$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json) Hash identifier: 358lhBJv5fwp1m3J8krlqkJbS+DDEmzUMH/2+WTJ/T0= Subject key identifier: BE:91:01:1F:94:A1:49:A9:C3:02:52:22:E2:A3:F4:58:A7:73:3A:F5 Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Certificate serial: 0B9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft Manifest number: 0B94 Signing time: Fri 22 Aug 2025 19:07:52 +0000 Manifest this update: Fri 22 Aug 2025 19:07:52 +0000 Manifest next update: Fri 29 Aug 2025 19:07:52 +0000 Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: PAqXzcYCI3RACeUvsm1Wf3LkzfZideP4c4/oCQQHyPQ=) 2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: DFFj/9slvAH+PEbWNXT9e7xoWXrU79TcIDoX6Iil9eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2972 (0xb9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Validity Not Before: Aug 22 19:07:52 2025 GMT Not After : Aug 29 19:07:52 2025 GMT Subject: CN=68a8c008-6198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:b6:4d:65:3e:7a:74:f6:c4:09:c4:8a:46: ad:a6:a4:29:60:ea:65:b2:e4:26:52:99:01:23:98: e1:66:a8:0d:92:a8:d4:da:9a:8b:13:0a:b1:bb:17: 45:29:32:9f:f9:01:0c:b5:63:1e:88:90:dc:66:71: 54:64:b5:28:c4:55:48:ab:c5:2f:e6:24:c8:84:d4: 26:6a:7e:5b:cf:c8:49:27:e1:d3:88:a0:3f:93:60: 8a:b7:4e:9c:40:0e:95:8a:bf:aa:19:e7:94:64:d5: 46:b2:eb:90:20:73:2a:90:3e:42:9d:2c:4b:86:c6: d1:bf:a7:14:37:79:47:d1:98:99:14:18:a4:a8:3c: f6:51:1a:cd:bf:a3:f6:2a:e7:29:07:37:73:98:d4: 07:e2:46:fd:39:59:d3:a4:06:57:54:81:ef:ca:ed: a6:c9:b1:4a:51:e9:38:6f:73:d8:4a:4a:95:f8:32: 9f:84:c1:3b:06:c5:27:86:c7:fd:38:e9:cc:cc:a0: bb:1e:41:9b:03:6b:a8:5f:1c:24:3d:cc:03:86:6f: 89:90:62:28:bf:f0:8b:45:21:11:28:61:3a:1c:ef: d4:67:52:09:58:78:27:e7:43:ab:3f:2a:62:db:54: 31:5f:ac:a0:83:30:ae:53:f4:7a:9c:65:46:2a:2c: 57:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:91:01:1F:94:A1:49:A9:C3:02:52:22:E2:A3:F4:58:A7:73:3A:F5 X509v3 Authority Key Identifier: keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:67:cd:81:02:c0:3a:ce:40:fd:24:2e:dd:a0:7b:cf:ab:f4: 38:54:a5:4e:36:aa:e5:bb:80:7c:29:a8:6a:38:8f:70:31:37: 1a:98:ae:43:d2:d2:ad:8f:5f:c3:2a:76:c4:16:54:b0:9e:93: 72:8d:14:c8:94:05:52:b4:bd:1c:11:c0:1b:78:df:b0:f7:bf: 50:53:1a:be:79:b4:62:57:62:56:aa:82:c2:1f:98:26:e8:38: 75:60:d7:8f:41:67:36:e6:71:81:c5:de:b4:73:cf:9d:17:1b: d3:0f:69:ab:dc:1e:50:5a:00:a9:33:cc:7b:c5:09:a4:00:03: 17:d7:f6:4c:73:d1:24:96:f3:4e:8b:88:bc:75:8f:ee:03:82: e1:ef:a0:6a:64:dd:45:07:0d:14:d7:fc:ec:cb:8b:07:1b:be: cc:a7:4d:be:74:56:d4:6c:cf:5d:cc:d2:e7:a9:3a:73:6a:b5: d9:28:26:1b:7f:29:74:77:6d:a3:b9:25:25:9e:5d:5c:fa:93: 2d:2d:b2:bf:23:36:c1:be:df:61:19:d8:c8:34:8d:51:0a:ce: 2e:30:39:cf:cf:18:87:a4:47:3c:4c:5c:d3:e6:72:cf:39:96: 6a:b6:99:00:b3:6b:3e:1b:c6:6d:5e:42:41:e1:87:5b:d3:70: 91:62:b5:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFRkExMTAvBgNVBAUTKDk0OEZGODc2ODlGQTk0OTExNkY1RjdDODAwRUIxRDcw MUU2NUUzN0IwHhcNMjUwODIyMTkwNzUyWhcNMjUwODI5MTkwNzUyWjAYMRYwFAYD VQQDEw02OGE4YzAwOC02MTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAW2TWU+enT2xAnEikatpqQpYOplsuQmUpkBI5jhZqgNkqjU2pqLEwqxuxdF KTKf+QEMtWMeiJDcZnFUZLUoxFVIq8Uv5iTIhNQman5bz8hJJ+HTiKA/k2CKt06c QA6Vir+qGeeUZNVGsuuQIHMqkD5CnSxLhsbRv6cUN3lH0ZiZFBikqDz2URrNv6P2 KucpBzdzmNQH4kb9OVnTpAZXVIHvyu2mybFKUek4b3PYSkqV+DKfhME7BsUnhsf9 OOnMzKC7HkGbA2uoXxwkPcwDhm+JkGIov/CLRSERKGE6HO/UZ1IJWHgn50OrPypi 21QxX6yggzCuU/R6nGVGKixXxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6RAR+U oUmpwwJSIuKj9Finczr1MB8GA1UdIwQYMBaAFJSP+HaJ+pSRFvX3yADrHXAeZeN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEVGQS9FMEM5NTFDRTMw NjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxKRVc5ZmZJQU9zZGNCNWw0 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJXzRkb242bEpFVzlmZklBT3NkY0I1bDQzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEVGQS9FMEM5NTFDRTMwNjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxK RVc5ZmZJQU9zZGNCNWw0M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKZ82BAsA6zkD9JC7doHvPq/Q4VKVONqrlu4B8KahqOI9wMTcamK5D 0tKtj1/DKnbEFlSwnpNyjRTIlAVStL0cEcAbeN+w979QUxq+ebRiV2JWqoLCH5gm 6Dh1YNePQWc25nGBxd60c8+dFxvTD2mr3B5QWgCpM8x7xQmkAAMX1/ZMc9EklvNO i4i8dY/uA4Lh76BqZN1FBw0U1/zsy4sHG77Mp02+dFbUbM9dzNLnqTpzarXZKCYb fyl0d22juSUlnl1c+pMtLbK/IzbBvt9hGdjINI1RCs4uMDnPzxiHpEc8TFzT5nLP OZZqtpkAs2s+G8ZtXkJB4Ydb03CRYrWh -----END CERTIFICATE-----Generated at Sat Aug 23 17:20:07 2025 by rpki-client