$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft File: L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json) Hash identifier: l/v9zKg8OKxPLJE5da5CLv4M1QzqqGDs7MK9xojcfQY= Subject key identifier: 78:39:4A:10:11:06:24:CD:D5:E0:AB:97:4B:54:0E:23:5C:7D:8A:96 Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA Certificate serial: 2586 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft Manifest number: 251E Signing time: Fri 22 Aug 2025 15:45:46 +0000 Manifest this update: Fri 22 Aug 2025 15:45:45 +0000 Manifest next update: Fri 29 Aug 2025 15:45:45 +0000 Files and hashes: 1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: TcLPgSymLLPgzbTlHz3KM8II1gpB2yiKedfbOMOhBgg=) 2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: 2DQNtDG5SlXbYPNKHWvlCf1LoqXbXRDiCCKULGtJnHM=) 3: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: BPqGgTO/FXgmhll9acyqoVIwbgNH2EbF72C/59rTKAs=) 4: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: W5BOpPvdDaVJRiPCvQRJeUEXAu9OuHFa28A+g1a29VM=) 5: 407F0056629711EEB706DD75C4F9AE02.roa (hash: PPHYcuwo/hi+gWIj/jwhtP8TpkDUisIVIpssgpxO+Uk=) 6: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: ssVkoQGU9abtVaOJ8QQiFzJ2u/KxDVyiUSGDeDLOq7k=) 7: 260428EC312211EEAF54935BC4F9AE02.roa (hash: rs1BLbvYE3DjY31zt5pMsjMWm6NZ1lEGyNnSPudZWnw=) 8: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: UsIOkhaB3Ku4WNkmAUrHYHwGz8u8rCny1doDJQc+IzY=) 9: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: ZjX79axkNC/VnRSkKPjshmIjcGsGG06UJjQxdQstgRg=) 10: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc=) 11: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: bI6DNZ+SMQoiH31SjdXczk0YB7z1qgZ9bG+qqRhYG1Q=) 12: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: tGAr+6Zn60awTp8cl05laafAibPgTaCeJzxGTywN05I=) 13: 18D20D12852511EFBE3D6E47C4F9AE02.roa (hash: Xf4WUlVOVXX5jFG9PvkmpeYeh0+vfoKZddXectuS1PA=) 14: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: DZxtCrPx9nVC06xsT0giYHAu0uYg4D08gJHGXJpz69w=) 15: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: wWAuh5kIJNSIRZFUI/17Ka/eUztNPx+QrG0g1L0q+HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9606 (0x2586) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA Validity Not Before: Aug 22 15:45:45 2025 GMT Not After : Aug 29 15:45:45 2025 GMT Subject: CN=68a890a9-e54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:c2:fb:c1:6c:f5:31:d2:b4:e8:bb:3c:04: a6:1a:3d:ef:70:d7:2c:8a:f2:cd:bb:bd:62:7a:e9: 30:c4:19:f4:48:18:e9:38:c6:9d:14:ab:95:80:d1: e9:39:ce:93:a7:ad:23:0c:d8:0c:4a:d0:94:49:e8: a5:28:ec:11:a8:60:50:8e:b2:31:54:25:96:7a:89: 45:d4:88:81:e5:71:ce:25:4d:99:a4:08:a3:d0:cc: a5:20:86:11:3a:39:ba:66:ae:59:07:c1:e3:c3:3d: 24:71:f4:c7:f3:f0:86:62:90:83:bc:bf:eb:c7:ce: 53:2e:b6:fe:e0:02:2e:62:b5:01:c9:a4:7e:a9:4a: 77:d9:29:b6:00:c9:15:3e:81:e9:49:d3:13:d4:b2: 7e:c5:62:9b:3b:27:28:bd:11:35:42:f2:76:09:45: 11:6d:59:49:17:45:7e:83:1a:33:13:02:39:c0:3b: b2:ff:3e:ca:7c:b2:d9:51:57:c1:a9:52:da:75:af: 59:7e:ad:3d:05:e5:ec:21:5f:19:f0:c6:72:0b:1d: eb:2b:04:5b:16:9d:ba:fd:4f:de:03:00:91:a9:03: 3d:db:32:6e:0b:f5:71:b8:20:fb:25:6e:fa:23:fb: c9:d9:e4:29:4d:ee:02:05:65:e1:cb:a7:00:c4:6f: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:39:4A:10:11:06:24:CD:D5:E0:AB:97:4B:54:0E:23:5C:7D:8A:96 X509v3 Authority Key Identifier: keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7f:c6:b6:e4:90:bb:91:ea:d8:f5:5b:4b:df:3c:f3:9d:de: 95:bc:bc:03:dd:31:07:86:bb:76:e1:ca:c9:14:5d:a6:e3:a1: 11:c3:26:d7:bd:db:03:67:aa:45:5f:81:86:c0:92:8a:28:56: 39:56:19:35:d6:15:dc:78:63:e9:28:f9:e3:8e:08:d1:a0:b8: 7b:ff:2a:dd:15:3e:72:e8:6c:61:f4:53:bb:a5:b3:d8:b5:b2: ec:2b:15:f1:e4:f4:ef:1e:a6:62:4f:e6:40:a5:3c:5f:ec:0c: a1:e7:a6:c3:a5:dd:93:91:60:e2:60:0c:2f:18:8f:91:e4:e4: c7:3e:74:ec:82:6b:13:ce:d3:7d:01:59:42:39:a9:20:ae:88: 85:90:cd:c5:eb:10:fa:f7:74:ef:39:30:f6:16:01:61:06:6a: 5d:20:23:99:8c:1f:a2:b0:ab:87:2a:d2:7c:df:ac:ba:a9:6b: 52:b8:9f:3f:92:df:7b:e3:73:a0:37:fb:60:83:65:f1:aa:e2: 8e:72:f1:77:55:33:a0:d7:33:10:5b:52:2b:a0:56:53:e9:1c: 67:bd:06:e3:ed:ad:80:81:f4:8c:74:5c:53:0a:2d:0c:05:e9: 45:79:06:fa:e0:70:44:76:2f:b4:69:b9:ee:69:9e:53:52:80: 09:ce:b2:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx NDhDNkI0RkEwHhcNMjUwODIyMTU0NTQ1WhcNMjUwODI5MTU0NTQ1WjAYMRYwFAYD VQQDEw02OGE4OTBhOS1lNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoPC+8Fs9THStOi7PASmGj3vcNcsivLNu71ieukwxBn0SBjpOMadFKuVgNHp Oc6Tp60jDNgMStCUSeilKOwRqGBQjrIxVCWWeolF1IiB5XHOJU2ZpAij0MylIIYR Ojm6Zq5ZB8Hjwz0kcfTH8/CGYpCDvL/rx85TLrb+4AIuYrUByaR+qUp32Sm2AMkV PoHpSdMT1LJ+xWKbOycovRE1QvJ2CUURbVlJF0V+gxozEwI5wDuy/z7KfLLZUVfB qVLada9Zfq09BeXsIV8Z8MZyCx3rKwRbFp26/U/eAwCRqQM92zJuC/VxuCD7JW76 I/vJ2eQpTe4CBWXhy6cAxG+IHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg5ShAR BiTN1eCrl0tUDiNcfYqWMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0 UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkQ1NC9EOTAxMTI4NDNGNEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZm UmpMem5Wb3h3cVVVakd0UG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaf8a25JC7kerY9VtL3zzznd6VvLwD3TEHhrt24crJFF2m46ERwybX vdsDZ6pFX4GGwJKKKFY5Vhk11hXceGPpKPnjjgjRoLh7/yrdFT5y6Gxh9FO7pbPY tbLsKxXx5PTvHqZiT+ZApTxf7Ayh56bDpd2TkWDiYAwvGI+R5OTHPnTsgmsTztN9 AVlCOakgroiFkM3F6xD693TvOTD2FgFhBmpdICOZjB+isKuHKtJ836y6qWtSuJ8/ kt9743OgN/tgg2XxquKOcvF3VTOg1zMQW1IroFZT6RxnvQbj7a2AgfSMdFxTCi0M BelFeQb64HBEdi+0abnuaZ5TUoAJzrJS -----END CERTIFICATE-----Generated at Sat Aug 23 07:07:21 2025 by rpki-client