$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft File: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft (raw, json) Hash identifier: Ob6KQHvr1Um8fGZb59NJih7vAni/Ov/q2WyJMSxQ3yg= Subject key identifier: 7A:56:6C:0F:D6:88:EC:0E:D3:39:FA:D3:53:44:1F:1B:1C:4A:D0:2D Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft Manifest number: 81 Signing time: Thu 07 Aug 2025 07:36:00 +0000 Manifest this update: Thu 07 Aug 2025 07:36:00 +0000 Manifest next update: Thu 14 Aug 2025 07:36:00 +0000 Files and hashes: 1: lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl (hash: fGvHslSJa/9ICOA/yBViky+IKYs8lwQK+t6UQXrygzM=) 2: 40674AFE65E411F0B7584044C4F9AE02.roa (hash: Pm3Vd4dH60j31kzUPIM83U+w2X9bW0Z9v4FZHaWXGGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058 Validity Not Before: Aug 7 07:36:00 2025 GMT Not After : Aug 14 07:36:00 2025 GMT Subject: CN=68945760-315b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:bb:0f:48:5f:a5:e7:14:28:7a:f4:60:3d: 98:20:5f:b9:1a:02:05:fb:50:38:ea:3f:60:b8:92: 23:4f:53:73:a6:9c:d4:1e:09:1b:1c:8d:63:7c:0d: 28:fb:99:ea:1a:b3:c0:83:76:ab:ea:c4:3e:2c:8b: d2:0d:8d:5a:7b:e0:c2:9a:1c:39:bc:a9:74:e1:02: 3f:01:41:ff:92:25:b4:58:bf:0d:3e:77:e9:0a:87: 66:a3:b8:3a:01:22:b8:da:6b:f7:03:19:f0:39:8a: dd:0c:67:b9:d7:f5:55:8e:9b:99:63:72:32:7f:be: 83:a0:d2:09:d6:a2:53:bd:cd:71:04:0b:c5:21:64: 64:bb:e5:9c:64:f4:42:55:29:97:d9:aa:9c:06:71: b1:92:d9:f8:0c:1c:e7:19:60:7c:a7:86:a3:c0:26: bc:74:ce:9c:ad:3e:f8:2c:9c:ac:ce:91:cb:78:c2: 5d:c6:5a:d3:d7:1c:63:4a:33:3b:7a:92:06:3a:78: b3:76:77:8c:03:eb:12:0e:be:3d:46:a4:10:ab:91: f7:32:ec:cc:0c:d0:de:59:29:69:08:12:23:61:c0: 80:da:13:77:90:3a:36:32:f5:43:2d:77:15:a0:4e: 2a:c6:1d:01:70:e6:7c:d1:11:e3:e4:71:e7:91:ad: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:56:6C:0F:D6:88:EC:0E:D3:39:FA:D3:53:44:1F:1B:1C:4A:D0:2D X509v3 Authority Key Identifier: keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:4b:6a:80:c6:ac:11:51:5a:7d:4c:c5:b4:28:1b:a2:7f:bd: d2:60:27:21:3b:c6:ab:1d:34:89:35:2c:fc:10:85:db:7f:fe: 6a:70:87:54:e9:c0:e1:3e:0f:af:39:59:2d:8f:38:88:7c:30: e5:fb:9c:0b:c8:40:ee:b8:9f:d1:8e:71:e9:56:22:fd:8d:2c: c9:53:90:f3:43:d6:cf:2a:d3:3b:f6:0f:0e:29:be:aa:69:9d: 18:f2:ac:ed:b6:ee:09:c8:2c:0a:f3:f4:fb:2c:f7:8d:b7:9f: b5:5e:22:6c:a1:f1:14:d0:70:84:20:e6:71:75:0d:39:3f:0c: 73:f9:d6:8e:96:06:fb:fa:5c:7a:cb:60:d0:93:62:9b:2d:51: 98:9c:72:8f:1b:d1:0d:f7:6d:8c:bd:6b:b7:e2:c1:cc:79:b1: df:1b:e7:8a:8a:de:0d:b6:7e:32:aa:d8:a9:0e:69:52:71:4f: 93:82:99:10:0f:53:a9:85:42:a9:14:26:29:4c:72:0d:0b:ac: ae:1e:16:8d:4b:67:f7:a5:f1:dc:8e:9c:29:6d:bb:4c:6a:ab: cf:13:3a:a4:18:b5:84:3b:ab:47:14:31:d0:4e:f9:57:43:79: 26:94:46:50:ad:fe:fb:c0:bb:5f:7b:18:ce:14:c2:49:a0:e1: c1:6c:5b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZERDkxMTAvBgNVBAUTKDk2N0I5N0Q5RTMxMTI1MEQ4Mjk0MkQyN0U0QzVGOTBE OTgxMzgwNTgwHhcNMjUwODA3MDczNjAwWhcNMjUwODE0MDczNjAwWjAYMRYwFAYD VQQDEw02ODk0NTc2MC0zMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp827D0hfpecUKHr0YD2YIF+5GgIF+1A46j9guJIjT1NzppzUHgkbHI1jfA0o +5nqGrPAg3ar6sQ+LIvSDY1ae+DCmhw5vKl04QI/AUH/kiW0WL8NPnfpCodmo7g6 ASK42mv3AxnwOYrdDGe51/VVjpuZY3Iyf76DoNIJ1qJTvc1xBAvFIWRku+WcZPRC VSmX2aqcBnGxktn4DBznGWB8p4ajwCa8dM6crT74LJyszpHLeMJdxlrT1xxjSjM7 epIGOnizdneMA+sSDr49RqQQq5H3MuzMDNDeWSlpCBIjYcCA2hN3kDo2MvVDLXcV oE4qxh0BcOZ80RHj5HHnka0BqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpWbA/W iOwO0zn601NEHxscStAtMB8GA1UdIwQYMBaAFJZ7l9njESUNgpQtJ+TF+Q2YE4BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkREOS9CNjIyRkE4QUQ2 REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpRMkNsQzBuNU1YNURaZ1Rn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xudVgyZU1SSlEyQ2xDMG41TVg1RFpnVGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkREOS9CNjIyRkE4QUQ2REUxMUVGQjA0NzRFMUJDNEY5QUUwMi9sbnVYMmVNUkpR MkNsQzBuNU1YNURaZ1RnRmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHS2qAxqwRUVp9TMW0KBuif73SYCchO8arHTSJNSz8EIXbf/5qcIdU 6cDhPg+vOVktjziIfDDl+5wLyEDuuJ/RjnHpViL9jSzJU5DzQ9bPKtM79g8OKb6q aZ0Y8qzttu4JyCwK8/T7LPeNt5+1XiJsofEU0HCEIOZxdQ05Pwxz+daOlgb7+lx6 y2DQk2KbLVGYnHKPG9EN922MvWu34sHMebHfG+eKit4Ntn4yqtipDmlScU+TgpkQ D1OphUKpFCYpTHINC6yuHhaNS2f3pfHcjpwpbbtMaqvPEzqkGLWEO6tHFDHQTvlX Q3kmlEZQrf77wLtfexjOFMJJoOHBbFts -----END CERTIFICATE-----Generated at Sat Aug 9 03:03:03 2025 by rpki-client