$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft File: PR_LclXFJQPhCuWEsRiaFc9WB04.mft (raw, json) Hash identifier: 4QGu2EdekCVGJWu8ExneF0979w+9uWzjlqW2d5Khon0= Subject key identifier: E9:73:FA:8C:65:AB:A7:B8:48:A4:7C:C6:16:1E:6F:71:3F:34:B3:2C Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E Certificate issuer: /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft Manifest number: 59 Signing time: Sat 23 Aug 2025 07:34:22 +0000 Manifest this update: Sat 23 Aug 2025 07:34:22 +0000 Manifest next update: Sat 30 Aug 2025 07:34:22 +0000 Files and hashes: 1: PR_LclXFJQPhCuWEsRiaFc9WB04.crl (hash: amhRUlLjPmoY9LAYKZnEAVfT1Rr8w8J9D0ByNkKAqFc=) 2: 76FCBDA6353311F0BE188334C4F9AE02.roa (hash: ZSY+wrBOCpSTseL5HGKwx+yRvdWTT0pPkpRE5m5XW20=) 3: F6A8B3960A1511F0BB6C770DC4F9AE02.roa (hash: n0hZf8SnzH9l6EO9lSPm/WcouXJHThPcn/CT1MilQ1w=) 4: D87376860A1511F09D97420DC4F9AE02.roa (hash: DBHtGCQQDfMpiwGGsmk/EkvovYeutKnxcD7IbMh0Lsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E Validity Not Before: Aug 23 07:34:22 2025 GMT Not After : Aug 30 07:34:22 2025 GMT Subject: CN=68a96efe-4b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:0e:0e:19:69:96:da:ba:28:91:9a:83:a4: 4b:cf:3a:95:0e:55:e2:b5:6b:95:63:30:f9:3d:dc: 5f:df:86:36:62:c8:fc:ee:0b:3d:26:99:4e:7e:64: fa:cf:fb:fe:83:49:23:af:12:06:c1:9c:61:bc:b6: 43:dc:4c:10:f7:3e:23:f0:88:1c:e7:4f:7c:0d:e4: d3:98:b3:72:70:ee:12:0a:06:06:6e:02:3e:95:3c: ff:fd:99:b3:f5:67:1b:77:58:ef:12:2a:ee:b3:aa: 8e:a2:a8:b0:72:01:7e:4e:af:54:c1:ec:0a:cd:32: 2d:34:f3:57:eb:5c:ef:ef:52:aa:51:b7:65:d7:f6: 3f:63:1a:d7:fd:cb:49:37:ef:97:e1:74:71:11:75: c5:fb:da:c4:84:04:56:b1:f6:6a:d4:a2:06:d2:ac: 9a:5e:f8:84:80:0c:77:c1:7e:f1:3d:19:20:00:0e: 69:ef:10:d6:96:e3:e7:39:48:7e:2e:aa:d9:93:27: 6e:02:c5:aa:e3:e5:27:df:71:78:3a:6d:b9:32:67: 6e:3b:81:a9:ac:22:0d:2e:dc:fd:64:e8:15:4a:02: 0f:ed:1b:f0:69:98:c3:5c:db:55:93:67:ff:d7:43: 80:3a:76:17:ac:38:55:04:2e:0f:d6:0c:0b:98:99: d2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:73:FA:8C:65:AB:A7:B8:48:A4:7C:C6:16:1E:6F:71:3F:34:B3:2C X509v3 Authority Key Identifier: keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:12:6e:5a:b9:fc:9c:43:c9:30:df:3e:f7:7c:cc:8c:d2:7e: dd:52:a5:68:8b:65:b2:95:8e:87:b3:8c:e8:c3:1e:8e:d2:43: 32:9e:8c:7e:4c:2f:c4:f4:d7:26:95:1d:90:88:17:37:68:60: b7:c3:ff:86:2a:94:80:c6:09:f2:cf:f1:8b:c0:7a:38:49:a7: 00:c2:8a:be:4f:29:b9:5e:40:ba:f2:7c:13:fb:7b:03:f3:ac: 4a:b8:2e:e7:4c:de:3c:eb:bc:4a:f5:f3:b7:e4:dc:5f:2f:7f: 90:77:5c:22:f4:b7:65:72:c1:b9:88:9b:75:51:ef:40:60:dc: 63:4f:c0:84:77:b0:41:e7:30:cc:88:8a:8d:be:64:cd:f0:16: 7c:3c:f1:0e:cb:d2:6a:83:c9:43:05:57:7a:98:76:46:4d:90: aa:58:40:fd:a6:1c:e5:4e:99:cb:23:2f:31:6c:a1:21:3c:74: 60:1c:c1:d3:37:0c:12:39:25:3c:aa:5f:58:15:db:84:b0:df: ec:c0:a8:0b:96:1f:3c:12:06:1e:04:1c:b6:07:29:9e:26:27: 9e:75:21:5b:8e:e5:f3:12:e7:6f:f4:11:d0:6a:84:d0:8b:cb: 89:63:58:ba:0d:e7:84:04:ed:df:0d:16:d1:26:f3:13:09:d1: 2a:36:f7:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MkZFMTExMC8GA1UEBRMoM0QxRkNCNzI1NUM1MjUwM0UxMEFFNTg0QjExODlBMTVD RjU2MDc0RTAeFw0yNTA4MjMwNzM0MjJaFw0yNTA4MzAwNzM0MjJaMBgxFjAUBgNV BAMTDTY4YTk2ZWZlLTRiODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/BQ4OGWmW2rookZqDpEvPOpUOVeK1a5VjMPk93F/fhjZiyPzuCz0mmU5+ZPrP +/6DSSOvEgbBnGG8tkPcTBD3PiPwiBznT3wN5NOYs3Jw7hIKBgZuAj6VPP/9mbP1 Zxt3WO8SKu6zqo6iqLByAX5Or1TB7ArNMi0081frXO/vUqpRt2XX9j9jGtf9y0k3 75fhdHERdcX72sSEBFax9mrUogbSrJpe+ISADHfBfvE9GSAADmnvENaW4+c5SH4u qtmTJ24Cxarj5SffcXg6bbkyZ247gamsIg0u3P1k6BVKAg/tG/BpmMNc21WTZ//X Q4A6dhesOFUELg/WDAuYmdIjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6XP6jGWr p7hIpHzGFh5vcT80sywwHwYDVR0jBBgwFoAUPR/LclXFJQPhCuWEsRiaFc9WB04w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyRkUxL0M0NTYxMDJFMDlG MTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQaEN1V0VzUmlhRmM5V0Iw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFJfTGNsWEZKUVBoQ3VXRXNSaWFGYzlXQjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEy RkUxL0M0NTYxMDJFMDlGMTExRjA4QjQ0QTMyNUM0RjlBRTAyL1BSX0xjbFhGSlFQ aEN1V0VzUmlhRmM5V0IwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEESblq5/JxDyTDfPvd8zIzSft1SpWiLZbKVjoezjOjDHo7SQzKejH5M L8T01yaVHZCIFzdoYLfD/4YqlIDGCfLP8YvAejhJpwDCir5PKbleQLryfBP7ewPz rEq4LudM3jzrvEr187fk3F8vf5B3XCL0t2VywbmIm3VR70Bg3GNPwIR3sEHnMMyI io2+ZM3wFnw88Q7L0mqDyUMFV3qYdkZNkKpYQP2mHOVOmcsjLzFsoSE8dGAcwdM3 DBI5JTyqX1gV24Sw3+zAqAuWHzwSBh4EHLYHKZ4mJ551IVuO5fMS52/0EdBqhNCL y4ljWLoN54QE7d8NFtEm8xMJ0So297M= -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:16 2025 by rpki-client