$ rpki-client -vvf rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft File: LnNTksaGuNjciMDM1Zvyrvun6LA.mft (raw, json) Hash identifier: N3QRdy/RR/FaiIQRoYoTk0NEEmZuVx/Fbcs1IbwnIog= Subject key identifier: 9F:03:DC:5F:6E:77:E9:40:6B:5F:88:38:1B:7F:E4:CD:EE:B5:A9:A1 Authority key identifier: 2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 Certificate issuer: /CN=A911D340/serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0 Certificate serial: 0B56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft Manifest number: 0B4D Signing time: Fri 08 Aug 2025 19:23:00 +0000 Manifest this update: Fri 08 Aug 2025 19:22:59 +0000 Manifest next update: Fri 15 Aug 2025 19:22:59 +0000 Files and hashes: 1: LnNTksaGuNjciMDM1Zvyrvun6LA.crl (hash: PfOLUkXjkesy1xaK79UW++fUc6lW5+3mPKmlSoU7bk4=) 2: 14B2A85C3DA611EAAD093F5EC4F9AE02.roa (hash: U5r4SWMbZzX6cEmOkEoVm3P+a9O6vlGibQIW9uT8u/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2902 (0xb56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D340, serialNumber=2E735392C686B8D8DC88C0CCD59BF2AEFBA7E8B0 Validity Not Before: Aug 8 19:22:59 2025 GMT Not After : Aug 15 19:22:59 2025 GMT Subject: CN=68964e94-fd0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:22:7e:14:dc:ea:1b:fd:b5:14:8f:5d:b8: aa:13:f0:ce:38:4e:5c:ae:9a:9a:95:1c:bc:42:58: 6e:82:c9:cb:73:b8:fe:de:18:48:85:2e:c8:63:4c: f6:ae:4c:33:09:0e:ea:1f:59:3e:4e:a0:34:be:53: 82:c3:78:c2:72:3e:45:61:de:68:c2:05:f9:2a:f4: d1:93:48:f0:8e:b3:cd:9e:ce:2a:0c:d9:15:9c:22: 55:66:52:83:40:f7:85:4d:73:51:55:80:66:18:3f: f9:fc:96:76:99:8f:9a:ee:3d:0b:ea:51:ba:ac:92: ce:63:44:a6:05:74:7b:84:52:24:18:3b:ed:5c:6d: a1:e5:52:e4:75:23:67:fd:4d:c7:9e:92:6f:89:8e: 1b:8c:a6:9c:93:74:e3:39:4e:c5:60:64:cc:2e:d4: 47:96:51:ed:a1:f7:9b:4e:f6:ef:a1:31:fe:fa:25: b1:a5:c9:be:07:93:01:b4:c2:36:9a:33:88:27:d4: 1f:95:19:d9:14:7b:f4:2c:53:ff:45:c6:08:73:7a: 43:da:e3:52:b5:4f:98:4c:56:b7:47:0e:3f:69:ff: 95:d2:df:44:38:81:87:14:58:25:44:91:81:74:82: d0:e3:94:9e:ce:82:36:5c:35:14:de:60:bf:71:41: f7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:03:DC:5F:6E:77:E9:40:6B:5F:88:38:1B:7F:E4:CD:EE:B5:A9:A1 X509v3 Authority Key Identifier: keyid:2E:73:53:92:C6:86:B8:D8:DC:88:C0:CC:D5:9B:F2:AE:FB:A7:E8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnNTksaGuNjciMDM1Zvyrvun6LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D340/0468397A3C4E11EA94725C28C4F9AE02/LnNTksaGuNjciMDM1Zvyrvun6LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:91:47:dc:a5:b3:a8:52:90:a7:5a:ef:63:62:b5:11:43:88: ec:d1:55:9d:4c:fb:49:fe:c1:60:5d:0f:20:42:8d:4a:f4:fa: 3a:f6:3e:43:5f:5a:2f:f0:90:8b:19:fe:31:5b:b4:78:74:f9: a1:44:ff:d9:70:2e:16:70:67:e4:17:39:ea:17:22:d5:84:bd: 1b:11:c4:1b:23:3c:56:d7:44:ca:07:1d:5d:a3:ec:1b:47:ad: ad:66:f7:15:4a:57:14:79:29:da:58:82:a0:de:ac:af:b7:9d: 7c:70:31:b4:1b:e7:3d:cd:32:84:11:ec:ae:6f:3f:91:95:c4: 5d:5c:9c:0b:4e:33:bf:43:f5:44:df:b5:45:f8:dc:25:a2:ca: e1:33:31:88:23:bd:f0:d9:ba:8a:26:52:1e:03:82:f4:c1:36: ec:42:79:76:68:35:5d:80:d0:11:aa:fc:91:be:9f:5b:ad:41: f6:55:24:09:a1:6e:08:0f:40:58:aa:f7:f6:ad:15:c6:40:20: 64:c2:63:68:de:9e:a0:8b:40:54:3f:05:ae:8d:4c:a5:12:1e: 58:ca:a3:f8:ba:74:e3:ee:aa:15:a7:90:af:24:7b:02:3b:a5: 5e:61:39:fe:97:15:1b:55:54:c5:fd:f3:47:bd:40:0c:4a:3f: 8b:f8:6b:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzNDAxMTAvBgNVBAUTKDJFNzM1MzkyQzY4NkI4RDhEQzg4QzBDQ0Q1OUJGMkFF RkJBN0U4QjAwHhcNMjUwODA4MTkyMjU5WhcNMjUwODE1MTkyMjU5WjAYMRYwFAYD VQQDEw02ODk2NGU5NC1mZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgIifhTc6hv9tRSPXbiqE/DOOE5crpqalRy8QlhugsnLc7j+3hhIhS7IY0z2 rkwzCQ7qH1k+TqA0vlOCw3jCcj5FYd5owgX5KvTRk0jwjrPNns4qDNkVnCJVZlKD QPeFTXNRVYBmGD/5/JZ2mY+a7j0L6lG6rJLOY0SmBXR7hFIkGDvtXG2h5VLkdSNn /U3HnpJviY4bjKack3TjOU7FYGTMLtRHllHtofebTvbvoTH++iWxpcm+B5MBtMI2 mjOIJ9QflRnZFHv0LFP/RcYIc3pD2uNStU+YTFa3Rw4/af+V0t9EOIGHFFglRJGB dILQ45SezoI2XDUU3mC/cUH3zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8D3F9u d+lAa1+IOBt/5M3utamhMB8GA1UdIwQYMBaAFC5zU5LGhrjY3IjAzNWb8q77p+iw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDM0MC8wNDY4Mzk3QTND NEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VOamNpTURNMVp2eXJ2dW42 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuTlRrc2FHdU5qY2lNRE0xWnZ5cnZ1bjZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDM0MC8wNDY4Mzk3QTNDNEUxMUVBOTQ3MjVDMjhDNEY5QUUwMi9Mbk5Ua3NhR3VO amNpTURNMVp2eXJ2dW42TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrkUfcpbOoUpCnWu9jYrURQ4js0VWdTPtJ/sFgXQ8gQo1K9Po69j5D X1ov8JCLGf4xW7R4dPmhRP/ZcC4WcGfkFznqFyLVhL0bEcQbIzxW10TKBx1do+wb R62tZvcVSlcUeSnaWIKg3qyvt518cDG0G+c9zTKEEeyubz+RlcRdXJwLTjO/Q/VE 37VF+NwlosrhMzGII73w2bqKJlIeA4L0wTbsQnl2aDVdgNARqvyRvp9brUH2VSQJ oW4ID0BYqvf2rRXGQCBkwmNo3p6gi0BUPwWujUylEh5YyqP4unTj7qoVp5CvJHsC O6VeYTn+lxUbVVTF/fNHvUAMSj+L+Guz -----END CERTIFICATE-----Generated at Sat Aug 9 01:17:09 2025 by rpki-client