$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json) Hash identifier: Qo6GJL3x8xesB06lt7eD387Quglx8IvkFZ8XpxhlZDg= Subject key identifier: 28:D6:3A:7F:84:55:83:0E:A1:A2:89:95:F0:5A:68:8F:F7:DD:F6:D4 Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Certificate serial: 121E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft Manifest number: 11FD Signing time: Fri 22 Aug 2025 17:17:57 +0000 Manifest this update: Fri 22 Aug 2025 17:17:56 +0000 Manifest next update: Fri 29 Aug 2025 17:17:56 +0000 Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: +EtTF3vN+ISNS4BiayA6xa8RyvjdNPDO4mMvTd2Fim4=) 2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: nRERsNzlprKA9xVdUB5MTKCV5NYn4X6gB4JWqfSoRiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4638 (0x121e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Validity Not Before: Aug 22 17:17:56 2025 GMT Not After : Aug 29 17:17:56 2025 GMT Subject: CN=68a8a645-1c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:c3:d0:22:ae:26:2b:c6:85:95:3e:28:10: 3d:80:b2:6a:cb:e0:cd:7f:0c:c4:c5:1f:d2:96:bb: 02:5b:3a:f5:cc:e6:8a:37:cb:f1:48:a4:86:7f:b1: 88:8b:5b:18:5f:f7:3e:62:9a:1e:90:6a:fd:f5:4e: 33:95:20:a6:1f:c5:d3:20:18:de:8f:5e:71:f9:94: e2:8b:6a:0c:8b:81:e6:aa:de:f8:b0:78:b0:58:84: 62:06:4b:62:4d:9d:1f:86:32:8f:62:08:8f:c4:f5: c0:be:68:a5:da:2d:74:19:06:bc:be:33:7b:4d:81: 19:3b:fc:b7:67:64:96:a7:02:07:bb:ce:5f:c7:71: 0b:22:b3:31:08:2e:80:71:12:f3:d1:e4:c9:da:08: a1:16:83:1e:5c:8d:ca:9c:c1:db:12:98:51:f1:60: 99:f3:c6:75:13:76:bd:9d:15:38:8d:3d:f4:53:c6: 0d:0e:a7:41:b2:34:3c:14:25:96:61:ba:33:b2:11: 06:c7:59:dd:83:99:15:22:76:8b:73:66:ec:ef:1c: 9e:13:90:5e:2e:16:c1:cf:69:84:80:29:09:e3:40: 21:37:e9:53:fe:34:1a:ac:ac:ad:2b:a1:6b:2d:5f: b7:e8:96:39:ea:cd:f2:d2:2a:0c:ea:00:bc:a2:5e: 10:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D6:3A:7F:84:55:83:0E:A1:A2:89:95:F0:5A:68:8F:F7:DD:F6:D4 X509v3 Authority Key Identifier: keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:12:63:ce:11:de:3f:6d:b5:cd:26:d3:9d:6a:f9:1e:50:33: 7d:54:03:d2:4e:08:43:f0:fc:58:a0:95:05:1b:93:a1:b1:63: b8:53:74:db:18:56:e5:77:2c:2a:1b:1a:98:c8:5d:06:96:55: a4:d0:1a:fd:68:27:a3:67:6e:e9:86:0a:19:9c:37:f2:7b:bb: 6e:e7:92:61:40:45:c5:32:e0:24:90:60:f4:05:4e:c3:0f:a0: 17:98:83:96:2d:b9:74:5e:5c:8a:40:3c:e5:54:06:d5:5f:9c: 9b:8a:4e:82:36:6e:69:88:7f:1c:18:b9:ff:64:db:2d:dd:e6: 98:37:4e:83:8b:68:86:d6:f9:1c:ee:dc:16:28:0a:ff:62:9b: ef:25:37:97:78:10:fe:ae:45:4f:16:74:e4:2a:6e:48:95:2d: ba:51:ed:db:d8:8e:ad:bf:63:d8:67:a6:10:6b:ae:0e:76:b9: 51:a7:36:34:68:f9:77:bd:fb:14:51:c1:36:38:bd:39:67:dd: 7a:a2:c4:49:d2:f0:25:77:21:19:8e:30:3d:bc:5b:8e:38:eb: a0:a8:a4:f8:e3:10:3e:df:d2:20:f4:2b:e8:74:82:22:35:ae: 2f:d7:10:69:fd:53:8d:13:f8:f4:04:f7:ba:7e:95:52:f5:39: fb:19:67:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw MTk4OEZGMzEwHhcNMjUwODIyMTcxNzU2WhcNMjUwODI5MTcxNzU2WjAYMRYwFAYD VQQDEw02OGE4YTY0NS0xYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ7D0CKuJivGhZU+KBA9gLJqy+DNfwzExR/SlrsCWzr1zOaKN8vxSKSGf7GI i1sYX/c+YpoekGr99U4zlSCmH8XTIBjej15x+ZTii2oMi4Hmqt74sHiwWIRiBkti TZ0fhjKPYgiPxPXAvmil2i10GQa8vjN7TYEZO/y3Z2SWpwIHu85fx3ELIrMxCC6A cRLz0eTJ2gihFoMeXI3KnMHbEphR8WCZ88Z1E3a9nRU4jT30U8YNDqdBsjQ8FCWW YbozshEGx1ndg5kVInaLc2bs7xyeE5BeLhbBz2mEgCkJ40AhN+lT/jQarKytK6Fr LV+36JY56s3y0ioM6gC8ol4QXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjWOn+E VYMOoaKJlfBaaI/33fbUMB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3 eUNoWUVzTVR6SGdCbUlfekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnEmPOEd4/bbXNJtOdavkeUDN9VAPSTghD8PxYoJUFG5OhsWO4U3Tb GFbldywqGxqYyF0GllWk0Br9aCejZ27phgoZnDfye7tu55JhQEXFMuAkkGD0BU7D D6AXmIOWLbl0XlyKQDzlVAbVX5ybik6CNm5piH8cGLn/ZNst3eaYN06Di2iG1vkc 7twWKAr/YpvvJTeXeBD+rkVPFnTkKm5IlS26Ue3b2I6tv2PYZ6YQa64OdrlRpzY0 aPl3vfsUUcE2OL05Z916osRJ0vAldyEZjjA9vFuOOOugqKT44xA+39Ig9CvodIIi Na4v1xBp/VONE/j0BPe6fpVS9Tn7GWfX -----END CERTIFICATE-----Generated at Sun Aug 24 06:34:40 2025 by rpki-client