$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: ZV+hYetVTxbUrKwlT7JvKcTk+H7N9Lsm66b4p7nAxiI= Subject key identifier: DE:E8:93:11:42:23:C6:8D:C9:72:B7:7C:DE:2A:16:0C:70:2D:DF:93 Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 0987 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 095A Signing time: Fri 22 Aug 2025 20:22:53 +0000 Manifest this update: Fri 22 Aug 2025 20:22:52 +0000 Manifest next update: Fri 29 Aug 2025 20:22:52 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: JmxlkLxshXYHkVFGUJGA2Z2iNS2I4Jt+GJPLBzWxqRY=) 2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: VB8lXHaRWCgJbChk21N3X1tByJzueb4oQFsyi3R2FSI=) 3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: HRghPtYyJF7KhObZGzOSLoHVq6GqZy5jEHbcGyo6zuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2439 (0x987) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Aug 22 20:22:52 2025 GMT Not After : Aug 29 20:22:52 2025 GMT Subject: CN=68a8d19c-9d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ba:b6:75:bc:a7:4a:8f:fa:05:e4:c6:bf:80: 6d:08:44:01:a3:eb:47:a6:77:40:08:6e:6d:64:aa: ba:6c:ce:10:e0:25:b2:c5:57:dd:9c:c0:7b:78:30: 29:a1:a3:8a:38:2a:c2:00:4b:4e:53:23:72:f3:60: 93:46:88:76:03:ba:24:7b:c1:a5:fc:76:1d:7c:5a: ba:39:eb:14:96:a8:07:ea:ea:f2:56:d2:c1:43:47: 4e:74:1a:3a:11:85:81:90:34:95:74:0b:8d:0c:67: d6:0c:b6:d4:5d:28:d3:31:b4:8c:93:90:48:6e:10: 39:f2:31:2f:81:20:07:28:db:85:2e:f4:10:97:1e: 26:7a:db:c7:65:33:79:09:29:9b:c2:7d:25:d7:63: ab:9e:e8:42:35:03:d6:af:13:63:3c:46:4f:99:e3: 02:5c:15:b3:8a:83:1a:dd:7d:da:90:31:cc:53:32: ec:14:dd:1d:99:33:f6:36:29:59:ad:e6:67:65:59: 37:f2:72:ab:b8:c8:4b:29:bf:a1:6c:bb:47:d3:c3: 28:da:a6:66:b3:58:3d:45:86:3c:97:21:12:a5:29: b3:05:62:78:ab:2b:56:1d:a0:fb:49:fa:76:11:85: c0:e6:1b:a7:16:56:8d:50:ac:87:55:b0:ac:4c:62: 93:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E8:93:11:42:23:C6:8D:C9:72:B7:7C:DE:2A:16:0C:70:2D:DF:93 X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:2f:a0:a2:bd:ee:e4:85:76:af:f5:30:2e:15:9b:b1:f3:9e: 6c:82:f2:00:bf:e8:5c:df:21:a6:a1:e6:98:1a:1f:3d:dc:36: 52:88:38:73:cb:e9:23:56:63:34:4b:cd:8b:66:25:85:95:cc: ba:97:33:6c:f1:73:1a:10:71:0b:3d:9b:83:d5:63:42:aa:4f: 48:d9:34:1c:0c:2c:99:86:1d:fa:5e:79:b7:dc:55:69:1b:cb: 8e:9d:2f:21:0b:14:ea:87:82:cf:1c:9b:54:f8:1f:19:d5:a7: 17:31:b9:91:98:f5:27:1d:3c:ba:eb:ee:79:4c:7b:10:fb:ba: 54:e6:31:e3:ca:fa:e0:13:65:59:4e:b2:67:42:ea:ec:a9:4c: 9b:33:97:09:b0:71:be:cd:a2:37:fc:80:f7:72:6a:f1:fb:e7: 66:26:74:45:fe:97:cf:7b:7d:d1:04:35:47:7e:e7:f7:8e:fe: 9a:50:bb:2e:ca:81:eb:2a:af:8c:67:b5:3e:4c:c5:41:ab:af: 4c:c6:66:7a:96:dd:54:d6:c3:df:92:9f:e5:19:4f:7f:5e:6c: 7a:ce:0f:b1:82:79:15:25:23:2b:c6:36:37:a9:c7:62:2b:b9: 07:ad:f0:8d:01:e0:57:78:41:4a:3a:ae:2a:6b:a0:c4:1d:b5: be:5b:88:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjUwODIyMjAyMjUyWhcNMjUwODI5MjAyMjUyWjAYMRYwFAYD VQQDEw02OGE4ZDE5Yy05ZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rq2dbynSo/6BeTGv4BtCEQBo+tHpndACG5tZKq6bM4Q4CWyxVfdnMB7eDAp oaOKOCrCAEtOUyNy82CTRoh2A7oke8Gl/HYdfFq6OesUlqgH6uryVtLBQ0dOdBo6 EYWBkDSVdAuNDGfWDLbUXSjTMbSMk5BIbhA58jEvgSAHKNuFLvQQlx4metvHZTN5 CSmbwn0l12OrnuhCNQPWrxNjPEZPmeMCXBWzioMa3X3akDHMUzLsFN0dmTP2NilZ reZnZVk38nKruMhLKb+hbLtH08Mo2qZms1g9RYY8lyESpSmzBWJ4qytWHaD7Sfp2 EYXA5hunFlaNUKyHVbCsTGKTwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7okxFC I8aNyXK3fN4qFgxwLd+TMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlL6Cive7khXav9TAuFZux855sgvIAv+hc3yGmoeaYGh893DZSiDhz y+kjVmM0S82LZiWFlcy6lzNs8XMaEHELPZuD1WNCqk9I2TQcDCyZhh36Xnm33FVp G8uOnS8hCxTqh4LPHJtU+B8Z1acXMbmRmPUnHTy66+55THsQ+7pU5jHjyvrgE2VZ TrJnQursqUybM5cJsHG+zaI3/ID3cmrx++dmJnRF/pfPe33RBDVHfuf3jv6aULsu yoHrKq+MZ7U+TMVBq69MxmZ6lt1U1sPfkp/lGU9/Xmx6zg+xgnkVJSMrxjY3qcdi K7kHrfCNAeBXeEFKOq4qa6DEHbW+W4hr -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:16 2025 by rpki-client