$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: lW8chp3mkzM3bUI/WbxdlrsQjPdPq5t6djspuqW6pIo= Subject key identifier: 89:A3:CC:BE:6F:28:AC:5C:57:55:BD:70:C0:DE:19:5E:2E:F3:B6:4E Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 025E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 0258 Signing time: Mon 11 Aug 2025 02:03:47 +0000 Manifest this update: Mon 11 Aug 2025 02:03:47 +0000 Manifest next update: Mon 18 Aug 2025 02:03:47 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: ET8J6cWqkiSlmeG6UNdUL2oqnSwXEmlGTtEcSIyeUj0=) 2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw=) 3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: 4W6/p+0KqdQzOWI5KzYsI4xB+6G+0sO88djovDswBB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 606 (0x25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Aug 11 02:03:47 2025 GMT Not After : Aug 18 02:03:47 2025 GMT Subject: CN=68994f83-7bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:8c:8b:4a:3e:30:37:60:71:6f:e8:4d:16: 22:af:71:5d:73:11:da:7e:da:88:8b:98:eb:d8:26: 8a:5c:bb:d2:48:c0:6e:4f:3a:6e:34:64:51:7a:01: 03:b3:fc:12:29:79:6a:c4:52:9a:39:e3:9d:4a:2e: 49:56:33:11:41:0f:f3:b4:6e:31:f8:eb:8e:ac:85: a7:fd:9f:f6:3e:75:b5:93:d6:87:db:a5:3b:7c:46: 76:0f:3c:2e:9d:4c:75:40:62:58:c4:86:98:26:01: 6d:30:a1:4d:17:75:10:27:cb:07:24:da:24:fc:9a: 1e:f9:52:a5:09:60:25:b9:ea:f9:37:fa:89:e8:e5: ba:0f:12:fa:89:0a:f5:14:36:a9:ea:87:05:29:80: 27:90:8f:67:4f:98:d1:f2:fd:d6:54:e5:42:e8:6c: 9f:8d:6e:0e:ec:e8:d8:ed:37:5b:6a:0f:fa:bb:cd: 85:a8:f2:10:0b:cb:b1:72:5c:e2:3f:f8:97:5e:85: 4e:c9:5b:67:68:30:e5:a4:e6:3b:11:44:d4:e4:09: 9a:da:0a:91:f5:a7:91:10:ac:0c:14:ed:a9:d1:f3: aa:ce:55:fb:15:db:f1:a9:45:bb:c0:92:70:c4:4c: 39:c1:aa:3c:98:6d:2e:b5:86:09:fd:f0:cb:7a:36: ed:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A3:CC:BE:6F:28:AC:5C:57:55:BD:70:C0:DE:19:5E:2E:F3:B6:4E X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:22:40:b8:7f:a6:f6:6a:ab:ab:b6:13:05:43:8e:a4:80:9e: e1:b5:83:76:07:c1:3f:9e:4f:00:bc:72:eb:fc:f8:5d:67:de: 2b:66:af:2e:29:9a:07:7b:83:61:89:41:66:37:29:c0:45:28: 03:7d:cc:a4:c0:02:2f:73:7f:2f:6e:d0:71:14:fc:2a:13:15: 81:e5:a0:d3:e6:ec:60:e8:09:bd:f2:df:6f:f8:f4:9a:6f:96: e6:cf:d0:4e:ce:4a:8f:0f:48:a9:a2:77:bf:0a:06:86:fc:11: 4a:99:fc:3d:68:aa:a4:f3:e6:a5:57:b2:e8:cd:37:2b:0a:eb: 42:48:4e:67:57:3d:17:62:8f:74:86:79:5b:54:23:23:6d:f1: f6:f0:ec:93:a8:7f:83:e5:82:4f:48:26:e9:94:3f:df:bd:70: 79:2b:87:09:3e:25:69:88:7f:af:57:e0:61:7f:6a:8e:1e:8a: ad:fe:49:a7:a6:15:01:bc:b2:6a:df:be:39:34:48:37:08:39: 15:ac:2d:e4:7f:7f:43:6b:04:a9:32:26:81:c0:70:49:0f:0c: ac:0a:22:08:b7:75:c4:52:69:af:61:52:1e:66:2e:a0:a4:ce: 39:cb:5d:79:6f:44:66:1e:80:ad:5b:ae:7b:65:89:30:c1:87: 0c:f1:09:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjUwODExMDIwMzQ3WhcNMjUwODE4MDIwMzQ3WjAYMRYwFAYD VQQDEw02ODk5NGY4My03YmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8WMi0o+MDdgcW/oTRYir3FdcxHaftqIi5jr2CaKXLvSSMBuTzpuNGRRegED s/wSKXlqxFKaOeOdSi5JVjMRQQ/ztG4x+OuOrIWn/Z/2PnW1k9aH26U7fEZ2Dzwu nUx1QGJYxIaYJgFtMKFNF3UQJ8sHJNok/Joe+VKlCWAluer5N/qJ6OW6DxL6iQr1 FDap6ocFKYAnkI9nT5jR8v3WVOVC6GyfjW4O7OjY7Tdbag/6u82FqPIQC8uxclzi P/iXXoVOyVtnaDDlpOY7EUTU5Ama2gqR9aeREKwMFO2p0fOqzlX7FdvxqUW7wJJw xEw5wao8mG0utYYJ/fDLejbtGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImjzL5v KKxcV1W9cMDeGV4u87ZOMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnIkC4f6b2aqurthMFQ46kgJ7htYN2B8E/nk8AvHLr/PhdZ94rZq8u KZoHe4NhiUFmNynARSgDfcykwAIvc38vbtBxFPwqExWB5aDT5uxg6Am98t9v+PSa b5bmz9BOzkqPD0ipone/CgaG/BFKmfw9aKqk8+alV7LozTcrCutCSE5nVz0XYo90 hnlbVCMjbfH28OyTqH+D5YJPSCbplD/fvXB5K4cJPiVpiH+vV+Bhf2qOHoqt/kmn phUBvLJq3745NEg3CDkVrC3kf39DawSpMiaBwHBJDwysCiIIt3XEUmmvYVIeZi6g pM45y115b0RmHoCtW657ZYkwwYcM8Ql5 -----END CERTIFICATE-----Generated at Mon Aug 11 04:18:07 2025 by rpki-client