$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft File: 1lqpVdfmLHHFqyu3GgydwnKqlGU.mft (raw, json) Hash identifier: xlS0H7bHmOaHEkKcuJeywb5FcyJyiNyP8Kq+jrHFH+A= Subject key identifier: C7:71:E6:08:BC:F7:16:2E:E9:8A:F8:5B:C6:B4:FE:7B:AC:4D:7D:A0 Authority key identifier: D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 Certificate issuer: /CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft Manifest number: 017E Signing time: Tue 05 Aug 2025 04:06:31 +0000 Manifest this update: Tue 05 Aug 2025 04:06:31 +0000 Manifest next update: Tue 12 Aug 2025 04:06:31 +0000 Files and hashes: 1: 1lqpVdfmLHHFqyu3GgydwnKqlGU.crl (hash: l0DEGvEbOki88NBGs94qgl4NnlBcH83d5oP5yBYadyE=) 2: AE8AEA702C3111EE94A5056FC4F9AE02.roa (hash: DhIch+RxWIpV0kjM6MCCA7OP7UDRbGyuOsypw/t/DWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6A5, serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Validity Not Before: Aug 5 04:06:31 2025 GMT Not After : Aug 12 04:06:31 2025 GMT Subject: CN=68918347-bb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:76:b8:c6:c0:41:0a:cd:4d:a3:f1:3c:fe: 5b:9a:99:01:1b:49:af:19:6f:ec:15:90:9d:90:1e: 86:79:4f:15:db:9f:2b:44:44:20:a3:9d:02:b8:44: 56:11:61:19:8f:2e:39:dd:4a:dc:c8:66:bb:fe:49: 8b:a6:67:9b:b1:03:6c:ff:40:59:d8:63:a5:c6:a9: 89:34:ec:03:8c:d5:fe:b7:a6:a8:c1:89:c7:0a:f2: d8:53:b9:5c:9f:7b:80:83:1f:48:ec:ce:c5:c0:04: 74:a3:41:dc:3d:c2:70:ec:f0:de:11:b4:05:f1:e6: 7c:a3:56:9a:eb:60:8d:c9:30:fe:b6:45:0d:2f:17: f0:f3:41:c4:27:49:c0:6e:a5:3b:0d:d3:3f:e4:29: ef:cd:27:08:f5:71:35:fd:fa:d5:d5:2b:80:25:84: 8e:e4:cb:6d:48:dc:7e:7b:90:7b:63:ce:a6:63:16: 92:00:1c:46:c0:d3:8c:0a:70:73:43:cc:68:dc:6b: 55:55:ea:32:7a:05:bf:7c:c7:78:1a:08:e6:33:08: fd:ee:8e:ca:b1:fe:a6:ac:6a:7e:f5:94:d1:f1:48: 20:c0:13:a9:91:f7:bf:39:b0:5f:88:9b:90:9d:76: 61:0c:d5:d1:89:ea:a3:c3:56:fa:5d:8a:87:23:5c: 6c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:71:E6:08:BC:F7:16:2E:E9:8A:F8:5B:C6:B4:FE:7B:AC:4D:7D:A0 X509v3 Authority Key Identifier: keyid:D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:58:d1:4c:a2:d2:cd:aa:0a:f3:7f:dc:e7:d3:fd:91:03:e7: 7a:34:3f:6b:18:d3:2e:89:57:79:df:4e:cd:eb:7a:04:34:7f: eb:dd:ca:44:5c:8d:97:82:74:fa:ac:bd:92:4d:bc:68:41:c3: af:e8:06:da:33:b1:80:a2:25:7e:e4:ba:63:5f:68:8e:9e:1a: b3:8f:b5:55:f6:ef:04:c1:90:cd:8e:72:84:c8:fd:f2:00:e2: 3f:65:08:77:54:b2:21:59:01:52:21:6e:8f:a5:89:86:05:cf: df:a7:8c:9c:b1:9f:b9:18:cc:60:9f:2a:60:40:87:f0:a1:ae: 72:39:a9:32:47:0c:36:60:a0:16:41:f7:d2:c0:28:15:8d:df: 19:e7:52:1e:22:18:f6:49:bb:33:0b:3c:52:c8:cd:ec:dc:63: 9f:02:4d:c0:3e:7c:a4:0b:4b:ef:75:96:35:9a:36:ec:4d:4c: 65:34:37:a6:15:e8:4a:a5:e3:bd:7e:6e:65:c2:ec:2f:0f:20: c0:49:c8:10:fd:62:c6:41:53:70:dd:4f:26:c0:cf:6e:ab:04: f6:39:b1:ac:f5:e5:38:2c:0f:7d:50:29:cd:27:c1:f1:78:53: 97:8b:1d:58:61:cf:7f:f8:33:f3:cf:67:bc:c8:24:c3:59:3d: 33:10:de:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QTUxMTAvBgNVBAUTKEQ2NUFBOTU1RDdFNjJDNzFDNUFCMkJCNzFBMEM5REMy NzJBQTk0NjUwHhcNMjUwODA1MDQwNjMxWhcNMjUwODEyMDQwNjMxWjAYMRYwFAYD VQQDEw02ODkxODM0Ny1iYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDR2uMbAQQrNTaPxPP5bmpkBG0mvGW/sFZCdkB6GeU8V258rREQgo50CuERW EWEZjy453UrcyGa7/kmLpmebsQNs/0BZ2GOlxqmJNOwDjNX+t6aowYnHCvLYU7lc n3uAgx9I7M7FwAR0o0HcPcJw7PDeEbQF8eZ8o1aa62CNyTD+tkUNLxfw80HEJ0nA bqU7DdM/5CnvzScI9XE1/frV1SuAJYSO5MttSNx+e5B7Y86mYxaSABxGwNOMCnBz Q8xo3GtVVeoyegW/fMd4GgjmMwj97o7Ksf6mrGp+9ZTR8UggwBOpkfe/ObBfiJuQ nXZhDNXRieqjw1b6XYqHI1xsQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdx5gi8 9xYu6Yr4W8a0/nusTX2gMB8GA1UdIwQYMBaAFNZaqVXX5ixxxasrtxoMncJyqpRl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBNS80QTkzRjY0MjJD MzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxISEZxeXUzR2d5ZHduS3Fs R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFscXBWZGZtTEhIRnF5dTNHZ3lkd25LcWxHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBNS80QTkzRjY0MjJDMzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxI SEZxeXUzR2d5ZHduS3FsR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbWNFMotLNqgrzf9zn0/2RA+d6ND9rGNMuiVd5307N63oENH/r3cpE XI2XgnT6rL2STbxoQcOv6AbaM7GAoiV+5LpjX2iOnhqzj7VV9u8EwZDNjnKEyP3y AOI/ZQh3VLIhWQFSIW6PpYmGBc/fp4ycsZ+5GMxgnypgQIfwoa5yOakyRww2YKAW QffSwCgVjd8Z51IeIhj2SbszCzxSyM3s3GOfAk3APnykC0vvdZY1mjbsTUxlNDem FehKpeO9fm5lwuwvDyDAScgQ/WLGQVNw3U8mwM9uqwT2ObGs9eU4LA99UCnNJ8Hx eFOXix1YYc9/+DPzz2e8yCTDWT0zEN4D -----END CERTIFICATE-----Generated at Wed Aug 6 16:25:45 2025 by rpki-client