$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft File: ldQuwvRot-OPlYyPupMYARfcJuA.mft (raw, json) Hash identifier: z1xdbiRCG+dOxgDhS0+xjZ1ESwDZQQw9jI2szveQkiY= Subject key identifier: B6:D0:52:39:B3:05:84:BC:3D:E0:88:44:13:51:69:57:10:55:CA:81 Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 Certificate issuer: /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft Manifest number: 57 Signing time: Sat 23 Aug 2025 07:34:43 +0000 Manifest this update: Sat 23 Aug 2025 07:34:42 +0000 Manifest next update: Sat 30 Aug 2025 07:34:42 +0000 Files and hashes: 1: ldQuwvRot-OPlYyPupMYARfcJuA.crl (hash: RmKhPrZMmjY6bCj428BjjACBtm0KWlJBTpHasyQyAlw=) 2: F8C2A4E4359311F08C686E1BC4F9AE02.roa (hash: vSYTG4FiK7ZLm+rL5F5xQfklb4JbIfkyGEDj5czTJUY=) 3: B3849A9A359311F09B54926FC4F9AE02.roa (hash: Y+aC1xM6nmmoKwU/+TkwylgFTc7TBvkghCXTXAy84ng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0 Validity Not Before: Aug 23 07:34:42 2025 GMT Not After : Aug 30 07:34:42 2025 GMT Subject: CN=68a96f13-a06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:71:fb:b4:68:c0:6b:b5:83:30:50:89:70: 90:75:aa:d1:d6:93:d6:b5:06:f6:75:c4:2b:f7:a3: b7:ee:51:0e:d1:31:00:cd:df:8d:92:f4:eb:ad:94: 9a:d3:4c:28:03:11:94:3d:65:45:ca:31:3b:07:e1: 43:a6:a5:9c:50:60:b7:1c:4d:14:74:7d:6f:ce:c4: 2e:29:59:30:6c:44:85:a2:19:a5:ff:94:61:7c:ea: 5c:b7:3e:f0:46:49:5c:6f:34:6e:a6:ca:d4:cc:47: bc:16:28:2c:10:f5:ac:e5:f1:4a:b7:76:95:cc:9a: 84:04:f8:d4:1d:77:f3:3b:4c:3d:7a:39:2f:0b:2b: ed:52:d2:5c:64:f5:88:a9:69:10:28:f5:d7:55:6b: 74:c9:38:c5:ed:68:b9:6e:d6:49:e0:b7:c7:10:e6: f7:3b:c2:14:8f:d4:a3:04:d3:cb:7f:ca:51:4c:e4: 44:6f:e6:2e:41:5f:da:37:42:3f:ac:94:f3:23:01: 38:24:53:11:66:45:4b:bc:19:55:d7:2e:bc:97:f2: 1a:15:59:7b:e3:24:f5:b8:4e:36:cf:32:48:4e:64: ec:33:81:2e:0e:9b:82:d6:4a:8a:f9:a9:ae:4c:9c: 47:cc:06:2f:40:b8:d3:be:36:87:78:53:ef:1d:e6: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D0:52:39:B3:05:84:BC:3D:E0:88:44:13:51:69:57:10:55:CA:81 X509v3 Authority Key Identifier: keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b6:e1:bf:74:29:92:56:82:c9:ef:aa:b8:f3:d6:d6:3f:c4: 5b:3d:45:3e:4a:1e:03:a5:b0:50:b4:d1:f9:41:ce:a6:7c:30: fd:36:a9:5a:bd:d2:ee:6e:34:00:c2:cc:e7:2a:4e:62:0a:19: 27:69:66:c2:da:ef:57:16:2c:80:40:d5:c9:a7:38:d7:17:f3: e7:f5:2c:cd:8f:95:a2:1e:ac:a5:dc:37:de:63:f6:77:bf:4d: 2b:35:3c:08:d2:70:fc:e0:84:92:c4:96:ab:eb:40:da:a8:c5: e3:23:24:ba:09:39:bb:75:87:6c:0c:b1:4e:64:1e:98:38:aa: e9:83:1a:97:ab:c3:c7:f1:23:3a:b6:45:65:31:33:99:e2:0f: b4:09:25:3c:73:c1:cd:87:b8:56:ce:37:bb:8c:f4:c6:f9:64: 30:a3:80:30:dc:9d:80:23:22:71:c2:36:af:68:55:77:ea:54: 47:b1:c3:e4:51:e1:e3:a3:4c:22:18:b2:21:88:49:05:44:f1: 91:8e:32:b6:ef:ae:05:19:73:4b:b5:37:a9:d7:55:de:5a:08: 1d:e1:b7:13:f7:2a:b6:4f:2f:96:d9:e6:79:1e:0d:6d:c6:2d: 88:65:93:c6:ec:b3:2c:82:a8:6d:4d:c4:4a:30:24:b2:09:44: 6e:b0:25:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0Y2QTExMC8GA1UEBRMoOTVENDJFQzJGNDY4QjdFMzhGOTU4QzhGQkE5MzE4MDEx N0RDMjZFMDAeFw0yNTA4MjMwNzM0NDJaFw0yNTA4MzAwNzM0NDJaMBgxFjAUBgNV BAMTDTY4YTk2ZjEzLWEwNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/7XH7tGjAa7WDMFCJcJB1qtHWk9a1BvZ1xCv3o7fuUQ7RMQDN342S9OutlJrT TCgDEZQ9ZUXKMTsH4UOmpZxQYLccTRR0fW/OxC4pWTBsRIWiGaX/lGF86ly3PvBG SVxvNG6mytTMR7wWKCwQ9azl8Uq3dpXMmoQE+NQdd/M7TD16OS8LK+1S0lxk9Yip aRAo9ddVa3TJOMXtaLlu1kngt8cQ5vc7whSP1KME08t/ylFM5ERv5i5BX9o3Qj+s lPMjATgkUxFmRUu8GVXXLryX8hoVWXvjJPW4TjbPMkhOZOwzgS4Om4LWSor5qa5M nEfMBi9AuNO+Nod4U+8d5rbNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUttBSObMF hLw94IhEE1FpVxBVyoEwHwYDVR0jBBgwFoAUldQuwvRot+OPlYyPupMYARfcJuAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjZBLzdBNTI5ODc2MEFG MDExRjA4NTMxRDQzQ0M0RjlBRTAyL2xkUXV3dlJvdC1PUGxZeVB1cE1ZQVJmY0p1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbGRRdXd2Um90LU9QbFl5UHVwTVlBUmZjSnVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 RjZBLzdBNTI5ODc2MEFGMDExRjA4NTMxRDQzQ0M0RjlBRTAyL2xkUXV3dlJvdC1P UGxZeVB1cE1ZQVJmY0p1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADS24b90KZJWgsnvqrjz1tY/xFs9RT5KHgOlsFC00flBzqZ8MP02qVq9 0u5uNADCzOcqTmIKGSdpZsLa71cWLIBA1cmnONcX8+f1LM2PlaIerKXcN95j9ne/ TSs1PAjScPzghJLElqvrQNqoxeMjJLoJObt1h2wMsU5kHpg4qumDGperw8fxIzq2 RWUxM5niD7QJJTxzwc2HuFbON7uM9Mb5ZDCjgDDcnYAjInHCNq9oVXfqVEexw+RR 4eOjTCIYsiGISQVE8ZGOMrbvrgUZc0u1N6nXVd5aCB3htxP3KrZPL5bZ5nkeDW3G LYhlk8bssyyCqG1NxEowJLIJRG6wJfw= -----END CERTIFICATE-----Generated at Sat Aug 23 21:06:27 2025 by rpki-client