$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: 5l2lSj5tMVi8KrAwjKVd4Ea1QU/DmgPRpmJi+CCumO4= Subject key identifier: 4B:5F:40:97:BE:01:1A:01:FB:CC:06:29:C1:01:3F:A2:8E:7E:2E:5E Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 3541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 34E1 Signing time: Fri 22 Aug 2025 14:24:45 +0000 Manifest this update: Fri 22 Aug 2025 14:24:44 +0000 Manifest next update: Fri 29 Aug 2025 14:24:44 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: deTcjKWdNGDnJhGdXbXLWsYJZTw0zZJZRrcxlOfS0cI=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13633 (0x3541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Aug 22 14:24:44 2025 GMT Not After : Aug 29 14:24:44 2025 GMT Subject: CN=68a87dad-cf66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:dd:e6:f9:16:1e:1e:28:34:41:56:7f:6f: 3d:99:b8:ef:6b:78:61:ba:c0:45:67:74:8a:b4:ac: f6:13:a0:06:fc:f4:d6:49:82:89:91:c0:7c:02:5e: 4f:4f:d1:93:f8:f7:c7:37:b5:8f:d1:6c:a2:da:f9: 00:df:28:dc:28:72:16:6a:95:32:5d:48:04:ec:e6: 9d:e7:da:b1:67:ec:5b:17:ed:9d:4e:b6:c4:a4:41: 18:cb:a9:58:c2:91:1e:13:fc:12:d3:58:10:d7:c2: 9b:c1:f4:94:28:11:2c:09:0f:f7:9e:f2:f2:6c:3b: 8e:c9:5c:7e:d6:37:ae:92:6d:0d:31:e0:df:85:e0: 16:58:61:69:fd:42:2b:6b:fd:ab:ca:44:36:09:e1: f2:fd:d3:91:da:13:11:54:eb:41:87:1e:8d:70:91: aa:cb:02:c9:a8:cf:5a:31:ec:80:67:01:74:c7:b8: 5b:00:ba:2d:4d:42:44:e6:15:5d:5b:4c:ea:75:b4: ce:54:a5:8b:3a:39:44:a5:76:e8:2a:fa:41:66:d9: 3a:0c:9b:7f:5e:e6:95:c0:c3:63:0f:56:a7:1b:3c: bc:29:7a:73:2b:89:67:16:e0:48:4f:cb:56:c5:21: 00:23:49:35:f1:3d:b8:c4:1c:2d:c6:c0:ff:d2:f8: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5F:40:97:BE:01:1A:01:FB:CC:06:29:C1:01:3F:A2:8E:7E:2E:5E X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4c:40:e5:35:0b:da:d9:77:af:5f:a4:6d:e6:c1:a9:80:c5: 16:f2:64:df:c2:94:4a:10:37:78:cd:a0:f2:0f:45:a8:be:80: 48:cc:32:86:c8:ca:67:9f:72:a7:db:0f:39:00:0d:94:69:2f: e6:17:b5:65:53:83:e7:42:f0:05:62:7a:7d:a0:e8:fe:a4:22: e1:b8:6a:27:38:49:14:9e:bd:19:bb:47:68:e5:46:3d:27:26: e7:44:5c:ed:26:12:20:e9:f3:dd:c1:90:f0:9e:7d:e4:4b:04: 41:29:c3:bc:f4:58:be:b1:a5:05:0e:af:e7:3e:29:48:15:fc: f5:8c:11:73:c5:dd:19:37:27:51:59:4e:b9:87:4a:7b:15:38: 7e:81:ef:c1:22:57:27:18:dc:82:ef:a8:55:dc:c5:4e:93:ec: 02:75:6a:f0:49:2f:51:f0:d1:75:b3:03:15:7e:44:00:bd:a6: d7:e8:ad:5b:16:ca:4a:49:16:e1:4c:c4:52:7b:ff:b0:03:8f: a4:3d:98:43:0e:8e:5f:05:54:ac:37:bf:af:24:9c:b1:69:37: 70:b9:9f:5b:69:4c:e1:bc:ca:1a:10:f5:93:3a:88:34:43:87: d0:4c:fe:e1:db:98:5c:00:a7:4d:eb:fc:84:60:05:3a:5e:e4: 73:ce:13:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUwODIyMTQyNDQ0WhcNMjUwODI5MTQyNDQ0WjAYMRYwFAYD VQQDEw02OGE4N2RhZC1jZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHHd5vkWHh4oNEFWf289mbjva3hhusBFZ3SKtKz2E6AG/PTWSYKJkcB8Al5P T9GT+PfHN7WP0Wyi2vkA3yjcKHIWapUyXUgE7Oad59qxZ+xbF+2dTrbEpEEYy6lY wpEeE/wS01gQ18KbwfSUKBEsCQ/3nvLybDuOyVx+1jeukm0NMeDfheAWWGFp/UIr a/2rykQ2CeHy/dOR2hMRVOtBhx6NcJGqywLJqM9aMeyAZwF0x7hbALotTUJE5hVd W0zqdbTOVKWLOjlEpXboKvpBZtk6DJt/XuaVwMNjD1anGzy8KXpzK4lnFuBIT8tW xSEAI0k18T24xBwtxsD/0vjYYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtfQJe+ ARoB+8wGKcEBP6KOfi5eMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcTEDlNQva2XevX6Rt5sGpgMUW8mTfwpRKEDd4zaDyD0WovoBIzDKG yMpnn3Kn2w85AA2UaS/mF7VlU4PnQvAFYnp9oOj+pCLhuGonOEkUnr0Zu0do5UY9 JybnRFztJhIg6fPdwZDwnn3kSwRBKcO89Fi+saUFDq/nPilIFfz1jBFzxd0ZNydR WU65h0p7FTh+ge/BIlcnGNyC76hV3MVOk+wCdWrwSS9R8NF1swMVfkQAvabX6K1b FspKSRbhTMRSe/+wA4+kPZhDDo5fBVSsN7+vJJyxaTdwuZ9baUzhvMoaEPWTOog0 Q4fQTP7h25hcAKdN6/yEYAU6XuRzzhPK -----END CERTIFICATE-----Generated at Sun Aug 24 02:33:31 2025 by rpki-client