$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft File: ltMlORFGzztdo_4Uaf7BKLS2jEk.mft (raw, json) Hash identifier: oz/gM04LY0ZFuWZzAAhhiuVu/ar66+1oEcMTNkEZwrQ= Subject key identifier: AB:81:83:28:DC:05:8B:A6:B1:6D:FD:70:56:3A:50:E6:A9:1E:9D:51 Authority key identifier: 96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49 Certificate issuer: /CN=A91E63E7/serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft Manifest number: A2 Signing time: Sat 23 Aug 2025 06:27:56 +0000 Manifest this update: Sat 23 Aug 2025 06:27:55 +0000 Manifest next update: Sat 30 Aug 2025 06:27:55 +0000 Files and hashes: 1: ltMlORFGzztdo_4Uaf7BKLS2jEk.crl (hash: XDeot/iAHoMQl5IhTKK6ZA9AzgaaM9NTRn7GbnyxuD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=96D325391146CF3B5DA3FE1469FEC128B4B68C49 Validity Not Before: Aug 23 06:27:55 2025 GMT Not After : Aug 30 06:27:55 2025 GMT Subject: CN=68a95f6b-836e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:49:24:67:45:b3:f5:4e:9e:18:ac:cc:46:4f: 9f:b2:af:76:03:f6:83:89:e3:35:3c:db:38:87:fa: a8:dd:c3:36:2b:88:25:48:c2:e8:21:ad:e5:2f:14: 99:d2:23:e6:fb:2f:f1:cc:ee:5b:2c:eb:cb:af:c2: 28:74:a0:c6:bb:2a:1e:86:30:6a:1a:69:52:a0:a1: f0:a5:b2:84:ba:ea:b4:cb:55:cb:b4:0d:8c:d6:ab: 08:32:e0:48:d3:41:e1:87:2a:b3:67:e1:ea:7a:ae: dd:64:16:b4:a9:83:c5:7f:ee:64:9f:60:43:7c:c7: 5d:ae:f3:af:20:59:8b:fd:e0:07:05:be:17:b7:ee: 09:5f:de:4d:b2:bd:20:1d:3e:0d:81:59:22:be:4d: 0c:d1:a4:f0:79:6c:1e:e9:1a:9f:99:02:85:6e:c1: bd:42:67:73:c3:89:8b:29:e9:2b:36:47:0f:bd:a7: 5b:53:0b:58:28:1f:69:e5:37:ac:00:fd:56:3e:7a: 16:10:53:df:7a:89:fa:79:c5:45:ae:01:cc:cd:43: 76:89:5c:26:e2:9e:7d:ef:f0:f8:7d:16:ce:5d:07: 7a:fc:2e:25:4a:14:28:ff:4b:d3:6c:9b:96:f1:c1: 12:c0:14:1a:54:b4:a4:eb:a4:1c:55:52:8f:f8:71: 03:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:81:83:28:DC:05:8B:A6:B1:6D:FD:70:56:3A:50:E6:A9:1E:9D:51 X509v3 Authority Key Identifier: keyid:96:D3:25:39:11:46:CF:3B:5D:A3:FE:14:69:FE:C1:28:B4:B6:8C:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltMlORFGzztdo_4Uaf7BKLS2jEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/4ACB8BF0887111EFA708D17DC4F9AE02/ltMlORFGzztdo_4Uaf7BKLS2jEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:84:cb:a8:b4:bc:31:cc:c0:12:71:44:eb:22:e1:b1:2c:98: 13:6e:d8:e1:af:2c:22:61:68:1a:b7:a5:59:fe:2d:52:61:78: 0e:06:86:be:24:43:3d:34:b3:df:a6:a7:e5:3b:47:fb:40:c9: f2:4b:9f:80:17:c6:30:1d:63:74:4a:75:40:4f:70:0f:b2:5c: 7c:0a:41:07:ae:02:c2:65:4c:11:13:f7:13:43:32:64:97:c5: 80:09:05:74:3e:70:bc:99:15:53:8c:77:c1:bf:a1:20:e6:e3: 74:8e:12:e4:96:4a:90:7c:6e:6a:0d:a1:c8:b0:e4:b7:f9:68: 81:a8:55:36:64:bd:82:70:aa:1f:06:7f:bb:de:e9:c4:4c:69: 69:4e:35:41:cf:44:0c:27:4d:b5:ec:88:3e:c6:7d:14:51:af: bc:0b:64:be:32:bb:99:68:3c:20:ea:b1:d5:9b:da:c3:53:2d: e4:28:6a:14:30:cc:46:fb:4f:a8:78:39:42:35:55:ce:63:f8: e8:64:66:05:ad:64:83:fc:81:46:45:00:6a:36:e6:e6:1c:d5: 3d:ff:29:fc:dc:8b:85:e8:12:1f:79:aa:58:e6:35:c7:9c:ba: 2d:e7:31:78:c3:cb:57:a7:e7:17:18:88:86:8d:b9:32:74:22: 19:43:49:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKDk2RDMyNTM5MTE0NkNGM0I1REEzRkUxNDY5RkVDMTI4 QjRCNjhDNDkwHhcNMjUwODIzMDYyNzU1WhcNMjUwODMwMDYyNzU1WjAYMRYwFAYD VQQDEw02OGE5NWY2Yi04MzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUkkZ0Wz9U6eGKzMRk+fsq92A/aDieM1PNs4h/qo3cM2K4glSMLoIa3lLxSZ 0iPm+y/xzO5bLOvLr8IodKDGuyoehjBqGmlSoKHwpbKEuuq0y1XLtA2M1qsIMuBI 00HhhyqzZ+Hqeq7dZBa0qYPFf+5kn2BDfMddrvOvIFmL/eAHBb4Xt+4JX95Nsr0g HT4NgVkivk0M0aTweWwe6RqfmQKFbsG9Qmdzw4mLKekrNkcPvadbUwtYKB9p5Tes AP1WPnoWEFPfeon6ecVFrgHMzUN2iVwm4p597/D4fRbOXQd6/C4lShQo/0vTbJuW 8cESwBQaVLSk66QcVVKP+HEDbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuBgyjc BYumsW39cFY6UOapHp1RMB8GA1UdIwQYMBaAFJbTJTkRRs87XaP+FGn+wSi0toxJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80QUNCOEJGMDg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9sdE1sT1JGR3p6dGRvXzRVYWY3QktMUzJq RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x0TWxPUkZHenp0ZG9fNFVhZjdCS0xTMmpFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80QUNCOEJGMDg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9sdE1sT1JGR3p6 dGRvXzRVYWY3QktMUzJqRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDqhMuotLwxzMAScUTrIuGxLJgTbtjhrywiYWgat6VZ/i1SYXgOBoa+ JEM9NLPfpqflO0f7QMnyS5+AF8YwHWN0SnVAT3APslx8CkEHrgLCZUwRE/cTQzJk l8WACQV0PnC8mRVTjHfBv6Eg5uN0jhLklkqQfG5qDaHIsOS3+WiBqFU2ZL2CcKof Bn+73unETGlpTjVBz0QMJ0217Ig+xn0UUa+8C2S+MruZaDwg6rHVm9rDUy3kKGoU MMxG+0+oeDlCNVXOY/joZGYFrWSD/IFGRQBqNubmHNU9/yn83IuF6BIfeapY5jXH nLot5zF4w8tXp+cXGIiGjbkydCIZQ0kX -----END CERTIFICATE-----Generated at Sat Aug 23 16:12:00 2025 by rpki-client