$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft File: LJM3XsY801R8z5PRPhK1urgy_Zw.mft (raw, json) Hash identifier: SReq4SpbMkpewRyqefmKyEXcoA2OEzUAM/fmhKVK7zg= Subject key identifier: 12:A0:BD:4B:B6:D5:65:B7:B5:A7:17:0D:91:C8:0B:F2:94:2E:C5:C4 Authority key identifier: 2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C Certificate issuer: /CN=A91E0C5F/serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Certificate serial: 0F92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft Manifest number: 1674 Signing time: Fri 22 Aug 2025 17:39:34 +0000 Manifest this update: Fri 22 Aug 2025 17:39:33 +0000 Manifest next update: Fri 29 Aug 2025 17:39:33 +0000 Files and hashes: 1: LJM3XsY801R8z5PRPhK1urgy_Zw.crl (hash: 7MhffyYI9uQApP7vGK86A2gneDSeML7XipYT42mgaAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3986 (0xf92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Validity Not Before: Aug 22 17:39:33 2025 GMT Not After : Aug 29 17:39:33 2025 GMT Subject: CN=68a8ab56-e51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f8:5f:c5:5a:8e:fc:86:fa:59:a6:d6:34:45: 5b:9a:10:8e:bf:07:e7:6d:81:77:8c:0c:58:1f:a0: 57:37:51:37:e6:d8:5a:41:b1:3a:97:cb:12:7e:ed: 11:9c:e1:36:f4:f6:ed:f8:df:09:2b:c0:8e:22:50: f9:29:e9:60:5a:25:44:13:6f:6e:bc:24:4f:ba:bd: d6:e8:d8:7b:a0:ac:5c:30:e6:b5:a3:76:94:23:9f: fe:69:a7:e4:c5:a1:43:1f:ee:13:3d:0d:c8:a9:52: 02:be:b8:7b:15:ce:fe:78:92:15:8a:bd:e8:10:6d: 75:7d:25:75:23:f3:7b:01:21:32:86:91:a3:b0:55: 52:e0:1c:31:e4:6d:fc:4a:11:73:44:66:f6:0c:60: 29:c5:8e:30:05:d7:b5:fe:e2:cc:01:6a:96:1c:fb: ef:0e:e2:24:f3:7e:17:9e:e6:8d:85:c4:2d:ee:7e: ef:9e:b8:8c:5d:63:90:cf:f7:05:0b:9c:f8:e4:1c: ae:98:6e:9f:63:d1:fd:84:55:19:76:82:8e:06:2f: c5:35:6e:c6:12:67:bf:6d:5d:78:b6:b3:cb:e3:bc: 43:5e:3a:a3:51:44:fe:5b:e4:c5:c7:8d:9e:75:f1: 7a:75:4e:c4:ec:ae:12:d4:bf:00:da:bc:dc:7f:d1: 7f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A0:BD:4B:B6:D5:65:B7:B5:A7:17:0D:91:C8:0B:F2:94:2E:C5:C4 X509v3 Authority Key Identifier: keyid:2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:d0:68:b8:15:86:e6:d5:81:e5:4a:79:92:6d:79:06:5a:3f: 15:9a:a3:24:f5:6c:96:96:fa:ac:7b:dd:47:0a:97:da:16:29: aa:6f:8c:b2:a1:e1:83:11:17:41:65:b9:aa:cf:70:b2:01:05: fc:07:27:8b:7a:cb:42:a9:2d:ae:7a:5e:1d:35:23:e0:3a:f4: c6:d3:b7:1d:24:af:db:7f:14:81:c9:73:e8:ff:69:e1:c4:10: 54:38:0e:e7:a0:18:b6:b5:99:25:be:ef:f6:3f:5e:1a:ea:9c: 52:d5:c8:dd:bf:cc:cc:87:60:6e:75:78:96:62:dd:dd:48:7e: 39:b5:93:50:60:8d:ba:3a:88:9b:ac:ea:3f:8d:1b:f5:b9:2c: 16:07:57:a5:83:8c:95:9f:89:77:14:bb:a6:ff:92:98:c0:2e: ba:cb:59:76:13:17:98:a4:3d:42:b7:f9:d8:d6:e7:eb:ab:62: 04:03:7f:6d:64:61:76:90:3c:6e:13:c5:85:b3:6e:d3:b9:b1: d3:a8:c3:db:80:d9:93:87:2f:cc:4e:f6:92:39:d1:ce:5c:c3: d9:96:a7:e9:87:95:e9:95:c8:d7:6a:38:4a:bb:bc:50:d8:7b: f7:91:48:08:c7:35:e8:68:ff:25:b1:d9:f7:db:60:05:9b:16: 78:e0:83:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKDJDOTMzNzVFQzYzQ0QzNTQ3Q0NGOTNEMTNFMTJCNUJB QjgzMkZEOUMwHhcNMjUwODIyMTczOTMzWhcNMjUwODI5MTczOTMzWjAYMRYwFAYD VQQDEw02OGE4YWI1Ni1lNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvhfxVqO/Ib6WabWNEVbmhCOvwfnbYF3jAxYH6BXN1E35thaQbE6l8sSfu0R nOE29Pbt+N8JK8COIlD5KelgWiVEE29uvCRPur3W6Nh7oKxcMOa1o3aUI5/+aafk xaFDH+4TPQ3IqVICvrh7Fc7+eJIVir3oEG11fSV1I/N7ASEyhpGjsFVS4Bwx5G38 ShFzRGb2DGApxY4wBde1/uLMAWqWHPvvDuIk834XnuaNhcQt7n7vnriMXWOQz/cF C5z45ByumG6fY9H9hFUZdoKOBi/FNW7GEme/bV14trPL47xDXjqjUUT+W+TFx42e dfF6dU7E7K4S1L8A2rzcf9F/JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKgvUu2 1WW3tacXDZHIC/KULsXEMB8GA1UdIwQYMBaAFCyTN17GPNNUfM+T0T4Stbq4Mv2c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAxUjh6NVBSUGhLMXVyZ3lf WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xKTTNYc1k4MDFSOHo1UFJQaEsxdXJneV9ady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAx Ujh6NVBSUGhLMXVyZ3lfWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ0Gi4FYbm1YHlSnmSbXkGWj8VmqMk9WyWlvqse91HCpfaFimqb4yy oeGDERdBZbmqz3CyAQX8ByeLestCqS2uel4dNSPgOvTG07cdJK/bfxSByXPo/2nh xBBUOA7noBi2tZklvu/2P14a6pxS1cjdv8zMh2BudXiWYt3dSH45tZNQYI26Ooib rOo/jRv1uSwWB1elg4yVn4l3FLum/5KYwC66y1l2ExeYpD1Ct/nY1ufrq2IEA39t ZGF2kDxuE8WFs27TubHTqMPbgNmThy/MTvaSOdHOXMPZlqfph5XplcjXajhKu7xQ 2Hv3kUgIxzXoaP8lsdn322AFmxZ44INJ -----END CERTIFICATE-----Generated at Sun Aug 24 07:04:44 2025 by rpki-client