$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft File: limscQ0-IdWZGSjVmk22VBGpa_8.mft (raw, json) Hash identifier: ZmyjE7/9V2urnr7Dse7RuNWAWmZpzmwGnQQViAEPlXo= Subject key identifier: 1A:A8:5D:73:91:AC:E8:C7:8B:1C:31:3F:65:B9:E5:2A:E1:D2:E0:FC Authority key identifier: 96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF Certificate issuer: /CN=A91EE6E8/serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Certificate serial: 0C62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft Manifest number: 0C59 Signing time: Fri 22 Aug 2025 18:36:47 +0000 Manifest this update: Fri 22 Aug 2025 18:36:46 +0000 Manifest next update: Fri 29 Aug 2025 18:36:46 +0000 Files and hashes: 1: limscQ0-IdWZGSjVmk22VBGpa_8.crl (hash: yo1sA9QOCp0P0+EQAzGUIBIxklzK6K/WzGCC1jIZjkI=) 2: 9CDAADC2091E11EAB375615BC4F9AE02.roa (hash: cTVFkw9EC/7+0AhzRm+1VoJiYeWjlXwK0sbhIidN0dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3170 (0xc62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE6E8, serialNumber=9629AC710D3E21D5991928D59A4DB65411A96BFF Validity Not Before: Aug 22 18:36:46 2025 GMT Not After : Aug 29 18:36:46 2025 GMT Subject: CN=68a8b8be-b6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:18:73:3b:2d:71:0d:4d:da:88:48:0d:3f:3d: 10:82:0c:37:26:f5:14:2c:59:56:b0:02:db:1c:b0: 2d:30:da:9c:b4:81:f7:8f:13:f1:e1:ec:44:54:cd: dd:57:5b:c0:63:6b:da:07:58:aa:19:7d:48:e3:b2: 3c:5d:b6:65:82:4c:7f:e2:53:c7:05:e2:7c:f6:9d: ff:53:0e:ea:c6:da:37:51:0a:39:ff:22:aa:34:03: ca:ef:a7:e1:5f:ca:64:46:ed:d2:f5:5f:ab:34:d8: 43:8e:cd:8d:63:7d:c4:69:04:78:27:c5:84:71:4c: 08:62:0d:ea:e9:49:4c:85:f9:08:6e:f3:7a:cc:0c: e0:d2:02:f5:55:8a:61:07:cf:ef:ad:ba:9a:25:2b: ef:ed:03:80:6f:d4:b3:5c:41:8b:ae:88:04:7f:77: 1b:c5:d4:27:b2:24:e4:96:06:df:37:1a:5d:88:b8: bd:fc:d6:77:25:85:3e:2d:ca:ea:d2:58:02:05:2c: bc:c7:3a:df:93:c7:21:00:13:51:0d:dd:61:e9:5f: 17:0f:13:3f:e3:4a:76:64:17:b3:b5:63:7a:71:40: 65:70:fb:6a:fb:50:f7:bb:42:75:53:18:45:1f:3d: 8d:ef:fc:c6:f0:ed:02:0b:d7:9d:6f:41:6c:0b:b2: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A8:5D:73:91:AC:E8:C7:8B:1C:31:3F:65:B9:E5:2A:E1:D2:E0:FC X509v3 Authority Key Identifier: keyid:96:29:AC:71:0D:3E:21:D5:99:19:28:D5:9A:4D:B6:54:11:A9:6B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/limscQ0-IdWZGSjVmk22VBGpa_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE6E8/7BCAFF02091D11EA93BD9E56C4F9AE02/limscQ0-IdWZGSjVmk22VBGpa_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ed:c2:24:89:12:9c:2b:2d:48:7f:22:6c:0b:62:67:d0:b8: 61:38:bc:8c:91:30:d0:e6:dd:72:a7:c5:66:be:d6:2f:4e:e2: 6f:66:10:72:f9:d5:c2:d8:21:d1:ba:ee:c6:62:6a:a6:6b:20: d5:6a:43:2e:96:70:17:7a:46:07:c8:52:04:8c:7d:6c:dc:22: 24:0f:72:91:bd:18:b7:ca:0f:0b:2a:40:c1:93:7d:88:57:b5: 7b:ee:20:a5:31:8f:55:92:76:3e:df:ca:f3:e0:e9:38:a9:35: 37:7c:bc:07:f4:75:8a:27:93:70:f1:b8:19:14:e0:e0:04:d4: 1e:d8:d8:d6:9c:6c:a7:ab:47:71:b4:06:5e:fd:54:42:38:40: 29:49:56:b5:5c:23:c3:93:25:a3:00:aa:bb:3d:d0:ee:59:8b: e7:7b:72:20:2a:78:59:52:e4:a4:ae:a1:25:6d:54:72:2d:05: b2:5b:90:3a:27:bf:73:2d:61:b6:21:94:b8:2f:af:c9:ad:06: 4a:86:72:2a:e6:56:d4:47:22:2b:71:fd:57:0c:46:20:34:4f: 05:4c:83:61:a2:87:28:33:c1:24:65:ac:a5:71:63:b9:07:0f: 3e:b0:5d:26:e9:23:a2:c9:e2:a9:3a:a5:d0:ab:32:6a:14:87: 34:44:2b:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU2RTgxMTAvBgNVBAUTKDk2MjlBQzcxMEQzRTIxRDU5OTE5MjhENTlBNERCNjU0 MTFBOTZCRkYwHhcNMjUwODIyMTgzNjQ2WhcNMjUwODI5MTgzNjQ2WjAYMRYwFAYD VQQDEw02OGE4YjhiZS1iNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hhzOy1xDU3aiEgNPz0Qggw3JvUULFlWsALbHLAtMNqctIH3jxPx4exEVM3d V1vAY2vaB1iqGX1I47I8XbZlgkx/4lPHBeJ89p3/Uw7qxto3UQo5/yKqNAPK76fh X8pkRu3S9V+rNNhDjs2NY33EaQR4J8WEcUwIYg3q6UlMhfkIbvN6zAzg0gL1VYph B8/vrbqaJSvv7QOAb9SzXEGLrogEf3cbxdQnsiTklgbfNxpdiLi9/NZ3JYU+Lcrq 0lgCBSy8xzrfk8chABNRDd1h6V8XDxM/40p2ZBeztWN6cUBlcPtq+1D3u0J1UxhF Hz2N7/zG8O0CC9edb0FsC7LUbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqoXXOR rOjHixwxP2W55Srh0uD8MB8GA1UdIwQYMBaAFJYprHENPiHVmRko1ZpNtlQRqWv/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTZFOC83QkNBRkYwMjA5 MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlkV1pHU2pWbWsyMlZCR3Bh XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xpbXNjUTAtSWRXWkdTalZtazIyVkJHcGFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTZFOC83QkNBRkYwMjA5MUQxMUVBOTNCRDlFNTZDNEY5QUUwMi9saW1zY1EwLUlk V1pHU2pWbWsyMlZCR3BhXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx7cIkiRKcKy1IfyJsC2Jn0LhhOLyMkTDQ5t1yp8VmvtYvTuJvZhBy +dXC2CHRuu7GYmqmayDVakMulnAXekYHyFIEjH1s3CIkD3KRvRi3yg8LKkDBk32I V7V77iClMY9VknY+38rz4Ok4qTU3fLwH9HWKJ5Nw8bgZFODgBNQe2NjWnGynq0dx tAZe/VRCOEApSVa1XCPDkyWjAKq7PdDuWYvne3IgKnhZUuSkrqElbVRyLQWyW5A6 J79zLWG2IZS4L6/JrQZKhnIq5lbURyIrcf1XDEYgNE8FTINhoocoM8EkZaylcWO5 Bw8+sF0m6SOiyeKpOqXQqzJqFIc0RCvw -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:29 2025 by rpki-client