$ rpki-client -vvf rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft File: LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft (raw, json) Hash identifier: QZNHVqoABXg6bv37ybU9qI3pO0seModvTdQwShbletA= Subject key identifier: F9:11:95:0F:B0:5F:ED:EE:94:1F:DB:51:28:B0:E9:5C:36:8F:D6:08 Authority key identifier: 2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C Certificate issuer: /CN=A91552E3/serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Certificate serial: 0659 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft Manifest number: 0648 Signing time: Fri 08 Aug 2025 23:08:05 +0000 Manifest this update: Fri 08 Aug 2025 23:08:05 +0000 Manifest next update: Fri 15 Aug 2025 23:08:05 +0000 Files and hashes: 1: LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl (hash: 8z8zNoy12sI+7cptljp7p6EJkb7u5fz5HyQ9S9DhE0A=) 2: E0A9637E41FA11ECB2D7F760C4F9AE02.roa (hash: syoIEmBkPUbXHyU102SwHVQfhD/obq6DIZMw3IYU94w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91552E3, serialNumber=2CFA4D8F4410A951AA164E554C65805D8CF8895C Validity Not Before: Aug 8 23:08:05 2025 GMT Not After : Aug 15 23:08:05 2025 GMT Subject: CN=68968355-20a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:32:62:e1:4d:c3:0d:22:af:f2:f3:1b:de: 18:59:04:11:08:b0:2e:89:d3:bd:96:ae:b8:3e:e2: 36:4b:cb:51:cd:43:a5:d9:17:08:25:2a:e5:07:8d: f3:eb:82:74:a3:63:2d:50:31:59:16:a8:52:65:03: 4d:00:fb:fb:f2:e6:12:dc:e4:30:e5:97:78:83:f4: 3b:e9:40:8b:9b:54:65:0f:46:f0:37:99:10:bd:91: 76:78:80:b8:80:99:57:d6:b1:9d:e8:31:15:61:19: a7:f5:82:1f:2b:89:4c:20:c2:bf:bd:59:0d:2f:40: 22:64:0a:e6:a6:5f:1c:4a:84:ba:b8:06:b4:33:c6: 29:69:c1:96:e6:ab:1c:4c:10:ed:ab:6f:cb:d2:78: d2:11:bc:d0:b8:76:47:9f:f7:b0:66:de:8c:f6:35: e5:ca:a7:cc:a5:a4:fe:02:17:77:0d:aa:8d:d5:36: db:04:f3:e0:b8:bc:c8:3e:c7:fd:7b:b3:81:79:e2: de:e6:f3:35:57:d4:71:6a:72:6f:66:b8:ab:0d:e8: 51:6b:96:eb:e1:58:f8:57:f6:52:dc:73:cb:3f:eb: 76:c6:62:a7:0b:20:77:b8:26:72:ae:f9:5c:0d:d6: f0:7f:d1:61:e7:b5:7e:cb:3d:97:03:19:7b:3a:94: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:95:0F:B0:5F:ED:EE:94:1F:DB:51:28:B0:E9:5C:36:8F:D6:08 X509v3 Authority Key Identifier: keyid:2C:FA:4D:8F:44:10:A9:51:AA:16:4E:55:4C:65:80:5D:8C:F8:89:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPpNj0QQqVGqFk5VTGWAXYz4iVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91552E3/29453B74A07711EBA8C4C740C4F9AE02/LPpNj0QQqVGqFk5VTGWAXYz4iVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:a3:64:6a:de:35:12:e2:2a:0c:36:b2:5a:f0:b5:1d:65:32: 54:16:a8:81:cb:53:80:3b:c7:8d:43:61:c7:fe:e2:07:23:d0: b9:90:24:97:55:dc:39:ac:85:84:2d:5d:f1:5c:f7:27:ea:fa: e9:fb:ab:b7:cc:3a:2e:f8:a2:e8:42:bc:5d:cd:43:1d:15:ec: 68:6f:ba:0c:e6:ce:64:6c:66:b7:e3:e3:7d:e5:f1:33:18:ae: 80:19:bd:bb:29:c2:a0:a9:35:60:d2:9f:6f:56:c6:7e:3b:f9: c9:18:d5:fb:6c:28:41:0b:b0:22:2b:d4:0d:9a:83:15:4d:ec: 1f:9a:38:75:1c:f1:05:b4:da:49:68:ff:9a:7b:42:9a:3e:ce: c9:e8:74:a2:c4:cb:85:85:b4:4c:1a:52:a1:07:00:df:3d:15: f1:77:69:fb:90:ce:a4:9b:47:0c:32:2b:92:9c:eb:a7:72:6c: 04:41:4e:19:b3:d1:e9:33:9a:f3:26:91:05:1b:0c:71:e8:78: a9:a5:ea:32:79:67:84:31:b0:65:d5:02:e9:30:7a:5a:af:0a: d4:90:93:cf:b1:1c:a5:c9:cd:4d:7f:0e:29:af:7f:68:54:aa: 85:85:d6:3a:46:52:b0:8d:ba:e8:e7:5b:d4:cf:40:2f:2a:57: 7f:72:d5:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUyRTMxMTAvBgNVBAUTKDJDRkE0RDhGNDQxMEE5NTFBQTE2NEU1NTRDNjU4MDVE OENGODg5NUMwHhcNMjUwODA4MjMwODA1WhcNMjUwODE1MjMwODA1WjAYMRYwFAYD VQQDEw02ODk2ODM1NS0yMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJAyYuFNww0ir/LzG94YWQQRCLAuidO9lq64PuI2S8tRzUOl2RcIJSrlB43z 64J0o2MtUDFZFqhSZQNNAPv78uYS3OQw5Zd4g/Q76UCLm1RlD0bwN5kQvZF2eIC4 gJlX1rGd6DEVYRmn9YIfK4lMIMK/vVkNL0AiZArmpl8cSoS6uAa0M8YpacGW5qsc TBDtq2/L0njSEbzQuHZHn/ewZt6M9jXlyqfMpaT+Ahd3DaqN1TbbBPPguLzIPsf9 e7OBeeLe5vM1V9RxanJvZrirDehRa5br4Vj4V/ZS3HPLP+t2xmKnCyB3uCZyrvlc Ddbwf9Fh57V+yz2XAxl7OpSVlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkRlQ+w X+3ulB/bUSiw6Vw2j9YIMB8GA1UdIwQYMBaAFCz6TY9EEKlRqhZOVUxlgF2M+Ilc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTJFMy8yOTQ1M0I3NEEw NzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFWR3FGazVWVEdXQVhZejRp VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQcE5qMFFRcVZHcUZrNVZUR1dBWFl6NGlWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTJFMy8yOTQ1M0I3NEEwNzcxMUVCQThDNEM3NDBDNEY5QUUwMi9MUHBOajBRUXFW R3FGazVWVEdXQVhZejRpVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGo2Rq3jUS4ioMNrJa8LUdZTJUFqiBy1OAO8eNQ2HH/uIHI9C5kCSX Vdw5rIWELV3xXPcn6vrp+6u3zDou+KLoQrxdzUMdFexob7oM5s5kbGa34+N95fEz GK6AGb27KcKgqTVg0p9vVsZ+O/nJGNX7bChBC7AiK9QNmoMVTewfmjh1HPEFtNpJ aP+ae0KaPs7J6HSixMuFhbRMGlKhBwDfPRXxd2n7kM6km0cMMiuSnOuncmwEQU4Z s9HpM5rzJpEFGwxx6HippeoyeWeEMbBl1QLpMHparwrUkJPPsRylyc1Nfw4pr39o VKqFhdY6RlKwjbro51vUz0AvKld/ctX5 -----END CERTIFICATE-----Generated at Sat Aug 9 15:15:02 2025 by rpki-client