$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft File: L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json) Hash identifier: nYRBOba0voSU9S01EPB+Wc1Mp7KgtcrSlvCK1ygvf0s= Subject key identifier: 99:95:98:C6:76:DC:F8:D7:97:E1:C3:A3:95:56:86:EB:C1:5C:67:AC Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F Certificate issuer: /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Certificate serial: 0190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft Manifest number: 018A Signing time: Sat 23 Aug 2025 03:41:09 +0000 Manifest this update: Sat 23 Aug 2025 03:41:08 +0000 Manifest next update: Sat 30 Aug 2025 03:41:08 +0000 Files and hashes: 1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: js1728GyQo13H6SEoRHEAt3XdMO4u8WZdgLKi18/chQ=) 2: C4CA725C687011EFA523204EC4F9AE02.roa (hash: bB5I0J8DTK3q/hJblz4A/ucUMBmJS2GVLM6wagxtpQo=) 3: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: xWgHy7isZUitDTjnS0WDq6EA62pHQrt2pMCDvawXwME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F Validity Not Before: Aug 23 03:41:08 2025 GMT Not After : Aug 30 03:41:08 2025 GMT Subject: CN=68a93854-c522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:85:0d:17:9a:46:c2:23:72:18:fc:3b:42: 74:f2:47:27:9c:72:b9:54:61:9d:75:1e:f0:c5:32: aa:82:58:ba:1a:48:49:05:95:ea:36:b6:01:29:2a: 32:b4:d9:0b:83:0c:87:9c:3a:b1:46:e8:84:67:58: 55:1f:c3:6d:47:7a:be:0f:22:bb:14:6f:7b:2a:ed: 3c:35:a5:62:c6:ed:31:86:fe:6c:4c:62:4e:f8:47: a4:f6:c0:85:ae:5d:95:f8:3e:9f:fa:6c:eb:8b:d2: 06:83:c3:44:43:e6:0f:3e:49:ff:cb:7c:07:b1:7e: e5:7b:2c:3d:58:c1:07:f3:e6:38:de:57:ee:e8:5b: cb:ff:18:f6:70:98:11:26:30:66:51:52:e9:22:6a: 3d:d5:df:48:66:12:1e:55:52:ba:83:fd:fe:94:d1: 98:a7:a2:1d:87:92:4e:ce:bf:70:ca:b7:21:b3:c6: 4d:9b:6d:e8:0c:08:1c:d2:8b:c9:a7:9c:f9:ff:b8: 9d:dc:b1:f4:2f:1a:31:07:60:da:88:72:18:e9:03: 7b:99:78:ae:e2:21:1f:0e:e2:90:d1:b8:0f:75:f6: ca:2d:7d:7b:cc:2a:d1:68:41:62:c6:38:01:54:22: 2b:c2:6d:e9:39:79:56:7f:c9:3a:99:46:61:23:03: ea:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:95:98:C6:76:DC:F8:D7:97:E1:C3:A3:95:56:86:EB:C1:5C:67:AC X509v3 Authority Key Identifier: keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:05:e2:f8:ab:98:01:38:ca:c8:6b:96:b5:13:55:bd:71:f3: c4:70:4b:8b:46:0a:8c:d2:2b:90:eb:3a:9d:c1:c0:7f:0f:95: 79:8f:44:d7:23:ec:92:0c:b3:bc:87:34:d0:00:e5:96:b8:e1: 2f:fc:44:0d:5b:72:e2:c8:e7:f2:ce:e8:a6:6a:fc:49:38:f9: df:65:89:5d:ad:71:d4:b0:81:a6:b9:2a:3d:d1:66:12:52:2c: e7:68:de:d1:e0:a3:f8:8d:4a:5b:2d:73:f7:bf:39:30:1d:a9: f7:33:07:c2:29:1a:93:4f:2a:fa:cd:09:ad:7b:27:d5:f9:36: 47:b3:ef:95:09:b0:48:88:a0:f9:1c:d3:87:9d:f2:8b:e4:ae: e2:11:b2:20:d1:58:aa:48:22:3b:43:3a:2a:dd:20:8c:f2:97: 7e:5e:18:6e:a4:b9:c7:5a:9c:7a:b7:02:4b:58:f3:ee:62:8d: 2e:21:dd:b0:39:c5:f2:56:5d:83:66:f2:7e:c0:59:4e:ba:d6: 85:89:a8:1c:60:f0:cd:f5:a7:ce:b4:02:89:d6:60:7e:fe:c0: d6:d5:7d:c9:24:9b:f6:a4:c2:e4:a2:5e:50:0b:ec:c3:af:7c: f9:a4:c4:0f:a0:12:dc:b4:1c:32:3a:9c:b5:df:8f:8e:6e:44: 3c:f8:b9:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx OTcxODAwNkYwHhcNMjUwODIzMDM0MTA4WhcNMjUwODMwMDM0MTA4WjAYMRYwFAYD VQQDEw02OGE5Mzg1NC1jNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNqFDReaRsIjchj8O0J08kcnnHK5VGGddR7wxTKqgli6GkhJBZXqNrYBKSoy tNkLgwyHnDqxRuiEZ1hVH8NtR3q+DyK7FG97Ku08NaVixu0xhv5sTGJO+Eek9sCF rl2V+D6f+mzri9IGg8NEQ+YPPkn/y3wHsX7leyw9WMEH8+Y43lfu6FvL/xj2cJgR JjBmUVLpImo91d9IZhIeVVK6g/3+lNGYp6Idh5JOzr9wyrchs8ZNm23oDAgc0ovJ p5z5/7id3LH0LxoxB2DaiHIY6QN7mXiu4iEfDuKQ0bgPdfbKLX17zCrRaEFixjgB VCIrwm3pOXlWf8k6mUZhIwPq+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmVmMZ2 3PjXl+HDo5VWhuvBXGesMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuBeL4q5gBOMrIa5a1E1W9cfPEcEuLRgqM0iuQ6zqdwcB/D5V5j0TX I+ySDLO8hzTQAOWWuOEv/EQNW3LiyOfyzuimavxJOPnfZYldrXHUsIGmuSo90WYS UiznaN7R4KP4jUpbLXP3vzkwHan3MwfCKRqTTyr6zQmteyfV+TZHs++VCbBIiKD5 HNOHnfKL5K7iEbIg0ViqSCI7Qzoq3SCM8pd+XhhupLnHWpx6twJLWPPuYo0uId2w OcXyVl2DZvJ+wFlOutaFiagcYPDN9afOtAKJ1mB+/sDW1X3JJJv2pMLkol5QC+zD r3z5pMQPoBLctBwyOpy134+ObkQ8+LlW -----END CERTIFICATE-----Generated at Sat Aug 23 22:40:23 2025 by rpki-client