$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft File: L2sefhQB3gCsju23qFkNA9xUD3g.mft (raw, json) Hash identifier: PXdd66WYiceB8yuRzrSKiicLjuH6LrSXfnWTe0wXNvg= Subject key identifier: DF:5F:04:69:2C:4A:3F:FD:D8:64:C1:A7:CB:4A:CA:D4:87:E0:8C:90 Authority key identifier: 2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 Certificate issuer: /CN=A91DD38B/serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft Manifest number: 81 Signing time: Sat 23 Aug 2025 06:55:36 +0000 Manifest this update: Sat 23 Aug 2025 06:55:35 +0000 Manifest next update: Sat 30 Aug 2025 06:55:35 +0000 Files and hashes: 1: L2sefhQB3gCsju23qFkNA9xUD3g.crl (hash: sChmieLTM1y046Zj2SCqjP2GRFYYlq7eyHgYQdhrHTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD38B, serialNumber=2F6B1E7E1401DE00AC8EEDB7A8590D03DC540F78 Validity Not Before: Aug 23 06:55:35 2025 GMT Not After : Aug 30 06:55:35 2025 GMT Subject: CN=68a965e7-0e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:1e:6e:b6:ef:95:c6:51:32:91:bc:44:38: e3:f8:c6:cf:54:65:fa:b1:e0:8b:2f:6c:a6:f1:3b: b2:f8:5e:df:44:15:f7:0b:5e:23:90:54:89:d4:6e: 78:6f:fe:e8:7f:72:ce:3d:0d:74:7e:06:2c:e2:65: 7f:70:71:d4:0d:34:61:d4:22:0f:2f:f2:eb:1b:0a: 69:85:56:81:b1:c0:05:ca:29:ed:26:10:95:64:51: 6f:92:b9:ca:af:7b:b5:36:b9:6a:b6:45:97:e7:da: 05:69:81:75:b6:d3:42:62:e9:86:0d:09:fb:79:37: 97:f6:6c:1f:fb:90:5a:7a:38:98:04:f9:d2:2e:59: b5:e6:6b:7c:ab:71:5f:9d:3f:f3:4d:29:07:e0:b0: 89:83:e3:f7:51:9d:55:67:16:14:fd:5e:02:59:30: 97:05:53:79:9f:b3:83:fa:cf:e7:03:09:aa:61:1b: 44:49:03:b9:5e:55:3e:82:89:bf:0d:e3:a9:d3:ca: 0a:a4:18:7e:c5:40:d3:68:2d:0f:5f:a4:19:d1:e7: 11:65:70:45:0e:fb:f8:70:58:ee:bb:c3:90:39:54: d4:d1:f8:99:b8:2b:a2:88:21:09:84:93:31:26:8e: 9f:31:98:50:ea:3e:09:67:d1:71:d8:3a:f3:4b:f7: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5F:04:69:2C:4A:3F:FD:D8:64:C1:A7:CB:4A:CA:D4:87:E0:8C:90 X509v3 Authority Key Identifier: keyid:2F:6B:1E:7E:14:01:DE:00:AC:8E:ED:B7:A8:59:0D:03:DC:54:0F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2sefhQB3gCsju23qFkNA9xUD3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD38B/A1AB2ABCBA8911EF9B338512C4F9AE02/L2sefhQB3gCsju23qFkNA9xUD3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:31:cd:fd:92:04:ba:49:d3:94:28:c6:c9:81:41:d3:20:e8: 74:50:a2:17:bf:7f:b6:1d:d3:bc:49:05:81:53:20:e9:b7:94: 41:b2:ec:ec:ee:62:a5:fe:f5:34:e3:74:79:68:49:29:31:d7: 38:be:0b:c7:f1:03:44:b2:a7:e5:60:cb:f7:cd:62:96:ff:9b: af:92:25:aa:62:1b:bd:99:90:1d:ff:44:ed:aa:f1:1c:e0:b0: 8a:a7:cb:6a:27:4e:8f:60:80:ab:db:13:3e:08:1b:f6:33:c7: cb:ae:43:e8:ed:9b:79:c8:15:1c:3b:01:c7:91:96:82:a5:d3: 21:5e:31:38:8b:8f:ae:d3:92:bd:8e:05:c6:18:a1:81:d9:0a: 04:48:25:f2:b2:22:4c:31:f9:08:ec:0e:76:d0:27:a5:b1:a9: 76:80:be:e5:1d:fa:53:3e:56:32:eb:67:15:88:f4:91:06:df: 74:df:a5:7d:7c:15:d6:2c:e9:c1:b2:0b:6a:f0:b5:1c:1f:b4: bc:61:ae:3c:45:68:da:52:10:9e:00:c5:67:50:7d:f6:53:9e: ce:20:1f:0f:d9:69:36:42:c7:7d:ce:26:0f:64:60:b0:20:c3: f9:c0:e8:3e:b9:20:26:4e:2c:3d:fc:b9:d9:6d:8f:1b:b1:5b: e0:1d:0a:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzOEIxMTAvBgNVBAUTKDJGNkIxRTdFMTQwMURFMDBBQzhFRURCN0E4NTkwRDAz REM1NDBGNzgwHhcNMjUwODIzMDY1NTM1WhcNMjUwODMwMDY1NTM1WjAYMRYwFAYD VQQDEw02OGE5NjVlNy0wZTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW8ebrbvlcZRMpG8RDjj+MbPVGX6seCLL2ym8Tuy+F7fRBX3C14jkFSJ1G54 b/7of3LOPQ10fgYs4mV/cHHUDTRh1CIPL/LrGwpphVaBscAFyintJhCVZFFvkrnK r3u1NrlqtkWX59oFaYF1ttNCYumGDQn7eTeX9mwf+5BaejiYBPnSLlm15mt8q3Ff nT/zTSkH4LCJg+P3UZ1VZxYU/V4CWTCXBVN5n7OD+s/nAwmqYRtESQO5XlU+gom/ DeOp08oKpBh+xUDTaC0PX6QZ0ecRZXBFDvv4cFjuu8OQOVTU0fiZuCuiiCEJhJMx Jo6fMZhQ6j4JZ9Fx2DrzS/covQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9fBGks Sj/92GTBp8tKytSH4IyQMB8GA1UdIwQYMBaAFC9rHn4UAd4ArI7tt6hZDQPcVA94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDM4Qi9BMUFCMkFCQ0JB ODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNnQ3NqdTIzcUZrTkE5eFVE M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyc2VmaFFCM2dDc2p1MjNxRmtOQTl4VUQzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDM4Qi9BMUFCMkFCQ0JBODkxMUVGOUIzMzg1MTJDNEY5QUUwMi9MMnNlZmhRQjNn Q3NqdTIzcUZrTkE5eFVEM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyMc39kgS6SdOUKMbJgUHTIOh0UKIXv3+2HdO8SQWBUyDpt5RBsuzs 7mKl/vU043R5aEkpMdc4vgvH8QNEsqflYMv3zWKW/5uvkiWqYhu9mZAd/0TtqvEc 4LCKp8tqJ06PYICr2xM+CBv2M8fLrkPo7Zt5yBUcOwHHkZaCpdMhXjE4i4+u05K9 jgXGGKGB2QoESCXysiJMMfkI7A520Celsal2gL7lHfpTPlYy62cViPSRBt9036V9 fBXWLOnBsgtq8LUcH7S8Ya48RWjaUhCeAMVnUH32U57OIB8P2Wk2Qsd9ziYPZGCw IMP5wOg+uSAmTiw9/LnZbY8bsVvgHQpe -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:15 2025 by rpki-client