$ rpki-client -vvf rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft File: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft (raw, json) Hash identifier: 2NcUix1cc2NwoQ2mI1EgLivbhjBrKk1esikFqimqkJM= Subject key identifier: 22:91:0C:91:86:CC:7A:88:2A:5E:B1:8D:E0:44:DD:E5:E6:63:13:1E Authority key identifier: 95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 Certificate issuer: /CN=A919546B/serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft Manifest number: 0680 Signing time: Fri 22 Aug 2025 22:34:25 +0000 Manifest this update: Fri 22 Aug 2025 22:34:25 +0000 Manifest next update: Fri 29 Aug 2025 22:34:25 +0000 Files and hashes: 1: lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl (hash: IoK+vXWSbej+QWNV0G4zQ/ga0AMLWd4uwnorftdcMCY=) 2: 652993B4884F11EBB2A8337FC4F9AE02.roa (hash: Xrevk4k6Cchylp30Kd2GrTW0U2Yau9k0gu1MIRCl1Z0=) 3: 270CD9841A7111F09FFEDF3BC4F9AE02.roa (hash: nNWr6J3AcReiPHvNk6340B1sT6j8vw6YrQdSHa29JIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919546B, serialNumber=95951ECFC91D0F55AD8ED8AFBFE63CB41619FC47 Validity Not Before: Aug 22 22:34:25 2025 GMT Not After : Aug 29 22:34:25 2025 GMT Subject: CN=68a8f071-9fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:d5:2c:ad:4c:73:56:52:b4:ec:c2:07:07: ed:d5:fc:34:6b:f0:d2:68:15:64:6c:48:f1:63:f5: 4f:e0:23:0d:10:d2:ea:56:a9:09:32:db:43:58:45: 3e:cc:4d:dc:04:25:b2:db:38:75:0f:43:bd:a3:df: a6:9a:bb:be:50:be:33:47:8f:f6:3e:ab:4c:d8:c2: e2:fd:9c:d7:51:20:b4:e6:ac:be:fb:22:e6:ff:79: 45:e1:81:0a:6a:11:19:50:29:c7:01:49:55:be:f3: bd:ad:58:3a:f8:6d:c8:c0:b9:38:75:23:7d:8a:98: ef:f6:35:c3:81:be:f4:ca:ee:18:56:95:a5:75:f9: e8:d8:f7:4a:f1:30:31:76:5c:c9:3f:7e:e9:d7:31: 67:06:fd:72:c3:84:3d:92:0e:0e:c0:38:04:10:89: b6:a3:d7:22:c3:52:47:a8:2d:08:67:f2:eb:a8:c0: 49:b2:c3:af:72:f3:c8:3b:7d:90:6b:c1:60:71:02: de:e9:3a:db:37:45:1f:ae:a2:d8:83:a0:0c:ea:87: ad:dd:12:0a:8a:5c:78:28:ce:43:fc:90:fe:a5:64: 3b:ca:81:37:a7:fd:1b:7e:d4:cf:ef:3e:25:b5:2a: ff:56:dd:3b:28:3c:80:44:a5:ab:66:96:55:f3:c5: ff:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:91:0C:91:86:CC:7A:88:2A:5E:B1:8D:E0:44:DD:E5:E6:63:13:1E X509v3 Authority Key Identifier: keyid:95:95:1E:CF:C9:1D:0F:55:AD:8E:D8:AF:BF:E6:3C:B4:16:19:FC:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919546B/E5AE440A884D11EB985EE37DC4F9AE02/lZUez8kdD1Wtjtivv-Y8tBYZ_Ec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:43:b5:b2:f5:d9:c1:41:32:f0:bd:b3:d9:63:0a:57:a4:ff: f6:ed:e3:58:7d:5f:62:b5:9e:6b:db:33:f7:41:fb:48:2d:9b: c0:92:ac:f1:db:ec:bf:fa:df:ac:21:23:18:69:c4:b6:0a:0f: 3e:09:4e:28:ca:0b:73:80:fb:6d:8d:2c:eb:55:41:4f:bf:fc: 26:54:3a:cf:ba:e9:0c:d7:54:a3:83:40:2e:6c:91:a5:db:e3: 14:53:ed:00:17:fb:5c:2f:3e:56:3a:cb:b6:66:0c:06:75:f2: 3f:9f:95:c0:c3:c7:7f:5b:84:89:73:35:8a:1c:5a:0d:a5:85: 8a:7c:c3:95:8b:d5:8b:2d:b2:36:63:a6:b4:63:a8:c4:ca:f7: bf:26:34:46:28:5a:3e:01:2f:4b:39:c7:59:a8:1e:75:57:f1: 84:90:c5:b2:b6:8d:95:c9:db:ec:e3:13:a0:87:61:31:52:21: 1c:8b:91:93:0a:26:c1:c8:d4:f9:02:8e:df:76:ea:a6:60:a6: cc:0a:9d:9e:81:30:d7:0d:04:97:99:91:aa:21:48:a7:5b:b8: 92:6c:c7:f1:c8:8b:b6:9a:a7:5f:02:d3:df:1c:f3:5d:a6:b6: b8:12:fa:c4:58:a9:4f:ed:0a:55:34:f5:e2:f6:ef:21:53:f8: b2:80:6d:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0NkIxMTAvBgNVBAUTKDk1OTUxRUNGQzkxRDBGNTVBRDhFRDhBRkJGRTYzQ0I0 MTYxOUZDNDcwHhcNMjUwODIyMjIzNDI1WhcNMjUwODI5MjIzNDI1WjAYMRYwFAYD VQQDEw02OGE4ZjA3MS05ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LHVLK1Mc1ZStOzCBwft1fw0a/DSaBVkbEjxY/VP4CMNENLqVqkJMttDWEU+ zE3cBCWy2zh1D0O9o9+mmru+UL4zR4/2PqtM2MLi/ZzXUSC05qy++yLm/3lF4YEK ahEZUCnHAUlVvvO9rVg6+G3IwLk4dSN9ipjv9jXDgb70yu4YVpWldfno2PdK8TAx dlzJP37p1zFnBv1yw4Q9kg4OwDgEEIm2o9ciw1JHqC0IZ/LrqMBJssOvcvPIO32Q a8FgcQLe6TrbN0UfrqLYg6AM6oet3RIKilx4KM5D/JD+pWQ7yoE3p/0bftTP7z4l tSr/Vt07KDyARKWrZpZV88X/uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKRDJGG zHqIKl6xjeBE3eXmYxMeMB8GA1UdIwQYMBaAFJWVHs/JHQ9VrY7Yr7/mPLQWGfxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTQ2Qi9FNUFFNDQwQTg4 NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQxV3RqdGl2di1ZOHRCWVpf RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xaVWV6OGtkRDFXdGp0aXZ2LVk4dEJZWl9FYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTQ2Qi9FNUFFNDQwQTg4NEQxMUVCOTg1RUUzN0RDNEY5QUUwMi9sWlVlejhrZEQx V3RqdGl2di1ZOHRCWVpfRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3Q7Wy9dnBQTLwvbPZYwpXpP/27eNYfV9itZ5r2zP3QftILZvAkqzx 2+y/+t+sISMYacS2Cg8+CU4oygtzgPttjSzrVUFPv/wmVDrPuukM11Sjg0AubJGl 2+MUU+0AF/tcLz5WOsu2ZgwGdfI/n5XAw8d/W4SJczWKHFoNpYWKfMOVi9WLLbI2 Y6a0Y6jEyve/JjRGKFo+AS9LOcdZqB51V/GEkMWyto2Vydvs4xOgh2ExUiEci5GT CibByNT5Ao7fduqmYKbMCp2egTDXDQSXmZGqIUinW7iSbMfxyIu2mqdfAtPfHPNd pra4EvrEWKlP7QpVNPXi9u8hU/iygG1s -----END CERTIFICATE-----Generated at Sun Aug 24 01:02:33 2025 by rpki-client