$ rpki-client -vvf rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft File: lC8l1zULID6onvLRzBULBbF7K4c.mft (raw, json) Hash identifier: ob5VFnH/f0ot5o2zxEoigDu4HwWkPbCkgyeedmDRLks= Subject key identifier: 91:65:1F:09:23:6A:9A:6A:A8:9E:E3:40:6C:A7:DD:3C:20:9F:4C:2B Authority key identifier: 94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 Certificate issuer: /CN=A912FB1D/serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Certificate serial: 34D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft Manifest number: 34C1 Signing time: Fri 22 Aug 2025 15:21:19 +0000 Manifest this update: Fri 22 Aug 2025 15:21:19 +0000 Manifest next update: Fri 29 Aug 2025 15:21:19 +0000 Files and hashes: 1: lC8l1zULID6onvLRzBULBbF7K4c.crl (hash: 5XslBi1Vx+IYK3kdOwibOTK2yVF7Bx8VvcG1SN0ZQ3M=) 2: C098D762675111E9A0C4BB36C4F9AE02.roa (hash: INyUubVzyzPFDA6zTyRhkIRyBY0HoCb9vhAv2oVdZVY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13526 (0x34d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FB1D, serialNumber=942F25D7350B203EA89EF2D1CC150B05B17B2B87 Validity Not Before: Aug 22 15:21:19 2025 GMT Not After : Aug 29 15:21:19 2025 GMT Subject: CN=68a88aef-f1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:31:c9:ab:3b:58:46:fc:04:35:2f:61:e2:ca: 05:9e:3a:79:d3:78:45:40:28:4d:40:ad:05:d5:02: d4:f0:f7:37:57:0c:52:9b:b3:a9:03:eb:b4:bd:2c: 4e:4b:2b:0a:3e:7f:ce:02:7e:65:ff:24:d6:aa:b3: bc:bc:e4:34:29:e0:0d:61:98:42:86:0f:7b:62:49: 7a:e6:cb:2a:e2:15:12:3c:de:d7:00:29:0c:3f:0c: bd:12:ed:a2:2a:90:6f:e8:eb:c3:61:e5:74:f8:82: 62:69:f9:5b:c8:2f:7b:8a:91:c1:b5:1c:55:96:17: 9c:71:3e:70:21:ea:bd:7c:00:3c:32:d0:e4:2b:d3: 34:eb:25:b8:91:c0:73:d9:41:b7:34:c1:6b:16:1b: de:cd:98:ab:43:e3:70:64:07:bc:5c:74:d1:c5:70: 4a:06:52:e3:9f:a3:c1:82:ab:e5:bf:0d:f1:d8:ec: e8:68:33:ca:6f:81:2c:17:b3:fc:1a:38:c3:b1:00: 53:0d:a4:02:4f:5a:50:33:47:6d:a5:6b:ff:be:35: 70:69:09:b2:99:e4:2d:f7:ab:21:f9:36:1f:eb:95: 36:42:74:33:fc:7b:0b:03:e4:97:99:a5:9f:3e:e5: 4d:53:1c:be:98:ef:31:0a:dd:73:ce:5a:70:cb:f4: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:65:1F:09:23:6A:9A:6A:A8:9E:E3:40:6C:A7:DD:3C:20:9F:4C:2B X509v3 Authority Key Identifier: keyid:94:2F:25:D7:35:0B:20:3E:A8:9E:F2:D1:CC:15:0B:05:B1:7B:2B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lC8l1zULID6onvLRzBULBbF7K4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FB1D/C684CA9C1DAB11E2A21E35AA08B02CD2/lC8l1zULID6onvLRzBULBbF7K4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:bd:f1:e1:d7:97:49:90:ad:e5:20:a9:a8:d0:39:8c:79:f1: be:34:8d:26:63:83:d1:ff:6a:a4:30:1f:c5:82:13:b2:13:ee: 75:73:fa:63:e9:2c:df:cb:5f:8f:f2:31:82:8f:5c:be:6c:6b: f0:b9:bf:be:b9:bd:88:3b:24:0c:fd:6a:36:b4:d6:dd:61:e5: f1:a9:1d:02:c3:82:d5:e8:0b:f8:77:c0:57:67:37:c2:80:03: 19:7e:e0:ab:52:da:d5:db:b5:fd:8e:a6:ec:55:95:49:d5:aa: cf:1a:1a:e4:13:b3:59:1e:d7:82:07:07:65:4e:c9:c4:b9:a7: c3:23:f0:60:6b:35:d9:ad:e1:71:4d:e4:10:2d:27:ab:4f:66: a3:be:d2:33:44:39:0b:ff:39:3b:7b:4d:66:0e:aa:87:4e:2f: 73:6e:cb:c9:21:22:50:59:44:8e:bf:4a:bd:0f:2f:42:4a:09: 76:43:9e:5a:4c:d6:41:5f:12:94:10:ec:eb:41:1a:cb:80:b9: 17:3d:5c:4d:33:b4:b9:ea:32:86:e1:3c:e4:fb:d5:83:0a:26: db:61:ed:d2:3f:9a:e6:a0:c5:53:ac:28:d8:ac:22:0f:c3:0e: 56:8a:0d:97:e0:2f:d8:a5:f7:14:13:e8:fd:5e:27:3a:5e:4d: db:9f:ce:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZCMUQxMTAvBgNVBAUTKDk0MkYyNUQ3MzUwQjIwM0VBODlFRjJEMUNDMTUwQjA1 QjE3QjJCODcwHhcNMjUwODIyMTUyMTE5WhcNMjUwODI5MTUyMTE5WjAYMRYwFAYD VQQDEw02OGE4OGFlZi1mMWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTHJqztYRvwENS9h4soFnjp503hFQChNQK0F1QLU8Pc3VwxSm7OpA+u0vSxO SysKPn/OAn5l/yTWqrO8vOQ0KeANYZhChg97Ykl65ssq4hUSPN7XACkMPwy9Eu2i KpBv6OvDYeV0+IJiaflbyC97ipHBtRxVlheccT5wIeq9fAA8MtDkK9M06yW4kcBz 2UG3NMFrFhvezZirQ+NwZAe8XHTRxXBKBlLjn6PBgqvlvw3x2OzoaDPKb4EsF7P8 GjjDsQBTDaQCT1pQM0dtpWv/vjVwaQmymeQt96sh+TYf65U2QnQz/HsLA+SXmaWf PuVNUxy+mO8xCt1zzlpwy/QbfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFlHwkj appqqJ7jQGyn3Twgn0wrMB8GA1UdIwQYMBaAFJQvJdc1CyA+qJ7y0cwVCwWxeyuH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkIxRC9DNjg0Q0E5QzFE QUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElENm9udkxSekJVTEJiRjdL NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xDOGwxelVMSUQ2b252TFJ6QlVMQmJGN0s0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkIxRC9DNjg0Q0E5QzFEQUIxMUUyQTIxRTM1QUEwOEIwMkNEMi9sQzhsMXpVTElE Nm9udkxSekJVTEJiRjdLNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1vfHh15dJkK3lIKmo0DmMefG+NI0mY4PR/2qkMB/FghOyE+51c/pj 6Szfy1+P8jGCj1y+bGvwub++ub2IOyQM/Wo2tNbdYeXxqR0Cw4LV6Av4d8BXZzfC gAMZfuCrUtrV27X9jqbsVZVJ1arPGhrkE7NZHteCBwdlTsnEuafDI/BgazXZreFx TeQQLSerT2ajvtIzRDkL/zk7e01mDqqHTi9zbsvJISJQWUSOv0q9Dy9CSgl2Q55a TNZBXxKUEOzrQRrLgLkXPVxNM7S56jKG4Tzk+9WDCibbYe3SP5rmoMVTrCjYrCIP ww5Wig2X4C/YpfcUE+j9Xic6Xk3bn878 -----END CERTIFICATE-----Generated at Sat Aug 23 19:27:20 2025 by rpki-client