$ rpki-client -vvf rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft File: LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft (raw, json) Hash identifier: +lEo3bS7wlgif7CrZrs+fAbKT8vXLVV4DPCLPpjS3w4= Subject key identifier: 72:2F:7F:66:0E:C4:DF:88:09:4D:28:FE:16:44:32:5E:4B:2E:A1:AC Authority key identifier: 2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 Certificate issuer: /CN=A916AE6A/serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Certificate serial: 34B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft Manifest number: 34B1 Signing time: Fri 22 Aug 2025 15:19:16 +0000 Manifest this update: Fri 22 Aug 2025 15:19:15 +0000 Manifest next update: Fri 29 Aug 2025 15:19:15 +0000 Files and hashes: 1: LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl (hash: JBa5QfnLOIGx0VmBD32fZbnV6ofHDUQ73/6+BMmMjfM=) 2: 22355CF4DE8411EDBC551D19C4F9AE02.roa (hash: cD8CzWCOccX7amwfxtqgHIbE7YwiBohTqztQjp4x6HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13493 (0x34b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AE6A, serialNumber=2C88F38F6D4F84F2C191A3FA2B1915AE08988734 Validity Not Before: Aug 22 15:19:15 2025 GMT Not After : Aug 29 15:19:15 2025 GMT Subject: CN=68a88a74-54b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:f6:98:35:ba:90:7a:15:b4:fd:fd:6d:df: 21:e3:80:0b:33:92:f3:3a:e1:43:c8:ab:7e:0e:24: f3:60:22:a0:17:e9:82:a6:dd:a0:c3:0a:1b:1e:68: c3:06:19:f4:5a:96:66:ab:4d:b5:bc:d5:5e:10:74: d4:ae:f5:10:f7:19:a6:10:f3:02:39:c6:4c:39:64: 8d:2e:d9:99:f9:6d:e9:7e:ec:3c:74:08:a2:98:8e: 6e:ba:b9:c7:91:45:db:05:fe:7a:d8:ce:c0:20:16: 5f:3a:f2:0f:2e:74:5d:45:aa:df:28:d8:8f:5c:80: d3:2e:09:ce:e6:44:1d:22:d8:a2:99:7f:9a:55:ed: 8a:56:64:33:86:57:b8:c4:a8:c0:69:b7:65:40:0c: 03:65:ce:f7:35:91:48:e1:a4:de:0a:d1:40:2e:43: d9:7e:b9:c5:c4:14:48:4b:6e:0e:13:fb:db:ba:c9: 9d:f0:5f:80:64:ef:8a:cb:41:a6:f0:29:a0:4d:da: 0f:fe:09:59:cc:51:8c:b9:86:dc:98:16:86:29:3f: be:8c:c4:d1:e8:7a:56:d0:66:90:3a:b3:35:83:8f: a9:01:0c:fa:9b:c0:01:f4:dd:18:45:a8:79:6d:19: 09:98:50:01:79:48:1e:90:25:39:d0:92:5b:ff:4e: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2F:7F:66:0E:C4:DF:88:09:4D:28:FE:16:44:32:5E:4B:2E:A1:AC X509v3 Authority Key Identifier: keyid:2C:88:F3:8F:6D:4F:84:F2:C1:91:A3:FA:2B:19:15:AE:08:98:87:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AE6A/583245B61DAA11E2872AF3A508B02CD2/LIjzj21PhPLBkaP6KxkVrgiYhzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:84:78:5f:42:0b:5c:e5:a9:e5:aa:54:d5:54:ce:84:95:36: 2a:51:74:a3:01:f0:5b:4d:75:7f:f1:51:bc:ed:d8:e7:e1:8a: 7a:69:43:7c:0a:11:11:2d:06:5f:97:e8:47:6f:c5:28:46:cf: b6:9f:c6:75:2b:00:53:26:28:2c:bc:6f:9c:8a:a5:49:75:fd: 6c:89:96:05:76:6a:0d:c5:c7:6c:2f:4b:75:18:79:86:f2:a2: 6a:b9:00:25:b9:60:b3:b6:b9:dd:76:b0:fa:18:fc:9b:b6:b7: e4:bf:1d:7b:aa:82:c6:e4:80:4a:04:3a:30:9a:b2:a6:06:e8: 6b:17:6f:12:52:df:a9:37:24:88:0a:89:c5:37:91:db:d4:47: 6c:29:13:bb:83:2d:ca:a6:61:40:ef:fb:1c:7a:f4:fd:86:83: 65:67:50:2f:b6:22:d5:fd:1e:f5:f2:8c:7d:bf:7d:91:5f:cd: 96:90:c5:89:f5:7c:82:0a:9b:92:82:62:70:e5:d6:a2:f0:f5: ba:1a:57:5d:ad:e1:1b:7b:be:87:e0:60:55:50:fa:9b:cb:0c: 7e:4c:59:fa:c3:9f:be:ab:4c:d3:56:80:e3:87:35:1e:43:d5: 72:d2:6d:25:22:43:97:a5:a1:0a:e0:55:f7:3b:3d:2b:0c:fa: 57:d7:37:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFFNkExMTAvBgNVBAUTKDJDODhGMzhGNkQ0Rjg0RjJDMTkxQTNGQTJCMTkxNUFF MDg5ODg3MzQwHhcNMjUwODIyMTUxOTE1WhcNMjUwODI5MTUxOTE1WjAYMRYwFAYD VQQDEw02OGE4OGE3NC01NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMD2mDW6kHoVtP39bd8h44ALM5LzOuFDyKt+DiTzYCKgF+mCpt2gwwobHmjD Bhn0WpZmq021vNVeEHTUrvUQ9xmmEPMCOcZMOWSNLtmZ+W3pfuw8dAiimI5uurnH kUXbBf562M7AIBZfOvIPLnRdRarfKNiPXIDTLgnO5kQdItiimX+aVe2KVmQzhle4 xKjAabdlQAwDZc73NZFI4aTeCtFALkPZfrnFxBRIS24OE/vbusmd8F+AZO+Ky0Gm 8CmgTdoP/glZzFGMuYbcmBaGKT++jMTR6HpW0GaQOrM1g4+pAQz6m8AB9N0YRah5 bRkJmFABeUgekCU50JJb/05B6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIvf2YO xN+ICU0o/hZEMl5LLqGsMB8GA1UdIwQYMBaAFCyI849tT4TywZGj+isZFa4ImIc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUU2QS81ODMyNDVCNjFE QUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQTEJrYVA2S3hrVnJnaVlo elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xJanpqMjFQaFBMQmthUDZLeGtWcmdpWWh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUU2QS81ODMyNDVCNjFEQUExMUUyODcyQUYzQTUwOEIwMkNEMi9MSWp6ajIxUGhQ TEJrYVA2S3hrVnJnaVloelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHhHhfQgtc5anlqlTVVM6ElTYqUXSjAfBbTXV/8VG87djn4Yp6aUN8 ChERLQZfl+hHb8UoRs+2n8Z1KwBTJigsvG+ciqVJdf1siZYFdmoNxcdsL0t1GHmG 8qJquQAluWCztrnddrD6GPybtrfkvx17qoLG5IBKBDowmrKmBuhrF28SUt+pNySI ConFN5Hb1EdsKRO7gy3KpmFA7/scevT9hoNlZ1AvtiLV/R718ox9v32RX82WkMWJ 9XyCCpuSgmJw5dai8PW6GlddreEbe76H4GBVUPqbywx+TFn6w5++q0zTVoDjhzUe Q9Vy0m0lIkOXpaEK4FX3Oz0rDPpX1zf8 -----END CERTIFICATE-----Generated at Sun Aug 24 00:49:52 2025 by rpki-client