$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft File: lRKEJmSsUb9nhVvG5PRr41UaTaM.mft (raw, json) Hash identifier: 4QAQsj1S5OVkZJVAical4ICLuaaGwE5WVZn8imYzsho= Subject key identifier: 7E:56:85:01:3A:00:7C:0C:BF:68:39:FD:22:EB:E7:99:8C:1C:1C:0D Authority key identifier: 95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 Certificate issuer: /CN=A916B7B2/serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Certificate serial: 02E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft Manifest number: 02DA Signing time: Sat 23 Aug 2025 01:36:31 +0000 Manifest this update: Sat 23 Aug 2025 01:36:31 +0000 Manifest next update: Sat 30 Aug 2025 01:36:31 +0000 Files and hashes: 1: lRKEJmSsUb9nhVvG5PRr41UaTaM.crl (hash: GTAOkohrQdpcyi5sa1MajFkKq9xsissU8pcY4J8u368=) 2: 2A4EA10EFB7F11EC8FB58E4AC4F9AE02.roa (hash: OoPJ9LoUgq0tc4y12+mstCxI2lyn1TigiiywxuD8Tjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 738 (0x2e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B7B2, serialNumber=9512842664AC51BF67855BC6E4F46BE3551A4DA3 Validity Not Before: Aug 23 01:36:31 2025 GMT Not After : Aug 30 01:36:31 2025 GMT Subject: CN=68a91b1f-5840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:be:dd:87:62:78:70:f3:a3:ad:14:96:b7: 4b:cc:eb:53:18:36:1b:50:a9:b5:dd:ef:5a:76:63: b4:8e:cc:88:94:de:32:73:5d:31:f9:e9:56:c7:d5: 9c:dd:da:26:01:67:81:fd:ed:8d:03:f3:f2:04:04: 40:d2:d7:dd:6a:f0:c6:26:e4:f8:e7:ef:9a:92:9a: d5:31:4d:65:f0:29:99:83:49:bd:bc:54:52:58:69: dd:0a:2a:13:6e:10:86:63:6e:49:f4:e5:a5:dd:1f: 09:6b:6e:cb:26:88:64:e2:08:e9:b5:07:8b:61:a8: 9f:ab:af:69:33:bf:c6:0b:44:56:33:9b:0c:e6:54: 13:44:9b:b9:f3:5a:cb:e6:48:3f:e0:90:d7:fe:be: be:92:4f:ba:bf:9b:2f:b6:74:b6:54:02:85:22:9a: 68:22:58:10:9c:58:82:17:47:ad:ed:c6:6b:65:39: 21:1b:fd:4c:36:d4:1f:ae:55:1a:d2:94:f2:57:8f: 21:92:ee:eb:25:c8:bd:f6:db:5a:63:73:97:49:ad: c0:48:81:7c:9a:18:bb:5c:9b:57:49:02:fe:ec:df: d3:02:d7:f9:b2:e4:e1:a0:88:90:33:95:08:e9:f2: e0:6b:22:63:75:d3:eb:fb:31:7a:b2:30:9c:6c:32: 5a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:56:85:01:3A:00:7C:0C:BF:68:39:FD:22:EB:E7:99:8C:1C:1C:0D X509v3 Authority Key Identifier: keyid:95:12:84:26:64:AC:51:BF:67:85:5B:C6:E4:F4:6B:E3:55:1A:4D:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRKEJmSsUb9nhVvG5PRr41UaTaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7B2/0E632194FB7B11ECA87A872EC4F9AE02/lRKEJmSsUb9nhVvG5PRr41UaTaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:f4:83:fe:91:57:b0:4f:ee:48:b4:55:a9:59:15:28:c1:bc: 28:e8:64:73:ab:92:b0:6f:4d:21:88:63:5c:b8:a2:bc:5e:d9: 8e:cb:35:f3:04:56:84:60:45:5c:4e:85:00:a8:57:cf:ca:a0: 90:60:1e:fe:47:d4:79:71:11:f3:24:95:9f:f7:ed:34:1b:58: e9:b8:cd:25:78:50:16:c4:a0:ca:9f:6a:ad:7b:ad:22:18:b2: 63:06:25:da:f5:6c:1b:8d:14:5c:b9:26:33:af:e9:91:98:a2: 17:31:14:33:93:68:17:10:8f:05:53:71:56:b6:78:ef:11:bf: 03:e3:9d:c7:33:c8:0f:a3:c6:47:18:e5:bd:68:2e:c0:77:5b: 41:9a:ec:4b:fe:03:81:ec:7a:17:b1:f3:93:a6:fd:44:7c:a0: 0b:c9:37:82:f3:b8:76:11:8d:b7:68:b7:dd:74:ea:0f:2b:59: a4:3a:a2:ca:ec:e2:32:17:92:5c:5d:2b:43:00:64:13:83:a6: 34:79:4d:54:d7:42:dd:3a:f2:b4:e5:dd:5a:23:a7:32:2e:bf: b3:e5:40:79:98:e5:e5:06:69:ee:40:b5:06:c7:1b:29:57:6d: e5:2b:d7:98:cd:ff:f8:09:6c:ed:46:a7:7c:7b:6c:e2:95:fc: ec:92:c0:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI3QjIxMTAvBgNVBAUTKDk1MTI4NDI2NjRBQzUxQkY2Nzg1NUJDNkU0RjQ2QkUz NTUxQTREQTMwHhcNMjUwODIzMDEzNjMxWhcNMjUwODMwMDEzNjMxWjAYMRYwFAYD VQQDEw02OGE5MWIxZi01ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYC+3YdieHDzo60UlrdLzOtTGDYbUKm13e9admO0jsyIlN4yc10x+elWx9Wc 3domAWeB/e2NA/PyBARA0tfdavDGJuT45++akprVMU1l8CmZg0m9vFRSWGndCioT bhCGY25J9OWl3R8Ja27LJohk4gjptQeLYaifq69pM7/GC0RWM5sM5lQTRJu581rL 5kg/4JDX/r6+kk+6v5svtnS2VAKFIppoIlgQnFiCF0et7cZrZTkhG/1MNtQfrlUa 0pTyV48hku7rJci99ttaY3OXSa3ASIF8mhi7XJtXSQL+7N/TAtf5suThoIiQM5UI 6fLgayJjddPr+zF6sjCcbDJaXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5WhQE6 AHwMv2g5/SLr55mMHBwNMB8GA1UdIwQYMBaAFJUShCZkrFG/Z4VbxuT0a+NVGk2j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjdCMi8wRTYzMjE5NEZC N0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1ViOW5oVnZHNVBScjQxVWFU YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSS0VKbVNzVWI5bmhWdkc1UFJyNDFVYVRhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjdCMi8wRTYzMjE5NEZCN0IxMUVDQTg3QTg3MkVDNEY5QUUwMi9sUktFSm1Tc1Vi OW5oVnZHNVBScjQxVWFUYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk9IP+kVewT+5ItFWpWRUowbwo6GRzq5Kwb00hiGNcuKK8XtmOyzXz BFaEYEVcToUAqFfPyqCQYB7+R9R5cRHzJJWf9+00G1jpuM0leFAWxKDKn2qte60i GLJjBiXa9WwbjRRcuSYzr+mRmKIXMRQzk2gXEI8FU3FWtnjvEb8D453HM8gPo8ZH GOW9aC7Ad1tBmuxL/gOB7HoXsfOTpv1EfKALyTeC87h2EY23aLfddOoPK1mkOqLK 7OIyF5JcXStDAGQTg6Y0eU1U10LdOvK05d1aI6cyLr+z5UB5mOXlBmnuQLUGxxsp V23lK9eYzf/4CWztRqd8e2zilfzsksDo -----END CERTIFICATE-----Generated at Sun Aug 24 04:29:27 2025 by rpki-client