$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json) Hash identifier: UrnNNEwKjhx8TxFtU1WGkuDIKofXT+Ci9Ic2NF/8VFI= Subject key identifier: E1:AB:B4:15:A1:1F:45:02:6F:27:37:D9:6D:FF:37:50:1B:A3:21:25 Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft Manifest number: 52 Signing time: Tue 05 Aug 2025 07:54:45 +0000 Manifest this update: Tue 05 Aug 2025 07:54:44 +0000 Manifest next update: Tue 12 Aug 2025 07:54:44 +0000 Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: CN02HjHMk+Igc7qLo5LQ9wIRLj283vkkJfcbiYqPEyc=) 2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Validity Not Before: Aug 5 07:54:44 2025 GMT Not After : Aug 12 07:54:44 2025 GMT Subject: CN=6891b8c5-132d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:64:ee:03:ca:16:8a:53:66:a6:e8:bb:d9:e7: b2:2a:b9:e4:81:75:b6:27:e9:0b:d1:9b:7c:15:4e: f3:78:8b:4f:f5:2b:67:38:53:b5:04:36:4a:81:7f: a8:c1:16:6c:bd:07:7a:22:fb:7e:f6:2f:6b:22:f6: 18:03:91:ca:0b:f6:9c:a2:96:69:3e:8a:00:b5:82: 1e:86:0c:c2:8a:26:c9:fa:2c:e3:32:96:cf:d3:68: 41:64:5e:ce:f4:dc:f3:b5:25:2d:e6:d8:db:b9:a0: a9:9b:8b:40:a2:63:b8:24:20:05:a2:71:ed:30:23: dd:ff:a7:d6:a6:05:5c:f4:fa:89:d9:b1:c1:ed:c0: e0:6d:07:96:ff:74:e6:d1:21:ca:0f:d1:7a:93:ac: 44:7a:f2:c7:dc:94:9e:11:9b:61:bc:0b:f6:7c:eb: 06:eb:8c:28:bd:a6:c4:11:f8:10:0f:96:71:b9:a6: 52:0c:1f:21:58:44:59:99:2f:77:5a:46:c1:4f:87: 45:50:ae:b7:fa:da:fe:ff:73:ae:25:b0:ef:d5:99: b6:c1:d8:8a:88:58:6e:5a:05:92:a0:5b:ac:d2:db: 4f:e8:56:18:61:7f:27:24:37:5b:00:32:39:10:47: b6:cb:aa:07:2c:80:c1:ff:60:a3:0c:cf:74:b1:ab: 1b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AB:B4:15:A1:1F:45:02:6F:27:37:D9:6D:FF:37:50:1B:A3:21:25 X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:90:0b:a9:2a:73:b9:8e:a4:9e:ed:d1:4d:e7:88:02:d6:53: 9f:c4:d9:ec:6b:8f:f6:44:b6:3e:0f:80:1b:b1:00:04:ee:81: 40:e5:cd:cf:ac:54:cf:d4:95:30:7d:e6:1c:dc:e7:59:8c:57: 83:88:1c:57:57:5a:73:41:c2:ce:43:96:d0:a8:8e:be:a3:a5: ba:b7:42:b8:ed:57:8f:8b:ff:bb:cb:5a:94:e8:bd:6d:72:a8: 27:bc:89:c4:33:69:1f:1e:9d:77:a4:65:8a:f5:0f:1b:45:ed: a2:51:9d:57:76:61:9b:8b:3c:73:8c:07:01:dc:f1:fc:86:48: 4c:07:98:48:63:72:db:b2:1c:aa:b4:d5:c2:20:01:f0:f6:40: 42:15:ac:13:dd:58:c6:27:a4:99:f1:59:f5:38:5a:94:5a:66: e4:73:c9:44:ed:21:7a:68:50:fe:97:6a:08:cf:2a:13:b2:93: fc:77:cf:9f:3b:59:ae:71:25:62:ac:fb:49:2f:ae:73:cd:9f: d3:41:71:6a:37:1c:13:53:e1:a6:24:7c:ff:d5:fe:02:4c:36: 8a:6e:73:9e:a4:31:57:d8:5c:a0:3c:33:6a:87:6e:bc:1b:b2: 6a:bd:51:12:96:38:32:1b:d3:99:8e:7e:61:b3:fb:ed:25:9e: c3:af:f9:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDc2OTExMC8GA1UEBRMoMkZDQjNDMjU1NjVDOTQwNDE3QkVFMkFBRjg4MzhDRTQz M0UyQjgzQTAeFw0yNTA4MDUwNzU0NDRaFw0yNTA4MTIwNzU0NDRaMBgxFjAUBgNV BAMTDTY4OTFiOGM1LTEzMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXZO4DyhaKU2am6LvZ57IqueSBdbYn6QvRm3wVTvN4i0/1K2c4U7UENkqBf6jB Fmy9B3oi+372L2si9hgDkcoL9pyilmk+igC1gh6GDMKKJsn6LOMyls/TaEFkXs70 3PO1JS3m2Nu5oKmbi0CiY7gkIAWice0wI93/p9amBVz0+onZscHtwOBtB5b/dObR IcoP0XqTrER68sfclJ4Rm2G8C/Z86wbrjCi9psQR+BAPlnG5plIMHyFYRFmZL3da RsFPh0VQrrf62v7/c64lsO/VmbbB2IqIWG5aBZKgW6zS20/oVhhhfyckN1sAMjkQ R7bLqgcsgMH/YKMMz3SxqxuXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4au0FaEf RQJvJzfZbf83UBujISUwHwYDVR0jBBgwFoAUL8s8JVZclAQXvuKq+IOM5DPiuDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNzY5LzU0NTY4OENBRkIy NDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDhzOEpWWmNsQVFYdnVLcS1JT001RFBpdURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NzY5LzU0NTY4OENBRkIyNDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFR WHZ1S3EtSU9NNURQaXVEby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALSQC6kqc7mOpJ7t0U3niALWU5/E2exrj/ZEtj4PgBuxAATugUDlzc+s VM/UlTB95hzc51mMV4OIHFdXWnNBws5DltCojr6jpbq3QrjtV4+L/7vLWpTovW1y qCe8icQzaR8enXekZYr1DxtF7aJRnVd2YZuLPHOMBwHc8fyGSEwHmEhjctuyHKq0 1cIgAfD2QEIVrBPdWMYnpJnxWfU4WpRaZuRzyUTtIXpoUP6XagjPKhOyk/x3z587 Wa5xJWKs+0kvrnPNn9NBcWo3HBNT4aYkfP/V/gJMNopuc56kMVfYXKA8M2qHbrwb smq9URKWODIb05mOfmGz++0lnsOv+RE= -----END CERTIFICATE-----Generated at Wed Aug 6 13:22:58 2025 by rpki-client