$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft File: aLP_FmWJyEQaRP3KYfQrOmOuESk.mft (raw, json) Hash identifier: EIPIT/D+I+hARQ8Eq8W9vng+dJRZeyTH4MZQkUGbNCw= Subject key identifier: 27:BB:41:3F:06:CE:DE:6C:30:B5:C4:A6:CC:7D:B6:36:F1:46:19:65 Authority key identifier: 68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 Certificate issuer: /CN=A91A2C5D/serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft Manifest number: 0166 Signing time: Sat 23 Aug 2025 04:29:57 +0000 Manifest this update: Sat 23 Aug 2025 04:29:56 +0000 Manifest next update: Sat 30 Aug 2025 04:29:56 +0000 Files and hashes: 1: aLP_FmWJyEQaRP3KYfQrOmOuESk.crl (hash: Fmv75X7Trb1N5dL5C3Y2nDfmKWyziHZyV7sz1I+/WAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=68B3FF166589C8441A44FDCA61F42B3A63AE1129 Validity Not Before: Aug 23 04:29:56 2025 GMT Not After : Aug 30 04:29:56 2025 GMT Subject: CN=68a943c4-d46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:fa:13:42:87:f1:af:cd:65:f8:8d:ef:25: 9e:0a:e7:28:dc:16:cf:93:13:68:be:0c:75:21:d4: ed:66:99:2f:c8:96:21:9e:c1:52:ea:d9:7f:8f:af: 55:4f:e1:11:24:44:a9:7b:c8:5f:f5:4f:54:16:cb: 27:ac:cf:83:83:8e:f5:79:e9:5d:c1:78:ef:78:ce: f3:be:20:06:e6:63:f6:9e:3b:cb:02:55:0b:29:3b: a2:39:fa:0e:2e:53:d7:6c:b4:bb:52:1b:7c:fc:d7: 28:14:39:f1:d5:9f:15:d8:aa:9f:0c:01:bf:fa:75: ff:ed:ce:ed:f0:55:7b:77:99:fa:6f:ef:54:59:93: ec:b6:3a:6a:44:85:cb:cc:64:a4:34:21:12:2f:dc: 54:4b:6c:98:98:2f:c9:df:da:28:38:00:31:c4:5f: 2d:f1:48:75:af:f9:2f:9c:a0:97:c7:d0:0f:88:4a: 62:43:69:13:5d:bf:d0:92:e5:81:20:73:e0:50:28: ad:2a:63:90:79:ae:c0:55:b8:d7:27:50:cc:d8:14: 08:5a:a0:67:76:c6:2d:d0:af:86:79:92:1d:08:33: 45:a1:e1:f2:bc:7e:54:b9:a6:3b:a4:43:27:cd:96: 44:b9:ac:de:48:0e:85:f2:6e:7a:20:d8:f7:e4:6f: 4d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BB:41:3F:06:CE:DE:6C:30:B5:C4:A6:CC:7D:B6:36:F1:46:19:65 X509v3 Authority Key Identifier: keyid:68:B3:FF:16:65:89:C8:44:1A:44:FD:CA:61:F4:2B:3A:63:AE:11:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aLP_FmWJyEQaRP3KYfQrOmOuESk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/aLP_FmWJyEQaRP3KYfQrOmOuESk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:8c:24:95:59:f8:f9:6c:fb:29:f1:d4:5d:f2:d3:2f:1e:53: ab:6b:7a:46:10:1e:10:ec:56:99:6a:9a:76:b4:01:ff:aa:d6: 60:23:61:2d:04:aa:bf:cb:24:84:54:c8:0b:fa:86:e5:07:5c: af:8e:e5:b6:68:28:82:dc:01:21:18:c8:b5:19:a1:cf:ab:23: 00:ae:18:8d:09:ee:e2:d4:73:64:01:17:67:3d:f0:bf:62:78: c3:e0:2a:04:8e:48:c3:5b:5d:13:b4:93:ef:4c:fa:3b:b7:e3: c4:34:8a:da:af:95:78:56:0d:96:15:04:44:30:bc:77:5e:25: 97:f1:fb:29:a6:18:a5:f8:47:95:eb:17:50:f4:53:30:64:84: 6f:49:88:74:1c:0b:82:ce:00:eb:7c:3a:fb:1e:e8:e1:5c:08: 88:d5:3f:f7:de:4f:6e:ed:6d:78:43:cc:3d:8f:80:c8:ce:96: 81:28:e1:7e:53:f6:ff:66:56:20:2c:54:62:5b:00:47:70:f4: de:3f:0e:68:7f:80:53:27:78:d5:bb:df:47:34:d2:76:60:95: bb:13:4a:7f:1e:8a:50:17:db:80:de:a7:e8:ff:8a:50:25:44: 24:08:48:10:b1:9e:e2:0a:4d:6e:39:1e:29:20:2f:7c:e1:44: 93:f2:2d:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDY4QjNGRjE2NjU4OUM4NDQxQTQ0RkRDQTYxRjQyQjNB NjNBRTExMjkwHhcNMjUwODIzMDQyOTU2WhcNMjUwODMwMDQyOTU2WjAYMRYwFAYD VQQDEw02OGE5NDNjNC1kNDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdn6E0KH8a/NZfiN7yWeCuco3BbPkxNovgx1IdTtZpkvyJYhnsFS6tl/j69V T+ERJESpe8hf9U9UFssnrM+Dg471eeldwXjveM7zviAG5mP2njvLAlULKTuiOfoO LlPXbLS7Uht8/NcoFDnx1Z8V2KqfDAG/+nX/7c7t8FV7d5n6b+9UWZPstjpqRIXL zGSkNCESL9xUS2yYmC/J39ooOAAxxF8t8Uh1r/kvnKCXx9APiEpiQ2kTXb/QkuWB IHPgUCitKmOQea7AVbjXJ1DM2BQIWqBndsYt0K+GeZIdCDNFoeHyvH5UuaY7pEMn zZZEuazeSA6F8m56INj35G9N5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe7QT8G zt5sMLXEpsx9tjbxRhllMB8GA1UdIwQYMBaAFGiz/xZlichEGkT9ymH0KzpjrhEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlFUWFSUDNLWWZRck9tT3VF U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FMUF9GbVdKeUVRYVJQM0tZZlFyT21PdUVTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9hTFBfRm1XSnlF UWFSUDNLWWZRck9tT3VFU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsjCSVWfj5bPsp8dRd8tMvHlOra3pGEB4Q7FaZapp2tAH/qtZgI2Et BKq/yySEVMgL+oblB1yvjuW2aCiC3AEhGMi1GaHPqyMArhiNCe7i1HNkARdnPfC/ YnjD4CoEjkjDW10TtJPvTPo7t+PENIrar5V4Vg2WFQREMLx3XiWX8fspphil+EeV 6xdQ9FMwZIRvSYh0HAuCzgDrfDr7HujhXAiI1T/33k9u7W14Q8w9j4DIzpaBKOF+ U/b/ZlYgLFRiWwBHcPTePw5of4BTJ3jVu99HNNJ2YJW7E0p/HopQF9uA3qfo/4pQ JUQkCEgQsZ7iCk1uOR4pIC984UST8i3F -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:55 2025 by rpki-client