$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft File: d1_lofYadAjf7tR_FEfjRk2lCyo.mft (raw, json) Hash identifier: atq2bQ6d2hOwJK36MzgqBmboMMpgr6zdHal9R+BnhNY= Subject key identifier: A0:9B:83:7D:22:ED:1C:E8:65:45:0B:44:BF:8E:E4:F1:FD:34:4B:DD Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft Manifest number: 0435 Signing time: Sat 23 Aug 2025 00:31:49 +0000 Manifest this update: Sat 23 Aug 2025 00:31:49 +0000 Manifest next update: Sat 30 Aug 2025 00:31:49 +0000 Files and hashes: 1: d1_lofYadAjf7tR_FEfjRk2lCyo.crl (hash: qnUtvcV8SMNSW9rAuJaKhvG5u9XvLY7OYbjQiQUxRZs=) 2: 5B17230CDE9B11EC9AE23269C4F9AE02.roa (hash: iXt8wY4xDmSntkF4mr4ren6r7L4k9/tTpksHGcZedNM=) 3: 57B53F64DE9B11EC9AE23269C4F9AE02.roa (hash: OtRC1FOzJ2VnQ1iDT/pgw77NVRkDqW1cgJOs0qquLx8=) 4: 59D82E00DE9B11EC9AE23269C4F9AE02.roa (hash: z9il2KLvmM35CEJ33D6dQT01IjqffT1KfUHR8PJEmYw=) 5: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (hash: rDIkGkc5RWLLbbHLbXvxxPcvgv9UCQJUW3VRbKAdmkE=) 6: 5879949ADE9B11EC9AE23269C4F9AE02.roa (hash: vJqrrt0bxSwZaP1IHOgSaljOyb8CxyRpUsYkTfCzlUg=) 7: 59230714DE9B11EC9AE23269C4F9AE02.roa (hash: D86sbiTviOSy/5MbuHJAROiiKuXxKjWRrOsJTtvytBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: Aug 23 00:31:49 2025 GMT Not After : Aug 30 00:31:49 2025 GMT Subject: CN=68a90bf5-77a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:78:e5:fb:ab:76:65:7f:a7:f0:69:ec:1f: a9:10:7a:df:88:9b:f7:45:69:97:5a:c5:91:94:0b: 3f:51:d5:c0:25:9a:5a:f0:85:24:88:8d:f6:30:ed: fa:e4:cb:da:ce:2f:a2:3d:2b:bf:aa:53:32:b9:c6: 99:77:0a:7f:f1:d9:1f:64:fa:f3:7a:0c:ba:c0:07: 76:46:07:c4:45:4f:e5:7f:a0:1d:d9:80:06:75:16: 35:de:00:82:92:cd:da:db:f1:6f:b6:64:1a:62:01: d2:67:e1:b9:e2:66:f1:af:88:10:73:d2:60:5e:3e: a0:46:0b:1e:f7:63:1a:c8:af:94:06:c3:dc:66:2c: 16:5f:77:af:d4:57:d4:57:26:4c:55:a4:92:41:a6: 8d:77:b6:02:24:c4:93:02:49:05:61:fb:5b:bd:b3: 7e:38:be:3e:ea:b0:ab:67:a5:5b:60:fd:8f:fa:46: 14:d8:08:23:b6:46:54:ea:f7:13:40:3e:c1:b2:fc: f7:f7:fc:e5:82:9e:bb:45:90:07:67:5b:d2:53:44: 3b:7e:21:93:c9:ea:33:19:71:b6:78:21:0c:6d:0d: 28:b4:a1:8b:ef:97:8d:e1:2c:26:11:ff:83:1a:e4: 8c:a9:94:9b:8d:85:fe:41:50:08:71:8f:a2:5a:cf: 2c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9B:83:7D:22:ED:1C:E8:65:45:0B:44:BF:8E:E4:F1:FD:34:4B:DD X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:bc:9f:7d:7a:0e:de:84:05:f8:a3:ef:37:10:2f:d2:8f:ef: c1:ef:df:db:15:85:03:00:1c:17:fb:79:52:27:5e:a4:6a:91: 27:02:af:87:8f:b9:bb:28:8f:3d:d9:d1:db:ef:38:d5:07:10: f8:d4:e9:0f:7c:a9:85:d5:72:46:8c:89:dc:de:9a:53:75:2f: a1:1e:a9:c0:45:73:1f:cb:a7:03:17:25:44:d8:0e:0e:85:58: 58:36:d6:52:b0:f5:74:7d:5d:72:58:ed:e8:b8:74:35:36:54: 9e:f2:9e:ef:cc:4a:8c:61:f7:f1:22:10:79:fc:e8:ae:13:de: 7a:a7:5b:e6:5b:2d:0c:2e:e0:37:5e:2f:c3:ce:fa:0c:75:6a: b6:88:4e:c1:ce:6f:20:24:ed:30:3e:5f:ac:48:bc:f3:b4:8a: 17:30:7a:2d:97:10:ac:32:07:8b:11:fe:09:ff:26:c4:56:4e: 96:29:83:7c:1c:6e:25:5b:9b:11:ec:e4:cc:9b:56:7d:70:89: 7b:b0:7a:21:b0:26:42:aa:1a:1f:a8:55:73:22:fc:d4:bc:8c: 5f:fd:b6:e0:5b:cb:71:21:55:0c:52:dc:df:84:2a:be:bf:2e: 8a:3e:42:25:e9:ba:ef:95:42:9e:e7:40:6f:37:77:fd:00:33: cb:f8:bc:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjUwODIzMDAzMTQ5WhcNMjUwODMwMDAzMTQ5WjAYMRYwFAYD VQQDEw02OGE5MGJmNS03N2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqId45furdmV/p/Bp7B+pEHrfiJv3RWmXWsWRlAs/UdXAJZpa8IUkiI32MO36 5Mvazi+iPSu/qlMyucaZdwp/8dkfZPrzegy6wAd2RgfERU/lf6Ad2YAGdRY13gCC ks3a2/FvtmQaYgHSZ+G54mbxr4gQc9JgXj6gRgse92MayK+UBsPcZiwWX3ev1FfU VyZMVaSSQaaNd7YCJMSTAkkFYftbvbN+OL4+6rCrZ6VbYP2P+kYU2AgjtkZU6vcT QD7Bsvz39/zlgp67RZAHZ1vSU0Q7fiGTyeozGXG2eCEMbQ0otKGL75eN4SwmEf+D GuSMqZSbjYX+QVAIcY+iWs8sfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCbg30i 7RzoZUULRL+O5PH9NEvdMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OThBMy9FMjE5QjYxQzcxMTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRB amY3dFJfRkVmalJrMmxDeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAvJ99eg7ehAX4o+83EC/Sj+/B79/bFYUDABwX+3lSJ16kapEnAq+H j7m7KI892dHb7zjVBxD41OkPfKmF1XJGjInc3ppTdS+hHqnARXMfy6cDFyVE2A4O hVhYNtZSsPV0fV1yWO3ouHQ1NlSe8p7vzEqMYffxIhB5/OiuE956p1vmWy0MLuA3 Xi/DzvoMdWq2iE7Bzm8gJO0wPl+sSLzztIoXMHotlxCsMgeLEf4J/ybEVk6WKYN8 HG4lW5sR7OTMm1Z9cIl7sHohsCZCqhofqFVzIvzUvIxf/bbgW8txIVUMUtzfhCq+ vy6KPkIl6brvlUKe50BvN3f9ADPL+Lzp -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:25 2025 by rpki-client