$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft File: lXRSk8iKJybhClfVj0LMMWm3ySI.mft (raw, json) Hash identifier: oar96/+t0T1KHrn0TCalXqV2Kpd64GL6du2klik6ykc= Subject key identifier: 79:55:0D:8D:65:5E:76:C4:A7:FE:BE:E8:97:19:50:FF:89:FD:E6:CD Authority key identifier: 95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 Certificate issuer: /CN=A91144C9/serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Certificate serial: 61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft Manifest number: 57 Signing time: Sat 23 Aug 2025 07:36:10 +0000 Manifest this update: Sat 23 Aug 2025 07:36:10 +0000 Manifest next update: Sat 30 Aug 2025 07:36:10 +0000 Files and hashes: 1: lXRSk8iKJybhClfVj0LMMWm3ySI.crl (hash: wy+agaaif5TrfrJykjK1cXez946+TngKfaQLMz/UrtU=) 2: 98DD71780ECC11F0B8E48170C4F9AE02.roa (hash: Hq759PuHcjxrqDO6XDqBKqYrfjX30gMufng1UMG6yPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=95745293C88A2726E10A57D58F42CC3169B7C922 Validity Not Before: Aug 23 07:36:10 2025 GMT Not After : Aug 30 07:36:10 2025 GMT Subject: CN=68a96f6a-b4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9f:2b:75:f0:66:2d:ed:95:6c:78:8b:b5:69: c0:0d:fa:21:80:79:45:92:d4:b9:5c:47:3a:6b:cd: d9:2a:ea:6c:17:b3:ea:d5:b5:7b:33:12:74:6a:c8: 01:57:b8:18:48:71:e1:94:0c:99:0d:24:e2:6e:2a: 63:16:84:91:ad:ea:d1:64:cd:ec:d3:0a:cf:0a:81: be:49:ce:d9:4d:78:32:d5:55:e7:f6:60:35:05:36: 1c:c6:20:d9:85:7f:1e:80:bd:5b:84:98:a6:95:bc: 54:a1:79:ef:28:01:71:1b:0a:2f:0b:02:30:43:d7: 9a:3b:45:eb:cb:26:b7:26:f0:d8:e9:ec:29:df:ff: cb:67:b2:c1:6a:d8:b8:58:4f:09:93:4e:47:2a:9e: de:65:34:dc:f3:ce:63:2f:d9:3d:f9:b6:34:76:21: 1e:18:52:9c:84:0e:ff:09:6c:3e:66:72:e2:26:6a: d0:63:1e:18:69:9c:33:63:2c:ec:57:ed:30:eb:7a: 65:dd:7a:70:98:04:e6:ec:6f:5d:8e:29:db:32:ab: 76:79:49:4f:11:40:c0:f0:54:4e:e6:fe:1c:51:54: bc:25:38:d1:30:e8:7e:a5:7b:69:a2:fd:e6:9a:e7: e3:d5:f0:7b:25:c2:3c:7b:90:f2:e5:ab:25:81:0f: 06:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:55:0D:8D:65:5E:76:C4:A7:FE:BE:E8:97:19:50:FF:89:FD:E6:CD X509v3 Authority Key Identifier: keyid:95:74:52:93:C8:8A:27:26:E1:0A:57:D5:8F:42:CC:31:69:B7:C9:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lXRSk8iKJybhClfVj0LMMWm3ySI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/842F98940EC911F0A26FF144C4F9AE02/lXRSk8iKJybhClfVj0LMMWm3ySI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:92:d0:46:67:c5:2a:89:41:59:76:1c:34:c4:fb:63:d0:8c: 78:c1:f4:28:4d:bb:f8:0c:7c:ea:c7:17:1a:1a:79:bd:75:46: 84:bf:f4:81:dc:ca:c3:df:f1:a3:7e:b6:1c:05:a0:e6:a4:81: 83:c9:23:c1:24:45:d1:b5:42:fe:cf:eb:24:39:2d:61:7d:72: 61:6e:67:18:a1:39:b5:c5:4e:87:93:ed:06:a2:34:8c:b0:e5: b4:7b:a5:de:54:6c:4b:d6:3e:1e:e2:65:a4:86:11:90:a3:ce: 2c:09:0a:3b:5f:32:68:67:3f:89:0f:bd:54:c5:7d:c8:38:e2: 14:53:59:be:2b:5c:87:ce:04:16:c4:7a:a2:0c:d9:f9:7e:1b: bc:be:91:32:62:58:2e:c6:33:80:df:e6:3a:b9:b8:6d:5e:9a: e2:14:8a:16:24:b7:1b:7f:bd:82:05:d7:34:fb:c8:6e:53:6f: 0a:ba:9e:c2:7e:af:f8:8c:7f:3a:cb:5a:c5:c9:a3:71:58:81: d6:ca:f3:36:73:b7:24:17:a7:69:b4:9a:4a:33:41:8f:2f:cf: cb:79:16:ad:40:31:be:4e:82:24:cf:7b:b1:da:53:b9:cf:87: 28:dc:8c:3f:5f:2d:f2:26:39:8f:44:e7:46:a5:3a:16:07:05: 35:c1:48:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDRDOTExMC8GA1UEBRMoOTU3NDUyOTNDODhBMjcyNkUxMEE1N0Q1OEY0MkNDMzE2 OUI3QzkyMjAeFw0yNTA4MjMwNzM2MTBaFw0yNTA4MzAwNzM2MTBaMBgxFjAUBgNV BAMTDTY4YTk2ZjZhLWI0ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWnyt18GYt7ZVseIu1acAN+iGAeUWS1LlcRzprzdkq6mwXs+rVtXszEnRqyAFX uBhIceGUDJkNJOJuKmMWhJGt6tFkzezTCs8Kgb5JztlNeDLVVef2YDUFNhzGINmF fx6AvVuEmKaVvFShee8oAXEbCi8LAjBD15o7RevLJrcm8Njp7Cnf/8tnssFq2LhY TwmTTkcqnt5lNNzzzmMv2T35tjR2IR4YUpyEDv8JbD5mcuImatBjHhhpnDNjLOxX 7TDremXdenCYBObsb12OKdsyq3Z5SU8RQMDwVE7m/hxRVLwlONEw6H6le2mi/eaa 5+PV8Hslwjx7kPLlqyWBDwbPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeVUNjWVe dsSn/r7olxlQ/4n95s0wHwYDVR0jBBgwFoAUlXRSk8iKJybhClfVj0LMMWm3ySIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0NEM5Lzg0MkY5ODk0MEVD OTExRjBBMjZGRjE0NEM0RjlBRTAyL2xYUlNrOGlLSnliaENsZlZqMExNTVdtM3lT SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFhSU2s4aUtKeWJoQ2xmVmowTE1NV20zeVNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 NEM5Lzg0MkY5ODk0MEVDOTExRjBBMjZGRjE0NEM0RjlBRTAyL2xYUlNrOGlLSnli aENsZlZqMExNTVdtM3lTSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFWS0EZnxSqJQVl2HDTE+2PQjHjB9ChNu/gMfOrHFxoaeb11RoS/9IHc ysPf8aN+thwFoOakgYPJI8EkRdG1Qv7P6yQ5LWF9cmFuZxihObXFToeT7QaiNIyw 5bR7pd5UbEvWPh7iZaSGEZCjziwJCjtfMmhnP4kPvVTFfcg44hRTWb4rXIfOBBbE eqIM2fl+G7y+kTJiWC7GM4Df5jq5uG1emuIUihYktxt/vYIF1zT7yG5Tbwq6nsJ+ r/iMfzrLWsXJo3FYgdbK8zZztyQXp2m0mkozQY8vz8t5Fq1AMb5OgiTPe7HaU7nP hyjcjD9fLfImOY9E50alOhYHBTXBSIo= -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:30 2025 by rpki-client