12:e2:4d:27:0a: 8e:54:ff:46:1c:b6:4d:92:fa:40:e9:88:db:24:71:58:3d:7e: 73:ef:d4:d8:f1:71:a5:f7:e7:1f:aa:bd:71:42:85:50:0f:8f: 0f:7f:90:8e:1f:46:ef:1d:4e:57:30:74:9e:19:20:84:64:22: f7:10:5e:ae:47:ca:05:51:60:90:77:b0:87:6a:78:04:ed:48: 50:8d:b4:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjUwODA5MDA1MzQ5WhcNMjUwODE2MDA1MzQ5WjAYMRYwFAYD VQQDEw02ODk2OWMxZC05ZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSRXOrNhC8vxfAJX5LdH48t30lmRi4YpOVbA8aB6UIhVD7pbp4JHYXo1VG7U AZ56O3HYknyU+L4sy8ALMuCOdXh1vgxxCD8kFgkMb5hk5u1eW/32aewhmmTcvW/h sQ4S0Kwhhhr1QuagClQ01H6JgCXgmKaqB/amVJrBu0i3nNDBta6DTA3EJKUE07yA ppeGqTT2u29kThUMgP8rRgJSoV++HitHBtekj6Qj3Rzvyudlh0S+opBGbMCf2JJ6 NGnbN12+DzEy0dU+bwq6EFtZjO/08KWNO58yaTOB1XFwxtqpjPHM0snq7OiPai9r c4JGGdcKjjY1O3lQHr6Kwol7IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSE80y3 uvmkQfvUN/1xZt2DQFlgMB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDka/WnN+mtjNOaz1vQxihVArelE23BffgpUnJSfh/dmIZDY+oQluOw /6z5reWodjtfwG1QmdCWubMtyxe79DPZzyhtOoNsnpO5KoUrqlhpw6CUX9+Sld6f LAJers3mTPjsl1gi49OM8IzwjKubogBgCisoyu7CNH0bncA+bn/9hgHC6Okev71n GiqIqbFcK1LHZYTQSXXu0qalMifj8JfkgO/voCKOIqSMSWy2fuvZEuJNJwqOVP9G HLZNkvpA6YjbJHFYPX5z79TY8XGl9+cfqr1xQoVQD48Pf5COH0bvHU5XMHSeGSCE ZCL3EF6uR8oFUWCQd7CHangE7UhQjbQZ -----END CERTIFICATE-----Generated at Sat Aug 9 10:36:37 2025 by rpki-client