$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft File: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft (raw, json) Hash identifier: NWMfZ2VjJaLt+EIGym3rs8ypaSk/Dfff9cqzKaITt3o= Subject key identifier: 6D:2F:05:1C:13:C6:4A:B1:14:C4:56:48:7C:88:3E:D4:B9:23:4F:FD Authority key identifier: 97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 Certificate issuer: /CN=A91CBB09/serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Certificate serial: 041B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft Manifest number: 0416 Signing time: Sat 23 Aug 2025 00:35:57 +0000 Manifest this update: Sat 23 Aug 2025 00:35:57 +0000 Manifest next update: Sat 30 Aug 2025 00:35:57 +0000 Files and hashes: 1: l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl (hash: iceleTu6xPkpjJKLQIaN6xZfHv8ZxwrXvj+nvnb8x0c=) 2: F865B8887CEB11ECA79BD83DC4F9AE02.roa (hash: 9AbsTY8cTY46TpPDuvc4IXAIWNpWgIpIVFjtcxPCVMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1051 (0x41b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB09, serialNumber=975BD55D615C9860ACCFD86099853BCB19A99BE4 Validity Not Before: Aug 23 00:35:57 2025 GMT Not After : Aug 30 00:35:57 2025 GMT Subject: CN=68a90ced-caf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e7:cf:c0:d7:0a:27:7b:d8:35:17:cc:d1:a5: 1c:f1:6b:65:11:de:ce:80:84:9c:cb:6b:17:27:26: 11:0b:1f:f5:06:f0:05:02:4b:22:1e:10:08:74:6d: 41:11:df:e5:33:4b:02:3f:9e:1f:de:18:45:3b:72: 1e:48:76:5c:e3:4a:a3:a3:a0:f9:15:9a:8e:84:89: d4:2c:5b:72:06:5f:69:cb:1d:c6:52:a6:ad:11:73: 2a:bc:10:69:d0:e0:3d:86:77:9e:e7:55:55:97:6e: 45:04:c9:c9:a7:59:0f:5a:df:e5:45:59:aa:ff:57: dd:3c:d9:7d:4d:0b:e8:aa:b6:25:de:4b:c0:80:26: 74:95:5b:c9:c7:f5:36:01:56:25:6f:da:b6:2d:a4: 94:8d:2e:ac:df:d0:2f:03:c5:5f:2d:62:a2:2c:0c: 0d:12:f0:72:dd:19:13:04:d8:e1:1c:8a:36:ec:10: c6:0a:44:f3:68:c6:b4:d6:60:3e:15:7a:d0:1b:4d: 14:50:24:8e:f6:a9:cd:e4:18:7b:d2:e4:ab:b8:2f: 2e:f4:f9:19:ff:31:86:2a:22:8c:e4:9e:2d:00:c6: db:15:46:34:61:de:ed:bd:b3:fb:60:99:3a:82:15: 05:11:d7:3f:a4:b5:6c:37:5c:44:de:39:f5:30:a0: 95:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2F:05:1C:13:C6:4A:B1:14:C4:56:48:7C:88:3E:D4:B9:23:4F:FD X509v3 Authority Key Identifier: keyid:97:5B:D5:5D:61:5C:98:60:AC:CF:D8:60:99:85:3B:CB:19:A9:9B:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB09/611DABA07CE811ECAC894839C4F9AE02/l1vVXWFcmGCsz9hgmYU7yxmpm-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:78:03:cc:49:d0:23:fd:de:c4:bb:80:85:f0:ef:f1:c8:47: 94:da:ac:19:54:29:91:d4:3f:7b:5b:46:25:0b:20:e6:53:f4: a6:dc:cc:63:f7:62:dd:36:79:56:73:85:c5:3e:cd:69:1f:f7: d4:4d:46:14:8e:e7:78:7a:7a:06:90:5a:fe:c2:f4:0b:37:e0: 03:db:44:32:c2:62:bc:66:8e:8c:a2:ee:d6:6a:02:38:1e:5c: bf:e0:47:b4:7c:3f:9b:57:03:61:0c:c4:ab:a9:09:46:bd:19: f0:ec:a3:fa:80:16:18:2a:55:06:b8:85:1c:f6:99:f1:c9:eb: 23:d0:b9:54:a5:f3:b9:13:d2:41:ee:35:6c:e6:c9:62:96:23: bd:60:38:fd:40:94:fa:0e:ed:85:db:88:28:76:dc:da:41:a4: 73:4f:97:e5:eb:e6:45:0c:51:ee:2b:b3:2c:b3:6d:c5:f2:7d: 3e:71:f0:f6:68:f7:5f:cc:e8:d3:2e:df:bb:32:e2:84:b1:e3: 49:a1:8f:bc:c1:9c:cf:c7:1d:d1:dc:e5:b9:e8:86:df:83:64: 63:ab:68:e9:ad:be:a9:04:08:43:e4:34:fe:03:ba:1f:01:dd: 26:97:06:34:97:51:f4:6b:65:99:15:7a:1d:ca:c0:96:3f:b5: 7b:29:d1:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMDkxMTAvBgNVBAUTKDk3NUJENTVENjE1Qzk4NjBBQ0NGRDg2MDk5ODUzQkNC MTlBOTlCRTQwHhcNMjUwODIzMDAzNTU3WhcNMjUwODMwMDAzNTU3WjAYMRYwFAYD VQQDEw02OGE5MGNlZC1jYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ufPwNcKJ3vYNRfM0aUc8WtlEd7OgIScy2sXJyYRCx/1BvAFAksiHhAIdG1B Ed/lM0sCP54f3hhFO3IeSHZc40qjo6D5FZqOhInULFtyBl9pyx3GUqatEXMqvBBp 0OA9hnee51VVl25FBMnJp1kPWt/lRVmq/1fdPNl9TQvoqrYl3kvAgCZ0lVvJx/U2 AVYlb9q2LaSUjS6s39AvA8VfLWKiLAwNEvBy3RkTBNjhHIo27BDGCkTzaMa01mA+ FXrQG00UUCSO9qnN5Bh70uSruC8u9PkZ/zGGKiKM5J4tAMbbFUY0Yd7tvbP7YJk6 ghUFEdc/pLVsN1xE3jn1MKCV1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0vBRwT xkqxFMRWSHyIPtS5I0/9MB8GA1UdIwQYMBaAFJdb1V1hXJhgrM/YYJmFO8sZqZvk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIwOS82MTFEQUJBMDdD RTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21HQ3N6OWhnbVlVN3l4bXBt LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdlZYV0ZjbUdDc3o5aGdtWVU3eXhtcG0tUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkIwOS82MTFEQUJBMDdDRTgxMUVDQUM4OTQ4MzlDNEY5QUUwMi9sMXZWWFdGY21H Q3N6OWhnbVlVN3l4bXBtLVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASeAPMSdAj/d7Eu4CF8O/xyEeU2qwZVCmR1D97W0YlCyDmU/Sm3Mxj 92LdNnlWc4XFPs1pH/fUTUYUjud4enoGkFr+wvQLN+AD20QywmK8Zo6Mou7WagI4 Hly/4Ee0fD+bVwNhDMSrqQlGvRnw7KP6gBYYKlUGuIUc9pnxyesj0LlUpfO5E9JB 7jVs5sliliO9YDj9QJT6Du2F24godtzaQaRzT5fl6+ZFDFHuK7Mss23F8n0+cfD2 aPdfzOjTLt+7MuKEseNJoY+8wZzPxx3R3OW56Ibfg2Rjq2jprb6pBAhD5DT+A7of Ad0mlwY0l1H0a2WZFXodysCWP7V7KdGC -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:41 2025 by rpki-client