$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft File: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft (raw, json) Hash identifier: bpzUA17LEb91I6lpRameLO6BzscB+rTpqoIPd6MFnOA= Subject key identifier: CA:4F:F1:20:A4:D8:75:33:4D:36:41:47:CA:C6:A6:86:C3:4F:77:C7 Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Certificate serial: 353B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft Manifest number: 34DB Signing time: Sun 10 Aug 2025 14:24:22 +0000 Manifest this update: Sun 10 Aug 2025 14:24:22 +0000 Manifest next update: Sun 17 Aug 2025 14:24:22 +0000 Files and hashes: 1: lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl (hash: sIUsMlqYdYjGTKSw271l/rdzzanJM0gusByNS1TrQOU=) 2: A9D92784B0CA11E59BE6876FC4F9AE02.roa (hash: AfCIFlmq8DuQBiRlDgGTHO+ifcfq/EWKe3MQ5sPJrSg=) 3: 5113BF7CFE6011EA9D63505CC4F9AE02.roa (hash: JniQZfUYA1R0heYuAv/OBIAjLQkkLelRqYJ3s0r+AnI=) 4: 1A7891D4FA3011E9BF5A291EC4F9AE02.roa (hash: YQYm5l+2t2Nmgpk7xKTDog8BjmEeY7pPx/VepC3HU8k=) 5: 1B513B10FA3011E9BF5A291EC4F9AE02.roa (hash: MZwzt1KtC8nUCCf9jDFpHhF1FQYrec+FieTfJgBkwqU=) 6: A769D0DEB0CA11E59BE6876FC4F9AE02.roa (hash: 7rICild2zUXD1qHa3D416FQuR+VFPGMzGrMC0CKPt7o=) 7: F6D63E40054A11EAA00FB024C4F9AE02.roa (hash: O5annF3q7eF0Em+q1cCkApIbKkUSjCoh1Enl1W8K8qE=) 8: 19DE7DB0FA3011E9BF5A291EC4F9AE02.roa (hash: fNjSL8CG5TWS/PviRMUud5QxtmkoOiCNSoqXXgesJHA=) 9: B2690D6CCA5511EE9683413FC4F9AE02.roa (hash: wgn3I9VAEqSPOBoXO+Nw/n2dWXsh0I7dIpPDoFXfS9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13627 (0x353b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2 Validity Not Before: Aug 10 14:24:22 2025 GMT Not After : Aug 17 14:24:22 2025 GMT Subject: CN=6898ab96-e5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e1:cf:56:7e:17:68:e4:71:e9:ae:7e:08:af: c9:52:f2:08:5a:dd:b3:68:93:dc:50:e1:2e:95:fd: 6c:53:d9:7d:a3:65:01:89:64:03:48:1d:0f:89:f2: df:f7:82:4c:2d:54:9b:9a:9a:44:36:b0:af:7f:37: aa:76:4f:37:24:86:1d:b0:74:ff:f4:2f:9d:e5:43: f1:ec:bd:08:a7:33:89:f3:03:27:3f:77:12:a3:a4: 8b:2c:c8:60:41:a1:fb:ed:30:a2:0c:69:1d:17:9b: bd:3a:14:de:0f:35:ad:85:65:ca:e1:5c:9a:ec:f4: db:32:56:5a:86:a3:52:7a:87:e0:31:5f:fa:3b:e8: 1a:a5:d4:16:61:c2:af:40:5c:b1:b2:36:1d:88:b2: dd:4b:64:66:ef:e2:eb:bd:7f:8a:aa:30:24:4f:c1: fe:88:aa:cd:1e:4e:f4:41:80:5a:8f:59:a3:fa:8a: 45:0c:af:a4:13:60:a8:c0:bc:11:05:73:07:bc:4b: ce:d5:95:22:3b:0f:c7:dd:6c:ee:d3:17:da:0a:a4: 1a:45:b0:4c:d0:a3:59:b4:d7:0b:41:22:ad:73:97: f7:db:de:9e:58:d8:6f:13:37:a4:eb:da:82:d0:06: 48:64:a9:95:1a:e6:fc:d0:ed:70:c8:cc:37:8d:aa: 93:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4F:F1:20:A4:D8:75:33:4D:36:41:47:CA:C6:A6:86:C3:4F:77:C7 X509v3 Authority Key Identifier: keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:6d:b5:75:c4:56:57:d7:4a:87:c8:04:01:0b:2f:85:b3:6d: 98:6b:47:b6:35:9a:b3:60:a8:e7:e6:43:c9:86:f2:8f:f6:56: d0:31:07:8d:af:11:84:23:bc:9a:cf:b9:97:4b:3e:0b:2e:fb: d7:94:c9:33:9c:7d:9b:d9:ab:4f:ac:07:13:55:9c:76:b4:56: fd:48:ae:2f:84:1b:40:a7:3a:ad:af:bc:fe:c2:1a:dc:dd:0f: 64:51:35:06:79:e9:2a:7d:f4:4a:13:20:80:b0:91:49:f0:63: 1d:56:c9:87:1e:93:5e:42:1a:e3:1d:4d:ba:f2:a1:db:45:5c: 14:ff:7d:0f:a5:5e:dc:e5:c3:71:38:22:7f:d0:46:c3:27:e5: 6c:ad:ce:42:f6:e5:7f:80:cf:d5:50:73:d3:4f:8e:af:96:1e: f0:2f:3a:4f:cc:70:ce:59:e3:07:7d:4f:4d:30:f9:f9:83:eb: 82:ad:b5:49:b0:66:74:87:70:a8:34:b2:e2:17:d2:ea:f1:b9: 96:7e:a2:73:1f:95:ee:98:8e:c1:eb:78:a9:b1:06:ff:f9:b4: 68:a9:25:c9:0a:a5:83:4a:d5:d7:48:50:e1:12:da:f8:39:4d: 8f:2c:3a:d0:20:ad:aa:eb:6c:12:5a:0f:cf:f6:d8:35:15:e1: a5:5d:47:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGREUxMTAvBgNVBAUTKDk2NjlDRDVCM0Q4NzM1ODE1QTY1RDY1OUYyNzQxQjQz RTY0NzMyQjIwHhcNMjUwODEwMTQyNDIyWhcNMjUwODE3MTQyNDIyWjAYMRYwFAYD VQQDEw02ODk4YWI5Ni1lNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+HPVn4XaORx6a5+CK/JUvIIWt2zaJPcUOEulf1sU9l9o2UBiWQDSB0PifLf 94JMLVSbmppENrCvfzeqdk83JIYdsHT/9C+d5UPx7L0IpzOJ8wMnP3cSo6SLLMhg QaH77TCiDGkdF5u9OhTeDzWthWXK4Vya7PTbMlZahqNSeofgMV/6O+gapdQWYcKv QFyxsjYdiLLdS2Rm7+LrvX+KqjAkT8H+iKrNHk70QYBaj1mj+opFDK+kE2CowLwR BXMHvEvO1ZUiOw/H3Wzu0xfaCqQaRbBM0KNZtNcLQSKtc5f3296eWNhvEzek69qC 0AZIZKmVGub80O1wyMw3jaqTKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpP8SCk 2HUzTTZBR8rGpobDT3fHMB8GA1UdIwQYMBaAFJZpzVs9hzWBWmXWWfJ0G0PmRzKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUZERS9DQzQ1RUNBODFE ODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5ZRmFaZFpaOG5RYlEtWkhN ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xtbk5XejJITllGYVpkWlo4blFiUS1aSE1ySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZERS9DQzQ1RUNBODFEODQxMUUyOTU2RDAzREIwOEIwMkNEMi9sbW5OV3oySE5Z RmFaZFpaOG5RYlEtWkhNckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4bbV1xFZX10qHyAQBCy+Fs22Ya0e2NZqzYKjn5kPJhvKP9lbQMQeN rxGEI7yaz7mXSz4LLvvXlMkznH2b2atPrAcTVZx2tFb9SK4vhBtApzqtr7z+whrc 3Q9kUTUGeekqffRKEyCAsJFJ8GMdVsmHHpNeQhrjHU268qHbRVwU/30PpV7c5cNx OCJ/0EbDJ+Vsrc5C9uV/gM/VUHPTT46vlh7wLzpPzHDOWeMHfU9NMPn5g+uCrbVJ sGZ0h3CoNLLiF9Lq8bmWfqJzH5XumI7B63ipsQb/+bRoqSXJCqWDStXXSFDhEtr4 OU2PLDrQIK2q62wSWg/P9tg1FeGlXUes -----END CERTIFICATE-----Generated at Mon Aug 11 06:18:32 2025 by rpki-client