$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft File: ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json) Hash identifier: 1d0F20/hs3SIZO9h2+kXW478Db5wr0V6UCfGfJ30c4E= Subject key identifier: F9:7C:20:A3:00:B7:34:A3:0E:35:99:D2:5C:DD:AB:EE:BA:34:32:DC Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF Certificate issuer: /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft Manifest number: 0190 Signing time: Sat 23 Aug 2025 03:33:45 +0000 Manifest this update: Sat 23 Aug 2025 03:33:45 +0000 Manifest next update: Sat 30 Aug 2025 03:33:45 +0000 Files and hashes: 1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: FbTb39cDxHKzfFv2v0x+hZEU53kN2TQDTl1p2xE2Ub8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF Validity Not Before: Aug 23 03:33:45 2025 GMT Not After : Aug 30 03:33:45 2025 GMT Subject: CN=68a93699-b8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:6b:50:9c:94:38:e5:a8:67:78:76:07:6a:09: 80:c2:da:7c:bb:b3:17:17:ac:9b:d1:7f:29:33:f8: 30:ab:b8:5f:01:0f:12:11:e6:1d:03:b2:73:76:bc: 8b:75:5b:63:8f:61:f0:4c:99:ac:a2:77:2c:3e:e0: 18:1d:e8:c3:75:53:e4:c8:52:13:82:4a:95:15:b4: 29:ff:3c:25:93:32:75:3b:ad:c8:01:ff:a2:d3:e4: 2f:b5:91:a5:1e:27:3c:10:09:84:6e:34:63:ad:da: c5:44:37:c2:da:3f:15:66:2c:a5:4c:c8:a4:18:c1: 12:d2:d7:1e:56:41:7e:ef:ea:a8:9f:ca:4a:15:13: 6f:6b:89:26:51:b6:76:03:99:b3:6a:91:dc:bb:4f: 09:c0:50:87:0d:6d:db:a3:c5:04:ff:66:0d:3c:59: 10:fb:99:c1:df:e5:e0:5a:e0:4c:5a:aa:30:34:18: 4a:64:77:20:25:8b:c9:77:22:da:ca:3b:bd:e1:8f: 85:6f:2b:cc:ff:06:0f:9b:75:66:17:8c:1d:a0:ae: 70:d2:2a:72:8e:fe:84:f1:aa:04:ad:55:f9:2a:5d: 60:ef:db:e7:da:90:21:0a:e4:1a:34:40:4f:81:4d: 26:59:ac:11:26:f8:dd:9c:b8:be:1f:da:d7:41:8f: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7C:20:A3:00:B7:34:A3:0E:35:99:D2:5C:DD:AB:EE:BA:34:32:DC X509v3 Authority Key Identifier: keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:77:20:f6:f6:8e:26:9b:ba:91:c2:7e:22:89:72:81:f7:42: 97:aa:64:3b:cd:f4:50:d2:37:34:0a:f1:fa:9f:4d:0c:b4:06: 07:e0:18:b6:1f:c5:e3:e0:a1:7e:65:e1:6d:bc:73:9f:4a:df: 47:ff:36:12:54:b9:d4:7c:6e:0c:c9:d5:f6:61:07:35:87:2d: 5c:1f:58:2c:c2:b1:a0:a0:1b:ef:d9:54:60:97:81:b4:19:e0: 03:dd:69:f0:c2:7d:33:f2:91:7a:ff:58:4d:77:9f:f9:d3:1a: a3:2f:0a:70:04:a7:ec:99:b6:5d:c1:da:96:5f:f2:c7:cb:5e: 22:38:fe:d8:de:fc:b3:21:c3:23:86:a8:6e:c9:af:02:9e:3d: 46:f5:30:af:4f:dd:52:a3:38:56:8f:58:5d:f7:fc:14:f1:bc: 39:79:f0:36:a1:fb:d9:fe:3e:3e:bb:8d:44:29:b2:08:fe:dd: fb:70:df:e0:c5:bb:1a:87:6f:ed:26:b9:3f:ff:1f:9c:ac:86: 64:f9:cd:47:ef:e5:9a:8f:1c:40:bf:bc:4e:53:af:3f:25:cb: 48:8e:5e:61:2e:a0:13:2b:ca:49:88:59:3f:96:39:f9:8c:de: b0:55:c7:51:8f:35:b7:ee:a3:7a:b0:1e:2f:e2:6a:a2:36:ca: 34:a0:61:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD MEM1RDg0REYwHhcNMjUwODIzMDMzMzQ1WhcNMjUwODMwMDMzMzQ1WjAYMRYwFAYD VQQDEw02OGE5MzY5OS1iOGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+2tQnJQ45ahneHYHagmAwtp8u7MXF6yb0X8pM/gwq7hfAQ8SEeYdA7JzdryL dVtjj2HwTJmsoncsPuAYHejDdVPkyFITgkqVFbQp/zwlkzJ1O63IAf+i0+QvtZGl Hic8EAmEbjRjrdrFRDfC2j8VZiylTMikGMES0tceVkF+7+qon8pKFRNva4kmUbZ2 A5mzapHcu08JwFCHDW3bo8UE/2YNPFkQ+5nB3+XgWuBMWqowNBhKZHcgJYvJdyLa yju94Y+FbyvM/wYPm3VmF4wdoK5w0ipyjv6E8aoErVX5Kl1g79vn2pAhCuQaNEBP gU0mWawRJvjdnLi+H9rXQY95YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl8IKMA tzSjDjWZ0lzdq+66NDLcMB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5 N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu YnJ5VDhjTjJsa25BeGRoTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTdyD29o4mm7qRwn4iiXKB90KXqmQ7zfRQ0jc0CvH6n00MtAYH4Bi2 H8Xj4KF+ZeFtvHOfSt9H/zYSVLnUfG4MydX2YQc1hy1cH1gswrGgoBvv2VRgl4G0 GeAD3Wnwwn0z8pF6/1hNd5/50xqjLwpwBKfsmbZdwdqWX/LHy14iOP7Y3vyzIcMj hqhuya8Cnj1G9TCvT91SozhWj1hd9/wU8bw5efA2ofvZ/j4+u41EKbII/t37cN/g xbsah2/tJrk//x+crIZk+c1H7+WajxxAv7xOU68/JctIjl5hLqATK8pJiFk/ljn5 jN6wVcdRjzW37qN6sB4v4mqiNso0oGH/ -----END CERTIFICATE-----Generated at Sun Aug 24 00:42:55 2025 by rpki-client