$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft File: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft (raw, json) Hash identifier: DLamRcVeJcx1/Kg9Di1Jy1fNJ+Z4cMSGS+GXLtcI3b8= Subject key identifier: D5:34:2A:07:B2:36:0E:54:84:34:2B:9E:D2:28:F1:24:18:97:99:06 Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft Manifest number: 7C Signing time: Sat 23 Aug 2025 06:57:23 +0000 Manifest this update: Sat 23 Aug 2025 06:57:22 +0000 Manifest next update: Sat 30 Aug 2025 06:57:22 +0000 Files and hashes: 1: LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl (hash: 1VF0Orz3O7sLTv+4iRJy4vDLFVngi+/FvWhiUvWkXbY=) 2: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (hash: kwAnzY8sy28GuHuTAHp4dfauwLru447J5nFlWPhA168=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Validity Not Before: Aug 23 06:57:22 2025 GMT Not After : Aug 30 06:57:22 2025 GMT Subject: CN=68a96653-d1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:95:d0:07:71:7d:c0:20:cd:37:17:87:be:10: 43:a9:60:13:7f:57:37:9d:cb:8b:f8:83:b6:fb:7d: 75:67:46:22:23:0c:a4:77:03:94:81:cb:0b:b4:14: 84:6d:e1:82:1a:00:d0:8e:90:c1:06:bb:bd:d9:12: 2c:f7:11:df:cb:16:08:a0:db:96:e4:a4:61:e0:2e: 15:2e:27:47:1b:fb:eb:f1:8d:9a:8b:54:f6:9c:a7: e7:5f:10:ea:68:80:fa:bd:75:b0:84:e9:9b:03:32: 4a:5c:bc:e3:33:86:39:d7:4f:1f:c6:b5:99:4e:01: 78:4f:b3:30:02:55:ca:12:f1:de:f6:51:d5:e8:56: 3b:24:59:3c:66:de:b3:19:02:02:ed:1c:15:66:a6: c4:9f:ee:ba:b2:49:ab:ed:0b:a7:79:c8:86:05:8b: e6:98:e0:27:39:a3:a9:1d:3c:49:a0:d2:a9:1b:25: 3b:1d:47:2e:20:6d:32:00:39:f8:d6:a5:21:90:2e: 09:ef:fc:92:51:4a:1e:a1:9c:86:67:b3:76:39:1a: 76:20:4f:ca:f9:e9:41:ca:9b:e7:28:31:57:27:e0: 1c:c6:98:01:87:c8:be:60:ac:3d:56:2b:b7:0e:e5: 19:ea:2c:86:4a:aa:2d:53:b2:a2:69:70:0a:05:83: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:34:2A:07:B2:36:0E:54:84:34:2B:9E:D2:28:F1:24:18:97:99:06 X509v3 Authority Key Identifier: keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:3e:e7:9a:93:ad:bf:ff:04:56:58:81:fe:c2:95:0e:16:63: 14:e4:d1:da:d4:28:32:0c:16:c6:d3:8b:5b:ac:d4:ff:2c:80: 3a:ef:ad:a8:d6:a3:6a:3d:6e:cf:ff:0a:be:d4:81:6d:91:21: b1:77:3e:d7:92:78:66:bc:53:b3:ce:b6:35:82:61:7d:3d:5c: 32:e7:0d:44:5c:c8:cf:be:f1:a2:b4:f0:39:48:68:59:23:a7: 77:b2:28:55:2f:8b:37:ec:ae:15:31:ee:f3:f3:30:1f:4a:dd: cc:97:5f:bb:c0:0b:cd:54:e6:c0:ae:ae:0d:1f:60:67:47:09: 27:84:d9:2d:19:4b:29:5c:d3:b4:3d:28:e6:6b:d1:6f:f0:6b: 49:3b:5e:a8:ab:b2:ea:42:f6:66:66:13:ba:76:00:af:2f:23: 56:2e:fa:be:04:41:30:63:20:9d:07:8c:47:de:65:14:66:29: a7:53:4d:2e:9b:1b:6b:80:b3:30:56:72:ef:3c:a9:82:df:d3: 4b:21:7a:dc:1e:78:c2:2a:37:6a:8f:0e:14:b3:ce:11:40:ef: 76:b9:cd:9d:59:7a:21:83:ef:85:b2:9f:3f:19:46:41:15:7e: 54:30:f5:84:27:85:33:de:87:e2:25:83:a6:f3:af:f3:3c:dc: d9:59:6f:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjIwNzExMC8GA1UEBRMoMkQyMjNCNTZFRDREMTdBODE3OEZFOUZDNjNFMzgwMUE5 M0I1QTFEMzAeFw0yNTA4MjMwNjU3MjJaFw0yNTA4MzAwNjU3MjJaMBgxFjAUBgNV BAMTDTY4YTk2NjUzLWQxYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXldAHcX3AIM03F4e+EEOpYBN/Vzedy4v4g7b7fXVnRiIjDKR3A5SBywu0FIRt 4YIaANCOkMEGu73ZEiz3Ed/LFgig25bkpGHgLhUuJ0cb++vxjZqLVPacp+dfEOpo gPq9dbCE6ZsDMkpcvOMzhjnXTx/GtZlOAXhPszACVcoS8d72UdXoVjskWTxm3rMZ AgLtHBVmpsSf7rqySavtC6d5yIYFi+aY4Cc5o6kdPEmg0qkbJTsdRy4gbTIAOfjW pSGQLgnv/JJRSh6hnIZns3Y5GnYgT8r56UHKm+coMVcn4BzGmAGHyL5grD1WK7cO 5RnqLIZKqi1TsqJpcAoFg+FnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1TQqB7I2 DlSENCue0ijxJBiXmQYwHwYDVR0jBBgwFoAULSI7Vu1NF6gXj+n8Y+OAGpO1odMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMjA3L0FDQjA2ODVFQzIy ODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9k TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFNJN1Z1MU5GNmdYai1uOFktT0FHcE8xb2RNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MjA3L0FDQjA2ODVFQzIyODExRUY4NkUzNDg0RkM0RjlBRTAyL0xTSTdWdTFORjZn WGotbjhZLU9BR3BPMW9kTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABU+55qTrb//BFZYgf7ClQ4WYxTk0drUKDIMFsbTi1us1P8sgDrvrajW o2o9bs//Cr7UgW2RIbF3PteSeGa8U7POtjWCYX09XDLnDURcyM++8aK08DlIaFkj p3eyKFUvizfsrhUx7vPzMB9K3cyXX7vAC81U5sCurg0fYGdHCSeE2S0ZSylc07Q9 KOZr0W/wa0k7XqirsupC9mZmE7p2AK8vI1Yu+r4EQTBjIJ0HjEfeZRRmKadTTS6b G2uAszBWcu88qYLf00shetweeMIqN2qPDhSzzhFA73a5zZ1ZeiGD74Wynz8ZRkEV flQw9YQnhTPeh+Ilg6bzr/M83NlZb/E= -----END CERTIFICATE-----Generated at Sat Aug 23 13:49:27 2025 by rpki-client