$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: nxxIiOwjnuxINk5ZUsmncQN9nI3LuqvuFBZpqHK8R4Y= Subject key identifier: 0B:4E:6E:E4:AD:1C:4A:27:8A:51:6C:0E:E7:0F:64:57:C0:62:F4:6C Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 0264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 025E Signing time: Sat 23 Aug 2025 02:01:20 +0000 Manifest this update: Sat 23 Aug 2025 02:01:19 +0000 Manifest next update: Sat 30 Aug 2025 02:01:19 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: vnah6fNVyhH2q+Ww8qMWk6wddE9TJKBbdpGZp3AMlsI=) 2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw=) 3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: 4W6/p+0KqdQzOWI5KzYsI4xB+6G+0sO88djovDswBB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 612 (0x264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Aug 23 02:01:19 2025 GMT Not After : Aug 30 02:01:19 2025 GMT Subject: CN=68a920f0-d5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:19:55:3b:9f:93:85:a5:ce:b0:83:77:78:5d: 35:12:63:1d:37:f0:a6:27:36:ad:73:de:4b:e2:b1: c0:0b:95:5c:39:0c:56:6f:17:02:d5:12:20:5e:57: 59:62:06:c6:5b:51:33:4a:8d:97:fa:c9:6b:4b:99: 66:9c:1d:5c:ce:7c:4c:59:a1:42:27:0f:48:28:40: d0:19:e1:40:50:53:3a:28:07:35:a1:d5:cb:df:dc: 5f:eb:fa:7a:55:97:fb:e4:06:07:4d:10:94:d9:c2: b1:17:93:92:f4:6b:74:70:8b:e2:57:fb:7b:9b:06: a3:56:45:fc:98:90:d5:13:7d:0e:78:72:15:78:34: 92:fb:9d:af:e0:a9:31:be:c4:d4:96:88:47:19:f3: a3:f8:53:0d:50:c4:2a:d4:2e:2b:40:6e:d9:45:5d: af:51:6e:04:50:18:31:be:fd:68:7f:c8:c7:c6:d4: 3c:86:e4:aa:41:50:8a:2c:0b:e1:bc:c1:35:c6:6b: c9:00:69:8a:31:7c:00:07:0c:3d:20:6b:01:76:17: f5:d9:0d:84:83:9e:a0:0e:f7:3b:18:5a:08:7f:45: e6:19:ad:bb:29:be:4a:48:b1:cd:ea:b1:72:34:3c: 19:2a:fb:f7:8b:7d:b6:bb:40:85:ec:92:58:48:39: c8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4E:6E:E4:AD:1C:4A:27:8A:51:6C:0E:E7:0F:64:57:C0:62:F4:6C X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:15:e6:e3:d0:bf:5b:a6:a3:02:32:8e:08:a4:ba:06:93:97: 80:e1:67:1f:fe:38:8f:1c:d0:7f:e9:18:06:1b:e1:56:15:10: 07:28:84:f0:c1:0b:76:2e:ff:25:a1:88:9d:c4:d0:2e:1c:0f: d0:02:84:be:ef:37:d5:49:9f:d3:11:38:0f:69:42:a1:2e:b7: 24:7f:59:f2:94:8e:4e:e6:4f:84:72:05:76:bc:8c:a8:d8:67: d0:11:86:d0:c4:67:61:c7:b9:f0:0e:a7:95:a9:a5:ca:7e:a9: 0c:05:12:34:81:d3:c6:11:63:60:a6:fb:8c:41:b5:36:df:eb: 37:e9:24:6a:f4:3c:3c:31:fd:04:b2:03:58:e9:93:71:1b:04: d6:c6:bf:97:1e:be:44:1f:a7:4b:fe:a5:52:d8:ba:ee:07:88: 39:f0:14:d5:6a:53:ea:ac:44:15:26:41:24:b5:ba:41:cd:6b: d1:9a:05:eb:d6:06:8b:35:2e:52:39:6a:0b:d9:ca:07:60:c9: 50:81:8c:12:e3:f5:97:d6:06:7e:cf:3f:91:18:c7:7d:02:b9: 0e:05:0e:bd:fc:51:cb:fb:bb:7e:4f:00:09:f2:c3:8d:a7:dc: 9c:59:7f:94:31:63:a1:7e:4b:80:ce:ef:0b:22:89:fe:c3:bc: e5:c9:bf:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjUwODIzMDIwMTE5WhcNMjUwODMwMDIwMTE5WjAYMRYwFAYD VQQDEw02OGE5MjBmMC1kNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hlVO5+ThaXOsIN3eF01EmMdN/CmJzatc95L4rHAC5VcOQxWbxcC1RIgXldZ YgbGW1EzSo2X+slrS5lmnB1cznxMWaFCJw9IKEDQGeFAUFM6KAc1odXL39xf6/p6 VZf75AYHTRCU2cKxF5OS9Gt0cIviV/t7mwajVkX8mJDVE30OeHIVeDSS+52v4Kkx vsTUlohHGfOj+FMNUMQq1C4rQG7ZRV2vUW4EUBgxvv1of8jHxtQ8huSqQVCKLAvh vME1xmvJAGmKMXwABww9IGsBdhf12Q2Eg56gDvc7GFoIf0XmGa27Kb5KSLHN6rFy NDwZKvv3i322u0CF7JJYSDnItQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtObuSt HEonilFsDucPZFfAYvRsMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCFebj0L9bpqMCMo4IpLoGk5eA4Wcf/jiPHNB/6RgGG+FWFRAHKITw wQt2Lv8loYidxNAuHA/QAoS+7zfVSZ/TETgPaUKhLrckf1nylI5O5k+EcgV2vIyo 2GfQEYbQxGdhx7nwDqeVqaXKfqkMBRI0gdPGEWNgpvuMQbU23+s36SRq9Dw8Mf0E sgNY6ZNxGwTWxr+XHr5EH6dL/qVS2LruB4g58BTValPqrEQVJkEktbpBzWvRmgXr 1gaLNS5SOWoL2coHYMlQgYwS4/WX1gZ+zz+RGMd9ArkOBQ69/FHL+7t+TwAJ8sON p9ycWX+UMWOhfkuAzu8LIon+w7zlyb9i -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:18 2025 by rpki-client