$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft File: Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft (raw, json) Hash identifier: NqDLXirx+tcGNy3w6IMa6D4l6cDvS9ghipZu+/DI9mc= Subject key identifier: 05:B6:7B:0E:9A:3E:9C:F7:38:E3:BF:CF:24:F8:5C:92:C3:08:D5:ED Authority key identifier: 2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 Certificate issuer: /CN=A91A8A85/serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Certificate serial: 0716 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft Manifest number: 0707 Signing time: Fri 22 Aug 2025 22:05:08 +0000 Manifest this update: Fri 22 Aug 2025 22:05:07 +0000 Manifest next update: Fri 29 Aug 2025 22:05:07 +0000 Files and hashes: 1: Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl (hash: Ma21KLwj8a7tbvkLyLRpe8tdi7TvcycQ4FZgpM3r06M=) 2: 9F99CFB6C3B811EFB8AF8A31C4F9AE02.roa (hash: UJ+GisILQw/S8rlEJTPG6OVBIQbsw/0SmVYKVT382Kk=) 3: 6FBFD196C3B811EF82B40031C4F9AE02.roa (hash: bv5N0dR3KgPmbP3p5Aa0Bg0QE9UKX9HNK/VrSkjavcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1814 (0x716) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A85, serialNumber=2EAF60095334E7F0BAA065A92F653F5C744895C2 Validity Not Before: Aug 22 22:05:07 2025 GMT Not After : Aug 29 22:05:07 2025 GMT Subject: CN=68a8e994-b6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:db:2c:51:72:74:d4:d1:f4:26:74:41:7d: 0a:12:77:8b:3f:36:ef:1d:8c:13:82:02:cb:32:61: 5c:c6:15:57:62:d8:c3:e2:7c:a4:e2:0d:5e:4f:f2: 1d:92:07:a5:06:18:1a:7c:e8:e2:6d:1a:25:65:69: 99:be:2a:fe:8e:c7:3d:f4:c9:78:52:f5:2e:62:fc: e2:96:e2:87:ce:ec:92:e6:06:67:5f:51:8e:22:a8: a8:60:95:67:b8:45:f7:23:be:a2:5d:33:2c:46:a7: e9:06:03:30:27:41:a4:db:af:0d:23:08:91:94:1d: 36:e6:be:78:06:05:fa:79:43:60:07:7a:2a:53:97: 44:9f:c0:f3:cb:39:27:1d:9d:94:9a:49:69:f1:fa: 23:2c:12:d3:66:9c:fb:6f:d1:bd:d2:e1:62:31:87: 15:12:e7:9b:e2:6c:76:19:bb:bc:c0:c4:4c:f7:6b: b5:79:9c:63:36:93:d7:67:88:1a:f1:15:ee:4b:cf: d8:71:1b:f3:fb:9a:bf:2a:78:3f:9a:c0:fb:58:8c: ec:e1:1b:34:be:e6:24:bb:80:b8:d7:b9:46:73:92: a9:89:d7:eb:ec:93:79:63:82:3f:d0:ec:c9:7c:73: 5a:99:e5:1c:12:78:c0:d2:bd:b9:96:8a:d4:31:0e: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B6:7B:0E:9A:3E:9C:F7:38:E3:BF:CF:24:F8:5C:92:C3:08:D5:ED X509v3 Authority Key Identifier: keyid:2E:AF:60:09:53:34:E7:F0:BA:A0:65:A9:2F:65:3F:5C:74:48:95:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lq9gCVM05_C6oGWpL2U_XHRIlcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A85/573792CA562B11EBBD0CE21CC4F9AE02/Lq9gCVM05_C6oGWpL2U_XHRIlcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6f:95:b2:f9:67:49:e5:5f:ec:12:5f:16:7c:cb:5c:9e:b6: d5:89:9e:e3:49:84:ef:27:e9:a5:a0:1a:bb:e8:1e:a5:e3:dc: 8a:82:ef:08:c8:f5:d9:c4:31:fb:7d:c1:e2:7a:a1:e9:ca:cd: f2:33:2d:59:da:1e:a3:3c:5a:90:6e:5a:a0:41:75:66:7b:98: 38:8d:fb:53:9f:cc:cc:1a:14:00:4f:71:d4:12:a9:f7:f0:d8: 6a:f7:84:5e:38:d7:bc:82:11:22:ba:0f:42:b3:ad:7e:6e:5f: 13:10:9d:de:2b:db:cf:ce:42:94:ab:16:5d:12:e5:e4:23:59: c5:ed:3d:e7:5a:7f:9e:87:52:07:d4:04:4a:75:c9:a7:79:52: d9:5f:63:92:bd:62:a1:bf:1a:81:0f:13:2f:bf:cb:be:1a:27: c1:ec:d9:2e:58:57:b8:fb:ca:77:d3:b9:12:e5:3a:a9:47:99: d6:33:ea:0b:80:98:9e:7f:df:d0:f1:48:af:5f:0d:47:08:52: 81:be:b6:34:9b:76:e8:64:88:d4:95:60:1d:ee:bf:68:96:c0: 32:f8:a7:37:85:8b:5d:f6:6f:d4:3d:71:f4:69:55:8d:79:b4: 0c:3d:52:67:63:8d:d5:4f:8f:73:ab:59:0a:89:70:95:ca:cb: 8c:fc:43:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBODUxMTAvBgNVBAUTKDJFQUY2MDA5NTMzNEU3RjBCQUEwNjVBOTJGNjUzRjVD NzQ0ODk1QzIwHhcNMjUwODIyMjIwNTA3WhcNMjUwODI5MjIwNTA3WjAYMRYwFAYD VQQDEw02OGE4ZTk5NC1iNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySvbLFFydNTR9CZ0QX0KEneLPzbvHYwTggLLMmFcxhVXYtjD4nyk4g1eT/Id kgelBhgafOjibRolZWmZvir+jsc99Ml4UvUuYvziluKHzuyS5gZnX1GOIqioYJVn uEX3I76iXTMsRqfpBgMwJ0Gk268NIwiRlB025r54BgX6eUNgB3oqU5dEn8Dzyzkn HZ2Umklp8fojLBLTZpz7b9G90uFiMYcVEueb4mx2Gbu8wMRM92u1eZxjNpPXZ4ga 8RXuS8/YcRvz+5q/Kng/msD7WIzs4Rs0vuYku4C417lGc5Kpidfr7JN5Y4I/0OzJ fHNameUcEnjA0r25lorUMQ5LeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAW2ew6a Ppz3OOO/zyT4XJLDCNXtMB8GA1UdIwQYMBaAFC6vYAlTNOfwuqBlqS9lP1x0SJXC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE4NS81NzM3OTJDQTU2 MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVfQzZvR1dwTDJVX1hIUkls Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxOWdDVk0wNV9DNm9HV3BMMlVfWEhSSWxjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE4NS81NzM3OTJDQTU2MkIxMUVCQkQwQ0UyMUNDNEY5QUUwMi9McTlnQ1ZNMDVf QzZvR1dwTDJVX1hIUklsY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+b5Wy+WdJ5V/sEl8WfMtcnrbViZ7jSYTvJ+mloBq76B6l49yKgu8I yPXZxDH7fcHieqHpys3yMy1Z2h6jPFqQblqgQXVme5g4jftTn8zMGhQAT3HUEqn3 8Nhq94ReONe8ghEiug9Cs61+bl8TEJ3eK9vPzkKUqxZdEuXkI1nF7T3nWn+eh1IH 1ARKdcmneVLZX2OSvWKhvxqBDxMvv8u+GifB7NkuWFe4+8p307kS5TqpR5nWM+oL gJief9/Q8UivXw1HCFKBvrY0m3boZIjUlWAd7r9olsAy+Kc3hYtd9m/UPXH0aVWN ebQMPVJnY43VT49zq1kKiXCVysuM/ENX -----END CERTIFICATE-----Generated at Sat Aug 23 18:36:48 2025 by rpki-client