$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft File: LWNAd8yEe1nUBI1D4EszCWmP5jg.mft (raw, json) Hash identifier: 9heDodZDmv1ZiH7gNrcv+ylO8ZvK2UrZ6IrMw6YB2sQ= Subject key identifier: CC:AC:7F:05:B3:33:62:27:1B:3C:DD:7C:C8:79:C7:6E:DB:E3:00:4E Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 0350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft Manifest number: 02D2 Signing time: Sat 23 Aug 2025 02:43:04 +0000 Manifest this update: Sat 23 Aug 2025 02:43:03 +0000 Manifest next update: Sat 30 Aug 2025 02:43:03 +0000 Files and hashes: 1: LWNAd8yEe1nUBI1D4EszCWmP5jg.crl (hash: jCP+FFO/clbE41ekQLylEcMghZbmSftnu0IQqmsIKag=) 2: CA1A46101A5B11EE89B07267C4F9AE02.roa (hash: 8ElsEHtT0SW1j1aAkI7fCGcQz8Vw9D+aynR3ExaKcpk=) 3: 94C13908C4AF11EDBCC55111C4F9AE02.roa (hash: bL7WlFADw3cMus0TM2SD+wI5B/pCkUnpQijrEhDa4U0=) 4: FDC6A888AEB111EE9A78E132C4F9AE02.roa (hash: 1rlL8AOn2uXofYClrML3TckQyLLsgVx4YB81FAg0ITc=) 5: 430E4E387CC311F0A55B2081C4F9AE02.roa (hash: +O7nAJMuarvCDGn3hLW94zNyulK0005NKttXFTFasLE=) 6: 0B7CEEB07CC911F08411627BC4F9AE02.roa (hash: zQSD+xfDTo0DH5D2SfylP/E/Az5Iw/KgYmc0Gi0zx5o=) 7: FECE3C3C855711EF8E79C52BC4F9AE02.roa (hash: qIG1nrRqmqeXhlJ4QfxZpQrhglB0XBpLi9GUgb6DFzg=) 8: 755E6B82D21C11EEA166891AC4F9AE02.roa (hash: IjfhL1iMdoF6vbj8qmgjKEyAn1TdguzASGP9+nLwaQc=) 9: E879EE7C144111EFB247B936C4F9AE02.roa (hash: qwsK6I5KvMQVVTxqatHLY4Gc06wI8z6a8GKH4pqG5s4=) 10: 90647F2EA14A11ED8FFBA684C4F9AE02.roa (hash: zMUCXonIy5tOWaMiCq30fCZFtIY4G0iHQ+o2rUhkbic=) 11: F9A864386AAB11EF8FEBE576C4F9AE02.roa (hash: Q+LuT/2pIJ9IStVr144XnzBFQZyXtxyXwoGNHoKHCCk=) 12: FD124A14CC5811EDBE5D203FC4F9AE02.roa (hash: sAfUcNCOt118LSTGd2ByOqCl6kCgTi6ZVqAMUJEtk3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 848 (0x350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Aug 23 02:43:03 2025 GMT Not After : Aug 30 02:43:03 2025 GMT Subject: CN=68a92ab7-9e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:22:e9:63:e5:ad:bf:ee:d1:2a:41:3a:01: 37:be:b3:a6:23:0c:96:10:8a:7d:a7:7c:64:a8:94: eb:84:3f:8b:f5:7f:40:13:bb:7a:33:68:ce:bb:60: 86:ad:d7:c9:ab:55:ed:74:d9:ae:1c:b9:a0:2c:ed: 05:e7:26:d1:48:3d:f7:05:81:dc:b6:9e:92:71:b8: 07:88:ee:52:12:d2:ca:91:45:e2:88:40:82:12:97: 6f:02:a8:ee:77:b1:07:66:d0:7a:a9:05:b2:8f:1c: 05:72:c8:f9:e6:4d:ad:b4:32:ee:a4:1a:64:b7:6b: db:f6:a5:2f:60:d6:ee:34:aa:7a:af:a2:c7:18:fb: c8:2d:3b:e1:7e:6a:f7:60:b1:d0:b2:0f:2a:4f:b8: 62:64:eb:be:ef:16:30:d6:73:38:f8:75:00:66:19: 47:b9:de:96:37:45:fe:fb:3a:b1:65:d7:03:fc:90: 3a:90:85:bd:76:fb:5c:24:75:01:c1:30:3b:93:2d: 45:b8:50:15:56:cf:03:fa:af:a3:2f:a4:d5:d3:fc: d3:e1:09:8e:7a:7c:47:77:2e:3a:8f:75:a2:f4:60: 56:99:b7:27:e6:f7:36:1b:ae:f6:f3:a6:e4:18:93: cb:93:f1:f2:64:0f:9d:0c:5d:d3:5b:3b:0e:e0:fa: 65:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AC:7F:05:B3:33:62:27:1B:3C:DD:7C:C8:79:C7:6E:DB:E3:00:4E X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:bb:5a:35:61:a2:72:fa:8b:d3:29:60:2f:cb:3c:cf:af:40: bf:d5:7f:fe:64:04:59:23:25:3f:ac:e0:66:f9:dc:cd:9a:ce: 05:27:07:16:40:70:7b:7e:6e:c4:e1:dc:8c:f1:f8:53:af:d1: 31:3d:42:a4:4b:ac:9c:6f:89:a0:a1:e5:96:99:e3:87:78:9e: 9b:92:c8:48:28:51:b7:72:1c:30:2b:14:9e:33:4a:b9:3a:5d: 89:0d:00:3e:f1:2d:b7:e9:dc:57:ac:98:65:cf:e0:40:17:ec: 2a:30:f3:73:f5:7d:29:93:3c:19:15:00:68:12:9c:f7:aa:d9: 7b:9f:15:ff:e5:1e:03:d1:1e:ba:9a:76:ec:c2:5c:9c:0f:0c: 67:bd:d2:1f:22:11:d8:da:20:f2:04:ea:da:75:5a:ad:1f:87: 85:cf:1e:36:a7:ed:6c:cd:19:fa:16:46:88:a1:f2:51:a9:44: 77:2d:19:36:e8:e6:42:3d:6f:99:4e:f3:5c:e6:83:60:d6:d6: 2c:92:e1:42:13:ac:c7:33:3e:56:85:a7:2e:de:a6:46:56:7b: b9:24:47:c4:e6:ed:1e:2c:bb:a9:01:e3:f8:fe:b7:47:70:b8: de:e1:cb:aa:8a:1f:15:7c:35:cd:61:37:ed:56:c3:65:7d:de: 86:01:72:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjUwODIzMDI0MzAzWhcNMjUwODMwMDI0MzAzWjAYMRYwFAYD VQQDEw02OGE5MmFiNy05ZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbEi6WPlrb/u0SpBOgE3vrOmIwyWEIp9p3xkqJTrhD+L9X9AE7t6M2jOu2CG rdfJq1XtdNmuHLmgLO0F5ybRSD33BYHctp6ScbgHiO5SEtLKkUXiiECCEpdvAqju d7EHZtB6qQWyjxwFcsj55k2ttDLupBpkt2vb9qUvYNbuNKp6r6LHGPvILTvhfmr3 YLHQsg8qT7hiZOu+7xYw1nM4+HUAZhlHud6WN0X++zqxZdcD/JA6kIW9dvtcJHUB wTA7ky1FuFAVVs8D+q+jL6TV0/zT4QmOenxHdy46j3Wi9GBWmbcn5vc2G67286bk GJPLk/HyZA+dDF3TWzsO4Ppl0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMysfwWz M2InGzzdfMh5x27b4wBOMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjU4Ny80MTdENzFCNDkxODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUx blVCSTFENEVzekNXbVA1amcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTu1o1YaJy+ovTKWAvyzzPr0C/1X/+ZARZIyU/rOBm+dzNms4FJwcW QHB7fm7E4dyM8fhTr9ExPUKkS6ycb4mgoeWWmeOHeJ6bkshIKFG3chwwKxSeM0q5 Ol2JDQA+8S236dxXrJhlz+BAF+wqMPNz9X0pkzwZFQBoEpz3qtl7nxX/5R4D0R66 mnbswlycDwxnvdIfIhHY2iDyBOradVqtH4eFzx42p+1szRn6FkaIofJRqUR3LRk2 6OZCPW+ZTvNc5oNg1tYskuFCE6zHMz5Whacu3qZGVnu5JEfE5u0eLLupAeP4/rdH cLje4cuqih8VfDXNYTftVsNlfd6GAXL+ -----END CERTIFICATE-----Generated at Sat Aug 23 10:42:53 2025 by rpki-client