$ rpki-client -vvf rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft File: lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft (raw, json) Hash identifier: ZM9e8oo03KuW3SD78wOxgfbtMvPO81nKk85RTJxMveo= Subject key identifier: C1:6A:8A:8C:83:CD:B4:12:92:B6:8A:8E:9A:C6:51:79:38:9D:09:86 Authority key identifier: 95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F Certificate issuer: /CN=A917282D/serialNumber=95228338A85F248230312CF398B24F8119D8232F Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft Manifest number: 0101 Signing time: Sat 23 Aug 2025 05:16:32 +0000 Manifest this update: Sat 23 Aug 2025 05:16:32 +0000 Manifest next update: Sat 30 Aug 2025 05:16:32 +0000 Files and hashes: 1: lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl (hash: A/i/JLxue0NbT2w+UUwVJXTkZ5enbhMpYgQvMTxZ3Pg=) 2: 1DC7647CF8D811EEBBE6CE09C4F9AE02.roa (hash: IP1a/8lP5y1+PqhZxCqrwDfR6kczV/2vje4JuA8lz28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917282D, serialNumber=95228338A85F248230312CF398B24F8119D8232F Validity Not Before: Aug 23 05:16:32 2025 GMT Not After : Aug 30 05:16:32 2025 GMT Subject: CN=68a94eb0-5a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:39:34:08:77:f5:5e:8d:7a:5c:b7:fe:01: cb:9c:02:84:82:d9:a5:9f:15:3a:bf:4a:48:e1:a0: 59:79:b3:31:89:ce:c6:82:a0:a3:bc:42:86:0e:99: 1c:eb:f9:50:a8:c9:a4:33:24:43:25:11:4c:e4:10: 54:27:17:a6:36:12:78:27:9c:88:d2:2a:76:1a:11: 97:ff:0b:bc:da:e7:49:07:80:8c:8c:4b:64:db:4f: c5:3f:f6:26:3b:75:3b:66:ad:7b:ce:32:73:c5:57: 4f:58:1b:bc:cc:ec:c2:9e:38:a4:dc:ed:ac:a8:d7: df:ee:e0:9b:0c:97:35:57:10:87:71:33:2e:be:9f: ed:7a:c7:9d:0c:c9:5b:53:b9:5e:b7:1f:e8:65:36: 95:c5:f3:4f:b8:ef:cf:44:44:74:00:9c:d0:8f:f4: eb:88:f2:19:98:ae:c9:90:ef:a1:69:83:91:e2:92: 53:95:e9:55:6f:86:64:dc:c5:34:98:22:5e:02:20: 2e:0a:81:f4:2b:6c:b0:34:3d:3c:65:4b:0f:05:43: 38:91:ef:5a:55:c2:5d:4a:ff:c0:f2:70:45:76:9d: b7:84:bb:96:4e:f8:fe:ca:b6:de:63:f9:39:a6:26: 95:e4:26:65:f1:72:7e:af:09:9c:70:d8:47:2c:de: b5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6A:8A:8C:83:CD:B4:12:92:B6:8A:8E:9A:C6:51:79:38:9D:09:86 X509v3 Authority Key Identifier: keyid:95:22:83:38:A8:5F:24:82:30:31:2C:F3:98:B2:4F:81:19:D8:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSKDOKhfJIIwMSzzmLJPgRnYIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917282D/0AC22AC4F8A111EEB0DEFE4FC4F9AE02/lSKDOKhfJIIwMSzzmLJPgRnYIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:d0:c1:09:b0:29:09:dc:7b:ff:fe:a3:5b:ed:14:7c:53:53: d8:01:1b:d5:4d:d8:46:61:1b:db:a8:d3:a8:81:eb:b4:06:4c: a3:0f:c3:eb:48:fd:c0:10:24:11:2a:1e:e8:ce:e0:85:28:cc: 5f:5e:79:a1:e4:25:f0:9a:c5:77:5f:bb:e5:dc:83:ec:14:54: b5:9e:a9:56:aa:d4:0e:77:52:74:c4:d0:cc:4f:40:48:c8:83: 52:6f:ab:e4:fc:26:e9:6d:75:bd:23:6f:4b:91:2b:cd:70:77: 8e:10:0d:42:cb:a0:0e:80:88:63:d3:43:15:4b:33:71:e5:f9: 5e:fd:e6:91:e4:50:97:fc:46:0e:e0:cb:09:2e:bb:7c:da:f5: a6:13:a4:44:0b:fb:a6:52:ac:c6:c5:c4:e1:9d:4b:b9:9f:17: cb:61:2c:af:4f:0b:76:4b:c2:4a:df:d9:36:26:b8:8e:63:be: 94:f5:fa:3b:2e:b9:73:a6:c0:bb:b0:99:c3:88:0e:fa:a6:e4: 4d:45:fa:9b:65:a9:81:55:d5:0f:77:88:58:aa:bf:fd:ad:17: f9:05:1e:ee:99:62:de:30:74:31:d5:68:77:fa:30:f3:49:20: e9:8a:5a:cb:19:25:18:0a:7f:5f:10:0d:39:54:83:0c:f4:7e: 05:78:76:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4MkQxMTAvBgNVBAUTKDk1MjI4MzM4QTg1RjI0ODIzMDMxMkNGMzk4QjI0Rjgx MTlEODIzMkYwHhcNMjUwODIzMDUxNjMyWhcNMjUwODMwMDUxNjMyWjAYMRYwFAYD VQQDEw02OGE5NGViMC01YTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lI5NAh39V6Nely3/gHLnAKEgtmlnxU6v0pI4aBZebMxic7GgqCjvEKGDpkc 6/lQqMmkMyRDJRFM5BBUJxemNhJ4J5yI0ip2GhGX/wu82udJB4CMjEtk20/FP/Ym O3U7Zq17zjJzxVdPWBu8zOzCnjik3O2sqNff7uCbDJc1VxCHcTMuvp/tesedDMlb U7letx/oZTaVxfNPuO/PRER0AJzQj/TriPIZmK7JkO+haYOR4pJTlelVb4Zk3MU0 mCJeAiAuCoH0K2ywND08ZUsPBUM4ke9aVcJdSv/A8nBFdp23hLuWTvj+yrbeY/k5 piaV5CZl8XJ+rwmccNhHLN61BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFqioyD zbQSkraKjprGUXk4nQmGMB8GA1UdIwQYMBaAFJUigzioXySCMDEs85iyT4EZ2CMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjgyRC8wQUMyMkFDNEY4 QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJSXdNU3p6bUxKUGdSbllJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTS0RPS2hmSklJd01TenptTEpQZ1JuWUl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjgyRC8wQUMyMkFDNEY4QTExMUVFQjBERUZFNEZDNEY5QUUwMi9sU0tET0toZkpJ SXdNU3p6bUxKUGdSbllJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj0MEJsCkJ3Hv//qNb7RR8U1PYARvVTdhGYRvbqNOogeu0BkyjD8Pr SP3AECQRKh7ozuCFKMxfXnmh5CXwmsV3X7vl3IPsFFS1nqlWqtQOd1J0xNDMT0BI yINSb6vk/CbpbXW9I29LkSvNcHeOEA1Cy6AOgIhj00MVSzNx5fle/eaR5FCX/EYO 4MsJLrt82vWmE6REC/umUqzGxcThnUu5nxfLYSyvTwt2S8JK39k2JriOY76U9fo7 LrlzpsC7sJnDiA76puRNRfqbZamBVdUPd4hYqr/9rRf5BR7umWLeMHQx1Wh3+jDz SSDpilrLGSUYCn9fEA05VIMM9H4FeHYJ -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:52 2025 by rpki-client