$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft File: L2rfQq_RZAgOox4PO4M4vtbaHlk.mft (raw, json) Hash identifier: 3cqFwrxo5mAVm9TgTeJ1r6Ds9HI2lBjJDPoMoQitRkE= Subject key identifier: E9:7F:7A:42:4E:B8:E8:D6:18:12:B8:18:FF:49:12:0D:EF:CA:9E:79 Authority key identifier: 2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 Certificate issuer: /CN=A91E7164/serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Certificate serial: 09C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft Manifest number: 09BD Signing time: Fri 08 Aug 2025 20:19:05 +0000 Manifest this update: Fri 08 Aug 2025 20:19:05 +0000 Manifest next update: Fri 15 Aug 2025 20:19:05 +0000 Files and hashes: 1: L2rfQq_RZAgOox4PO4M4vtbaHlk.crl (hash: zKmH9sGFVQmTW7VPZg5kUvbw9f7J+4AmiHU1fkuM5j8=) 2: F3173EDC898C11EA97286262C4F9AE02.roa (hash: 1ZtsZNF5jFsKlAT00IrDzQyZHeqFH7iBf+N8uJoqrEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2499 (0x9c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7164, serialNumber=2F6ADF42AFD164080EA31E0F3B8338BED6DA1E59 Validity Not Before: Aug 8 20:19:05 2025 GMT Not After : Aug 15 20:19:05 2025 GMT Subject: CN=68965bb9-a787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:72:23:13:42:46:e2:92:37:35:13:bf:8a:6d: be:27:d6:41:d3:0c:c8:9a:ed:c6:51:1d:13:6f:20: 3b:80:1b:8a:08:ba:2d:44:c3:b3:23:2c:18:da:dc: 6a:6b:13:a3:99:04:41:55:e4:2b:3c:20:e3:7a:ff: d9:43:fb:6a:dd:41:b4:57:83:3d:bb:46:f3:73:08: 38:63:6f:1e:b0:df:4f:a5:71:af:af:dc:35:5d:e9: 5f:1a:62:83:94:2d:43:2c:51:ef:f0:9b:6f:2a:f1: d7:15:a3:96:93:78:58:63:b2:58:1f:c9:a4:eb:06: 8c:26:9d:17:34:b7:22:86:d7:3c:8d:af:61:62:8b: 02:fa:67:28:a3:a3:df:8d:3f:f9:16:29:97:78:41: 5b:87:52:d6:bf:6d:3f:17:11:92:60:62:b8:89:27: c1:44:2b:74:a7:0d:d9:5a:f3:d5:8e:9e:b4:88:82: 27:60:74:19:6c:54:8f:4b:6a:f1:b9:c8:0e:7d:f5: 81:43:a9:68:5d:a1:17:8b:f6:1b:c5:4a:ec:19:81: 98:bc:f0:dc:db:3f:b7:68:20:90:15:94:49:33:58: 3e:43:e8:7e:d5:84:d5:bd:97:8c:df:b8:f6:fb:9c: 2f:ff:19:98:38:5a:69:9d:b5:4f:13:08:d8:c7:7d: 55:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7F:7A:42:4E:B8:E8:D6:18:12:B8:18:FF:49:12:0D:EF:CA:9E:79 X509v3 Authority Key Identifier: keyid:2F:6A:DF:42:AF:D1:64:08:0E:A3:1E:0F:3B:83:38:BE:D6:DA:1E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2rfQq_RZAgOox4PO4M4vtbaHlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7164/228ABF74898B11EA92759A5CC4F9AE02/L2rfQq_RZAgOox4PO4M4vtbaHlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a5:ca:6c:91:37:49:3d:bb:3f:9f:ee:30:34:00:d1:27:25: 60:99:ae:fe:d0:ee:14:5a:4d:a1:92:6a:77:11:02:ef:ed:65: 46:30:c8:18:0f:b0:2e:76:da:25:1c:84:b2:e0:30:e5:ff:2b: 13:59:d5:b2:b3:f4:a6:01:46:9a:da:f3:59:4d:cd:06:43:65: e3:e6:d7:ca:e6:5c:3e:1c:57:27:96:3c:e3:71:fd:5d:a3:5c: 6d:df:58:23:46:6d:7b:a4:ba:3e:11:51:80:d7:53:ee:90:39: 7f:ae:b9:59:1d:4c:8b:10:e2:56:36:37:ff:c3:14:e1:8a:2f: 20:78:a3:83:5b:21:5d:0b:3b:08:45:69:e4:b3:24:41:3b:80: b3:78:cc:ab:60:7b:26:f3:10:73:88:4f:8a:de:ac:28:85:81: 6f:83:5f:a0:20:d5:2b:cd:6d:0e:ef:cc:8d:c0:49:8a:01:2f: 63:70:98:61:68:12:7c:0a:91:f6:e6:ef:bf:5e:54:d3:c7:32: 44:8c:71:5b:4e:38:af:5f:36:d6:ec:c7:74:56:3d:33:f9:d4: d9:4d:73:94:7d:a8:31:6a:5e:31:6f:ff:36:70:3f:79:c7:ce: 22:ff:28:4d:de:78:5b:49:ee:ea:88:67:53:22:ed:38:e0:4f: 21:14:a2:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcxNjQxMTAvBgNVBAUTKDJGNkFERjQyQUZEMTY0MDgwRUEzMUUwRjNCODMzOEJF RDZEQTFFNTkwHhcNMjUwODA4MjAxOTA1WhcNMjUwODE1MjAxOTA1WjAYMRYwFAYD VQQDEw02ODk2NWJiOS1hNzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunIjE0JG4pI3NRO/im2+J9ZB0wzImu3GUR0TbyA7gBuKCLotRMOzIywY2txq axOjmQRBVeQrPCDjev/ZQ/tq3UG0V4M9u0bzcwg4Y28esN9PpXGvr9w1XelfGmKD lC1DLFHv8JtvKvHXFaOWk3hYY7JYH8mk6waMJp0XNLcihtc8ja9hYosC+mcoo6Pf jT/5FimXeEFbh1LWv20/FxGSYGK4iSfBRCt0pw3ZWvPVjp60iIInYHQZbFSPS2rx ucgOffWBQ6loXaEXi/YbxUrsGYGYvPDc2z+3aCCQFZRJM1g+Q+h+1YTVvZeM37j2 +5wv/xmYOFppnbVPEwjYx31VvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOl/ekJO uOjWGBK4GP9JEg3vyp55MB8GA1UdIwQYMBaAFC9q30Kv0WQIDqMeDzuDOL7W2h5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzE2NC8yMjhBQkY3NDg5 OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpBZ09veDRQTzRNNHZ0YmFI bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wycmZRcV9SWkFnT294NFBPNE00dnRiYUhsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzE2NC8yMjhBQkY3NDg5OEIxMUVBOTI3NTlBNUNDNEY5QUUwMi9MMnJmUXFfUlpB Z09veDRQTzRNNHZ0YmFIbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClpcpskTdJPbs/n+4wNADRJyVgma7+0O4UWk2hkmp3EQLv7WVGMMgY D7AudtolHISy4DDl/ysTWdWys/SmAUaa2vNZTc0GQ2Xj5tfK5lw+HFcnljzjcf1d o1xt31gjRm17pLo+EVGA11PukDl/rrlZHUyLEOJWNjf/wxThii8geKODWyFdCzsI RWnksyRBO4CzeMyrYHsm8xBziE+K3qwohYFvg1+gINUrzW0O78yNwEmKAS9jcJhh aBJ8CpH25u+/XlTTxzJEjHFbTjivXzbW7Md0Vj0z+dTZTXOUfagxal4xb/82cD95 x84i/yhN3nhbSe7qiGdTIu044E8hFKJP -----END CERTIFICATE-----Generated at Sun Aug 10 04:48:11 2025 by rpki-client