$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft File: loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft (raw, json) Hash identifier: ixXcQknNHCyJXd+CS08n8owgEtzvk8wnBvFS6v0bqSs= Subject key identifier: 8C:D7:DB:5A:6A:DD:1D:E3:D6:A3:A8:11:38:FF:E0:75:0A:C9:B9:A0 Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft Manifest number: 0567 Signing time: Sun 10 Aug 2025 23:31:09 +0000 Manifest this update: Sun 10 Aug 2025 23:31:09 +0000 Manifest next update: Sun 17 Aug 2025 23:31:09 +0000 Files and hashes: 1: loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl (hash: JuHL6l0seTWnNaFygCSJ0OWtl/CVf/yKbKJ0yOmY37s=) 2: AF0A3F14178911EC876F5F50C4F9AE02.roa (hash: KRiDfnMy2+pwD3zrIBOiDvY7T9O/jHD6MSYbIKfk0AY=) 3: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (hash: cMsOBL01lB8MhNIvPe7EZWZhW2/NqYoBIP9IcsqTKSI=) 4: D3D36BE0271011ECA0D7D95AC4F9AE02.roa (hash: ToNYuKjsmNUrDjM3EopYow2kRZNQw6nwL7h9Ilwq2wI=) 5: AE8BB766178911EC876F5F50C4F9AE02.roa (hash: 9Xivq6s93mksbhu2p/H/z3gtS9/XmhNf3IMjTVy5pWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Aug 10 23:31:09 2025 GMT Not After : Aug 17 23:31:09 2025 GMT Subject: CN=68992bbd-1049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f8:7b:69:fb:f5:59:98:1b:66:fc:09:b9:b5: 20:be:6a:ea:e9:be:ee:72:07:9d:e6:e3:4f:7b:c6: 76:72:47:01:f5:d7:42:f7:eb:ae:a7:f9:8e:db:24: a1:f0:9e:3d:da:af:e7:da:34:30:35:52:b7:ef:ea: 0e:0f:10:65:36:e9:5d:9b:4e:d5:6f:1b:4f:84:94: 9d:10:c2:a0:e4:58:be:ab:3a:ea:62:e4:7a:1b:23: 34:64:1c:a7:6f:26:9f:cb:f2:0e:46:23:52:da:5b: 81:fe:8d:8c:dd:16:4c:e9:41:33:1b:27:ea:60:4f: 23:6a:e3:76:8f:1e:d2:b3:c9:12:a7:f2:99:43:bd: 4a:8b:d3:b8:03:96:fb:0c:80:90:6f:80:05:eb:ac: c2:78:41:97:37:29:19:ed:b0:80:82:95:cc:09:b4: 39:09:a3:e5:48:a9:bc:a9:14:c3:4e:f4:c2:f7:56: 7f:e9:d8:17:48:06:68:48:27:46:7f:eb:78:8c:5d: 2b:a6:de:8e:a7:15:a2:94:c6:ba:5d:42:4b:c4:97: 65:c2:91:fa:25:ad:8c:20:67:d9:ed:e5:54:e2:59: be:4c:54:33:50:77:92:7b:27:77:a4:67:1c:0f:f1: 80:15:b8:94:9c:8d:7a:4a:16:33:12:39:20:c5:39: 0f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D7:DB:5A:6A:DD:1D:E3:D6:A3:A8:11:38:FF:E0:75:0A:C9:B9:A0 X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:2b:27:bb:1d:71:21:af:ac:c7:1d:9b:4c:df:af:c6:25:22: 5b:cf:1d:03:a8:a6:89:48:42:7a:00:ed:4d:cb:3e:48:ca:03: aa:2a:33:ef:f0:65:47:2f:51:f9:af:1b:73:f2:4c:ba:20:96: 10:96:5d:2e:02:fd:f8:bd:bb:31:b4:f1:4f:59:34:f4:5a:ce: af:99:20:95:0b:25:66:90:9a:b5:d9:73:bd:a0:05:81:50:c9: 59:28:bf:81:fb:4f:31:11:c8:6b:53:7c:fe:25:34:6d:46:48: 6d:cf:5c:e1:95:f2:9b:b1:bd:c3:3e:61:43:9c:a2:ad:00:d4: 36:ec:59:73:b6:32:04:b6:1c:78:47:40:2c:ad:1a:90:bd:c9: 40:29:19:94:a2:f5:f3:ed:ed:cc:12:ef:58:8e:5e:69:fd:d8: 3e:04:25:9f:7c:9f:54:95:f4:2b:de:20:76:9f:9f:bb:43:0d: 33:f7:0e:74:ca:58:22:34:a6:76:fc:76:6d:dc:a8:a9:84:2f: 0a:3d:8b:2f:1c:eb:97:a0:8c:9f:57:d9:f6:b6:95:1f:8e:b3: 26:fd:59:d6:c9:eb:ff:fc:e3:d0:d2:e2:bd:70:7b:3f:37:7c: 1e:2f:ee:8c:90:6a:59:a9:9a:55:ad:b2:26:70:dd:40:20:59: 1e:6d:eb:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjUwODEwMjMzMTA5WhcNMjUwODE3MjMzMTA5WjAYMRYwFAYD VQQDEw02ODk5MmJiZC0xMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvh7afv1WZgbZvwJubUgvmrq6b7ucged5uNPe8Z2ckcB9ddC9+uup/mO2ySh 8J492q/n2jQwNVK37+oODxBlNuldm07VbxtPhJSdEMKg5Fi+qzrqYuR6GyM0ZByn byafy/IORiNS2luB/o2M3RZM6UEzGyfqYE8jauN2jx7Ss8kSp/KZQ71Ki9O4A5b7 DICQb4AF66zCeEGXNykZ7bCAgpXMCbQ5CaPlSKm8qRTDTvTC91Z/6dgXSAZoSCdG f+t4jF0rpt6OpxWilMa6XUJLxJdlwpH6Ja2MIGfZ7eVU4lm+TFQzUHeSeyd3pGcc D/GAFbiUnI16ShYzEjkgxTkP1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzX21pq 3R3j1qOoETj/4HUKybmgMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTRCMS83QTg4NjRBQ0ZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkx Z0hkckhRNG5YU19TMXBmclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtKye7HXEhr6zHHZtM36/GJSJbzx0DqKaJSEJ6AO1Nyz5IygOqKjPv 8GVHL1H5rxtz8ky6IJYQll0uAv34vbsxtPFPWTT0Ws6vmSCVCyVmkJq12XO9oAWB UMlZKL+B+08xEchrU3z+JTRtRkhtz1zhlfKbsb3DPmFDnKKtANQ27FlztjIEthx4 R0AsrRqQvclAKRmUovXz7e3MEu9Yjl5p/dg+BCWffJ9UlfQr3iB2n5+7Qw0z9w50 ylgiNKZ2/HZt3KiphC8KPYsvHOuXoIyfV9n2tpUfjrMm/VnWyev//OPQ0uK9cHs/ N3weL+6MkGpZqZpVrbImcN1AIFkebeuE -----END CERTIFICATE-----Generated at Mon Aug 11 02:05:12 2025 by rpki-client