$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft File: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft (raw, json) Hash identifier: DeufIfVSqFZ7NuSn/IeX7heVplcBdnW0iNfZnVG3+10= Subject key identifier: 2B:05:F9:89:74:9F:C0:8A:53:B6:81:9A:A9:A0:A8:20:79:4F:F3:7A Authority key identifier: 2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E Certificate issuer: /CN=A91A9467/serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Certificate serial: 190C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft Manifest number: 18F9 Signing time: Fri 22 Aug 2025 16:33:17 +0000 Manifest this update: Fri 22 Aug 2025 16:33:16 +0000 Manifest next update: Fri 29 Aug 2025 16:33:16 +0000 Files and hashes: 1: LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl (hash: am8utHgqcx+86v4WRiWCzizbScFp3bO6KE96EzEe/HY=) 2: 0EDA10A4A9A011EE96DCBB4FC4F9AE02.roa (hash: 9b8cbYORw44VvEpRgAtGCxHhf/hrQyvWwycoRACw4Zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6412 (0x190c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9467, serialNumber=2E164DB45B846BBAE68C277D43F882F64092281E Validity Not Before: Aug 22 16:33:16 2025 GMT Not After : Aug 29 16:33:16 2025 GMT Subject: CN=68a89bcc-da3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:76:d1:40:4c:aa:29:38:df:b1:ee:17:0e: 1d:c9:3e:6f:79:e2:f0:9f:ca:92:4f:5b:8a:0c:f1: 93:cb:a5:d4:35:df:85:9c:8a:7c:f6:65:10:03:1c: 04:9d:3a:f2:fa:69:1c:73:c3:28:a0:53:7d:5f:16: c4:72:5a:7e:cd:ce:66:f7:50:2d:0f:ce:1f:0b:c4: e0:44:d8:95:56:14:c4:c7:c6:46:f7:7a:48:94:60: e0:87:88:a3:aa:25:50:eb:33:85:21:95:ab:76:4c: 19:bf:a4:9a:18:b0:95:25:8f:3d:9d:72:01:63:c8: a3:50:0c:90:ac:c1:11:12:59:2a:f4:47:63:be:38: c0:c3:6c:83:d5:b7:34:d4:09:6e:32:c9:f6:8f:f9: b4:d1:b7:80:27:64:05:0c:1a:b8:50:67:31:08:b2: 23:ab:4b:46:44:aa:95:95:ba:af:73:13:f4:b1:8a: c3:3e:8b:23:cf:8f:a0:56:9c:88:72:d7:a2:69:67: b8:d5:0c:47:3b:69:93:0a:f5:34:33:0b:5c:59:2c: f3:3f:5d:c1:f4:da:b1:9a:39:65:67:74:b2:45:4c: 0c:d1:39:c6:93:ac:bf:cb:32:01:75:df:17:8d:78: 5b:04:8c:53:49:fa:25:d5:bc:25:af:47:8d:27:94: f0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:05:F9:89:74:9F:C0:8A:53:B6:81:9A:A9:A0:A8:20:79:4F:F3:7A X509v3 Authority Key Identifier: keyid:2E:16:4D:B4:5B:84:6B:BA:E6:8C:27:7D:43:F8:82:F6:40:92:28:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9467/915C07E691EA11E79D0D0A2BC4F9AE02/LhZNtFuEa7rmjCd9Q_iC9kCSKB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:04:fe:1a:8c:36:12:fa:50:8d:e8:d1:37:a1:fc:03:d6:0a: 7d:96:27:ad:e9:9c:c3:62:f6:0a:f0:5a:af:a1:b3:95:9e:ba: 34:ec:c2:0b:2f:d7:83:11:2a:4e:e2:e5:05:20:6b:75:b0:a3: 11:07:33:26:22:4c:5d:44:c3:fd:b0:3b:2d:e0:26:07:31:06: c4:0e:f6:8c:62:8b:05:57:39:8a:a5:85:ca:3b:dd:98:ee:59: 7d:b8:31:49:91:47:84:1a:4b:3b:2f:eb:ea:9d:d8:3f:6e:be: 5e:4c:3c:b4:41:23:ad:c4:c4:9a:8b:28:0a:5d:35:41:89:1b: 55:61:13:ec:95:97:54:49:b5:19:21:2a:66:a5:19:ed:fc:bb: b7:06:7f:f5:4e:e3:5a:aa:8b:9f:f5:74:fb:3a:35:93:23:0a: 4e:03:49:ff:39:01:8b:1f:18:49:14:28:07:88:ad:06:a0:63: b1:59:06:e5:01:4f:f8:9e:9c:88:5f:e7:9c:48:5d:0d:62:7f: 8a:a6:84:37:d6:bd:5d:f3:1c:a6:2f:05:b1:7c:a6:1b:af:98: d5:c9:39:03:23:90:96:00:64:ec:1f:16:ed:2a:23:69:dc:60: b9:db:f9:95:57:ef:94:d9:42:00:fb:cb:ad:6e:d6:70:57:fd: 32:31:44:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk0NjcxMTAvBgNVBAUTKDJFMTY0REI0NUI4NDZCQkFFNjhDMjc3RDQzRjg4MkY2 NDA5MjI4MUUwHhcNMjUwODIyMTYzMzE2WhcNMjUwODI5MTYzMzE2WjAYMRYwFAYD VQQDEw02OGE4OWJjYy1kYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywV20UBMqik437HuFw4dyT5veeLwn8qST1uKDPGTy6XUNd+FnIp89mUQAxwE nTry+mkcc8MooFN9XxbEclp+zc5m91AtD84fC8TgRNiVVhTEx8ZG93pIlGDgh4ij qiVQ6zOFIZWrdkwZv6SaGLCVJY89nXIBY8ijUAyQrMERElkq9EdjvjjAw2yD1bc0 1AluMsn2j/m00beAJ2QFDBq4UGcxCLIjq0tGRKqVlbqvcxP0sYrDPosjz4+gVpyI cteiaWe41QxHO2mTCvU0MwtcWSzzP13B9NqxmjllZ3SyRUwM0TnGk6y/yzIBdd8X jXhbBIxTSfol1bwlr0eNJ5TwkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsF+Yl0 n8CKU7aBmqmgqCB5T/N6MB8GA1UdIwQYMBaAFC4WTbRbhGu65ownfUP4gvZAkige MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTQ2Ny85MTVDMDdFNjkx RUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3cm1qQ2Q5UV9pQzlrQ1NL QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xoWk50RnVFYTdybWpDZDlRX2lDOWtDU0tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTQ2Ny85MTVDMDdFNjkxRUExMUU3OUQwRDBBMkJDNEY5QUUwMi9MaFpOdEZ1RWE3 cm1qQ2Q5UV9pQzlrQ1NLQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmBP4ajDYS+lCN6NE3ofwD1gp9liet6ZzDYvYK8FqvobOVnro07MIL L9eDESpO4uUFIGt1sKMRBzMmIkxdRMP9sDst4CYHMQbEDvaMYosFVzmKpYXKO92Y 7ll9uDFJkUeEGks7L+vqndg/br5eTDy0QSOtxMSaiygKXTVBiRtVYRPslZdUSbUZ ISpmpRnt/Lu3Bn/1TuNaqouf9XT7OjWTIwpOA0n/OQGLHxhJFCgHiK0GoGOxWQbl AU/4npyIX+ecSF0NYn+KpoQ31r1d8xymLwWxfKYbr5jVyTkDI5CWAGTsHxbtKiNp 3GC52/mVV++U2UIA+8utbtZwV/0yMUQ0 -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:23 2025 by rpki-client