$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json) Hash identifier: +/giJBBZkgilK7LaG7w88tgQa58Lu5gNmLd7Z6USCNw= Subject key identifier: A0:EC:CB:B4:D7:78:4A:B3:41:43:E5:FD:07:36:02:68:66:FD:C5:A7 Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft Manifest number: 064F Signing time: Fri 22 Aug 2025 22:52:02 +0000 Manifest this update: Fri 22 Aug 2025 22:52:02 +0000 Manifest next update: Fri 29 Aug 2025 22:52:02 +0000 Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: mRo9cby4qkNKRwYy1XmwiDrNsntPCwcCfnPbhtdFHOE=) 2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: syoIEmBkPUbXHyU102SwHVQfhD/obq6DIZMw3IYU94w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Validity Not Before: Aug 22 22:52:02 2025 GMT Not After : Aug 29 22:52:02 2025 GMT Subject: CN=68a8f492-e351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:06:66:fa:d5:e3:8b:6a:52:7c:03:e9:0b: d4:e2:23:30:06:bc:79:21:91:ac:65:94:ce:5b:3f: 02:b1:98:59:a6:fe:ed:36:1f:b6:b0:b2:c1:fd:c6: 11:d5:34:ab:a3:39:dd:24:1a:84:10:4b:b6:dd:02: bf:ae:d4:1c:6e:a1:91:5a:ff:cd:96:9a:a3:4e:c8: 04:48:40:81:d6:37:7a:5d:f6:04:a1:1e:ec:d7:63: 11:af:f8:80:ac:32:ce:a8:f9:5c:54:61:47:ed:36: 34:27:d0:24:65:32:c7:81:da:89:d9:34:1a:be:17: 38:a3:f4:02:09:29:67:a5:85:c1:0a:29:97:5b:d6: 3e:39:83:30:ef:c2:aa:50:bd:ad:14:ae:1a:b1:4f: 5a:d8:ed:51:1b:15:c3:bb:d8:69:2b:3a:85:56:96: 72:02:eb:41:90:8a:b2:0e:0b:e4:45:d3:9e:42:1f: e9:68:ee:83:a3:c6:59:f0:27:24:85:90:e6:97:c1: 21:d2:a1:de:fe:fb:6b:75:57:59:d9:f3:7f:06:ad: ea:c4:86:97:67:ae:93:0b:87:f6:4c:b9:ff:51:cc: 35:75:d1:e6:32:5d:da:56:45:ea:fe:89:11:b1:76: 79:94:a3:0e:46:a0:a4:1e:e7:ed:1f:64:2f:6c:7e: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EC:CB:B4:D7:78:4A:B3:41:43:E5:FD:07:36:02:68:66:FD:C5:A7 X509v3 Authority Key Identifier: keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:37:90:b6:be:f2:04:24:9f:8e:02:68:5b:62:47:62:08:87: dd:32:19:51:b2:e7:2f:13:c9:32:b9:69:61:e8:b9:44:81:8e: 1a:e6:f2:03:55:08:39:86:31:18:03:12:80:2e:7a:6a:f0:f7: 28:f8:5f:58:96:ed:13:67:a2:00:9e:98:0f:58:ab:21:3b:9b: c5:e3:31:27:6d:80:7c:9a:26:44:8e:ee:a8:14:95:80:3b:79: 8c:2c:6e:5f:84:cb:9a:89:2a:8d:e7:2a:f6:e2:6d:d5:d3:a7: c2:db:e7:80:ca:69:3b:3e:7a:7e:f5:2e:39:1d:8f:42:93:b8: f5:18:10:b1:67:cd:9d:ef:e0:3b:ae:bb:c5:cd:8f:12:90:73: f2:cd:e4:bf:93:b9:fa:0a:89:12:dd:fd:21:54:ab:ae:7d:63: 84:c3:ce:10:c0:90:d5:87:42:a6:55:e0:29:20:74:da:88:b1: e3:41:0f:54:25:2b:ef:86:aa:ee:43:7d:a7:f5:36:eb:13:b5: c8:2b:53:8a:f0:e5:6f:15:2c:7f:cd:e2:e3:8c:89:ab:f1:00: c0:b7:2b:51:f3:04:92:01:19:28:b1:01:c5:55:c0:e5:e6:6d: 4f:3f:99:d6:36:5a:86:f2:25:36:5b:42:f0:4b:fb:e1:e1:f8: 3f:b3:41:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUyRTMxMTAvBgNVBAUTKDJDRkE0RDhGNDQxMEE5NTFBQTE2NEU1NTRDNjU4MDVE OENGODg5NUMwHhcNMjUwODIyMjI1MjAyWhcNMjUwODI5MjI1MjAyWjAYMRYwFAYD VQQDEw02OGE4ZjQ5Mi1lMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnoGZvrV44tqUnwD6QvU4iMwBrx5IZGsZZTOWz8CsZhZpv7tNh+2sLLB/cYR 1TSrozndJBqEEEu23QK/rtQcbqGRWv/NlpqjTsgESECB1jd6XfYEoR7s12MRr/iA rDLOqPlcVGFH7TY0J9AkZTLHgdqJ2TQavhc4o/QCCSlnpYXBCimXW9Y+OYMw78Kq UL2tFK4asU9a2O1RGxXDu9hpKzqFVpZyAutBkIqyDgvkRdOeQh/paO6Do8ZZ8Cck hZDml8Eh0qHe/vtrdVdZ2fN/Bq3qxIaXZ66TC4f2TLn/Ucw1ddHmMl3aVkXq/okR sXZ5lKMORqCkHuftH2QvbH6bCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDsy7TX eEqzQUPl/Qc2Amhm/cWnMB8GA1UdIwQYMBaAFCz6TY9EEKlRqhZOVUxlgF2M+Ilc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTJFMy8yOTQ1M0I3NEEw NzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFWR3FGazVWVEdXQVhZejRp VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQcE5qMFFRcVZHcUZrNVZUR1dBWFl6NGlWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTJFMy8yOTQ1M0I3NEEwNzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFW R3FGazVWVEdXQVhZejRpVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLN5C2vvIEJJ+OAmhbYkdiCIfdMhlRsucvE8kyuWlh6LlEgY4a5vID VQg5hjEYAxKALnpq8Pco+F9Ylu0TZ6IAnpgPWKshO5vF4zEnbYB8miZEju6oFJWA O3mMLG5fhMuaiSqN5yr24m3V06fC2+eAymk7Pnp+9S45HY9Ck7j1GBCxZ82d7+A7 rrvFzY8SkHPyzeS/k7n6CokS3f0hVKuufWOEw84QwJDVh0KmVeApIHTaiLHjQQ9U JSvvhqruQ32n9TbrE7XIK1OK8OVvFSx/zeLjjImr8QDAtytR8wSSARkosQHFVcDl 5m1PP5nWNlqG8iU2W0LwS/vh4fg/s0FJ -----END CERTIFICATE-----Generated at Sat Aug 23 19:08:14 2025 by rpki-client