$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: eGz22gvsNxbRpSj/XFyLxsYcVP55IFggqCZ9QPcIh58= Subject key identifier: 96:2B:C2:76:F3:6C:BC:2E:0D:8E:C0:B4:DC:2D:52:DB:21:63:52:9F Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: 40 Signing time: Sat 23 Aug 2025 07:44:30 +0000 Manifest this update: Sat 23 Aug 2025 07:44:30 +0000 Manifest next update: Sat 30 Aug 2025 07:44:30 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: slMFDw4GzDSv+oaIzyPsXS2OHcnBsw3uaYRmV1/elWM=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: Jax3Kvx2J0ODr5GgDNYrVUtv6/aFnopa2LSsnYbiSlg=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Aug 23 07:44:30 2025 GMT Not After : Aug 30 07:44:30 2025 GMT Subject: CN=68a9715e-7517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:82:1d:45:d0:aa:a0:14:0e:b6:5d:c8:26: 02:dd:e8:0c:d1:e2:d6:e4:58:24:3b:7a:dd:0e:a8: f2:9e:90:f1:b1:74:e6:f7:31:9b:5c:e9:0a:2c:81: cf:7a:6b:02:ff:b2:bc:16:de:09:3e:a5:18:00:a8: a8:d6:81:2e:b3:d7:e8:f2:d2:3c:f5:f7:d5:b5:af: e4:31:d6:7f:39:f7:c0:ca:1b:c6:22:bf:d0:c1:bc: b5:28:2d:28:56:48:39:66:ba:b4:20:76:1e:dc:0c: 3e:2d:a2:5b:df:d6:6a:3e:55:9a:32:d8:00:1f:61: 5b:68:87:98:d7:ef:f3:96:f4:23:38:1f:19:a5:90: 45:d8:43:2d:43:54:61:59:a8:b5:99:1d:df:31:21: 6d:7e:af:18:b6:e3:63:68:7f:9c:63:91:be:99:6c: a9:70:ce:57:2a:50:58:eb:d3:f5:64:06:75:7c:17: 04:5c:a1:36:46:02:6b:46:33:13:cc:a4:27:95:61: b5:5e:be:ba:25:0c:f9:77:e8:6f:cc:e6:69:c6:84: 0d:d8:c8:7e:63:59:1b:9a:f3:8a:9e:bf:0c:f7:65: 1f:ab:64:a0:fe:bb:0f:31:6e:3b:b5:a4:47:46:0f: 96:ba:79:c0:1d:40:35:55:af:43:f6:a1:e5:5d:48: b3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2B:C2:76:F3:6C:BC:2E:0D:8E:C0:B4:DC:2D:52:DB:21:63:52:9F X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:fa:95:b6:ab:51:5e:09:95:19:ca:73:d9:f7:07:3b:5e:0a: a2:68:8c:9e:c5:23:4f:e7:04:4d:ce:57:05:b1:45:6a:8b:c7: f6:b7:6b:bd:b3:da:34:73:49:e1:d4:15:1c:1c:82:a6:7f:48: 42:b8:dd:26:34:3e:f3:f8:65:59:e4:d0:99:08:99:35:2f:6f: d8:78:c4:18:20:48:22:70:0b:21:13:85:cf:20:4c:13:4d:b8: 8e:0d:a9:78:a7:37:31:9f:41:7f:2b:b4:37:ef:eb:90:06:dd: 72:9d:08:93:60:b5:1b:c5:a0:22:39:57:66:eb:7c:32:dd:68: 11:0d:1b:f5:a3:0c:bc:7a:a2:0e:7c:7a:dd:a2:98:17:2e:6f: 8a:4e:bd:c2:71:a4:0e:99:6e:38:00:ab:6c:6c:60:67:6d:36: 25:11:66:9e:3c:7e:86:87:c3:78:42:88:af:81:61:f0:1b:79: ee:bb:5c:e3:23:b1:61:ed:26:70:3a:7f:94:b9:d1:43:1c:0c: 56:a4:45:14:09:14:07:7a:10:c0:c3:5a:12:ca:0e:aa:b0:38: b1:fc:4e:d8:7e:32:51:47:19:52:c4:20:89:20:8b:76:f1:6e: cd:ed:09:56:7e:bb:b0:9a:b5:ba:7d:9f:c7:14:78:9b:7f:39: 9e:c2:cc:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzdBQjExMC8GA1UEBRMoOTRDOEVGM0YyQTkyMkVFMTQ0QUE2RjBCNjY0MzZDQTQ2 NkNDNEIwQTAeFw0yNTA4MjMwNzQ0MzBaFw0yNTA4MzAwNzQ0MzBaMBgxFjAUBgNV BAMTDTY4YTk3MTVlLTc1MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIq4IdRdCqoBQOtl3IJgLd6AzR4tbkWCQ7et0OqPKekPGxdOb3MZtc6Qosgc96 awL/srwW3gk+pRgAqKjWgS6z1+jy0jz199W1r+Qx1n8598DKG8Yiv9DBvLUoLShW SDlmurQgdh7cDD4tolvf1mo+VZoy2AAfYVtoh5jX7/OW9CM4HxmlkEXYQy1DVGFZ qLWZHd8xIW1+rxi242Nof5xjkb6ZbKlwzlcqUFjr0/VkBnV8FwRcoTZGAmtGMxPM pCeVYbVevrolDPl36G/M5mnGhA3YyH5jWRua84qevwz3ZR+rZKD+uw8xbju1pEdG D5a6ecAdQDVVr0P2oeVdSLP9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlivCdvNs vC4NjsC03C1S2yFjUp8wHwYDVR0jBBgwFoAUlMjvPyqSLuFEqm8LZkNspGbMSwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzN0FCLzI2NDg0NTkwMjFG MzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE1qdlB5cVNMdUZFcW04TFprTnNwR2JNU3dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz N0FCLzI2NDg0NTkwMjFGMzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVG RXFtOExaa05zcEdiTVN3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFT6lbarUV4JlRnKc9n3BzteCqJojJ7FI0/nBE3OVwWxRWqLx/a3a72z 2jRzSeHUFRwcgqZ/SEK43SY0PvP4ZVnk0JkImTUvb9h4xBggSCJwCyEThc8gTBNN uI4NqXinNzGfQX8rtDfv65AG3XKdCJNgtRvFoCI5V2brfDLdaBENG/WjDLx6og58 et2imBcub4pOvcJxpA6ZbjgAq2xsYGdtNiURZp48foaHw3hCiK+BYfAbee67XOMj sWHtJnA6f5S50UMcDFakRRQJFAd6EMDDWhLKDqqwOLH8Tth+MlFHGVLEIIkgi3bx bs3tCVZ+u7Catbp9n8cUeJt/OZ7CzJs= -----END CERTIFICATE-----Generated at Sun Aug 24 00:13:38 2025 by rpki-client