$ rpki-client -vvf rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft File: LURD4dwv1QJlAbu5nX1p2vpgvxc.mft (raw, json) Hash identifier: zUHaEyUk1NNEVNC0sjq1MVywg3OYsfBEQBg4uaUUJC0= Subject key identifier: 39:3F:F9:EF:1A:05:79:2B:AA:08:67:C8:82:31:55:34:1A:6B:EF:19 Authority key identifier: 2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 Certificate issuer: /CN=A91361B4/serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft Manifest number: 0196 Signing time: Mon 11 Aug 2025 03:29:29 +0000 Manifest this update: Mon 11 Aug 2025 03:29:29 +0000 Manifest next update: Mon 18 Aug 2025 03:29:29 +0000 Files and hashes: 1: LURD4dwv1QJlAbu5nX1p2vpgvxc.crl (hash: tGPBL0rfiHH/m5SusDhG82zLmjxDln7JjUXEc9pxQGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91361B4, serialNumber=2D4443E1DC2FD5026501BBB99D7D69DAFA60BF17 Validity Not Before: Aug 11 03:29:29 2025 GMT Not After : Aug 18 03:29:29 2025 GMT Subject: CN=68996399-d1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:10:34:15:57:ac:e0:8e:f2:b6:61:44:d6:73: 11:29:2f:d2:8c:3d:06:c5:52:6e:e5:a9:2f:62:be: e3:2c:5c:10:0e:91:d0:53:40:dc:4d:4d:95:cc:e0: c4:55:a8:65:35:10:f8:3d:56:96:10:ce:42:88:3f: 90:20:87:f6:3d:32:46:16:b5:5b:bc:c3:5d:df:d4: bd:62:a2:a4:d6:3c:20:83:4d:bb:b7:0a:a4:ab:63: fd:fc:1d:5a:0c:d2:08:df:88:a4:b9:be:93:1a:1d: 07:5a:d5:0f:2c:de:43:f8:30:7f:fa:0b:25:63:a1: 3a:f1:96:a7:b2:ef:68:a5:23:5d:4e:e1:e4:2a:58: 2f:b1:2a:36:38:83:e4:37:42:01:95:d3:71:89:e7: 5f:ce:55:02:38:a8:7e:38:7b:18:4c:ff:f3:82:96: ac:6b:79:e2:1d:f2:66:26:29:de:07:c2:c2:49:48: 02:62:da:32:db:8b:38:62:7e:5c:de:fd:7e:db:4d: e0:4d:c4:26:b7:c7:10:5f:f6:12:5d:03:88:a4:c0: ff:f6:17:94:e1:8d:14:f9:a5:91:db:bd:9a:17:35: 84:d5:06:2f:f8:35:25:f2:19:f4:dd:8f:ea:1a:aa: 53:8e:2d:86:14:e3:1f:27:91:c4:ae:18:2f:24:db: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3F:F9:EF:1A:05:79:2B:AA:08:67:C8:82:31:55:34:1A:6B:EF:19 X509v3 Authority Key Identifier: keyid:2D:44:43:E1:DC:2F:D5:02:65:01:BB:B9:9D:7D:69:DA:FA:60:BF:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LURD4dwv1QJlAbu5nX1p2vpgvxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91361B4/7CD11FA205F511EE9C4D3361C4F9AE02/LURD4dwv1QJlAbu5nX1p2vpgvxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ca:02:23:c5:69:49:71:f6:db:be:dc:2e:22:de:7b:29:b0: f4:d9:c9:87:58:d7:e7:d7:71:ec:33:82:63:d9:46:28:20:c7: 0d:fc:7c:5b:bf:f7:cb:5e:9b:f9:d6:13:5a:16:cd:19:3e:07: 37:b4:9a:4b:5c:5f:00:ed:9f:c1:86:7d:52:35:f7:bf:45:49: dd:61:ba:e6:22:ba:a8:6e:81:a7:65:fe:be:d8:15:12:61:b8: 47:46:b0:a5:58:1a:02:3e:e6:3b:6e:8d:6b:1c:c3:17:ac:2c: ae:66:5d:04:85:a4:b2:a0:3e:6a:3f:78:33:1d:b2:25:90:9b: 5c:fb:71:bd:54:9a:8f:74:81:89:2f:fb:bb:a0:26:f3:c7:36: bd:3e:16:5d:6d:1c:0a:46:38:50:ee:a2:e3:a7:d6:f6:6c:97: 94:26:a4:53:f3:1e:72:b3:8b:fe:d7:85:ed:eb:af:69:6b:d7: 1b:81:6e:bb:f5:93:86:3e:78:ab:bc:63:d6:cd:1a:7c:35:ae: 57:47:ee:3f:12:d4:1a:b2:bb:c4:f6:f0:2f:a6:e0:03:5b:8d: ec:2e:42:b8:6d:4f:1d:38:19:2c:85:75:ad:f2:3a:c5:88:91: 92:c5:aa:59:76:7e:b4:28:63:eb:61:15:1c:97:0a:d4:17:fb: 20:7c:93:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxQjQxMTAvBgNVBAUTKDJENDQ0M0UxREMyRkQ1MDI2NTAxQkJCOTlEN0Q2OURB RkE2MEJGMTcwHhcNMjUwODExMDMyOTI5WhcNMjUwODE4MDMyOTI5WjAYMRYwFAYD VQQDEw02ODk5NjM5OS1kMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xA0FVes4I7ytmFE1nMRKS/SjD0GxVJu5akvYr7jLFwQDpHQU0DcTU2VzODE VahlNRD4PVaWEM5CiD+QIIf2PTJGFrVbvMNd39S9YqKk1jwgg027twqkq2P9/B1a DNII34ikub6TGh0HWtUPLN5D+DB/+gslY6E68Zansu9opSNdTuHkKlgvsSo2OIPk N0IBldNxiedfzlUCOKh+OHsYTP/zgpasa3niHfJmJineB8LCSUgCYtoy24s4Yn5c 3v1+203gTcQmt8cQX/YSXQOIpMD/9heU4Y0U+aWR272aFzWE1QYv+DUl8hn03Y/q GqpTji2GFOMfJ5HErhgvJNuFPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDk/+e8a BXkrqghnyIIxVTQaa+8ZMB8GA1UdIwQYMBaAFC1EQ+HcL9UCZQG7uZ19adr6YL8X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjFCNC83Q0QxMUZBMjA1 RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFRSmxBYnU1blgxcDJ2cGd2 eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xVUkQ0ZHd2MVFKbEFidTVuWDFwMnZwZ3Z4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjFCNC83Q0QxMUZBMjA1RjUxMUVFOUM0RDMzNjFDNEY5QUUwMi9MVVJENGR3djFR SmxBYnU1blgxcDJ2cGd2eGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoygIjxWlJcfbbvtwuIt57KbD02cmHWNfn13HsM4Jj2UYoIMcN/Hxb v/fLXpv51hNaFs0ZPgc3tJpLXF8A7Z/Bhn1SNfe/RUndYbrmIrqoboGnZf6+2BUS YbhHRrClWBoCPuY7bo1rHMMXrCyuZl0EhaSyoD5qP3gzHbIlkJtc+3G9VJqPdIGJ L/u7oCbzxza9PhZdbRwKRjhQ7qLjp9b2bJeUJqRT8x5ys4v+14Xt669pa9cbgW67 9ZOGPnirvGPWzRp8Na5XR+4/EtQasrvE9vAvpuADW43sLkK4bU8dOBkshXWt8jrF iJGSxapZdn60KGPrYRUclwrUF/sgfJMJ -----END CERTIFICATE-----Generated at Tue Aug 12 13:52:31 2025 by rpki-client