$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft File: 1lqpVdfmLHHFqyu3GgydwnKqlGU.mft (raw, json) Hash identifier: XSexisGQT1NOXMfroX9VHsfKjdq7aEWZd9tKbdrs/iI= Subject key identifier: C6:2F:DC:B6:37:15:3D:F6:46:C3:EA:B1:B7:6D:BC:97:AE:2E:8C:6F Authority key identifier: D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 Certificate issuer: /CN=A91EB6A5/serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft Manifest number: 0187 Signing time: Sat 23 Aug 2025 03:41:45 +0000 Manifest this update: Sat 23 Aug 2025 03:41:44 +0000 Manifest next update: Sat 30 Aug 2025 03:41:44 +0000 Files and hashes: 1: 1lqpVdfmLHHFqyu3GgydwnKqlGU.crl (hash: f7r+MP8ql+ouVRDSZvAoRBc6hQBwj+g9Qq12ctRa3EE=) 2: AE8AEA702C3111EE94A5056FC4F9AE02.roa (hash: DhIch+RxWIpV0kjM6MCCA7OP7UDRbGyuOsypw/t/DWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6A5, serialNumber=D65AA955D7E62C71C5AB2BB71A0C9DC272AA9465 Validity Not Before: Aug 23 03:41:44 2025 GMT Not After : Aug 30 03:41:44 2025 GMT Subject: CN=68a93878-684a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ff:d1:5a:d5:86:a8:5b:b0:e7:a7:ca:a3:95: ea:7d:2a:66:cb:28:bb:cc:9e:2c:2e:c8:3e:02:21: b2:61:69:54:f5:39:ad:e2:15:cb:42:35:66:32:50: 1e:19:d4:2d:5a:8e:bd:8d:e2:0a:0b:5a:c3:ce:7e: 91:5f:f7:5d:6d:17:46:02:6e:be:1f:0c:18:75:e3: 07:1f:13:4f:cf:00:b4:eb:33:0d:53:66:8e:98:f5: 9f:e7:83:57:f4:26:12:4a:ad:8c:48:9c:ed:d6:35: 87:21:0a:07:32:23:a0:0c:c9:ac:8c:be:78:83:93: 54:cd:13:04:00:a5:be:5f:e6:b5:65:96:00:c6:49: 4c:aa:78:f2:86:7d:d3:2d:cc:a2:bf:3d:9f:96:d7: 82:15:65:fb:3a:0d:96:66:e7:47:51:2c:df:27:1e: ae:45:5a:33:0b:01:c4:46:aa:f0:c1:c6:e6:eb:68: 7b:ad:4b:94:46:13:6a:8a:ab:92:95:24:cd:0e:15: 0a:72:e6:e1:f5:53:d6:28:52:86:56:18:e5:9d:ef: a9:d3:e4:61:86:8d:38:4f:a3:59:00:bb:30:a4:9a: 12:7a:49:68:f4:59:9f:ee:56:44:56:76:10:8d:03: e7:44:91:7a:91:ad:2b:b5:4d:ad:9a:33:35:e1:22: f2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2F:DC:B6:37:15:3D:F6:46:C3:EA:B1:B7:6D:BC:97:AE:2E:8C:6F X509v3 Authority Key Identifier: keyid:D6:5A:A9:55:D7:E6:2C:71:C5:AB:2B:B7:1A:0C:9D:C2:72:AA:94:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1lqpVdfmLHHFqyu3GgydwnKqlGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6A5/4A93F6422C3111EE9CE4FF6DC4F9AE02/1lqpVdfmLHHFqyu3GgydwnKqlGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:da:c9:cc:e2:26:65:cb:b2:4d:d6:d1:bf:a9:df:43:c6:83: 2f:66:78:e2:cd:31:54:f7:8c:dc:c3:f4:1c:57:be:f0:38:48: 6e:b4:45:33:ff:6f:45:31:8d:bf:2f:ce:9d:dc:4d:47:47:6f: 63:25:b8:e6:68:b5:c6:d7:0d:5c:15:2c:0f:8b:18:42:f4:84: e1:89:ee:24:83:21:17:ff:19:7d:5f:d2:58:d0:bc:9a:d2:28: db:76:43:11:71:91:e0:3e:17:b1:4a:28:34:d3:64:e1:b8:be: 79:6e:3d:6a:63:ac:53:eb:07:1d:64:dc:a2:37:5e:d7:48:ef: cf:3e:7e:bc:c4:3f:8d:62:09:ba:99:74:22:10:ec:df:35:22: 41:d7:b8:df:6f:80:a0:a9:7e:cf:5b:f5:14:f4:9a:5e:56:6b: 43:60:4d:56:ff:68:0f:3a:c1:9c:96:25:61:df:85:84:59:79: ff:33:e0:92:cc:6d:40:4c:13:3b:a6:fd:53:37:68:e9:51:40: 32:10:4e:98:5e:e3:e8:ae:7c:9a:73:1d:3d:a6:9e:8b:6d:28: f2:82:30:a3:75:b4:85:a0:1d:11:9c:78:35:f8:ac:71:f6:b5: f3:4b:15:87:19:3a:30:b7:aa:6a:6b:f6:0b:90:f3:bd:25:1a: 08:51:bb:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QTUxMTAvBgNVBAUTKEQ2NUFBOTU1RDdFNjJDNzFDNUFCMkJCNzFBMEM5REMy NzJBQTk0NjUwHhcNMjUwODIzMDM0MTQ0WhcNMjUwODMwMDM0MTQ0WjAYMRYwFAYD VQQDEw02OGE5Mzg3OC02ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3f/RWtWGqFuw56fKo5XqfSpmyyi7zJ4sLsg+AiGyYWlU9Tmt4hXLQjVmMlAe GdQtWo69jeIKC1rDzn6RX/ddbRdGAm6+HwwYdeMHHxNPzwC06zMNU2aOmPWf54NX 9CYSSq2MSJzt1jWHIQoHMiOgDMmsjL54g5NUzRMEAKW+X+a1ZZYAxklMqnjyhn3T Lcyivz2flteCFWX7Og2WZudHUSzfJx6uRVozCwHERqrwwcbm62h7rUuURhNqiquS lSTNDhUKcubh9VPWKFKGVhjlne+p0+Rhho04T6NZALswpJoSeklo9Fmf7lZEVnYQ jQPnRJF6ka0rtU2tmjM14SLy7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYv3LY3 FT32RsPqsbdtvJeuLoxvMB8GA1UdIwQYMBaAFNZaqVXX5ixxxasrtxoMncJyqpRl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBNS80QTkzRjY0MjJD MzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxISEZxeXUzR2d5ZHduS3Fs R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFscXBWZGZtTEhIRnF5dTNHZ3lkd25LcWxHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjZBNS80QTkzRjY0MjJDMzExMUVFOUNFNEZGNkRDNEY5QUUwMi8xbHFwVmRmbUxI SEZxeXUzR2d5ZHduS3FsR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC32snM4iZly7JN1tG/qd9DxoMvZnjizTFU94zcw/QcV77wOEhutEUz /29FMY2/L86d3E1HR29jJbjmaLXG1w1cFSwPixhC9IThie4kgyEX/xl9X9JY0Lya 0ijbdkMRcZHgPhexSig002ThuL55bj1qY6xT6wcdZNyiN17XSO/PPn68xD+NYgm6 mXQiEOzfNSJB17jfb4CgqX7PW/UU9JpeVmtDYE1W/2gPOsGcliVh34WEWXn/M+CS zG1ATBM7pv1TN2jpUUAyEE6YXuPornyacx09pp6LbSjygjCjdbSFoB0RnHg1+Kxx 9rXzSxWHGTowt6pqa/YLkPO9JRoIUbuR -----END CERTIFICATE-----Generated at Sat Aug 23 13:43:13 2025 by rpki-client