$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json) Hash identifier: 0KFNCVuGSbYS1IqEN7z+a1XkEZj1fRz54ie7bRNXAxo= Subject key identifier: 61:C7:49:1B:C6:31:1B:7F:8F:7F:48:B3:8D:93:81:AB:89:7D:7B:6D Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0E88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft Manifest number: 0E77 Signing time: Fri 22 Aug 2025 17:50:36 +0000 Manifest this update: Fri 22 Aug 2025 17:50:36 +0000 Manifest next update: Fri 29 Aug 2025 17:50:36 +0000 Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: PID1hz/pI6sSKm33mbNR8hr82fU+0p8svSRdEtSUY3w=) 2: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: J9DgdD9cL2JfNJGX2KpEbeL9xCo98zH1CjpWmw6WEyg=) 3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: fVjIBFUgnQxd9qxxnDI3HntLIaXeeQgbbHy+hbpb2zg=) 4: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: oySlLPz0K/UmHCqFTFPFIY5DaigueFo/oV/JPUia/uU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3720 (0xe88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: Aug 22 17:50:36 2025 GMT Not After : Aug 29 17:50:36 2025 GMT Subject: CN=68a8adec-6a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:c3:1c:4f:fc:79:ff:b7:74:57:5d:5c:23: d5:9e:d2:66:11:3f:fe:6f:3c:90:00:43:8c:e9:49: 4d:27:bc:63:9e:e5:97:da:5c:b6:73:c0:cd:bb:f6: 7c:ff:d6:dc:78:a0:c0:3f:da:c3:bf:9f:06:e7:59: 94:9e:52:73:84:d0:a1:f2:88:65:30:fd:07:6e:a7: 32:f8:94:9d:73:ac:49:25:47:08:e1:25:b9:19:44: 6d:ab:af:36:74:86:aa:f2:4a:9b:08:49:5e:da:52: d8:1f:ba:df:61:ed:85:4d:04:f2:85:2e:96:ee:de: f5:ac:c6:4f:c9:39:f2:d4:93:1d:a5:be:bb:85:64: c1:18:6d:7b:70:f2:1d:c7:41:7c:96:35:91:9a:40: 5b:89:18:67:52:b9:d6:13:c5:14:11:b6:07:47:2a: b8:35:5f:84:5b:f3:9b:28:77:98:05:44:12:ba:21: c6:0d:e9:16:02:3b:3a:8a:22:9e:90:7d:9b:93:b2: 75:0f:51:8b:4a:5d:ba:bd:70:36:01:25:6e:e1:f1: 41:c7:3a:0e:49:4c:6a:0c:2e:58:06:1b:e8:6e:d7: 7e:fc:72:43:c3:0b:be:35:23:7c:1d:da:36:13:09: 88:62:13:c3:69:87:f2:9e:19:cb:87:1c:90:60:6b: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C7:49:1B:C6:31:1B:7F:8F:7F:48:B3:8D:93:81:AB:89:7D:7B:6D X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:17:dd:94:09:7f:ee:5f:54:92:9a:ce:c0:42:82:3e:56:88: eb:5b:3d:d1:13:8f:13:92:75:5d:f9:ed:0a:46:3b:d0:3d:8a: 38:b7:b3:e5:68:54:77:4f:51:79:2e:02:ed:d8:b5:88:7a:be: 46:47:85:89:52:63:59:6f:82:bd:d8:a6:ce:47:c1:e7:0a:9d: 11:d3:99:cd:ae:c2:c0:c4:d0:70:7e:af:b0:5a:c6:fc:92:de: 3d:2f:b6:f9:99:da:ae:3c:b1:49:55:8e:62:2a:cb:f6:fd:b1: b1:a1:49:24:08:81:07:14:9e:b0:ba:d4:32:3b:bf:0c:93:a7: 17:ba:01:95:c0:d8:37:11:2a:68:09:99:29:b9:d3:93:df:ea: 33:b1:ca:c6:a5:2c:84:ec:6b:b9:f2:e8:41:1a:fc:9e:c5:7f: ec:fb:94:0b:0c:af:83:81:0e:0c:6d:1b:fb:69:f6:5e:12:22: 25:2a:a5:74:1b:2f:3b:9f:86:e1:d3:90:eb:7b:c6:aa:bd:48: 69:37:10:73:31:9b:3e:a6:8c:c2:dc:bd:ee:f7:e1:48:85:07: d5:09:b2:2d:a1:28:1c:05:90:ad:8b:bc:4e:ae:c0:4a:68:bf: eb:1d:bb:f2:17:46:f2:21:33:a5:55:b8:6f:93:6e:78:9c:f1: 2d:21:22:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjUwODIyMTc1MDM2WhcNMjUwODI5MTc1MDM2WjAYMRYwFAYD VQQDEw02OGE4YWRlYy02YTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAta/DHE/8ef+3dFddXCPVntJmET/+bzyQAEOM6UlNJ7xjnuWX2ly2c8DNu/Z8 /9bceKDAP9rDv58G51mUnlJzhNCh8ohlMP0Hbqcy+JSdc6xJJUcI4SW5GURtq682 dIaq8kqbCEle2lLYH7rfYe2FTQTyhS6W7t71rMZPyTny1JMdpb67hWTBGG17cPId x0F8ljWRmkBbiRhnUrnWE8UUEbYHRyq4NV+EW/ObKHeYBUQSuiHGDekWAjs6iiKe kH2bk7J1D1GLSl26vXA2ASVu4fFBxzoOSUxqDC5YBhvobtd+/HJDwwu+NSN8Hdo2 EwmIYhPDaYfynhnLhxyQYGt8gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHHSRvG MRt/j39Is42TgauJfXttMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l UzlialJib0pxZDZibkMwVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvF92UCX/uX1SSms7AQoI+VojrWz3RE48TknVd+e0KRjvQPYo4t7Pl aFR3T1F5LgLt2LWIer5GR4WJUmNZb4K92KbOR8HnCp0R05nNrsLAxNBwfq+wWsb8 kt49L7b5mdquPLFJVY5iKsv2/bGxoUkkCIEHFJ6wutQyO78Mk6cXugGVwNg3ESpo CZkpudOT3+ozscrGpSyE7Gu58uhBGvyexX/s+5QLDK+DgQ4MbRv7afZeEiIlKqV0 Gy87n4bh05Dre8aqvUhpNxBzMZs+pozC3L3u9+FIhQfVCbItoSgcBZCti7xOrsBK aL/rHbvyF0byITOlVbhvk254nPEtISIe -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:26 2025 by rpki-client