$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft File: Lz71uQE3FOMXTGcArgSCTi8FwjA.mft (raw, json) Hash identifier: 5YNUGY4PgCxj47gDpM0BhAp6X7BecCnzvVD69nVZw50= Subject key identifier: 7A:6C:9E:AC:1C:70:16:EA:49:AB:BD:83:68:50:43:3A:3A:AC:F6:9B Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 Certificate issuer: /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft Manifest number: 0340 Signing time: Sat 23 Aug 2025 01:19:13 +0000 Manifest this update: Sat 23 Aug 2025 01:19:13 +0000 Manifest next update: Sat 30 Aug 2025 01:19:13 +0000 Files and hashes: 1: Lz71uQE3FOMXTGcArgSCTi8FwjA.crl (hash: PvyG50phnytN/e4BvtS+HmcvlBbJfCF/WXOqtQR1s8M=) 2: 19E46D60D0F711EC8673072FC4F9AE02.roa (hash: MW8b0lzbn7akooUbZ8tV+oRNYmXktBHymwJPvbPr0T4=) 3: 69C96612D0F411EC8DAD6D11C4F9AE02.roa (hash: zRGHLr8o7A/D/r9KWR7LY3IvuquDXPxtjtwrPymfsx8=) 4: 196C52A8D0F711EC8673072FC4F9AE02.roa (hash: pmgvt39f/aMkunvyVMO6rfLmljyqEtakdw2Wz0MGd3o=) 5: 6A430D5AD0F411EC8DAD6D11C4F9AE02.roa (hash: Vk4lMkqK5ng6B+iZp/Sl6mPlRDRoZ3QpBy8plRdehn4=) 6: 1BC3E9F8D0F711EC8673072FC4F9AE02.roa (hash: RV0bq4XHGKUuOS8T3WS7G4aUlSWl2to/4furDRifxYQ=) 7: 6920E4D8D0F411EC8DAD6D11C4F9AE02.roa (hash: 6/3DevyJRKnv1xx6SHWcr3LVBgvTH0u4H55ECTrHATk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230 Validity Not Before: Aug 23 01:19:13 2025 GMT Not After : Aug 30 01:19:13 2025 GMT Subject: CN=68a91711-226d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c2:b3:9a:bb:37:36:06:96:bc:f5:c5:0c:35: ed:a1:d8:3f:18:5e:bc:75:5a:91:3c:1c:df:02:4b: 7e:cd:77:a3:1b:a8:f1:ec:51:4a:35:67:e0:87:e8: 6f:6b:82:99:b7:3e:84:2d:c6:e1:00:59:97:b5:ba: 43:52:a1:8f:93:71:9e:97:3f:6b:fc:02:b0:bb:e0: b1:a1:d3:e9:32:0c:d1:4b:2f:7c:a9:38:cf:42:58: 12:6a:c3:b2:1c:32:d3:a9:f0:37:63:9d:89:71:df: 73:97:ca:a0:50:d1:a2:08:a4:78:16:d2:9b:73:a5: 4f:ba:a2:b8:dd:f8:f0:51:1b:3e:8e:c9:c6:39:91: 17:c6:fe:6a:19:02:35:32:5d:33:7e:d7:c1:07:e9: 20:3e:ca:33:c4:8d:a1:5d:fe:a8:0d:cc:99:bb:1d: 8d:b0:69:51:20:73:ec:7b:3b:78:2b:80:2b:0a:9b: d8:16:f6:af:53:5b:c2:54:08:ac:81:93:37:2a:e9: 4b:5f:81:f0:4a:f5:3a:7d:b7:5d:7b:e9:dc:8c:96: 35:d4:85:91:7c:74:90:f0:ab:e1:19:91:36:02:44: 50:8e:07:17:04:57:89:2e:e2:22:8f:a5:e6:97:0c: fc:42:71:fd:a8:a4:17:b8:9e:20:94:27:0c:78:aa: f1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:6C:9E:AC:1C:70:16:EA:49:AB:BD:83:68:50:43:3A:3A:AC:F6:9B X509v3 Authority Key Identifier: keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:e5:8a:aa:82:58:40:fc:81:4b:8e:e6:50:71:14:be:79:dc: b0:89:e0:20:d4:c0:33:29:54:7f:b8:11:f6:67:df:be:72:9c: 7e:21:8f:b9:2f:09:15:4c:b7:86:58:dc:36:96:97:41:fd:54: 58:bc:7c:95:24:ad:80:35:0b:2e:f2:3b:a8:f3:f9:27:dd:5e: 49:26:09:51:a4:c7:95:54:fe:ef:be:e7:30:b3:89:f6:47:76: 49:d0:c5:e3:55:0c:50:dd:ba:38:90:35:74:ab:1f:ef:c0:95: 28:76:40:ff:f4:d2:1f:bb:e5:63:7e:cd:93:12:52:73:6f:85: aa:bd:30:42:93:21:92:5b:de:11:19:d6:8a:31:71:6d:d2:2e: 09:8c:9e:00:ca:6e:bf:5b:05:2b:7b:df:c7:ee:c9:96:38:01: 94:9f:1e:8c:83:62:8a:c0:ba:c4:1d:a8:6c:09:a9:e9:77:b2: 18:fa:8a:c7:85:5e:53:f7:c0:4f:20:d4:4a:6e:a0:f3:2f:7a: 7a:cc:4f:f5:68:9f:a7:08:a6:c6:dc:3a:8f:e4:8e:98:5b:92: b0:42:15:37:6a:91:e9:59:e3:f3:1b:97:7c:1b:29:2a:ee:3f: f5:cd:97:d5:37:4f:70:49:d4:b5:82:d7:13:9f:4d:71:df:a4: 2e:c1:e0:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ2QjExMTAvBgNVBAUTKDJGM0VGNUI5MDEzNzE0RTMxNzRDNjcwMEFFMDQ4MjRF MkYwNUMyMzAwHhcNMjUwODIzMDExOTEzWhcNMjUwODMwMDExOTEzWjAYMRYwFAYD VQQDEw02OGE5MTcxMS0yMjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sKzmrs3NgaWvPXFDDXtodg/GF68dVqRPBzfAkt+zXejG6jx7FFKNWfgh+hv a4KZtz6ELcbhAFmXtbpDUqGPk3Gelz9r/AKwu+CxodPpMgzRSy98qTjPQlgSasOy HDLTqfA3Y52Jcd9zl8qgUNGiCKR4FtKbc6VPuqK43fjwURs+jsnGOZEXxv5qGQI1 Ml0zftfBB+kgPsozxI2hXf6oDcyZux2NsGlRIHPsezt4K4ArCpvYFvavU1vCVAis gZM3KulLX4HwSvU6fbdde+ncjJY11IWRfHSQ8KvhGZE2AkRQjgcXBFeJLuIij6Xm lwz8QnH9qKQXuJ4glCcMeKrxPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpsnqwc cBbqSau9g2hQQzo6rPabMB8GA1UdIwQYMBaAFC8+9bkBNxTjF0xnAK4Egk4vBcIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDZCMS85QTBFQ0UxMEQw RjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZPTVhUR2NBcmdTQ1RpOEZ3 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x6NzF1UUUzRk9NWFRHY0FyZ1NDVGk4RndqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDZCMS85QTBFQ0UxMEQwRjAxMUVDOEVDREJGNjNDNEY5QUUwMi9MejcxdVFFM0ZP TVhUR2NBcmdTQ1RpOEZ3akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV5YqqglhA/IFLjuZQcRS+edywieAg1MAzKVR/uBH2Z9++cpx+IY+5 LwkVTLeGWNw2lpdB/VRYvHyVJK2ANQsu8juo8/kn3V5JJglRpMeVVP7vvucws4n2 R3ZJ0MXjVQxQ3bo4kDV0qx/vwJUodkD/9NIfu+Vjfs2TElJzb4WqvTBCkyGSW94R GdaKMXFt0i4JjJ4Aym6/WwUre9/H7smWOAGUnx6Mg2KKwLrEHahsCanpd7IY+orH hV5T98BPINRKbqDzL3p6zE/1aJ+nCKbG3DqP5I6YW5KwQhU3apHpWePzG5d8Gykq 7j/1zZfVN09wSdS1gtcTn01x36QuweA8 -----END CERTIFICATE-----Generated at Sat Aug 23 16:11:56 2025 by rpki-client