$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft File: LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json) Hash identifier: 41yl4aMkvAMXUH3a6Tok4a6TOzZpnFrelHbh3qRE1vI= Subject key identifier: AE:FC:3B:00:62:7F:0A:42:E0:59:1A:AF:18:15:48:14:2C:E2:E5:D9 Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 Certificate issuer: /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0 Certificate serial: 0B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft Manifest number: 0B54 Signing time: Fri 22 Aug 2025 19:15:08 +0000 Manifest this update: Fri 22 Aug 2025 19:15:08 +0000 Manifest next update: Fri 29 Aug 2025 19:15:08 +0000 Files and hashes: 1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: WCLjwHqV7ms5QivOnTI5iC1zS6ZXZh4NEtMU7Oiz5KY=) 2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: U5r4SWMbZzX6cEmOkEoVm3P+a9O6vlGibQIW9uT8u/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0 Validity Not Before: Aug 22 19:15:08 2025 GMT Not After : Aug 29 19:15:08 2025 GMT Subject: CN=68a8c1bc-1d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:da:a8:d4:07:11:c5:32:f0:1e:3b:3d:d0:04: fd:f5:d7:d1:af:7b:e7:ad:ca:1e:ce:a1:1b:89:6a: d6:b2:0d:e7:19:89:3c:aa:ca:4b:f9:bb:04:e9:51: 15:9e:11:b6:2c:28:48:e2:bd:ae:11:76:81:de:2a: 42:18:15:35:ad:6a:dd:32:3a:86:48:fa:a6:99:52: 98:f1:ca:c7:9d:07:e6:6d:81:d4:01:3c:85:52:4f: b5:2e:00:31:f5:73:e2:fd:4c:05:f3:71:b6:bc:26: 82:d8:a9:71:b8:12:4f:aa:1f:89:2e:1c:f4:89:90: b6:3d:43:68:5a:46:88:2e:5b:91:b7:f6:1d:49:e6: 67:74:4b:b1:88:32:1f:32:41:76:e5:79:69:a4:af: a0:7c:31:0c:f7:03:e1:8c:17:04:5c:2e:39:17:40: 8f:a0:d2:a1:1b:2e:5d:d8:c2:58:84:29:f4:ff:66: 64:94:cb:6d:69:70:0e:b8:aa:ca:69:bb:34:7b:41: d9:b6:48:79:be:ab:80:cc:cf:bd:6b:fa:1b:7d:ec: 8f:08:0c:47:06:f2:1f:72:fc:9c:a1:b9:8f:3d:d3: 23:95:5f:42:96:94:a4:a4:3f:76:96:22:36:8e:42: 17:f2:f3:b4:6f:2d:8a:9c:d4:9a:9d:95:9e:77:42: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FC:3B:00:62:7F:0A:42:E0:59:1A:AF:18:15:48:14:2C:E2:E5:D9 X509v3 Authority Key Identifier: keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:01:7c:d3:fe:3e:e6:70:be:05:80:89:70:17:77:96:ca:98: ad:02:1d:b7:bd:2f:35:9d:a1:a6:1f:9a:05:cd:6e:f8:ca:f0: ed:5b:4e:10:ad:21:aa:bc:60:83:90:5a:f7:c3:91:a6:46:1a: d5:17:c8:49:61:26:92:96:11:68:30:7b:be:15:9c:38:68:ae: fe:c8:f6:7a:a1:02:24:a0:e9:c8:ea:a1:e8:7b:60:3a:26:81: 49:56:cc:58:70:8b:21:ff:42:2e:bd:dc:de:60:52:a5:d6:c1: 33:cd:dd:57:87:dd:5f:97:99:8e:93:5e:f1:7b:2f:4d:c5:dd: da:c0:54:1f:69:00:a0:dd:5c:7a:eb:1b:f6:06:4f:4c:76:94: 01:90:0d:54:69:59:ad:a0:7c:ab:89:1f:6e:97:f7:75:68:49: d0:91:e8:21:17:a4:b6:79:0a:42:11:53:84:4e:44:42:79:9d: 91:a6:fa:c9:bb:a1:a9:72:bd:12:a5:f8:53:10:58:08:6b:29: 3b:28:31:5c:21:db:df:fc:9a:76:bc:7b:88:93:3a:9c:0b:4a: 57:d9:97:a3:ec:de:8d:ad:5d:64:5e:40:c4:2b:73:b2:2b:1a: 25:b6:ab:36:76:6f:72:9c:06:80:1f:ea:89:48:0b:74:90:8f: 4f:a5:52:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzNDAxMTAvBgNVBAUTKDJFNzM1MzkyQzY4NkI4RDhEQzg4QzBDQ0Q1OUJGMkFF RkJBN0U4QjAwHhcNMjUwODIyMTkxNTA4WhcNMjUwODI5MTkxNTA4WjAYMRYwFAYD VQQDEw02OGE4YzFiYy0xZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9qo1AcRxTLwHjs90AT99dfRr3vnrcoezqEbiWrWsg3nGYk8qspL+bsE6VEV nhG2LChI4r2uEXaB3ipCGBU1rWrdMjqGSPqmmVKY8crHnQfmbYHUATyFUk+1LgAx 9XPi/UwF83G2vCaC2KlxuBJPqh+JLhz0iZC2PUNoWkaILluRt/YdSeZndEuxiDIf MkF25XlppK+gfDEM9wPhjBcEXC45F0CPoNKhGy5d2MJYhCn0/2ZklMttaXAOuKrK abs0e0HZtkh5vquAzM+9a/obfeyPCAxHBvIfcvycobmPPdMjlV9ClpSkpD92liI2 jkIX8vO0by2KnNSanZWed0JwuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK78OwBi fwpC4FkarxgVSBQs4uXZMB8GA1UdIwQYMBaAFC5zU5LGhrjY3IjAzNWb8q77p+iw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDM0MC8wNDY4Mzk3QTND NEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VOamNpTURNMVp2eXJ2dW42 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuTlRrc2FHdU5qY2lNRE0xWnZ5cnZ1bjZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDM0MC8wNDY4Mzk3QTNDNEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VO amNpTURNMVp2eXJ2dW42TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCAXzT/j7mcL4FgIlwF3eWypitAh23vS81naGmH5oFzW74yvDtW04Q rSGqvGCDkFr3w5GmRhrVF8hJYSaSlhFoMHu+FZw4aK7+yPZ6oQIkoOnI6qHoe2A6 JoFJVsxYcIsh/0IuvdzeYFKl1sEzzd1Xh91fl5mOk17xey9Nxd3awFQfaQCg3Vx6 6xv2Bk9MdpQBkA1UaVmtoHyriR9ul/d1aEnQkeghF6S2eQpCEVOETkRCeZ2RpvrJ u6Gpcr0SpfhTEFgIayk7KDFcIdvf/Jp2vHuIkzqcC0pX2Zej7N6NrV1kXkDEK3Oy Kxoltqs2dm9ynAaAH+qJSAt0kI9PpVID -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:38 2025 by rpki-client