$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft File: lSamckeK-nVEXY0H3MV8BYlm7-I.mft (raw, json) Hash identifier: ouL/HexyuIBH8pz3YKs1BPdUX+c5yFNd7kEyX2vvAhQ= Subject key identifier: 37:9F:FB:C5:1F:57:86:1F:55:25:B3:C4:FD:D0:2B:3E:D5:85:B3:A4 Authority key identifier: 95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 Certificate issuer: /CN=A91FA1BE/serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Certificate serial: 025A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft Manifest number: 0252 Signing time: Sat 23 Aug 2025 02:02:47 +0000 Manifest this update: Sat 23 Aug 2025 02:02:46 +0000 Manifest next update: Sat 30 Aug 2025 02:02:46 +0000 Files and hashes: 1: lSamckeK-nVEXY0H3MV8BYlm7-I.crl (hash: Ytfrzsu66IbW3ycT3aAIdMWVaf2X/SJFDI6IVYDbTfo=) 2: 6F46908C2D3411ED92165562C4F9AE02.roa (hash: sR0eTjFYTlKs7mzVHMIl7telIMsp7nYju6MlYaiMBkg=) 3: 6E98B3182D3411ED92165562C4F9AE02.roa (hash: 64gg/L8X7dQV3AAOAv3MN1klInujbmxMEcZ9X63m+I4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 602 (0x25a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA1BE, serialNumber=9526A672478AFA75445D8D07DCC57C058966EFE2 Validity Not Before: Aug 23 02:02:46 2025 GMT Not After : Aug 30 02:02:46 2025 GMT Subject: CN=68a92147-9b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:50:61:cc:39:8b:6e:35:5f:46:5a:17:63: 63:c0:21:36:b1:89:e4:39:1e:6d:7d:69:74:df:df: 2c:59:a4:03:e0:3d:df:6d:23:19:2c:42:2a:05:9e: 16:80:56:45:ec:88:04:c7:72:28:49:ca:88:52:7b: 7a:09:cc:cb:b3:30:df:c5:15:ba:5d:02:67:b7:4e: 75:64:77:c8:96:ff:7f:33:fb:71:41:bd:3d:2c:39: 7a:d7:c3:b4:de:0f:da:99:2e:0f:ae:e3:ee:cc:33: ec:11:18:fb:88:25:07:52:d9:52:1b:0b:66:40:4e: c0:2d:b5:0b:88:d7:4a:ac:fe:5f:43:00:7e:37:89: 42:b6:fd:9c:0d:b1:72:e9:7c:bb:e3:7e:98:32:86: 92:36:34:f7:93:0a:1c:15:1b:7e:5b:f9:29:12:1e: 29:a0:90:f3:f4:a7:3e:18:7a:ae:24:16:9c:1f:0a: 99:dc:91:d6:19:4e:d1:14:54:6a:3d:57:ca:af:00: 6a:f2:8d:f8:9c:d0:19:81:51:0f:c0:6e:9f:be:eb: f7:b4:4a:83:d7:02:61:d8:81:3b:ac:ca:c2:f2:53: e9:e2:9b:d3:c6:5f:f5:f2:f9:e9:dc:39:ab:25:89: ab:88:27:e3:97:3c:ae:38:0e:a1:d2:2d:44:dc:79: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9F:FB:C5:1F:57:86:1F:55:25:B3:C4:FD:D0:2B:3E:D5:85:B3:A4 X509v3 Authority Key Identifier: keyid:95:26:A6:72:47:8A:FA:75:44:5D:8D:07:DC:C5:7C:05:89:66:EF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lSamckeK-nVEXY0H3MV8BYlm7-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA1BE/4168FF762D3211ED92B8B761C4F9AE02/lSamckeK-nVEXY0H3MV8BYlm7-I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:71:f2:69:70:ae:9b:60:f9:68:fb:14:e8:5c:15:2a:d6:ea: b8:33:0c:bc:79:97:3f:8f:ea:28:dc:c3:31:b5:d3:73:26:2c: d5:a3:30:3d:81:c1:39:4f:65:4a:17:73:f5:f8:4d:25:f9:47: 98:eb:14:82:27:57:fd:41:81:bf:3d:1a:88:3b:16:2d:ff:50: d0:ff:90:20:74:1f:49:69:89:06:1e:d6:17:be:32:2c:a8:fa: 3a:84:6c:d1:a0:37:25:43:a3:e4:7e:ae:b7:3a:46:45:be:89: a9:42:d6:f2:92:47:55:93:65:57:86:3a:4c:84:b5:2d:23:21: 3c:30:7d:46:d6:8a:b9:e0:33:97:26:f9:ab:5d:14:ae:af:03: 64:0f:00:dc:36:37:2c:ca:c5:49:db:f3:80:31:59:7d:6f:3b: e7:51:9b:c7:87:db:18:74:f8:63:7f:7d:27:6c:ab:b1:0b:65: 0d:67:3d:eb:35:2b:1f:cd:50:59:86:10:c8:cf:55:61:d9:38: 33:80:cc:d5:be:b2:34:00:a0:5b:0f:90:31:68:c7:18:a4:4a: d6:71:42:39:70:20:bc:32:fa:45:a4:f4:c4:31:8e:c6:31:5f: f7:92:7c:c6:69:17:ec:c9:81:32:16:ae:d7:b9:2e:d6:68:9e: 23:b6:cd:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkExQkUxMTAvBgNVBAUTKDk1MjZBNjcyNDc4QUZBNzU0NDVEOEQwN0RDQzU3QzA1 ODk2NkVGRTIwHhcNMjUwODIzMDIwMjQ2WhcNMjUwODMwMDIwMjQ2WjAYMRYwFAYD VQQDEw02OGE5MjE0Ny05YjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslhQYcw5i241X0ZaF2NjwCE2sYnkOR5tfWl0398sWaQD4D3fbSMZLEIqBZ4W gFZF7IgEx3IoScqIUnt6CczLszDfxRW6XQJnt051ZHfIlv9/M/txQb09LDl618O0 3g/amS4PruPuzDPsERj7iCUHUtlSGwtmQE7ALbULiNdKrP5fQwB+N4lCtv2cDbFy 6Xy7436YMoaSNjT3kwocFRt+W/kpEh4poJDz9Kc+GHquJBacHwqZ3JHWGU7RFFRq PVfKrwBq8o34nNAZgVEPwG6fvuv3tEqD1wJh2IE7rMrC8lPp4pvTxl/18vnp3Dmr JYmriCfjlzyuOA6h0i1E3HmYDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDef+8Uf V4YfVSWzxP3QKz7VhbOkMB8GA1UdIwQYMBaAFJUmpnJHivp1RF2NB9zFfAWJZu/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTFCRS80MTY4RkY3NjJE MzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1uVkVYWTBIM01WOEJZbG03 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xTYW1ja2VLLW5WRVhZMEgzTVY4QllsbTctSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTFCRS80MTY4RkY3NjJEMzIxMUVEOTJCOEI3NjFDNEY5QUUwMi9sU2FtY2tlSy1u VkVYWTBIM01WOEJZbG03LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/cfJpcK6bYPlo+xToXBUq1uq4Mwy8eZc/j+oo3MMxtdNzJizVozA9 gcE5T2VKF3P1+E0l+UeY6xSCJ1f9QYG/PRqIOxYt/1DQ/5AgdB9JaYkGHtYXvjIs qPo6hGzRoDclQ6Pkfq63OkZFvompQtbykkdVk2VXhjpMhLUtIyE8MH1G1oq54DOX JvmrXRSurwNkDwDcNjcsysVJ2/OAMVl9bzvnUZvHh9sYdPhjf30nbKuxC2UNZz3r NSsfzVBZhhDIz1Vh2TgzgMzVvrI0AKBbD5AxaMcYpErWcUI5cCC8MvpFpPTEMY7G MV/3knzGaRfsyYEyFq7XuS7WaJ4jts0n -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:16 2025 by rpki-client