$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft File: LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft (raw, json) Hash identifier: uOgFJK/VLl9f/OU/sVBPW0pOM6TxkEEbO7UvmCFy8l8= Subject key identifier: 9F:49:3F:2E:28:B8:A4:D1:4D:43:37:C9:07:DC:AE:66:48:A4:D8:DE Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 Certificate issuer: /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft Manifest number: 2C Signing time: Sat 09 Aug 2025 08:13:14 +0000 Manifest this update: Sat 09 Aug 2025 08:13:14 +0000 Manifest next update: Sat 16 Aug 2025 08:13:14 +0000 Files and hashes: 1: LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl (hash: Cb5XEaouyve1JZqDVukWtYY29CcYUvaqHOhhAQb0snU=) 2: E62BCC784C9211F09A2E3014C4F9AE02.roa (hash: e/qoVpmKt8fCZimHa48idWx8ZDlS0KQsXYwTkjXC6NI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958 Validity Not Before: Aug 9 08:13:14 2025 GMT Not After : Aug 16 08:13:14 2025 GMT Subject: CN=6897031a-b9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:9a:12:e3:45:04:03:97:84:23:79:1a:93: a7:9c:2a:8e:98:0b:23:35:f0:c5:dd:d3:03:67:c0: 2d:cf:72:ee:6e:2a:0b:a0:55:2b:96:da:23:c6:c4: 46:5a:44:51:dd:e3:67:f6:c7:52:d5:f2:05:a6:92: c6:83:b1:90:37:92:75:86:6a:3b:24:0f:99:ac:24: 93:81:74:ba:da:73:9f:fb:45:ce:13:0b:f3:ef:e3: 64:4c:c8:27:38:3c:60:86:79:98:c2:26:9b:f6:d7: cf:43:23:c4:2b:60:bb:1f:e9:e9:4d:27:c6:10:ab: 2e:fc:ad:e8:c7:c7:80:35:33:68:b9:cf:8a:f4:75: 08:22:94:c9:51:20:8e:b3:f1:82:7d:28:db:9f:8e: 46:30:6b:68:5b:52:34:56:3d:07:39:53:f9:79:e9: 24:6e:5f:61:61:6c:14:c3:34:6a:12:15:f6:ba:f2: 3d:cd:f7:8e:21:19:a9:27:47:03:19:30:3c:57:61: 1b:8d:81:0b:19:ab:7d:3e:f7:4a:c2:99:e5:d3:d5: 9a:94:a7:54:06:6c:16:23:d6:ad:66:07:b5:bd:1c: 01:cb:06:64:23:a8:5b:67:dd:a1:7f:d7:9a:c5:45: 1d:e9:87:6e:fa:49:2e:70:65:71:b5:9a:67:1f:d8: a0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:49:3F:2E:28:B8:A4:D1:4D:43:37:C9:07:DC:AE:66:48:A4:D8:DE X509v3 Authority Key Identifier: keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:cd:d0:72:d9:0c:7f:61:3c:81:82:a8:8f:83:ef:ab:bf:6c: 6d:ca:cd:34:95:b3:4b:04:d9:b9:04:e6:14:99:f7:cb:35:f8: 18:73:47:41:b8:6b:d0:f3:54:b0:d6:4a:3b:12:f0:23:5b:73: 14:b3:f5:6a:8f:d2:a6:ce:89:7c:4a:e6:71:19:c3:3b:bf:21: 17:94:57:6c:1b:34:93:97:d7:f8:23:be:17:bd:67:22:cf:db: 2e:2a:95:5a:09:c1:99:cf:f9:79:e2:27:c5:ae:61:e9:34:60: 98:ce:f8:cd:f4:8c:0a:2c:2a:a2:43:72:dd:1a:0a:09:ad:0d: 7b:a7:3d:bb:97:09:7e:9e:da:8c:a4:60:22:b6:da:ee:e7:ef: 1f:3c:a2:66:3e:9c:57:ee:79:60:50:13:a9:2e:f8:15:e1:5c: e1:29:6a:e9:3f:9e:ed:d3:5e:7c:12:4f:f9:3d:43:1c:c3:da: 8f:37:cd:55:66:5e:bb:fc:2b:66:ef:9e:d1:c9:28:45:a9:b4: 7b:ab:4c:dc:3c:0e:1b:e3:c9:e6:11:04:83:cf:cd:de:13:24: 57:bf:dc:7c:3a:5c:d3:02:11:29:11:4a:c8:6f:89:83:eb:7a: 5b:02:8f:eb:be:a5:f4:66:19:a2:ac:4c:2d:a6:93:19:51:e6: 17:2f:42:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NTVCMzExMC8GA1UEBRMoMkQwMUExOTQyQkFGRDlEM0IzMUREQkZFNzUzMjRCQUQ2 MkI2MDk1ODAeFw0yNTA4MDkwODEzMTRaFw0yNTA4MTYwODEzMTRaMBgxFjAUBgNV BAMTDTY4OTcwMzFhLWI5ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzVJoS40UEA5eEI3kak6ecKo6YCyM18MXd0wNnwC3Pcu5uKgugVSuW2iPGxEZa RFHd42f2x1LV8gWmksaDsZA3knWGajskD5msJJOBdLrac5/7Rc4TC/Pv42RMyCc4 PGCGeZjCJpv2189DI8QrYLsf6elNJ8YQqy78rejHx4A1M2i5z4r0dQgilMlRII6z 8YJ9KNufjkYwa2hbUjRWPQc5U/l56SRuX2FhbBTDNGoSFfa68j3N944hGaknRwMZ MDxXYRuNgQsZq30+90rCmeXT1ZqUp1QGbBYj1q1mB7W9HAHLBmQjqFtn3aF/15rF RR3ph276SS5wZXG1mmcf2KANAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUn0k/Lii4 pNFNQzfJB9yuZkik2N4wHwYDVR0jBBgwFoAULQGhlCuv2dOzHdv+dTJLrWK2CVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1NUIzLzI2QjFFMThBMzFF RDExRjA4OURDNzczQkM0RjlBRTAyL0xRR2hsQ3V2MmRPekhkdi1kVEpMcldLMkNW Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFFHaGxDdXYyZE96SGR2LWRUSkxyV0syQ1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1 NUIzLzI2QjFFMThBMzFFRDExRjA4OURDNzczQkM0RjlBRTAyL0xRR2hsQ3V2MmRP ekhkdi1kVEpMcldLMkNWZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHnN0HLZDH9hPIGCqI+D76u/bG3KzTSVs0sE2bkE5hSZ98s1+BhzR0G4 a9DzVLDWSjsS8CNbcxSz9WqP0qbOiXxK5nEZwzu/IReUV2wbNJOX1/gjvhe9ZyLP 2y4qlVoJwZnP+XniJ8WuYek0YJjO+M30jAosKqJDct0aCgmtDXunPbuXCX6e2oyk YCK22u7n7x88omY+nFfueWBQE6ku+BXhXOEpauk/nu3TXnwST/k9QxzD2o83zVVm Xrv8K2bvntHJKEWptHurTNw8DhvjyeYRBIPPzd4TJFe/3Hw6XNMCESkRSshviYPr elsCj+u+pfRmGaKsTC2mkxlR5hcvQmM= -----END CERTIFICATE-----Generated at Sun Aug 10 04:23:12 2025 by rpki-client