$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft File: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft (raw, json) Hash identifier: CnggNDgzDncywntKQudEUOw7PM/wQCGXXPqFHoLozL0= Subject key identifier: 6E:A8:55:15:5C:9D:BE:79:20:5D:82:A9:7E:4F:BF:25:7B:DF:34:AD Authority key identifier: 2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 Certificate issuer: /CN=A91F0CF4/serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Certificate serial: 0BDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft Manifest number: 1416 Signing time: Fri 22 Aug 2025 18:58:17 +0000 Manifest this update: Fri 22 Aug 2025 18:58:17 +0000 Manifest next update: Fri 29 Aug 2025 18:58:17 +0000 Files and hashes: 1: LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl (hash: yoaTIIb2nAtfSkVD2CMzCfKQtkrMql1tqRcv2tdESv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CF4, serialNumber=2EA0602E0EE6016B50FAE40D93653BA3C1888043 Validity Not Before: Aug 22 18:58:17 2025 GMT Not After : Aug 29 18:58:17 2025 GMT Subject: CN=68a8bdc9-b472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d2:6e:dd:32:3c:de:2c:21:7f:a1:01:fa:b4: 49:0a:4f:0e:26:a3:2d:9d:6d:16:70:b0:7e:31:5f: 04:0a:06:21:da:0b:2a:fa:d0:a7:e4:a5:3c:d5:00: af:f4:57:26:24:c4:4e:a9:74:22:51:e1:dd:e0:9b: 26:1e:37:15:68:89:92:75:c8:bc:1e:2c:5d:ee:44: 9b:d6:6d:ab:06:83:1a:0c:a6:67:f1:44:b9:f1:05: b7:14:85:96:11:fe:06:7d:63:81:23:c2:93:75:d0: 85:78:a8:62:fe:c1:da:9b:eb:55:90:af:f4:7d:22: 2f:23:ae:ed:81:1d:cd:ca:9a:ea:b4:be:3e:56:9b: 0b:98:c6:51:6c:77:02:03:9b:72:e8:57:d0:3c:f3: 8f:7e:5b:45:cc:f5:34:24:25:09:b7:ce:5e:d3:57: 38:ae:09:ff:b8:d3:3e:72:f1:ad:fb:fa:87:05:09: 56:23:ad:2a:44:59:64:10:78:12:e0:3e:71:b5:25: 33:47:ed:4a:ba:95:20:39:f5:3f:68:f0:df:54:8f: fc:6e:1f:42:71:f1:36:a6:3f:02:c5:a9:32:c2:bb: 97:53:80:c6:8a:06:6a:e2:55:e8:4c:28:63:5f:0a: 59:5a:91:10:df:60:62:d8:4c:59:8c:4c:6d:33:47: 33:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A8:55:15:5C:9D:BE:79:20:5D:82:A9:7E:4F:BF:25:7B:DF:34:AD X509v3 Authority Key Identifier: keyid:2E:A0:60:2E:0E:E6:01:6B:50:FA:E4:0D:93:65:3B:A3:C1:88:80:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CF4/9AE9A9121FA511EABE9D1575C4F9AE02/LqBgLg7mAWtQ-uQNk2U7o8GIgEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:04:0b:9f:65:6f:5a:dc:28:53:55:6b:51:31:ef:7f:7c:12: 3f:42:37:9a:e8:23:ac:ce:6b:65:2c:a5:55:7b:be:5c:88:b7: fc:88:64:fa:6b:1e:d1:3f:15:d7:92:50:32:86:f7:62:84:6f: f3:b3:cc:66:4f:3e:b8:2e:ba:2c:09:a9:2b:86:c4:a3:2d:5b: bb:b1:f2:4b:03:1d:19:3f:1d:6a:79:16:af:7e:fb:55:dd:5a: 5e:22:15:e0:a3:66:b5:4e:35:9e:6c:8f:86:8e:b0:71:04:bf: 53:32:da:6a:84:5f:48:74:47:fd:c8:f4:84:a3:33:7d:6b:88: f5:93:4e:68:69:be:55:a9:96:0d:27:49:c1:55:d1:46:f1:53: 69:2d:4b:c8:60:aa:f9:7f:e7:ff:5b:67:6c:b1:b0:f2:45:d9: 2c:68:57:22:6f:6f:b0:ca:99:a2:26:78:29:82:68:72:47:d5: db:76:5e:86:c4:e8:df:0d:56:b5:2a:dc:1f:2d:7c:e5:a3:6c: 57:69:7a:89:0a:01:84:c6:27:fd:b1:dd:ab:6d:72:e8:16:e2: 89:37:e7:54:03:aa:b1:f5:f2:8b:7a:53:c8:d0:6f:76:c0:cb: c6:60:cd:c4:c3:29:44:ff:ff:e7:bb:05:22:5c:b1:67:2f:19: 6b:52:3a:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDRjQxMTAvBgNVBAUTKDJFQTA2MDJFMEVFNjAxNkI1MEZBRTQwRDkzNjUzQkEz QzE4ODgwNDMwHhcNMjUwODIyMTg1ODE3WhcNMjUwODI5MTg1ODE3WjAYMRYwFAYD VQQDEw02OGE4YmRjOS1iNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3tJu3TI83iwhf6EB+rRJCk8OJqMtnW0WcLB+MV8ECgYh2gsq+tCn5KU81QCv 9FcmJMROqXQiUeHd4JsmHjcVaImSdci8Hixd7kSb1m2rBoMaDKZn8US58QW3FIWW Ef4GfWOBI8KTddCFeKhi/sHam+tVkK/0fSIvI67tgR3NyprqtL4+VpsLmMZRbHcC A5ty6FfQPPOPfltFzPU0JCUJt85e01c4rgn/uNM+cvGt+/qHBQlWI60qRFlkEHgS 4D5xtSUzR+1KupUgOfU/aPDfVI/8bh9CcfE2pj8CxakywruXU4DGigZq4lXoTChj XwpZWpEQ32Bi2ExZjExtM0czLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6oVRVc nb55IF2CqX5PvyV73zStMB8GA1UdIwQYMBaAFC6gYC4O5gFrUPrkDZNlO6PBiIBD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENGNC85QUU5QTkxMjFG QTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFXdFEtdVFOazJVN284R0ln RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxQmdMZzdtQVd0US11UU5rMlU3bzhHSWdFTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MENGNC85QUU5QTkxMjFGQTUxMUVBQkU5RDE1NzVDNEY5QUUwMi9McUJnTGc3bUFX dFEtdVFOazJVN284R0lnRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXBAufZW9a3ChTVWtRMe9/fBI/Qjea6COszmtlLKVVe75ciLf8iGT6 ax7RPxXXklAyhvdihG/zs8xmTz64LrosCakrhsSjLVu7sfJLAx0ZPx1qeRavfvtV 3VpeIhXgo2a1TjWebI+GjrBxBL9TMtpqhF9IdEf9yPSEozN9a4j1k05oab5VqZYN J0nBVdFG8VNpLUvIYKr5f+f/W2dssbDyRdksaFcib2+wypmiJngpgmhyR9Xbdl6G xOjfDVa1KtwfLXzlo2xXaXqJCgGExif9sd2rbXLoFuKJN+dUA6qx9fKLelPI0G92 wMvGYM3EwylE///nuwUiXLFnLxlrUjpg -----END CERTIFICATE-----Generated at Sat Aug 23 16:46:13 2025 by rpki-client