$ rpki-client -vvf rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft File: lCeAdFXYAaHRECh75X8-hPYpDKA.mft (raw, json) Hash identifier: 2hX3Dpq7nh1sH+Cc9f1xSo0ypduro9DUVATzVWWMdi4= Subject key identifier: 0F:C0:D9:6A:1B:D1:86:FC:CB:49:94:FF:FC:D9:2F:7B:36:75:BA:79 Authority key identifier: 94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 Certificate issuer: /CN=A91D585E/serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft Manifest number: DE Signing time: Tue 05 Aug 2025 05:58:15 +0000 Manifest this update: Tue 05 Aug 2025 05:58:15 +0000 Manifest next update: Tue 12 Aug 2025 05:58:15 +0000 Files and hashes: 1: lCeAdFXYAaHRECh75X8-hPYpDKA.crl (hash: qMEKSZuGDB2isMdKBA/YAGDkezKPKXQGOkMKUTC4+5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D585E, serialNumber=9427807455D801A1D110287BE57F3E84F6290CA0 Validity Not Before: Aug 5 05:58:15 2025 GMT Not After : Aug 12 05:58:15 2025 GMT Subject: CN=68919d77-802c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:2f:5f:e9:46:30:24:37:b0:09:1a:2e:6a: 9d:94:82:8d:53:e6:e4:64:62:89:af:84:95:03:fa: 15:88:55:4c:ee:4c:84:fc:10:30:a6:41:d3:14:8e: 6f:3b:fd:de:a7:b4:f5:9c:12:63:93:0b:0e:0d:90: d0:eb:a2:88:61:90:1e:6a:ee:3f:51:14:ad:98:ea: cc:c7:ca:8d:55:02:c8:af:b8:7c:68:fe:a8:83:86: 16:a4:b2:36:6e:a0:bb:29:d8:7f:07:6d:ae:10:37: df:a9:bc:d2:62:43:07:91:2d:51:b1:56:9d:cc:9a: 9c:99:d8:8d:dd:31:70:07:f6:b2:56:ad:69:dc:37: a0:1c:d5:46:46:27:4f:c7:f9:62:90:af:3b:7d:c8: e1:0a:f4:93:fd:51:d2:27:05:48:1e:47:37:a1:92: 28:53:33:2d:38:76:9f:6f:68:03:a5:26:b2:cc:48: f8:aa:d2:ab:0c:ee:04:ea:94:53:88:d2:04:16:c8: a1:65:0f:cc:44:59:aa:b2:69:74:18:c5:6f:18:95: 7e:e5:ee:2b:5d:36:9c:2a:18:f3:7e:6b:6e:6b:57: 08:a6:dc:8f:d1:6d:67:3d:b7:40:3c:0e:24:89:0f: e5:79:17:ee:5c:4c:7c:1a:79:24:c1:d1:29:e7:33: 01:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C0:D9:6A:1B:D1:86:FC:CB:49:94:FF:FC:D9:2F:7B:36:75:BA:79 X509v3 Authority Key Identifier: keyid:94:27:80:74:55:D8:01:A1:D1:10:28:7B:E5:7F:3E:84:F6:29:0C:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCeAdFXYAaHRECh75X8-hPYpDKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D585E/4BDA74441E6C11EF9FE74877C4F9AE02/lCeAdFXYAaHRECh75X8-hPYpDKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:45:fd:75:52:92:5b:b6:48:f4:71:83:a8:f6:66:99:66:16: ff:8b:32:02:ad:44:93:79:e5:cb:aa:42:49:98:2a:47:dd:eb: 50:d8:9b:b9:39:88:03:f9:36:d4:46:92:00:74:54:b9:bb:ed: ef:b2:29:a6:da:35:d5:52:f7:12:20:1e:04:c8:df:0a:14:bc: 98:6c:04:2c:83:c6:0e:43:70:d8:1e:9f:1a:45:c3:49:89:e1: 91:a5:3b:6b:e7:2b:08:5f:65:f4:e4:b8:b6:9c:f5:e4:01:45: bc:e2:b0:63:e3:5d:5f:ce:51:71:48:eb:f8:cf:29:e9:d8:c1: 1d:e6:a0:6b:c4:b7:70:d5:f5:ec:e4:03:4d:6a:f0:d3:5b:24: 7d:49:2e:dc:6d:b1:68:2b:a2:34:36:9c:79:12:05:07:6d:c0: 14:0a:06:2f:b5:70:d4:81:fa:4c:68:02:3f:80:fa:2a:00:e0: 88:ef:7a:d2:c6:4c:6a:38:2a:13:cc:54:51:de:63:27:59:a3: b1:ad:93:74:18:3c:6a:63:e0:7f:68:87:03:14:cb:89:a4:ff: 8f:a4:1b:05:dd:5b:81:87:69:ba:80:97:78:3f:c0:46:12:e9: 34:37:0f:94:f5:b7:f6:12:18:5e:61:5c:1a:ab:f0:3d:60:61: 0d:0f:bc:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4NUUxMTAvBgNVBAUTKDk0Mjc4MDc0NTVEODAxQTFEMTEwMjg3QkU1N0YzRTg0 RjYyOTBDQTAwHhcNMjUwODA1MDU1ODE1WhcNMjUwODEyMDU1ODE1WjAYMRYwFAYD VQQDEw02ODkxOWQ3Ny04MDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEAvX+lGMCQ3sAkaLmqdlIKNU+bkZGKJr4SVA/oViFVM7kyE/BAwpkHTFI5v O/3ep7T1nBJjkwsODZDQ66KIYZAeau4/URStmOrMx8qNVQLIr7h8aP6og4YWpLI2 bqC7Kdh/B22uEDffqbzSYkMHkS1RsVadzJqcmdiN3TFwB/ayVq1p3DegHNVGRidP x/likK87fcjhCvST/VHSJwVIHkc3oZIoUzMtOHafb2gDpSayzEj4qtKrDO4E6pRT iNIEFsihZQ/MRFmqsml0GMVvGJV+5e4rXTacKhjzfmtua1cIptyP0W1nPbdAPA4k iQ/leRfuXEx8GnkkwdEp5zMB5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/A2Wob 0Yb8y0mU//zZL3s2dbp5MB8GA1UdIwQYMBaAFJQngHRV2AGh0RAoe+V/PoT2KQyg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTg1RS80QkRBNzQ0NDFF NkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFhSFJFQ2g3NVg4LWhQWXBE S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDZUFkRlhZQWFIUkVDaDc1WDgtaFBZcERLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTg1RS80QkRBNzQ0NDFFNkMxMUVGOUZFNzQ4NzdDNEY5QUUwMi9sQ2VBZEZYWUFh SFJFQ2g3NVg4LWhQWXBES0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaRf11UpJbtkj0cYOo9maZZhb/izICrUSTeeXLqkJJmCpH3etQ2Ju5 OYgD+TbURpIAdFS5u+3vsimm2jXVUvcSIB4EyN8KFLyYbAQsg8YOQ3DYHp8aRcNJ ieGRpTtr5ysIX2X05Li2nPXkAUW84rBj411fzlFxSOv4zynp2MEd5qBrxLdw1fXs 5ANNavDTWyR9SS7cbbFoK6I0Npx5EgUHbcAUCgYvtXDUgfpMaAI/gPoqAOCI73rS xkxqOCoTzFRR3mMnWaOxrZN0GDxqY+B/aIcDFMuJpP+PpBsF3VuBh2m6gJd4P8BG Euk0Nw+U9bf2EhheYVwaq/A9YGEND7wf -----END CERTIFICATE-----Generated at Tue Aug 5 23:05:41 2025 by rpki-client