$ rpki-client -vvf rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft File: LNlBunzrUf5uFl4_yYBm1amZ5P4.mft (raw, json) Hash identifier: 7p8EInGAdMpLwQk13PfD5GLAitu7rfl8HCkhYXI4TvM= Subject key identifier: 37:0F:06:BE:1D:DB:9C:70:C3:E8:35:1D:EC:A7:F1:88:21:FA:C6:64 Authority key identifier: 2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE Certificate issuer: /CN=A912B635/serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft Manifest number: 0665 Signing time: Fri 22 Aug 2025 22:41:32 +0000 Manifest this update: Fri 22 Aug 2025 22:41:31 +0000 Manifest next update: Fri 29 Aug 2025 22:41:31 +0000 Files and hashes: 1: LNlBunzrUf5uFl4_yYBm1amZ5P4.crl (hash: lU2Znza0kJUseZY/1z6zxn6Tv4ZRT1SXwLG8PtE3Poo=) 2: D44C47FE91D311EBBE8C7D54C4F9AE02.roa (hash: av33nLUX0GDrb2SC++ABulsmTvMJTYGoXhRNYXEv87I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B635, serialNumber=2CD941BA7CEB51FE6E165E3FC98066D5A999E4FE Validity Not Before: Aug 22 22:41:31 2025 GMT Not After : Aug 29 22:41:31 2025 GMT Subject: CN=68a8f21c-c0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:4b:ad:b7:94:e8:4f:c2:94:15:ef:cb:0c: 36:a9:d1:ec:6d:67:25:bf:ca:70:5d:a0:de:69:69: 7c:80:fa:bd:98:1b:61:b1:7e:b3:02:3c:ad:37:b1: 21:04:49:97:89:d9:fb:eb:2c:2b:73:aa:00:ce:6e: 34:73:73:28:be:16:29:6b:67:e8:9b:81:7a:8b:3f: dc:ee:3e:be:a1:ce:0c:c2:6b:5f:9b:c4:9f:fd:4a: 56:39:4c:61:1d:65:75:7a:5a:de:2b:67:61:17:af: 5e:db:56:ca:ec:c0:24:7f:94:5a:0c:bb:d6:3b:86: b7:38:c7:ac:e5:2f:27:31:fc:ac:f2:2d:18:b0:0f: 9e:63:ab:94:43:d6:fe:d4:5d:ca:48:71:f2:41:aa: 59:50:43:a1:7b:b9:ba:fe:fc:c0:a6:8c:56:a6:66: b0:ac:e5:ab:01:cd:93:15:c1:82:e0:f6:e4:1d:a9: 3e:3f:fd:ae:dc:9d:c5:78:18:cf:7f:ae:ab:de:42: 3c:5a:60:36:ce:76:80:91:de:2f:4f:15:46:ad:93: cb:ff:8f:d2:0e:d0:f6:b6:02:55:95:8b:1f:a4:29: cf:0b:6f:84:19:38:01:30:53:b8:43:d2:8c:4f:39: f1:80:e6:ba:78:93:49:9c:d8:23:40:3b:22:8e:02: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0F:06:BE:1D:DB:9C:70:C3:E8:35:1D:EC:A7:F1:88:21:FA:C6:64 X509v3 Authority Key Identifier: keyid:2C:D9:41:BA:7C:EB:51:FE:6E:16:5E:3F:C9:80:66:D5:A9:99:E4:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LNlBunzrUf5uFl4_yYBm1amZ5P4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B635/5D077D4A91D211EB8B511053C4F9AE02/LNlBunzrUf5uFl4_yYBm1amZ5P4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:fb:31:98:79:3c:5f:a4:4e:c2:9e:5e:ee:d5:c3:17:38:e1: 93:ac:4e:3d:c2:16:6f:ad:52:54:2c:53:b1:9c:e2:37:6f:5e: c0:94:31:ba:a7:fc:e0:65:96:97:77:10:af:5e:f7:04:e0:02: 26:47:2d:32:b6:e4:cc:f9:18:b1:31:cf:02:52:55:f4:48:d7: 5d:df:3a:d8:96:83:e2:33:12:fe:8e:b2:59:d4:c7:90:ad:c0: 0b:85:de:cc:32:75:3c:08:b6:71:18:79:92:c0:c3:09:6d:6e: a8:08:28:85:7c:19:f8:1d:30:1e:d4:b7:d5:cf:2d:21:57:39: a1:38:da:64:84:88:53:83:e8:94:8d:c9:23:98:a2:5e:68:6d: 2b:23:fb:7c:10:ee:ad:05:55:34:7d:2c:76:45:ec:1c:51:5f: 00:af:92:63:b4:55:b0:29:8a:17:99:63:bf:6a:97:89:77:48: 86:4e:ab:52:3c:01:4e:2f:1d:2e:e7:f5:c5:d2:04:92:bd:ee: 85:f1:c3:0f:36:0b:c0:96:c3:4c:35:e4:e4:8e:cb:e1:39:5c: 5b:5e:8e:f0:26:ed:55:a4:a9:15:55:b7:c0:c2:a5:d8:c3:ac: 7b:eb:3c:7f:a8:23:ab:bf:ff:ee:e5:78:95:66:e2:b0:15:52: 5d:71:82:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2MzUxMTAvBgNVBAUTKDJDRDk0MUJBN0NFQjUxRkU2RTE2NUUzRkM5ODA2NkQ1 QTk5OUU0RkUwHhcNMjUwODIyMjI0MTMxWhcNMjUwODI5MjI0MTMxWjAYMRYwFAYD VQQDEw02OGE4ZjIxYy1jMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugdLrbeU6E/ClBXvyww2qdHsbWclv8pwXaDeaWl8gPq9mBthsX6zAjytN7Eh BEmXidn76ywrc6oAzm40c3MovhYpa2fom4F6iz/c7j6+oc4Mwmtfm8Sf/UpWOUxh HWV1elreK2dhF69e21bK7MAkf5RaDLvWO4a3OMes5S8nMfys8i0YsA+eY6uUQ9b+ 1F3KSHHyQapZUEOhe7m6/vzApoxWpmawrOWrAc2TFcGC4PbkHak+P/2u3J3FeBjP f66r3kI8WmA2znaAkd4vTxVGrZPL/4/SDtD2tgJVlYsfpCnPC2+EGTgBMFO4Q9KM TznxgOa6eJNJnNgjQDsijgK1UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcPBr4d 25xww+g1Heyn8Ygh+sZkMB8GA1UdIwQYMBaAFCzZQbp861H+bhZeP8mAZtWpmeT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjYzNS81RDA3N0Q0QTkx RDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVmNXVGbDRfeVlCbTFhbVo1 UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xObEJ1bnpyVWY1dUZsNF95WUJtMWFtWjVQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjYzNS81RDA3N0Q0QTkxRDIxMUVCOEI1MTEwNTNDNEY5QUUwMi9MTmxCdW56clVm NXVGbDRfeVlCbTFhbVo1UDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV+zGYeTxfpE7Cnl7u1cMXOOGTrE49whZvrVJULFOxnOI3b17AlDG6 p/zgZZaXdxCvXvcE4AImRy0ytuTM+RixMc8CUlX0SNdd3zrYloPiMxL+jrJZ1MeQ rcALhd7MMnU8CLZxGHmSwMMJbW6oCCiFfBn4HTAe1LfVzy0hVzmhONpkhIhTg+iU jckjmKJeaG0rI/t8EO6tBVU0fSx2RewcUV8Ar5JjtFWwKYoXmWO/apeJd0iGTqtS PAFOLx0u5/XF0gSSve6F8cMPNgvAlsNMNeTkjsvhOVxbXo7wJu1VpKkVVbfAwqXY w6x76zx/qCOrv//u5XiVZuKwFVJdcYKy -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:19 2025 by rpki-client