$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft File: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft (raw, json) Hash identifier: PEYmv1h8hm6pbq4oPzV+ZWdRj+xTXtMwuIEJW4RPXRI= Subject key identifier: 5A:A5:3E:79:85:F3:66:72:38:9C:44:77:F2:F5:70:9D:6B:29:55:AE Authority key identifier: 96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 Certificate issuer: /CN=A91AEDF7/serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft Manifest number: 07CE Signing time: Fri 08 Aug 2025 21:36:08 +0000 Manifest this update: Fri 08 Aug 2025 21:36:08 +0000 Manifest next update: Fri 15 Aug 2025 21:36:08 +0000 Files and hashes: 1: lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl (hash: wxriinZXgaGFy6bhMFw+I/PPs3w39oXrPqI7shZoMeE=) 2: 13901018203F11ECBE18630CC4F9AE02.roa (hash: wkWuHS/W7zmGTEYBssypeNIzyloTQsz7o6sC1nnuJqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEDF7, serialNumber=9696C6592C02B503F488D4437CD0AC82C176B376 Validity Not Before: Aug 8 21:36:08 2025 GMT Not After : Aug 15 21:36:08 2025 GMT Subject: CN=68966dc8-c3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:42:ad:f4:0c:2c:04:a3:36:22:37:67:1c: b0:1f:11:7a:fb:9a:a9:b0:8f:4d:82:7b:6f:a6:07: 18:31:42:2a:07:02:26:aa:24:f5:be:4a:b6:75:26: 46:5f:91:ad:dd:bd:a9:99:fd:72:c9:1c:e2:1d:52: 71:37:a0:c5:fe:93:06:7f:7b:bc:b7:a8:cd:5c:5d: 44:42:66:38:91:e3:1d:18:78:dc:4f:57:13:47:ec: d4:e5:4f:3d:dc:85:4f:eb:b9:cf:2e:fb:45:97:e5: c2:ab:37:d1:d8:a4:27:30:20:7a:7a:d6:5f:19:53: bd:9a:83:ad:f0:c9:74:5e:3e:75:35:de:ea:6f:28: 61:84:b8:60:7f:6e:14:22:2e:91:16:97:4c:a0:c4: f7:0c:b5:3f:ee:61:42:09:85:24:a8:d3:ff:18:c0: b7:5b:d3:f4:d2:20:41:9c:d0:de:47:7c:82:e6:85: 90:89:d7:aa:53:1a:7b:4a:66:e5:37:69:2f:e3:c6: d2:1e:2f:63:82:ae:7f:09:16:f7:d5:39:e3:99:cb: 11:a7:89:2a:02:76:bb:e3:1b:81:61:4f:d0:f0:fb: 2f:c8:fd:4c:6d:1f:36:08:a2:69:28:72:39:ff:20: 2a:f4:e8:55:21:0a:5d:91:1e:59:ee:8c:8a:ff:fa: 36:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A5:3E:79:85:F3:66:72:38:9C:44:77:F2:F5:70:9D:6B:29:55:AE X509v3 Authority Key Identifier: keyid:96:96:C6:59:2C:02:B5:03:F4:88:D4:43:7C:D0:AC:82:C1:76:B3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEDF7/DEE2D07C090011EB8523165CC4F9AE02/lpbGWSwCtQP0iNRDfNCsgsF2s3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f2:51:97:cc:6e:98:8f:1b:d3:9a:a8:f8:66:27:41:bd:e1: 89:e8:dd:5e:19:dc:b8:bb:85:6f:75:df:76:50:47:33:09:27: c6:f8:6d:13:2f:a8:0e:f3:a6:a4:d7:43:16:e8:b7:e3:70:13: 68:ee:c1:a7:ab:96:3e:7d:78:cd:78:67:a8:e2:9d:02:e4:b1: 66:0a:a8:57:ab:72:b2:32:e0:bb:2d:f4:51:2d:b4:7a:a5:ba: a7:06:00:12:2a:ba:29:0e:bd:14:c1:65:fd:91:b0:32:e1:e0: 13:14:f6:7d:a5:77:61:57:91:7e:f0:68:ac:8e:00:8f:0c:59: 26:b9:db:3d:d8:be:15:b7:1b:73:5d:ba:5e:ac:3a:08:a2:3b: 3d:cb:9c:62:2a:aa:03:a5:6c:2f:c9:79:6a:56:d7:b9:6e:19: 30:dd:9c:1d:64:73:85:ce:23:62:46:9a:a5:19:9d:a0:2d:ed: 88:da:6a:64:90:5d:dd:2d:57:09:bf:ec:25:b7:f5:93:4e:a7: d0:4f:a1:71:e2:8a:f1:8d:33:10:8e:af:0a:e2:d7:00:d8:34: ba:02:e4:cc:d9:0e:f6:90:30:83:cf:70:3c:7b:3a:3d:d9:39: 02:63:d6:e4:b7:c4:74:8a:aa:3e:8f:56:ab:95:f0:7c:12:76: 69:80:a7:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVERjcxMTAvBgNVBAUTKDk2OTZDNjU5MkMwMkI1MDNGNDg4RDQ0MzdDRDBBQzgy QzE3NkIzNzYwHhcNMjUwODA4MjEzNjA4WhcNMjUwODE1MjEzNjA4WjAYMRYwFAYD VQQDEw02ODk2NmRjOC1jM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwq5CrfQMLASjNiI3ZxywHxF6+5qpsI9NgntvpgcYMUIqBwImqiT1vkq2dSZG X5Gt3b2pmf1yyRziHVJxN6DF/pMGf3u8t6jNXF1EQmY4keMdGHjcT1cTR+zU5U89 3IVP67nPLvtFl+XCqzfR2KQnMCB6etZfGVO9moOt8Ml0Xj51Nd7qbyhhhLhgf24U Ii6RFpdMoMT3DLU/7mFCCYUkqNP/GMC3W9P00iBBnNDeR3yC5oWQideqUxp7Smbl N2kv48bSHi9jgq5/CRb31TnjmcsRp4kqAna74xuBYU/Q8PsvyP1MbR82CKJpKHI5 /yAq9OhVIQpdkR5Z7oyK//o29QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqlPnmF 82ZyOJxEd/L1cJ1rKVWuMB8GA1UdIwQYMBaAFJaWxlksArUD9IjUQ3zQrILBdrN2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRURGNy9ERUUyRDA3QzA5 MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RRUDBpTlJEZk5Dc2dzRjJz M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xwYkdXU3dDdFFQMGlOUkRmTkNzZ3NGMnMzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RURGNy9ERUUyRDA3QzA5MDAxMUVCODUyMzE2NUNDNEY5QUUwMi9scGJHV1N3Q3RR UDBpTlJEZk5Dc2dzRjJzM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM8lGXzG6YjxvTmqj4ZidBveGJ6N1eGdy4u4Vvdd92UEczCSfG+G0T L6gO86ak10MW6LfjcBNo7sGnq5Y+fXjNeGeo4p0C5LFmCqhXq3KyMuC7LfRRLbR6 pbqnBgASKropDr0UwWX9kbAy4eATFPZ9pXdhV5F+8GisjgCPDFkmuds92L4Vtxtz XbperDoIojs9y5xiKqoDpWwvyXlqVte5bhkw3ZwdZHOFziNiRpqlGZ2gLe2I2mpk kF3dLVcJv+wlt/WTTqfQT6Fx4orxjTMQjq8K4tcA2DS6AuTM2Q72kDCDz3A8ezo9 2TkCY9bkt8R0iqo+j1arlfB8EnZpgKcN -----END CERTIFICATE-----Generated at Sun Aug 10 05:35:00 2025 by rpki-client