$ rpki-client -vvf rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft File: LR4Op3rKP-WX3vMZYh70DRLUwdw.mft (raw, json) Hash identifier: zniSAqqOvjzaEvRqsDdPU0CMgkxSudzHc9CXLK+KoT8= Subject key identifier: F2:4D:51:56:44:E7:9C:97:C9:17:07:89:53:A6:1F:69:DD:93:9D:23 Authority key identifier: 2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC Certificate issuer: /CN=A91939DA/serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft Manifest number: D8 Signing time: Sat 09 Aug 2025 05:59:20 +0000 Manifest this update: Sat 09 Aug 2025 05:59:20 +0000 Manifest next update: Sat 16 Aug 2025 05:59:20 +0000 Files and hashes: 1: LR4Op3rKP-WX3vMZYh70DRLUwdw.crl (hash: 7FLmwuL6M0csNuG/1e9124DVMPoQYZc9egVky8o5I6k=) 2: 056F0FFA2FAC11EFA4D45C6BC4F9AE02.roa (hash: tqUNG1S/rsB6bW3LBm3IsjWdqGyc7l/8ScuxBxWoVEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91939DA, serialNumber=2D1E0EA77ACA3FE597DEF319621EF40D12D4C1DC Validity Not Before: Aug 9 05:59:20 2025 GMT Not After : Aug 16 05:59:20 2025 GMT Subject: CN=6896e3b8-6ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:d9:06:bb:77:83:86:66:d4:2b:d3:b9:34: a7:59:03:b2:b9:f3:d2:fe:47:12:c0:b5:6f:c5:eb: f3:b6:fd:26:b4:91:e6:70:34:cb:31:69:40:6f:9f: ec:d4:80:4b:63:55:08:89:40:7c:ee:9b:f9:7e:a6: 17:56:ea:42:9f:a8:2e:5a:7d:41:6d:9c:b7:3f:4b: e2:0f:98:e0:d9:45:0a:19:25:41:b9:6f:b9:31:7a: cd:3f:1a:46:2e:0f:c5:15:32:5b:d5:d2:5e:13:43: a5:e7:7d:5f:34:fb:1e:6f:77:22:6b:5c:ae:03:0a: 72:cb:30:f2:e7:fa:1c:6b:de:41:9e:e1:80:4d:e5: ea:b1:22:6b:a8:24:a3:81:0c:b0:82:98:c1:9c:a2: 2b:c5:58:03:8e:8c:79:0d:72:bd:6c:1f:07:d9:a3: 4e:43:2f:e2:da:9b:4b:bc:95:4a:59:d3:f1:4c:b4: dd:ee:7b:46:12:39:84:57:1b:61:89:02:f8:9c:92: aa:64:de:6c:e4:e3:ce:f2:cf:f4:b0:7d:2e:00:25: 6d:48:cd:db:84:fd:d8:45:3e:c8:31:97:93:23:d8: 8a:34:ce:d2:68:ad:58:b8:b1:16:d0:00:a6:d7:b8: 54:2d:5a:76:f8:4b:04:db:25:bc:81:cc:dc:79:c0: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:4D:51:56:44:E7:9C:97:C9:17:07:89:53:A6:1F:69:DD:93:9D:23 X509v3 Authority Key Identifier: keyid:2D:1E:0E:A7:7A:CA:3F:E5:97:DE:F3:19:62:1E:F4:0D:12:D4:C1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LR4Op3rKP-WX3vMZYh70DRLUwdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939DA/6CB9D0A62FAB11EFBED9676AC4F9AE02/LR4Op3rKP-WX3vMZYh70DRLUwdw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:16:6b:31:60:1a:d5:3c:d2:5c:0e:cc:c8:ec:9f:17:29:6b: 34:3d:88:7a:8f:9b:fc:0b:56:32:56:6b:bf:aa:45:2c:71:37: 88:8c:27:ca:05:c8:2f:4d:6a:ee:2e:13:58:09:1d:64:bb:a5: 5b:06:8d:1a:5f:05:65:11:5b:21:59:c4:77:7a:b9:50:aa:b6: 84:60:23:b4:74:22:86:56:78:e5:34:9f:4a:2c:4a:22:bd:41: e2:00:de:5d:6e:a2:0b:9c:4f:dd:2e:7f:e0:3b:35:6f:ea:cf: 99:13:ea:58:d1:f6:91:b4:c8:52:db:69:91:7a:c6:6d:c8:dd: e0:6c:b1:d1:04:58:62:57:0f:88:c2:d2:f8:f2:2a:56:6d:42: 79:95:57:3e:48:22:70:e5:00:94:f6:21:9b:6f:a8:e5:3c:09: c8:de:d0:16:14:4b:f7:49:b0:ca:2e:0f:18:0a:10:8d:5f:3b: 89:8c:77:21:d6:1f:cf:5a:57:32:74:92:15:dd:db:be:12:4e: 54:76:a8:ac:cb:a0:b0:43:50:cf:df:73:56:35:fe:41:ec:da: 52:2d:db:42:f4:30:8a:c3:69:1f:0d:7e:d5:7e:eb:87:aa:92: a9:5d:e2:10:9d:69:ae:a2:be:84:cb:db:6d:d7:67:e5:37:e6: 67:1e:cb:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM5REExMTAvBgNVBAUTKDJEMUUwRUE3N0FDQTNGRTU5N0RFRjMxOTYyMUVGNDBE MTJENEMxREMwHhcNMjUwODA5MDU1OTIwWhcNMjUwODE2MDU1OTIwWjAYMRYwFAYD VQQDEw02ODk2ZTNiOC02ZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj/ZBrt3g4Zm1CvTuTSnWQOyufPS/kcSwLVvxevztv0mtJHmcDTLMWlAb5/s 1IBLY1UIiUB87pv5fqYXVupCn6guWn1BbZy3P0viD5jg2UUKGSVBuW+5MXrNPxpG Lg/FFTJb1dJeE0Ol531fNPseb3cia1yuAwpyyzDy5/oca95BnuGATeXqsSJrqCSj gQywgpjBnKIrxVgDjox5DXK9bB8H2aNOQy/i2ptLvJVKWdPxTLTd7ntGEjmEVxth iQL4nJKqZN5s5OPO8s/0sH0uACVtSM3bhP3YRT7IMZeTI9iKNM7SaK1YuLEW0ACm 17hULVp2+EsE2yW8gczcecAdxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJNUVZE 55yXyRcHiVOmH2ndk50jMB8GA1UdIwQYMBaAFC0eDqd6yj/ll97zGWIe9A0S1MHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzlEQS82Q0I5RDBBNjJG QUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1AtV1gzdk1aWWg3MERSTFV3 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xSNE9wM3JLUC1XWDN2TVpZaDcwRFJMVXdkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzlEQS82Q0I5RDBBNjJGQUIxMUVGQkVEOTY3NkFDNEY5QUUwMi9MUjRPcDNyS1At V1gzdk1aWWg3MERSTFV3ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsFmsxYBrVPNJcDszI7J8XKWs0PYh6j5v8C1YyVmu/qkUscTeIjCfK BcgvTWruLhNYCR1ku6VbBo0aXwVlEVshWcR3erlQqraEYCO0dCKGVnjlNJ9KLEoi vUHiAN5dbqILnE/dLn/gOzVv6s+ZE+pY0faRtMhS22mResZtyN3gbLHRBFhiVw+I wtL48ipWbUJ5lVc+SCJw5QCU9iGbb6jlPAnI3tAWFEv3SbDKLg8YChCNXzuJjHch 1h/PWlcydJIV3du+Ek5Udqisy6CwQ1DP33NWNf5B7NpSLdtC9DCKw2kfDX7VfuuH qpKpXeIQnWmuor6Ey9tt12flN+ZnHsvb -----END CERTIFICATE-----Generated at Sat Aug 9 15:16:14 2025 by rpki-client