$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft File: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft (raw, json) Hash identifier: Y8lxt/KF5BZKm4kPEiRkRlkOdmTbaeB1QUvDkQXyuvk= Subject key identifier: 3B:55:05:6A:50:00:87:1C:49:3A:82:88:B3:D1:88:D5:25:B9:58:9D Authority key identifier: 2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 Certificate issuer: /CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft Manifest number: 0132 Signing time: Sat 23 Aug 2025 04:39:58 +0000 Manifest this update: Sat 23 Aug 2025 04:39:57 +0000 Manifest next update: Sat 30 Aug 2025 04:39:57 +0000 Files and hashes: 1: LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl (hash: Fc8bRUHaENkWhUEx2qFRQ2SgX+YAs7GCdSpr/3v0lxs=) 2: F41E4608AD1511EE8FBA3458C4F9AE02.roa (hash: IVgKl4KyXf9Nb8T2afhwLi7rAVCfzpH4M9e8hvVHXhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF94F, serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Validity Not Before: Aug 23 04:39:57 2025 GMT Not After : Aug 30 04:39:57 2025 GMT Subject: CN=68a9461d-3604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:a5:07:66:3a:f8:0a:36:e1:73:c3:9f:fd: 6f:47:d1:8c:cb:ca:89:c7:b6:95:2e:31:69:36:81: 8a:93:45:3c:9b:cc:63:a2:59:92:19:c3:2b:ad:fc: 8c:78:0c:50:93:bf:02:84:8d:3b:c5:50:3f:9f:b0: 17:6a:8a:7f:78:43:64:e1:c0:53:84:0a:ff:af:02: 8c:7b:ec:ff:7f:a1:fc:19:8f:7b:f2:58:3b:ef:16: 89:a6:ba:45:58:a4:46:af:0c:c9:1b:0b:ea:f6:3e: ec:e5:e6:a8:f8:ae:0c:ad:7b:78:d3:83:86:4e:b4: 7e:8c:42:6a:63:45:3e:5d:01:b3:1f:52:7f:9d:c9: b8:6c:7a:8f:5e:63:cf:69:d4:45:f2:ed:b0:83:11: b2:ed:db:3d:53:23:8c:2f:89:ea:2d:90:a8:11:c1: 4c:b8:88:7f:2b:11:b6:a3:f7:da:5b:8a:59:31:73: f8:54:e9:59:f8:05:d1:45:5e:c3:85:c0:71:c3:16: f7:19:41:35:73:bf:66:5c:5d:be:8e:ad:f7:6b:bb: a3:ad:a6:d6:39:b1:fd:0d:f5:db:e2:d1:11:00:c0: f0:bf:25:c6:85:8b:58:2f:08:d9:2c:c9:7c:4b:2e: ac:be:39:ab:2d:32:4d:9d:c0:c4:e8:df:d4:96:21: 2f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:55:05:6A:50:00:87:1C:49:3A:82:88:B3:D1:88:D5:25:B9:58:9D X509v3 Authority Key Identifier: keyid:2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:3a:a0:f9:ea:fe:02:75:76:a9:e9:24:0a:fa:c8:9a:10:ea: 4f:69:f5:2b:a6:11:d8:57:db:da:95:59:60:66:e0:e2:65:ae: bd:3d:04:57:87:0f:8d:fb:57:f1:93:a9:f0:a6:86:d7:ec:93: a7:0f:48:e4:4e:04:70:65:9c:e4:fb:03:0c:05:13:b0:ef:b1: 54:d9:6b:9c:51:d3:fe:2d:94:7f:b2:50:cf:50:1e:fc:6d:f7: 77:b3:c4:ee:30:9e:26:b5:5e:6c:89:10:8f:b0:f2:34:ef:bd: 58:30:e3:8b:ec:f3:61:b9:8c:34:c9:dd:85:66:bb:7d:0f:af: c4:f7:87:ac:b8:5f:e4:5d:a6:75:2b:2a:a8:41:a1:33:7b:dd: 83:76:1b:ce:10:2a:9f:2c:42:db:9a:f5:c7:a1:03:74:e8:6d: 63:c0:ea:92:16:c0:cd:af:78:15:e8:73:6b:69:6d:5e:0f:4e: 3c:e2:a5:0b:c2:da:4d:33:2c:a3:97:7f:45:77:4d:60:ff:b1: b9:7b:69:a1:6a:5c:69:04:b7:fb:26:1e:f0:fa:28:29:85:80: 3c:48:a8:43:2d:d6:01:e7:4c:06:f2:13:b2:30:c3:b0:81:c5: 8f:0b:c7:77:68:80:be:da:6d:f2:c3:ad:a1:4b:33:6f:f2:d2: ab:21:ab:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY5NEYxMTAvBgNVBAUTKDJFQTYyOEFCNTVEMTgxNzQzRUYyOTBFRjgyNDk5ODBE NjI5OUFGQTIwHhcNMjUwODIzMDQzOTU3WhcNMjUwODMwMDQzOTU3WjAYMRYwFAYD VQQDEw02OGE5NDYxZC0zNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm2lB2Y6+Ao24XPDn/1vR9GMy8qJx7aVLjFpNoGKk0U8m8xjolmSGcMrrfyM eAxQk78ChI07xVA/n7AXaop/eENk4cBThAr/rwKMe+z/f6H8GY978lg77xaJprpF WKRGrwzJGwvq9j7s5eao+K4MrXt404OGTrR+jEJqY0U+XQGzH1J/ncm4bHqPXmPP adRF8u2wgxGy7ds9UyOML4nqLZCoEcFMuIh/KxG2o/faW4pZMXP4VOlZ+AXRRV7D hcBxwxb3GUE1c79mXF2+jq33a7ujrabWObH9DfXb4tERAMDwvyXGhYtYLwjZLMl8 Sy6svjmrLTJNncDE6N/UliEvqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtVBWpQ AIccSTqCiLPRiNUluVidMB8GA1UdIwQYMBaAFC6mKKtV0YF0PvKQ74JJmA1ima+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjk0Ri9EMzQ4RjJEMEFE MTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdYUS04cER2Z2ttWURXS1py NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxWW9xMVhSZ1hRLThwRHZna21ZRFdLWnI2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjk0Ri9EMzQ4RjJEMEFEMTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdY US04cER2Z2ttWURXS1pyNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyOqD56v4CdXap6SQK+siaEOpPafUrphHYV9valVlgZuDiZa69PQRX hw+N+1fxk6nwpobX7JOnD0jkTgRwZZzk+wMMBROw77FU2WucUdP+LZR/slDPUB78 bfd3s8TuMJ4mtV5siRCPsPI0771YMOOL7PNhuYw0yd2FZrt9D6/E94esuF/kXaZ1 KyqoQaEze92DdhvOECqfLELbmvXHoQN06G1jwOqSFsDNr3gV6HNraW1eD0484qUL wtpNMyyjl39Fd01g/7G5e2mhalxpBLf7Jh7w+igphYA8SKhDLdYB50wG8hOyMMOw gcWPC8d3aIC+2m3yw62hSzNv8tKrIas5 -----END CERTIFICATE-----Generated at Sun Aug 24 06:24:54 2025 by rpki-client