$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json) Hash identifier: ZRswVg6+xncXZPyiVbyoO/4ISC02MsdqxdefzpzbHHg= Subject key identifier: A6:47:FF:27:F5:DD:82:3D:79:62:46:7D:4D:F2:13:F7:6A:82:E8:40 Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Certificate serial: 07E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft Manifest number: 07D5 Signing time: Fri 22 Aug 2025 21:20:42 +0000 Manifest this update: Fri 22 Aug 2025 21:20:42 +0000 Manifest next update: Fri 29 Aug 2025 21:20:42 +0000 Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: VIS5isR/BRy+pj1Ki3MSKWEERMOlFPjhdm6bCVOUT/Q=) 2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2020 (0x7e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Validity Not Before: Aug 22 21:20:42 2025 GMT Not After : Aug 29 21:20:42 2025 GMT Subject: CN=68a8df2a-9516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:fe:b0:9d:37:18:54:39:6b:39:6c:7d:05: d5:54:3f:83:c1:77:11:d9:77:65:7f:c9:b0:d7:e2: 5c:67:7f:a0:84:e9:16:a1:1c:80:56:9c:70:0a:15: 83:7a:d2:13:d4:48:c8:2b:b4:b6:59:83:57:73:3c: 02:87:4e:7d:4e:18:fe:db:c7:c3:34:44:db:3b:96: 59:3f:8a:2e:e2:a9:92:9a:b0:08:25:11:92:ed:4c: 4c:29:ab:dc:87:fe:dc:9d:a5:b6:05:0f:3f:33:2d: ea:1d:4a:dd:bd:d5:e4:29:d8:ed:8b:1e:f8:0e:f0: 1b:d2:89:86:e5:9c:9c:5f:1d:fd:2a:5f:03:d6:5d: 7a:0f:39:54:e2:73:d8:3c:25:46:47:a2:cf:33:fb: d1:56:1a:f6:d3:28:3c:fa:e4:de:e7:98:84:2c:66: e9:60:26:73:f9:6c:27:43:eb:84:6c:d8:d7:ab:54: 82:5c:99:85:8f:35:af:af:17:6d:d3:3a:58:e6:c4: 9b:d5:42:b5:92:32:1a:ae:c4:aa:29:94:d2:b0:ac: 8a:e7:4a:99:a9:c4:9b:10:42:b2:e3:1d:11:1f:59: f8:02:59:c6:bf:7d:82:8e:c8:50:6c:5b:97:07:ef: d6:85:2d:6c:20:f3:ac:8e:9c:8c:d3:37:2d:f6:17: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:47:FF:27:F5:DD:82:3D:79:62:46:7D:4D:F2:13:F7:6A:82:E8:40 X509v3 Authority Key Identifier: keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:97:ff:f8:83:f6:23:90:1f:7b:c1:95:45:fb:06:24:52:aa: c4:59:f8:b4:73:aa:7e:de:fb:57:a3:34:1f:f1:62:cb:83:30: 17:72:e4:4c:79:f0:98:8e:60:71:e3:0d:7a:d8:b3:70:03:9e: 36:07:4b:66:64:7d:4d:39:ea:bf:a7:af:06:2e:c1:00:95:43: ea:37:f6:ea:38:ad:bb:4c:5e:f0:b6:e0:3f:a5:b0:ef:bf:b5: 53:c9:17:37:f1:82:90:3f:55:54:b8:65:c3:a1:7e:49:a9:ce: 37:bb:a0:b5:05:e2:42:ec:20:8a:03:f0:db:f7:92:8b:d7:b5: 0d:45:c4:9d:9a:f1:eb:a3:29:7b:64:08:03:c8:17:f8:ab:64: 19:91:1d:eb:72:fd:fd:ef:16:88:4e:43:1e:66:e0:ae:b6:a6: 9c:79:a3:30:7e:39:ef:c0:fd:6c:8d:35:33:64:2d:96:14:63: 24:5c:d9:49:96:84:30:e7:18:b7:4f:bb:a9:ff:97:d5:4a:37: ff:99:47:67:0d:09:50:06:c7:b8:ae:08:bf:b7:30:1b:7b:ab: 23:e1:3b:78:e3:69:31:05:b3:80:dd:6d:d3:09:10:ed:69:32: 95:9d:7e:1d:f4:6f:ed:f0:48:a1:e9:a8:32:26:47:3c:01:12: 29:ac:d6:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy QzE3NkIzNzYwHhcNMjUwODIyMjEyMDQyWhcNMjUwODI5MjEyMDQyWjAYMRYwFAYD VQQDEw02OGE4ZGYyYS05NTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsh/+sJ03GFQ5azlsfQXVVD+DwXcR2Xdlf8mw1+JcZ3+ghOkWoRyAVpxwChWD etIT1EjIK7S2WYNXczwCh059Thj+28fDNETbO5ZZP4ou4qmSmrAIJRGS7UxMKavc h/7cnaW2BQ8/My3qHUrdvdXkKdjtix74DvAb0omG5ZycXx39Kl8D1l16DzlU4nPY PCVGR6LPM/vRVhr20yg8+uTe55iELGbpYCZz+WwnQ+uEbNjXq1SCXJmFjzWvrxdt 0zpY5sSb1UK1kjIarsSqKZTSsKyK50qZqcSbEEKy4x0RH1n4AlnGv32CjshQbFuX B+/WhS1sIPOsjpyM0zct9hfcuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZH/yf1 3YI9eWJGfU3yE/dqguhAMB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5 MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkl//4g/YjkB97wZVF+wYkUqrEWfi0c6p+3vtXozQf8WLLgzAXcuRM efCYjmBx4w162LNwA542B0tmZH1NOeq/p68GLsEAlUPqN/bqOK27TF7wtuA/pbDv v7VTyRc38YKQP1VUuGXDoX5Jqc43u6C1BeJC7CCKA/Db95KL17UNRcSdmvHroyl7 ZAgDyBf4q2QZkR3rcv397xaITkMeZuCutqaceaMwfjnvwP1sjTUzZC2WFGMkXNlJ loQw5xi3T7up/5fVSjf/mUdnDQlQBse4rgi/tzAbe6sj4Tt442kxBbOA3W3TCRDt aTKVnX4d9G/t8Eih6agyJkc8ARIprNaM -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:21 2025 by rpki-client