$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json) Hash identifier: weB4UO2liujpC84YT3l48SurKrsbgftCQpxzF8aUhIE= Subject key identifier: 5E:24:AB:80:04:2C:57:86:ED:F6:F4:A9:CD:04:AD:38:46:4D:E9:17 Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft Manifest number: 0199 Signing time: Sat 23 Aug 2025 03:26:58 +0000 Manifest this update: Sat 23 Aug 2025 03:26:58 +0000 Manifest next update: Sat 30 Aug 2025 03:26:58 +0000 Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: YATcHJF+NwWzzSVnJ670+hKeNih7Q5WtL51g4WYXtyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Validity Not Before: Aug 23 03:26:58 2025 GMT Not After : Aug 30 03:26:58 2025 GMT Subject: CN=68a93502-d242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0f:77:9e:66:f7:ff:f0:f6:52:8b:b7:8a:02: 1a:68:5e:a9:33:31:63:e9:c4:2b:5c:25:66:db:82: 22:46:1f:e1:37:b0:a8:3b:7d:e3:88:c4:5c:b9:7b: 3b:d1:57:c3:a3:0d:b3:e6:d3:b5:cd:a0:b6:f1:6d: c2:51:32:c0:42:09:e1:bc:5f:f2:65:ea:42:7d:78: 0b:f2:4a:56:c8:2e:1a:8f:6f:73:b7:23:8f:48:23: ec:25:80:11:6e:17:c6:a4:89:0f:1e:59:a4:79:f0: a4:b2:3c:a8:99:5b:65:b4:6e:6f:a9:7c:65:07:09: 34:48:6a:c4:42:59:30:08:6b:18:4d:92:17:75:10: 29:8b:fa:cb:a4:8c:18:99:79:86:fe:3e:cc:9e:2a: ac:6c:a3:7c:57:f4:1d:df:03:81:44:28:73:12:26: 3d:e2:aa:66:e9:9b:d3:c3:05:e8:97:06:46:60:f0: 6c:84:5e:12:b0:0f:f6:22:20:1b:8c:d6:5a:79:af: 60:7b:9b:bd:08:8b:50:7d:47:2e:2e:ed:1b:6e:7a: 52:43:ce:0a:10:ba:be:6b:38:70:db:89:e4:48:98: 74:97:2c:31:f6:f8:28:a4:39:14:c1:54:f4:ee:a8: d9:32:13:20:b6:11:e4:29:7d:7a:ae:3b:af:4b:02: 0b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:24:AB:80:04:2C:57:86:ED:F6:F4:A9:CD:04:AD:38:46:4D:E9:17 X509v3 Authority Key Identifier: keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:59:c5:0d:60:72:d0:fc:d4:13:83:bb:b5:32:11:26:c4:fa: bc:e1:96:f2:f9:ae:51:31:b2:14:8d:b6:b7:eb:52:37:c3:8a: 01:da:2c:99:4d:c8:e2:66:c7:48:78:b6:06:31:fb:83:9e:3c: fa:90:c5:41:cd:68:46:7a:bf:0d:0d:1e:ef:d1:25:32:25:f5: 36:7f:27:43:81:b3:b7:5c:1e:8f:d8:52:ea:f0:d8:18:c1:ff: 18:84:c1:89:24:08:8d:9b:1e:e1:ea:12:61:89:e9:c1:7b:af: 90:d3:af:bf:61:78:15:7c:7a:82:29:94:35:5d:a8:de:da:da: cf:39:7e:fe:9b:3f:bc:db:30:af:ee:93:06:66:ae:61:96:65: 28:8a:2d:7c:d2:fa:36:0c:f6:6d:e6:b9:2f:76:10:48:54:ee: b1:98:52:7f:ff:1c:a9:37:19:41:b3:aa:ee:c6:d4:f1:52:9e: 71:e3:06:23:2c:e4:85:32:84:fa:e3:3c:0c:01:76:dc:b0:d6: 7e:75:65:55:98:e2:ea:ba:eb:1d:eb:3d:d5:23:e3:ca:f3:f5: 8b:a3:fe:f2:12:02:32:57:82:97:26:26:ee:9d:58:25:99:dd: 3c:24:9a:3f:0d:14:d9:29:be:29:90:cd:d8:a4:c8:b4:83:8d: 2b:31:42:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDMxMTAvBgNVBAUTKDc1QUI0QjhEQjMwMTUzQkQ3MjZDRjlGOTYyNTBCRTA0 MDREODhCMUEwHhcNMjUwODIzMDMyNjU4WhcNMjUwODMwMDMyNjU4WjAYMRYwFAYD VQQDEw02OGE5MzUwMi1kMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Q93nmb3//D2Uou3igIaaF6pMzFj6cQrXCVm24IiRh/hN7CoO33jiMRcuXs7 0VfDow2z5tO1zaC28W3CUTLAQgnhvF/yZepCfXgL8kpWyC4aj29ztyOPSCPsJYAR bhfGpIkPHlmkefCksjyomVtltG5vqXxlBwk0SGrEQlkwCGsYTZIXdRApi/rLpIwY mXmG/j7MniqsbKN8V/Qd3wOBRChzEiY94qpm6ZvTwwXolwZGYPBshF4SsA/2IiAb jNZaea9ge5u9CItQfUcuLu0bbnpSQ84KELq+azhw24nkSJh0lywx9vgopDkUwVT0 7qjZMhMgthHkKX16rjuvSwILQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4kq4AE LFeG7fb0qc0ErThGTekXMB8GA1UdIwQYMBaAFHWrS42zAVO9cmz5+WJQvgQE2Isa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENEMy83RjYwMEVDQTA4 RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3MXliUG41WWxDLUJBVFlp eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhdExqYk1CVTcxeWJQbjVZbEMtQkFUWWl4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENEMy83RjYwMEVDQTA4RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3 MXliUG41WWxDLUJBVFlpeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuWcUNYHLQ/NQTg7u1MhEmxPq84Zby+a5RMbIUjba361I3w4oB2iyZ TcjiZsdIeLYGMfuDnjz6kMVBzWhGer8NDR7v0SUyJfU2fydDgbO3XB6P2FLq8NgY wf8YhMGJJAiNmx7h6hJhienBe6+Q06+/YXgVfHqCKZQ1Xaje2trPOX7+mz+82zCv 7pMGZq5hlmUoii180vo2DPZt5rkvdhBIVO6xmFJ//xypNxlBs6ruxtTxUp5x4wYj LOSFMoT64zwMAXbcsNZ+dWVVmOLquusd6z3VI+PK8/WLo/7yEgIyV4KXJibunVgl md08JJo/DRTZKb4pkM3YpMi0g40rMUL5 -----END CERTIFICATE-----Generated at Sat Aug 23 19:30:33 2025 by rpki-client