$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft File: LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft (raw, json) Hash identifier: PYpsRBUjVvO2BRDlibN9Z9IF61C3p+evAxcUdD+gZFU= Subject key identifier: 32:02:EC:31:EC:66:FC:59:27:8B:DB:36:20:0E:AD:3B:5E:07:F6:7E Authority key identifier: 2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 Certificate issuer: /CN=A916CDDF/serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Certificate serial: 0C28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft Manifest number: 140D Signing time: Fri 08 Aug 2025 18:52:45 +0000 Manifest this update: Fri 08 Aug 2025 18:52:45 +0000 Manifest next update: Fri 15 Aug 2025 18:52:45 +0000 Files and hashes: 1: LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl (hash: pjaYhDLTOqGRkurCtmsCwGa2hth7pDD4Q3vZ0RGseLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3112 (0xc28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=2E5079BE856A5A6637856C937154245D987FA754 Validity Not Before: Aug 8 18:52:45 2025 GMT Not After : Aug 15 18:52:45 2025 GMT Subject: CN=6896477d-46b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:85:4c:1b:6c:5b:38:b4:db:40:07:ea:94:2c: 5b:0f:ab:fc:94:40:3a:3e:49:a9:ff:77:11:53:f9: b7:c7:c4:86:3e:47:9d:95:cb:6d:28:ba:60:1b:f7: a3:15:42:25:17:db:af:90:07:2d:27:2b:f2:66:92: ca:2f:dc:0c:73:79:8c:16:d2:93:a8:d7:80:79:d2: 6d:21:03:0b:4c:10:31:dd:b7:42:a7:a7:ac:c4:77: 82:34:b5:97:0f:90:ed:2b:84:77:31:c6:bf:d3:85: 26:54:70:20:63:53:d4:c5:d1:bd:e1:c5:19:b6:60: 36:27:22:26:9a:05:2a:db:44:c4:de:d4:a7:88:21: 12:13:3e:d7:1f:a5:2c:63:50:5c:de:b2:e1:46:54: ce:e3:15:31:64:64:82:b3:d5:00:a0:95:3c:bb:22: 6b:8e:4f:a3:0e:f2:98:4c:1b:75:1e:bb:a5:9e:d8: 14:f6:cf:39:c1:20:78:de:2b:3f:b2:cb:9b:67:f1: f8:56:31:cf:08:00:51:10:49:5c:2c:84:a8:9c:a3: 3e:f3:d4:c9:4e:1c:6a:49:9e:5c:f1:65:1f:5d:ff: e3:9f:be:f1:5b:a4:2a:84:6d:a6:b8:dd:0c:5a:23: 2f:2c:2a:40:3d:96:e9:4d:94:25:9d:ac:b1:27:b4: 7b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:02:EC:31:EC:66:FC:59:27:8B:DB:36:20:0E:AD:3B:5E:07:F6:7E X509v3 Authority Key Identifier: keyid:2E:50:79:BE:85:6A:5A:66:37:85:6C:93:71:54:24:5D:98:7F:A7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlB5voVqWmY3hWyTcVQkXZh_p1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/LlB5voVqWmY3hWyTcVQkXZh_p1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:e6:c2:e4:b9:ea:28:76:7a:7e:45:bd:c1:ea:4f:e9:88:4d: 60:8a:6c:cc:4c:5f:0a:ed:b1:0e:bb:55:1d:ed:32:84:8e:05: c8:f2:da:d9:f4:90:93:74:f0:6c:9e:34:cf:79:60:f0:5a:75: 0b:b8:5d:f5:7f:b0:38:f2:53:87:a3:6e:96:b0:b2:b9:54:85: d6:bc:b4:1c:67:34:0d:57:dc:45:c1:56:36:da:25:73:25:fe: 3b:f9:28:25:41:9b:f4:2b:20:2f:d2:c2:47:e5:c2:7b:03:e9: 46:60:87:16:24:08:8f:30:15:3d:46:c1:32:bd:69:ae:87:46: 4d:5b:01:8e:1b:e4:d3:ab:91:8e:74:92:e6:00:00:0b:ea:12: ef:90:12:90:27:c7:60:ac:f6:25:35:e5:73:db:6d:c5:e8:d4: ab:82:0b:47:e9:4b:d1:73:17:04:ec:08:17:b4:24:03:a8:a9: 14:63:39:c0:2d:13:4a:99:81:d7:cc:d7:48:fc:30:d0:8c:c5: 15:41:0f:7c:a0:3b:fa:f0:2a:ce:b5:5f:97:d8:65:85:4d:7b: 1e:2d:d0:3c:3a:fb:f5:f0:81:ed:7e:ed:25:cb:d0:8d:96:5a: 4c:af:5f:4c:26:41:c8:4f:83:eb:5b:89:26:bb:9d:0f:a2:80: 8a:b6:5d:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDJFNTA3OUJFODU2QTVBNjYzNzg1NkM5MzcxNTQyNDVE OTg3RkE3NTQwHhcNMjUwODA4MTg1MjQ1WhcNMjUwODE1MTg1MjQ1WjAYMRYwFAYD VQQDEw02ODk2NDc3ZC00NmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA94VMG2xbOLTbQAfqlCxbD6v8lEA6Pkmp/3cRU/m3x8SGPkedlcttKLpgG/ej FUIlF9uvkActJyvyZpLKL9wMc3mMFtKTqNeAedJtIQMLTBAx3bdCp6esxHeCNLWX D5DtK4R3Mca/04UmVHAgY1PUxdG94cUZtmA2JyImmgUq20TE3tSniCESEz7XH6Us Y1Bc3rLhRlTO4xUxZGSCs9UAoJU8uyJrjk+jDvKYTBt1HrulntgU9s85wSB43is/ ssubZ/H4VjHPCABREElcLISonKM+89TJThxqSZ5c8WUfXf/jn77xW6QqhG2muN0M WiMvLCpAPZbpTZQlnayxJ7R7JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIC7DHs ZvxZJ4vbNiAOrTteB/Z+MB8GA1UdIwQYMBaAFC5Qeb6FalpmN4Vsk3FUJF2Yf6dU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdtWTNoV3lUY1ZRa1haaF9w MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsQjV2b1ZxV21ZM2hXeVRjVlFrWFpoX3AxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9MbEI1dm9WcVdt WTNoV3lUY1ZRa1haaF9wMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBU5sLkueoodnp+Rb3B6k/piE1gimzMTF8K7bEOu1Ud7TKEjgXI8trZ 9JCTdPBsnjTPeWDwWnULuF31f7A48lOHo26WsLK5VIXWvLQcZzQNV9xFwVY22iVz Jf47+SglQZv0KyAv0sJH5cJ7A+lGYIcWJAiPMBU9RsEyvWmuh0ZNWwGOG+TTq5GO dJLmAAAL6hLvkBKQJ8dgrPYlNeVz223F6NSrggtH6UvRcxcE7AgXtCQDqKkUYznA LRNKmYHXzNdI/DDQjMUVQQ98oDv68CrOtV+X2GWFTXseLdA8Ovv18IHtfu0ly9CN llpMr19MJkHIT4PrW4kmu50PooCKtl0E -----END CERTIFICATE-----Generated at Sat Aug 9 01:12:56 2025 by rpki-client