$ rpki-client -vvf rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft File: lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft (raw, json) Hash identifier: cFZuaFS7z7UyQLl2yljvPpy+WEyOta/93TtDXXM4OyM= Subject key identifier: A6:55:51:1A:1A:04:2E:D0:90:D8:F2:D9:3A:67:A9:71:55:38:EE:DE Authority key identifier: 95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F Certificate issuer: /CN=A91B075B/serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft Manifest number: 0491 Signing time: Sat 23 Aug 2025 00:13:19 +0000 Manifest this update: Sat 23 Aug 2025 00:13:18 +0000 Manifest next update: Sat 30 Aug 2025 00:13:18 +0000 Files and hashes: 1: lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl (hash: ExqWWfXcZNGgPGAc9LQwkTlE8B33+TAQ9xD7c3gOse0=) 2: 85A82A144C1311ECB5708257C4F9AE02.roa (hash: dphkC3ssGJ+iIglODQswGH04mVygF6iWdjby9ZvopB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B075B, serialNumber=953EC2A1BE70259E6A2FD9CE8D483BD9BD1AE33F Validity Not Before: Aug 23 00:13:18 2025 GMT Not After : Aug 30 00:13:18 2025 GMT Subject: CN=68a9079f-9dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:67:23:34:19:1a:45:21:90:71:c8:f9:3f: f6:75:82:d9:b3:54:77:49:f2:f7:81:6c:e5:fc:bb: 6c:e1:2a:c2:f7:6d:c6:97:0b:e9:69:40:56:cb:98: a8:e4:9f:96:71:17:0c:d0:1d:84:15:85:c8:d2:3a: c1:37:2e:ad:27:e4:3b:0b:4b:5b:35:34:ad:38:a5: 3d:7b:42:cb:61:8e:6b:a6:87:4d:bb:e1:59:36:24: 74:79:ad:2a:66:dc:75:5f:cc:f3:d2:17:0d:0e:71: 1a:31:cc:9b:64:a7:20:c9:a4:e5:e4:09:00:84:43: de:a5:49:d2:a6:36:57:31:d7:61:50:cf:92:67:f3: 54:c2:e5:0f:54:a6:3f:ea:2b:12:06:64:b9:1c:41: ba:63:fe:a4:d9:55:ec:a7:9b:99:10:30:3f:49:91: ce:06:a6:90:58:e9:4d:75:00:d4:95:d3:84:a8:c4: e2:27:42:3f:d1:e8:49:57:ca:3a:85:51:2a:c4:e8: ed:c2:f7:a7:8b:8a:f3:d7:0e:12:f6:2a:2c:eb:c1: fb:5f:37:47:f7:e9:50:16:fc:e2:19:c8:ef:24:b5: f1:f8:c5:e0:31:aa:1c:1c:b6:09:ac:1c:4c:c2:1a: 08:b5:54:b7:2b:db:e3:89:54:6c:e6:55:29:fc:d4: 58:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:55:51:1A:1A:04:2E:D0:90:D8:F2:D9:3A:67:A9:71:55:38:EE:DE X509v3 Authority Key Identifier: keyid:95:3E:C2:A1:BE:70:25:9E:6A:2F:D9:CE:8D:48:3B:D9:BD:1A:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lT7Cob5wJZ5qL9nOjUg72b0a4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B075B/44A13B4E4C1011ECA5D2A94FC4F9AE02/lT7Cob5wJZ5qL9nOjUg72b0a4z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e1:aa:a5:1c:94:c3:aa:a9:27:b9:71:b5:de:f3:09:47:ac: 9f:68:b1:dc:76:eb:16:b3:27:2f:4e:1a:29:66:09:e3:df:b3: d2:0b:76:64:8c:34:4d:d1:8a:5a:42:77:8d:71:51:c4:a4:e7: 24:ef:8d:ff:50:f2:6a:09:03:23:6c:80:13:03:58:8f:93:98: d4:1d:93:a0:07:8f:f3:c3:be:75:d9:f8:78:29:83:6d:79:35: 1f:fa:d7:f5:1c:b4:c8:77:ff:e4:2d:73:cb:ba:94:be:21:cd: a2:1c:7f:69:0d:e5:2c:80:f2:68:95:5b:e1:6b:9b:ed:1b:52: 46:e5:66:d5:30:1b:13:88:ae:86:3c:18:67:2e:b7:a6:48:11: 8d:73:5c:a7:e3:60:8c:d8:9b:23:2f:92:3a:89:2b:d2:c6:87: 61:28:61:f6:95:34:73:c5:41:10:22:5d:f8:4c:5e:e5:6b:d2: a7:3e:7b:a1:ba:8c:65:df:ce:f1:df:56:87:3c:5a:d8:4a:e9: 24:92:d8:f2:69:a4:67:f9:2b:57:7f:71:35:0f:86:2f:3c:fa: bf:d9:38:f8:61:dc:42:91:14:87:03:38:cd:6e:16:f3:eb:f3: da:b8:38:78:f7:18:08:97:e8:92:1a:e6:8c:19:28:7f:f1:cf: 75:1f:dd:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NUIxMTAvBgNVBAUTKDk1M0VDMkExQkU3MDI1OUU2QTJGRDlDRThENDgzQkQ5 QkQxQUUzM0YwHhcNMjUwODIzMDAxMzE4WhcNMjUwODMwMDAxMzE4WjAYMRYwFAYD VQQDEw02OGE5MDc5Zi05ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp1nIzQZGkUhkHHI+T/2dYLZs1R3SfL3gWzl/Lts4SrC923GlwvpaUBWy5io 5J+WcRcM0B2EFYXI0jrBNy6tJ+Q7C0tbNTStOKU9e0LLYY5rpodNu+FZNiR0ea0q Ztx1X8zz0hcNDnEaMcybZKcgyaTl5AkAhEPepUnSpjZXMddhUM+SZ/NUwuUPVKY/ 6isSBmS5HEG6Y/6k2VXsp5uZEDA/SZHOBqaQWOlNdQDUldOEqMTiJ0I/0ehJV8o6 hVEqxOjtwveni4rz1w4S9ios68H7XzdH9+lQFvziGcjvJLXx+MXgMaocHLYJrBxM whoItVS3K9vjiVRs5lUp/NRYlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZVURoa BC7QkNjy2TpnqXFVOO7eMB8GA1UdIwQYMBaAFJU+wqG+cCWeai/Zzo1IO9m9GuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc1Qi80NEExM0I0RTRD MTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0paNXFMOW5PalVnNzJiMGE0 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUN0NvYjV3Slo1cUw5bk9qVWc3MmIwYTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDc1Qi80NEExM0I0RTRDMTAxMUVDQTVEMkE5NEZDNEY5QUUwMi9sVDdDb2I1d0pa NXFMOW5PalVnNzJiMGE0ejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe4aqlHJTDqqknuXG13vMJR6yfaLHcdusWsycvThopZgnj37PSC3Zk jDRN0YpaQneNcVHEpOck743/UPJqCQMjbIATA1iPk5jUHZOgB4/zw7512fh4KYNt eTUf+tf1HLTId//kLXPLupS+Ic2iHH9pDeUsgPJolVvha5vtG1JG5WbVMBsTiK6G PBhnLremSBGNc1yn42CM2JsjL5I6iSvSxodhKGH2lTRzxUEQIl34TF7la9KnPnuh uoxl387x31aHPFrYSukkktjyaaRn+StXf3E1D4YvPPq/2Tj4YdxCkRSHAzjNbhbz 6/PauDh49xgIl+iSGuaMGSh/8c91H90F -----END CERTIFICATE-----Generated at Sat Aug 23 19:02:57 2025 by rpki-client