$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft File: lAiiAfAOWP6SWY7gOTkHi673d5U.mft (raw, json) Hash identifier: HNVlm7gLW41aisBwrd3wTfR8DKusETFKE9njY3V9/o0= Subject key identifier: C7:13:B9:BD:24:A3:1C:E4:5E:53:89:06:A4:E5:F9:7D:EA:5F:69:5B Authority key identifier: 94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 Certificate issuer: /CN=A91A6F68/serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft Manifest number: 65 Signing time: Wed 13 Aug 2025 07:42:32 +0000 Manifest this update: Wed 13 Aug 2025 07:42:32 +0000 Manifest next update: Wed 20 Aug 2025 07:42:32 +0000 Files and hashes: 1: lAiiAfAOWP6SWY7gOTkHi673d5U.crl (hash: mpdp+K1vgWLt+irevVT7nooHfJaeAL2lcThQdl5gCC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 02:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68, serialNumber=9408A201F00E58FE92598EE03939078BAEF77795 Validity Not Before: Aug 13 07:42:32 2025 GMT Not After : Aug 20 07:42:32 2025 GMT Subject: CN=689c41e8-a079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:70:da:65:7a:85:de:62:7e:3f:02:0b:7d: a8:6d:1f:db:f8:42:c4:e5:5e:a0:19:62:27:53:61: dc:5f:2c:2d:1c:64:34:0e:fd:ac:09:0e:46:2e:7e: 9e:64:81:75:8c:e1:cc:1b:b4:77:ae:97:87:0c:9f: c0:bc:d1:d4:5b:0f:bb:de:63:cf:74:6c:74:21:91: ed:94:d9:1d:8f:0b:2f:58:90:4f:aa:1a:ed:bb:57: de:fa:21:be:84:93:71:d2:ed:82:ec:19:00:6b:df: 3a:67:3f:c5:56:4f:5a:bd:dc:ca:f3:9a:c2:33:04: 9d:0b:a0:33:0e:b9:e4:f2:61:6c:98:ba:3a:17:30: fd:6e:3e:a6:19:c9:97:88:9e:d9:fd:5c:60:aa:4b: d7:39:4d:27:13:94:00:2e:22:52:e9:e0:91:87:7d: e1:19:4c:83:5c:f0:0c:d8:a1:d3:6e:18:b3:0c:57: fd:cf:1d:b5:f1:45:9f:ba:d0:20:a0:c3:0c:36:a2: 7b:e0:36:68:27:07:84:e1:b4:19:06:6b:93:ca:9e: 1c:11:ed:67:a6:f2:00:31:b8:b6:86:2d:ba:21:0e: 58:d6:f8:f3:13:0c:bc:63:32:c4:c1:07:a3:81:69: 00:96:cb:c1:9b:b2:9c:f1:0d:fa:fa:45:3e:6c:3f: 28:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:13:B9:BD:24:A3:1C:E4:5E:53:89:06:A4:E5:F9:7D:EA:5F:69:5B X509v3 Authority Key Identifier: keyid:94:08:A2:01:F0:0E:58:FE:92:59:8E:E0:39:39:07:8B:AE:F7:77:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lAiiAfAOWP6SWY7gOTkHi673d5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/BA565F5CDF2111EF833F4F2CC4F9AE02/lAiiAfAOWP6SWY7gOTkHi673d5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1e:45:7d:3a:48:06:bb:92:9f:f8:d9:05:4a:5b:88:7c:56: 20:1c:66:09:00:58:4c:c8:37:9d:f5:38:32:86:d7:dd:4f:65: 1d:94:70:52:69:10:f8:ff:0c:ac:d9:e0:0f:47:f4:ba:25:a0: bc:8d:07:72:39:25:f4:e7:9e:6c:b7:a1:bf:0f:c3:3a:8b:3d: 86:c2:0f:37:86:f7:70:08:6a:a9:7e:61:53:73:13:b5:84:26: ad:88:bb:25:88:14:1d:c4:2a:d2:bd:80:f9:2b:18:6b:88:60: 60:4d:cd:f7:08:91:a3:21:6f:f9:a5:9b:67:68:dd:d7:8c:0f: 38:51:4a:35:99:47:fb:90:89:64:ce:cc:13:cd:9e:4f:ca:30: b3:9e:e1:d6:8b:40:40:2b:d9:26:5b:16:7f:6d:63:38:82:3e: a8:83:34:81:a9:52:a2:26:b4:4c:2b:2f:1e:7a:2b:7e:fa:f8: ad:e6:53:22:ac:24:52:16:82:6f:92:00:29:0f:8e:51:9b:ed: 9e:2b:0c:18:7c:2e:3d:84:19:53:f7:80:ea:1e:9d:08:24:24: fc:84:03:ab:cc:22:b8:65:60:66:bb:97:c7:57:ed:7e:da:9a: 5e:84:49:aa:dd:38:4e:d2:09:a3:0f:8f:33:1b:dc:89:3a:c5: 4a:a2:8c:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY2ODExMC8GA1UEBRMoOTQwOEEyMDFGMDBFNThGRTkyNTk4RUUwMzkzOTA3OEJB RUY3Nzc5NTAeFw0yNTA4MTMwNzQyMzJaFw0yNTA4MjAwNzQyMzJaMBgxFjAUBgNV BAMTDTY4OWM0MWU4LWEwNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvHXDaZXqF3mJ+PwILfahtH9v4QsTlXqAZYidTYdxfLC0cZDQO/awJDkYufp5k gXWM4cwbtHeul4cMn8C80dRbD7veY890bHQhke2U2R2PCy9YkE+qGu27V976Ib6E k3HS7YLsGQBr3zpnP8VWT1q93MrzmsIzBJ0LoDMOueTyYWyYujoXMP1uPqYZyZeI ntn9XGCqS9c5TScTlAAuIlLp4JGHfeEZTINc8AzYodNuGLMMV/3PHbXxRZ+60CCg www2onvgNmgnB4ThtBkGa5PKnhwR7Wem8gAxuLaGLbohDljW+PMTDLxjMsTBB6OB aQCWy8GbspzxDfr6RT5sPyhzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxxO5vSSj HOReU4kGpOX5fepfaVswHwYDVR0jBBgwFoAUlAiiAfAOWP6SWY7gOTkHi673d5Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjY4L0JBNTY1RjVDREYy MTExRUY4MzNGNEYyQ0M0RjlBRTAyL2xBaWlBZkFPV1A2U1dZN2dPVGtIaTY3M2Q1 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbEFpaUFmQU9XUDZTV1k3Z09Ua0hpNjczZDVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjY4L0JBNTY1RjVDREYyMTExRUY4MzNGNEYyQ0M0RjlBRTAyL2xBaWlBZkFPV1A2 U1dZN2dPVGtIaTY3M2Q1VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE0eRX06SAa7kp/42QVKW4h8ViAcZgkAWEzIN531ODKG191PZR2UcFJp EPj/DKzZ4A9H9LoloLyNB3I5JfTnnmy3ob8PwzqLPYbCDzeG93AIaql+YVNzE7WE Jq2IuyWIFB3EKtK9gPkrGGuIYGBNzfcIkaMhb/mlm2do3deMDzhRSjWZR/uQiWTO zBPNnk/KMLOe4daLQEAr2SZbFn9tYziCPqiDNIGpUqImtEwrLx56K376+K3mUyKs JFIWgm+SACkPjlGb7Z4rDBh8Lj2EGVP3gOoenQgkJPyEA6vMIrhlYGa7l8dX7X7a ml6ESardOE7SCaMPjzMb3Ik6xUqijEo= -----END CERTIFICATE-----Generated at Wed Aug 13 09:45:04 2025 by rpki-client