$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: BzPWOgdveR/6SRt9ZVsyygSAfTshAxQkKu6Ah3XiGio= Subject key identifier: 54:FD:2C:CF:E7:50:65:4D:06:17:5C:9B:3B:39:3B:65:A9:C1:A2:35 Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 0897 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 0891 Signing time: Tue 12 Aug 2025 20:52:16 +0000 Manifest this update: Tue 12 Aug 2025 20:52:15 +0000 Manifest next update: Tue 19 Aug 2025 20:52:15 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: R6yP9ylTnzHexwWH6qwJNftyikNrJ17XHshVGPF1tsI=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: qM1JVSXdUTQJnIVxaVxQsaSGw94EgaLnOqmc/M2SNDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 20:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2199 (0x897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: Aug 12 20:52:15 2025 GMT Not After : Aug 19 20:52:15 2025 GMT Subject: CN=689ba980-4a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e0:b3:a1:46:16:46:11:e8:a7:b9:82:19:19: 78:fe:37:46:9a:9d:d2:ce:9f:12:21:5c:dc:2a:f1: 03:67:41:61:f5:6f:b2:b2:0c:76:6b:ff:c1:7c:2e: 54:0e:16:02:8b:66:29:5e:1c:ed:08:05:7f:d1:a1: ef:fc:dc:91:b3:ed:77:e9:93:f3:e3:87:a9:61:c7: 90:b1:c9:68:85:ae:01:22:b1:f0:95:2c:08:14:87: 94:d1:2f:24:d7:41:2e:d1:2d:d1:41:5b:ba:9b:36: e2:07:14:d7:e5:e4:bb:3b:32:b7:43:34:bb:e8:b6: 20:7e:70:aa:88:67:df:31:cb:c1:67:33:67:da:92: b5:c3:f9:a0:69:1b:87:6a:a5:9d:e6:ad:8b:7e:3b: 3b:a4:28:68:d3:dc:86:21:5d:d9:d7:eb:7e:77:15: 23:25:60:e5:fd:09:d5:3f:b5:24:00:6e:38:80:eb: 14:f3:55:fb:14:13:81:34:b1:60:9e:38:35:0c:35: 59:95:84:94:87:95:0f:d8:31:16:c9:b1:1c:e6:fc: 8c:cd:07:8d:ad:80:e9:78:7f:65:0b:5f:f7:cc:b7: ba:73:f5:16:d9:d4:00:02:5a:f9:bf:e7:0b:b5:bc: ac:32:0a:5f:41:d5:ed:7d:b6:be:5e:d9:d2:a9:0a: 8b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FD:2C:CF:E7:50:65:4D:06:17:5C:9B:3B:39:3B:65:A9:C1:A2:35 X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:79:b4:c5:8c:8e:41:c0:71:d7:72:cb:3a:c7:fc:22:68:c1: e6:ca:15:d6:ba:c2:f8:10:78:71:09:15:ed:85:78:f1:60:0c: b0:61:20:aa:04:7e:13:2c:85:93:da:f9:35:19:db:e6:65:25: f2:1c:04:d7:4c:9f:c7:f7:03:13:80:d0:0e:2b:c1:b2:90:87: 5b:19:71:89:02:73:89:a3:ef:ab:cf:75:ff:32:69:ad:81:e8: b2:35:fa:8f:98:ca:6a:7f:a8:ad:5b:c3:ec:05:74:89:91:b0: 80:25:16:08:c3:87:69:3d:e3:9c:99:fd:a3:65:a7:ca:84:42: 42:6e:fc:67:d6:72:6d:bd:73:ba:67:ad:e3:d3:13:57:0d:78: 57:a8:97:0f:4d:d8:ae:cb:80:61:8d:3b:d1:5b:79:61:fe:8a: aa:09:bb:fd:9e:86:eb:1d:0e:bf:05:f2:36:3e:89:aa:f1:97: 97:e7:a1:4d:e1:4f:f8:b4:8e:d8:2f:6e:30:cd:6f:23:f5:b3: 76:18:95:a2:81:ff:04:6b:6a:fd:13:0e:b5:81:92:c1:8e:6d: 6f:9a:73:77:fc:cb:c0:63:f4:3c:07:44:41:62:cf:8e:2e:49: a0:a6:e9:74:d8:3c:49:88:bd:d3:7c:53:d2:ff:1c:0e:a9:c8: db:9e:b0:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjUwODEyMjA1MjE1WhcNMjUwODE5MjA1MjE1WjAYMRYwFAYD VQQDEw02ODliYTk4MC00YTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuCzoUYWRhHop7mCGRl4/jdGmp3Szp8SIVzcKvEDZ0Fh9W+ysgx2a//BfC5U DhYCi2YpXhztCAV/0aHv/NyRs+136ZPz44epYceQscloha4BIrHwlSwIFIeU0S8k 10Eu0S3RQVu6mzbiBxTX5eS7OzK3QzS76LYgfnCqiGffMcvBZzNn2pK1w/mgaRuH aqWd5q2Lfjs7pCho09yGIV3Z1+t+dxUjJWDl/QnVP7UkAG44gOsU81X7FBOBNLFg njg1DDVZlYSUh5UP2DEWybEc5vyMzQeNrYDpeH9lC1/3zLe6c/UW2dQAAlr5v+cL tbysMgpfQdXtfba+XtnSqQqLkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFT9LM/n UGVNBhdcmzs5O2WpwaI1MB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5ebTFjI5BwHHXcss6x/wiaMHmyhXWusL4EHhxCRXthXjxYAywYSCq BH4TLIWT2vk1GdvmZSXyHATXTJ/H9wMTgNAOK8GykIdbGXGJAnOJo++rz3X/Mmmt geiyNfqPmMpqf6itW8PsBXSJkbCAJRYIw4dpPeOcmf2jZafKhEJCbvxn1nJtvXO6 Z63j0xNXDXhXqJcPTdiuy4BhjTvRW3lh/oqqCbv9nobrHQ6/BfI2Pomq8ZeX56FN 4U/4tI7YL24wzW8j9bN2GJWigf8Ea2r9Ew61gZLBjm1vmnN3/MvAY/Q8B0RBYs+O Lkmgpul02DxJiL3TfFPS/xwOqcjbnrAt -----END CERTIFICATE-----Generated at Wed Aug 13 00:35:34 2025 by rpki-client