$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft File: lDuBQuFVPslGJaRyTlaYKhVY_pw.mft (raw, json) Hash identifier: LmkHZ5zOBLxd/ITxOvScnw2vaMq8MR+xxmesqOL5xwg= Subject key identifier: 4E:99:F4:B2:45:96:64:07:9F:CF:E6:92:86:87:83:FE:4A:07:16:7B Authority key identifier: 94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C Certificate issuer: /CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C Certificate serial: 17BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft Manifest number: 1FE9 Signing time: Fri 22 Aug 2025 16:40:31 +0000 Manifest this update: Fri 22 Aug 2025 16:40:31 +0000 Manifest next update: Fri 29 Aug 2025 16:40:31 +0000 Files and hashes: 1: lDuBQuFVPslGJaRyTlaYKhVY_pw.crl (hash: Fl8IZprGsZu3UVswHco50pZck83eaj+QK3aDlDWq0hQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6079 (0x17bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C Validity Not Before: Aug 22 16:40:31 2025 GMT Not After : Aug 29 16:40:31 2025 GMT Subject: CN=68a89d7f-ee88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:51:d7:da:19:d1:e0:4a:e6:18:b8:1b:b6:0a: 0d:49:ea:0e:66:c9:6f:61:8c:84:bf:ee:c3:8b:70: 95:4b:0a:73:24:36:63:38:9d:f0:3d:47:21:15:16: bd:96:f9:e4:0d:d1:5e:c8:92:1b:c4:30:6e:a3:7c: a4:04:52:f5:42:d8:63:49:22:fc:fe:d3:96:16:bf: 61:a0:4f:7c:73:f6:ca:58:2d:6e:f0:25:08:f7:24: ae:b2:92:dc:c4:a9:67:3e:04:83:8f:14:8b:9f:26: 40:20:b7:e1:d5:79:7e:1a:e0:39:59:d3:7f:48:a4: 93:b9:1f:0d:91:42:47:b0:c9:de:c6:9b:3c:41:5b: 8e:70:30:b4:6f:27:21:f1:bd:6b:26:ef:6d:06:7c: a6:cd:df:66:a7:32:20:e7:77:ef:80:b1:dd:dc:75: 42:bd:f8:ef:07:69:1c:38:e3:4a:73:f1:97:d6:39: 5f:90:02:86:a1:b3:ac:b0:c7:ef:88:7f:d7:2e:98: 90:84:04:04:d1:3c:20:c7:33:1f:25:c7:7a:1f:0f: dc:5d:ee:d7:b1:a7:f1:c5:bd:ac:1f:79:bb:ec:98: c4:c4:08:84:e7:33:92:1d:bf:06:2d:ac:7c:00:c7: 6a:dd:74:f6:ea:f6:42:a3:35:26:b7:80:ff:d4:8c: 72:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:99:F4:B2:45:96:64:07:9F:CF:E6:92:86:87:83:FE:4A:07:16:7B X509v3 Authority Key Identifier: keyid:94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:59:09:a8:52:8f:b8:12:3c:0c:49:0a:cc:1a:88:e4:b8:68: 4d:90:67:77:d1:c9:e5:13:32:1d:3c:0e:cb:ee:d0:33:60:0d: fb:0b:59:b4:97:a3:c8:eb:19:8d:33:b6:d4:34:74:f3:0c:de: e8:d9:8d:9a:7e:cb:cd:9c:56:6d:45:76:76:a7:1a:09:08:98: 33:9c:b2:3b:2d:f5:95:26:05:25:bb:18:76:3f:d0:bf:ae:1c: b0:09:5e:16:6d:d7:86:5e:77:cb:99:b5:f9:73:de:c2:f6:08: 2d:e2:9e:07:83:7f:b7:c0:3e:c8:ce:76:22:26:93:f8:87:34: db:4d:d6:69:cc:2a:4d:54:d2:c9:a4:68:39:f3:31:19:49:84: f5:81:a3:0b:0b:c8:25:50:87:18:50:bb:55:6c:4d:64:19:70: 38:e1:34:2f:98:f8:0d:f8:95:87:8b:97:1f:84:57:b7:f0:e1: d1:62:ee:38:b9:ea:ce:e7:e5:fa:49:1f:b0:58:06:2e:c4:88: 92:02:be:50:f1:56:66:02:10:c1:a1:10:1c:9a:2b:6f:cd:88: d4:f9:90:62:a6:ba:64:06:5f:47:7d:c5:4e:3d:ca:f9:02:84: 34:ea:7c:7d:6b:76:24:bd:e9:dc:a4:f3:76:df:f0:0f:cb:b6: 2e:ce:37:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDk0M0I4MTQyRTE1NTNFQzk0NjI1QTQ3MjRFNTY5ODJB MTU1OEZFOUMwHhcNMjUwODIyMTY0MDMxWhcNMjUwODI5MTY0MDMxWjAYMRYwFAYD VQQDEw02OGE4OWQ3Zi1lZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA91HX2hnR4ErmGLgbtgoNSeoOZslvYYyEv+7Di3CVSwpzJDZjOJ3wPUchFRa9 lvnkDdFeyJIbxDBuo3ykBFL1QthjSSL8/tOWFr9hoE98c/bKWC1u8CUI9ySuspLc xKlnPgSDjxSLnyZAILfh1Xl+GuA5WdN/SKSTuR8NkUJHsMnexps8QVuOcDC0bych 8b1rJu9tBnymzd9mpzIg53fvgLHd3HVCvfjvB2kcOONKc/GX1jlfkAKGobOssMfv iH/XLpiQhAQE0TwgxzMfJcd6Hw/cXe7Xsafxxb2sH3m77JjExAiE5zOSHb8GLax8 AMdq3XT26vZCozUmt4D/1IxyrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6Z9LJF lmQHn8/mkoaHg/5KBxZ7MB8GA1UdIwQYMBaAFJQ7gULhVT7JRiWkck5WmCoVWP6c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9sRHVCUXVGVlBzbEdKYVJ5VGxhWUtoVllf cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xEdUJRdUZWUHNsR0phUnlUbGFZS2hWWV9wdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9sRHVCUXVGVlBz bEdKYVJ5VGxhWUtoVllfcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDWQmoUo+4EjwMSQrMGojkuGhNkGd30cnlEzIdPA7L7tAzYA37C1m0 l6PI6xmNM7bUNHTzDN7o2Y2afsvNnFZtRXZ2pxoJCJgznLI7LfWVJgUluxh2P9C/ rhywCV4WbdeGXnfLmbX5c97C9ggt4p4Hg3+3wD7IznYiJpP4hzTbTdZpzCpNVNLJ pGg58zEZSYT1gaMLC8glUIcYULtVbE1kGXA44TQvmPgN+JWHi5cfhFe38OHRYu44 uerO5+X6SR+wWAYuxIiSAr5Q8VZmAhDBoRAcmitvzYjU+ZBiprpkBl9HfcVOPcr5 AoQ06nx9a3YkvencpPN23/APy7Yuzjf2 -----END CERTIFICATE-----Generated at Sat Aug 23 20:21:29 2025 by rpki-client