$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: tbR+GbM46AAUudDoZc9vfIE8hzlC1SRilOXkYAUm4xE= Subject key identifier: AA:70:28:4E:9D:6D:BF:90:8A:B6:44:B2:95:1F:66:03:A7:04:87:91 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0C69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0C63 Signing time: Wed 06 Aug 2025 18:34:58 +0000 Manifest this update: Wed 06 Aug 2025 18:34:57 +0000 Manifest next update: Wed 13 Aug 2025 18:34:57 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: wt5L/fCvCjAp+STldx5Q2xNR489VJy+rCN6+XgzWFD8=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: kw2eNb2EMSu9uzXccFSp6eZwzhS7sBm7WAl3fnQxLVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 18:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3177 (0xc69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Aug 6 18:34:57 2025 GMT Not After : Aug 13 18:34:57 2025 GMT Subject: CN=6893a052-3f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:9f:b2:e2:13:e8:b2:c6:9b:f3:1a:cc:d5: b7:60:94:6b:40:77:db:c4:58:e8:86:43:d0:5b:17: b7:50:72:37:b5:d4:10:24:07:c9:26:57:45:d6:1d: bc:d9:16:f4:f8:3d:cc:6b:14:2a:55:89:9f:fa:e3: 95:80:68:79:57:b4:ac:db:36:a9:39:7e:28:f1:30: a2:a2:c7:a3:21:8a:b9:03:f5:a4:5c:37:41:e6:68: 9c:41:d7:8f:82:28:15:48:0e:d9:e2:7c:e9:eb:03: 02:cd:d9:24:8c:8d:8a:a9:dd:98:3f:92:95:58:17: cc:5b:36:28:bc:a8:7d:35:ff:ae:6a:ed:3c:cd:18: 34:8b:45:04:8e:cc:5d:e8:67:9a:28:4b:72:32:e0: f4:79:26:6c:9a:fc:17:ea:bd:2d:cb:39:3a:97:0e: cc:9a:f9:b6:5e:54:ee:d6:6f:a3:d7:20:09:d7:21: c2:8e:a7:71:e9:ad:ee:f9:b7:31:6d:f0:10:1f:a7: 11:77:44:ea:a8:70:2d:e6:a5:f4:a4:22:65:e3:ab: 16:e6:25:ed:b1:14:3b:94:4a:b4:71:03:c0:89:73: 99:04:c3:79:e3:ac:aa:cd:7a:22:74:7e:6c:90:03: 4f:e0:d8:1f:be:62:3c:da:07:c4:ee:1c:c0:f4:c4: 03:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:70:28:4E:9D:6D:BF:90:8A:B6:44:B2:95:1F:66:03:A7:04:87:91 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:41:c5:86:a5:62:39:4d:cd:5a:5b:d1:19:0a:80:ee:6e:e3: cf:52:7f:69:1f:e4:28:9b:01:fb:79:b0:25:a9:0a:67:44:3c: 22:1f:af:c5:14:4b:f2:92:88:7f:22:60:09:93:28:63:87:01: 57:33:bf:cf:ae:64:66:38:29:6a:57:15:0b:38:da:5e:34:20: f1:44:fd:5c:c9:0e:b8:2f:2c:4c:da:85:63:ab:7f:9e:ac:78: 1e:4d:93:2c:1d:d2:22:30:44:d3:df:9a:8f:9e:ed:f0:d4:58: 29:c3:8a:32:01:2c:a3:31:11:32:ec:45:d9:ce:7a:c0:a9:f4: 0e:8b:4c:71:ad:f3:96:96:0f:94:b4:99:42:ee:50:94:66:85: eb:52:99:4c:5e:96:c8:f2:80:3b:90:32:d3:e0:b6:39:72:81: 09:c4:dc:8f:0a:6a:7e:d2:b6:e8:80:56:48:29:9f:e1:da:fa: 91:36:b3:da:15:70:15:68:01:8e:ce:c9:37:50:77:18:40:ff: 93:23:b8:d4:96:38:54:0c:c2:57:d4:e7:a2:12:d3:50:67:62: 9c:95:50:8a:28:bc:d5:43:67:59:90:ed:92:01:b7:77:71:b2: c8:d4:19:db:60:94:34:3c:6f:8f:4b:64:de:68:bb:7d:39:f0: 19:95:63:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjUwODA2MTgzNDU3WhcNMjUwODEzMTgzNDU3WjAYMRYwFAYD VQQDEw02ODkzYTA1Mi0zZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdSfsuIT6LLGm/MazNW3YJRrQHfbxFjohkPQWxe3UHI3tdQQJAfJJldF1h28 2Rb0+D3MaxQqVYmf+uOVgGh5V7Ss2zapOX4o8TCiosejIYq5A/WkXDdB5micQdeP gigVSA7Z4nzp6wMCzdkkjI2Kqd2YP5KVWBfMWzYovKh9Nf+uau08zRg0i0UEjsxd 6GeaKEtyMuD0eSZsmvwX6r0tyzk6lw7Mmvm2XlTu1m+j1yAJ1yHCjqdx6a3u+bcx bfAQH6cRd0TqqHAt5qX0pCJl46sW5iXtsRQ7lEq0cQPAiXOZBMN546yqzXoidH5s kANP4NgfvmI82gfE7hzA9MQDmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpwKE6d bb+QirZEspUfZgOnBIeRMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpQcWGpWI5Tc1aW9EZCoDubuPPUn9pH+QomwH7ebAlqQpnRDwiH6/F FEvykoh/ImAJkyhjhwFXM7/PrmRmOClqVxULONpeNCDxRP1cyQ64LyxM2oVjq3+e rHgeTZMsHdIiMETT35qPnu3w1Fgpw4oyASyjMREy7EXZznrAqfQOi0xxrfOWlg+U tJlC7lCUZoXrUplMXpbI8oA7kDLT4LY5coEJxNyPCmp+0rbogFZIKZ/h2vqRNrPa FXAVaAGOzsk3UHcYQP+TI7jUljhUDMJX1OeiEtNQZ2KclVCKKLzVQ2dZkO2SAbd3 cbLI1BnbYJQ0PG+PS2TeaLt9OfAZlWPH -----END CERTIFICATE-----Generated at Thu Aug 7 05:05:25 2025 by rpki-client