$ rpki-client -vvf rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft File: lqeZovSzCLIlIrzkXjGNanAmKSs.mft (raw, json) Hash identifier: WAtBKelkYYe7Kp5Hb81ZsKvyKXyfTqaPlfDJs5GTerM= Subject key identifier: B6:2B:92:64:DE:DD:11:1D:29:B5:C8:2B:90:1D:C4:BA:42:F6:3A:6A Authority key identifier: 96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B Certificate issuer: /CN=A911BA4B/serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B Certificate serial: 11BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft Manifest number: 11AE Signing time: Fri 22 Aug 2025 17:20:24 +0000 Manifest this update: Fri 22 Aug 2025 17:20:24 +0000 Manifest next update: Fri 29 Aug 2025 17:20:24 +0000 Files and hashes: 1: lqeZovSzCLIlIrzkXjGNanAmKSs.crl (hash: X4aOkXfz+hLlSP+h+JixJvq6Svo7SMI4i2ARaahzwM0=) 2: 318BC266FEA911E8BF138B59C4F9AE02.roa (hash: 33z1F9RZ3yx55dZ5+rGpqQ7gwX1OExcujk8Oepxi/pw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4539 (0x11bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BA4B, serialNumber=96A799A2F4B308B22522BCE45E318D6A7026292B Validity Not Before: Aug 22 17:20:24 2025 GMT Not After : Aug 29 17:20:24 2025 GMT Subject: CN=68a8a6d8-4552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:23:2a:95:80:6d:b5:cb:96:8e:e2:80:43: 70:41:c0:8d:4b:09:1a:a9:21:d7:bc:5e:32:5b:4f: cb:9c:cb:e2:80:b3:6a:56:37:b4:b8:08:ed:c3:98: 7f:36:d6:40:c5:3f:a5:a5:04:4c:98:6e:f8:e5:1b: 71:2b:68:6a:82:43:32:44:6e:e4:29:b5:63:a4:f4: 39:7a:31:d2:d5:ab:4f:d6:94:6b:db:f5:9f:bf:c0: 48:2c:a3:6f:2c:9c:04:5b:fe:f5:53:12:ab:a8:2c: 3b:ee:e2:82:55:89:f5:e2:a4:3c:19:28:5c:e6:89: e9:31:d3:86:37:0a:8a:f3:98:38:e0:85:29:2f:b0: f8:4f:b6:fe:95:34:36:7e:a3:a0:f9:08:cf:c8:c3: e1:91:ea:24:f8:d3:f8:d6:77:3d:70:d1:a2:50:a3: 21:99:86:53:d4:21:ca:d2:f1:89:17:47:98:4e:12: 46:19:b5:fb:2c:b1:04:b1:79:0f:d9:4b:ab:00:56: 43:9a:07:31:ae:81:4b:0a:a4:ee:a2:c0:35:99:68: 1a:fb:d8:2b:b1:39:de:b6:fc:19:b5:b1:30:ce:dc: 08:51:00:51:50:45:90:8f:ac:41:98:f7:5a:89:55: 2e:29:00:29:e4:0c:17:90:91:67:b9:a1:12:34:99: 2d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2B:92:64:DE:DD:11:1D:29:B5:C8:2B:90:1D:C4:BA:42:F6:3A:6A X509v3 Authority Key Identifier: keyid:96:A7:99:A2:F4:B3:08:B2:25:22:BC:E4:5E:31:8D:6A:70:26:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lqeZovSzCLIlIrzkXjGNanAmKSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BA4B/E377FD7AFEA711E8A2E4B457C4F9AE02/lqeZovSzCLIlIrzkXjGNanAmKSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cf:68:c3:31:8f:54:0d:b3:d4:42:0b:33:03:70:96:55:df: 91:c8:c5:0c:20:39:a3:21:3f:77:8f:a7:59:de:64:28:9f:ee: 8c:18:f1:01:14:58:29:02:47:c2:24:17:96:84:a4:67:d2:dc: 3d:0a:a7:7d:ea:83:95:8c:9a:91:2c:72:5f:ab:0b:61:69:30: 4b:30:60:f3:76:38:2a:f0:5b:85:0e:ab:e1:a6:12:52:00:f8: d3:9a:1b:db:b2:fb:e6:e3:66:61:0d:1a:30:79:60:1f:98:f5: 0c:56:c7:ee:f6:b7:7b:cb:5a:28:0c:39:41:74:0a:b5:2a:c0: 74:21:ec:26:cc:21:2a:99:4d:0d:34:d9:48:ee:4e:af:08:66: 75:2d:43:12:fa:63:1c:31:ae:f8:34:88:a4:f2:80:6c:50:ee: 6e:2b:4e:89:6d:ac:4b:ed:c2:35:2a:5b:f5:bd:60:7b:5e:b1: 3c:d7:b7:e6:b2:4d:1b:fd:ea:32:e1:a1:75:a7:b9:87:08:08: 28:d3:f8:a9:a4:7c:00:2f:b3:9a:89:c6:c4:f4:f9:93:06:79: c0:a2:1b:9b:6c:2f:62:2a:14:b6:6d:10:5d:b1:d3:2d:80:5c: 8a:72:f0:45:eb:df:1d:40:69:fc:a2:64:52:ce:84:08:5d:74: fa:a6:15:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBNEIxMTAvBgNVBAUTKDk2QTc5OUEyRjRCMzA4QjIyNTIyQkNFNDVFMzE4RDZB NzAyNjI5MkIwHhcNMjUwODIyMTcyMDI0WhcNMjUwODI5MTcyMDI0WjAYMRYwFAYD VQQDEw02OGE4YTZkOC00NTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplIjKpWAbbXLlo7igENwQcCNSwkaqSHXvF4yW0/LnMvigLNqVje0uAjtw5h/ NtZAxT+lpQRMmG745RtxK2hqgkMyRG7kKbVjpPQ5ejHS1atP1pRr2/Wfv8BILKNv LJwEW/71UxKrqCw77uKCVYn14qQ8GShc5onpMdOGNwqK85g44IUpL7D4T7b+lTQ2 fqOg+QjPyMPhkeok+NP41nc9cNGiUKMhmYZT1CHK0vGJF0eYThJGGbX7LLEEsXkP 2UurAFZDmgcxroFLCqTuosA1mWga+9grsTnetvwZtbEwztwIUQBRUEWQj6xBmPda iVUuKQAp5AwXkJFnuaESNJktOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYrkmTe 3REdKbXIK5AdxLpC9jpqMB8GA1UdIwQYMBaAFJanmaL0swiyJSK85F4xjWpwJikr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkE0Qi9FMzc3RkQ3QUZF QTcxMUU4QTJFNEI0NTdDNEY5QUUwMi9scWVab3ZTekNMSWxJcnprWGpHTmFuQW1L U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xxZVpvdlN6Q0xJbElyemtYakdOYW5BbUtTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkE0Qi9FMzc3RkQ3QUZFQTcxMUU4QTJFNEI0NTdDNEY5QUUwMi9scWVab3ZTekNM SWxJcnprWGpHTmFuQW1LU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/z2jDMY9UDbPUQgszA3CWVd+RyMUMIDmjIT93j6dZ3mQon+6MGPEB FFgpAkfCJBeWhKRn0tw9Cqd96oOVjJqRLHJfqwthaTBLMGDzdjgq8FuFDqvhphJS APjTmhvbsvvm42ZhDRoweWAfmPUMVsfu9rd7y1ooDDlBdAq1KsB0IewmzCEqmU0N NNlI7k6vCGZ1LUMS+mMcMa74NIik8oBsUO5uK06JbaxL7cI1Klv1vWB7XrE817fm sk0b/eoy4aF1p7mHCAgo0/ippHwAL7OaicbE9PmTBnnAohubbC9iKhS2bRBdsdMt gFyKcvBF698dQGn8omRSzoQIXXT6phVR -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:31 2025 by rpki-client