$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft File: lRaRgJV2AETnT6qlSX0GcwraXzI.mft (raw, json) Hash identifier: 8r5vRp8Z/T0tj3o5MCkAHqiFKB6tJG0U87UvqOjrpio= Subject key identifier: DB:15:89:03:52:11:BD:F8:4D:6F:F2:23:AE:0C:7F:CD:62:6A:DC:7D Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft Manifest number: 067C Signing time: Fri 08 Aug 2025 22:48:07 +0000 Manifest this update: Fri 08 Aug 2025 22:48:07 +0000 Manifest next update: Fri 15 Aug 2025 22:48:07 +0000 Files and hashes: 1: lRaRgJV2AETnT6qlSX0GcwraXzI.crl (hash: ixYqpxCdDjEob90rPugYtPYnRLIPgl/m2kM6Zdd6Ouk=) 2: 589FBEDC860311EBAFE18309C4F9AE02.roa (hash: QPlmMaSOgFDznMyc1xMqSWCG5G0RLk70r7GmVWThnas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Validity Not Before: Aug 8 22:48:07 2025 GMT Not After : Aug 15 22:48:07 2025 GMT Subject: CN=68967ea7-4fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:6d:e2:9a:3b:e5:20:6c:e6:8c:9d:bf:69: 25:4a:9c:be:01:12:6c:7f:26:79:3f:d0:b3:5c:2a: 99:51:8b:77:5e:0b:bb:47:dd:5d:4c:54:65:c8:9e: 33:99:58:59:a6:48:e2:a9:fd:3f:8e:9b:f6:6c:c2: 9c:c3:12:60:53:93:dc:4e:82:b1:dc:80:cc:30:da: e8:a9:51:6b:93:e0:36:a5:82:82:82:85:12:d6:8c: c9:65:f1:48:d3:32:7e:39:47:c0:9d:1c:9f:30:2c: fc:d3:db:20:5d:48:b3:90:36:da:41:27:00:a2:be: a6:0a:dc:ac:bf:3e:a3:97:a8:fe:c7:e3:4b:23:3f: cb:49:e7:a2:51:30:d6:4d:81:f3:72:fc:4a:26:66: 11:39:b2:3e:07:ac:fc:76:6e:a8:ba:61:f7:7b:46: 3c:1f:38:11:8d:49:47:ce:ab:a3:86:bc:00:cd:35: 30:c3:19:ea:7d:7a:4a:b4:e3:d2:f1:eb:87:e6:a6: 37:3a:b3:53:e4:cb:bd:0f:dc:e6:b4:e8:16:59:3a: a1:65:ff:1c:29:c6:19:af:1a:27:32:24:66:ba:04: dc:00:0b:9b:14:82:38:43:61:d0:9c:aa:cc:a8:90: 8f:97:dd:8c:4d:27:e0:03:56:74:03:0f:36:3d:9e: e1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:15:89:03:52:11:BD:F8:4D:6F:F2:23:AE:0C:7F:CD:62:6A:DC:7D X509v3 Authority Key Identifier: keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ce:4c:7e:a8:ac:b5:1f:5f:7b:fa:16:c7:c9:af:65:0d:34: d4:f3:f5:2c:08:38:bc:0a:87:40:63:1a:96:38:8d:e7:ae:9d: fc:84:5c:1c:4c:ea:3a:e5:74:fa:7d:f8:93:9a:2c:e0:53:06: f7:1a:c0:3a:86:1d:f1:58:cb:de:7c:19:69:46:ef:7c:8d:38: c7:b2:4d:59:6f:64:80:b5:72:79:2d:94:db:b2:74:7a:9e:cf: 79:57:88:c6:3c:25:92:4b:4b:7b:47:41:b0:3e:f8:82:6c:fb: 4b:74:f4:ed:b1:2f:b5:8d:40:2e:4b:bb:07:89:23:3c:f2:c2: 69:2b:98:a6:1b:79:83:a0:86:24:66:af:33:df:fd:d7:97:c9: 7f:ee:e6:cc:d0:25:18:88:d3:81:30:36:3c:56:94:97:67:b6: 0d:00:23:2c:2a:66:61:d7:ed:75:c2:fa:13:ac:97:dd:0c:f9: 49:30:5a:fd:ed:f9:34:86:82:c1:a9:5c:10:d1:5c:cf:32:69: d6:34:9e:e7:13:a8:c6:bb:2e:fc:b4:c2:9a:4b:20:44:02:24: bf:e1:11:ef:8e:c4:80:98:10:08:81:90:0b:50:8c:49:6f:40: bd:90:be:13:35:ce:10:61:5b:4b:88:5a:48:b9:b8:3c:86:da: 39:d4:bb:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz MEFEQTVGMzIwHhcNMjUwODA4MjI0ODA3WhcNMjUwODE1MjI0ODA3WjAYMRYwFAYD VQQDEw02ODk2N2VhNy00ZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXBt4po75SBs5oydv2klSpy+ARJsfyZ5P9CzXCqZUYt3Xgu7R91dTFRlyJ4z mVhZpkjiqf0/jpv2bMKcwxJgU5PcToKx3IDMMNroqVFrk+A2pYKCgoUS1ozJZfFI 0zJ+OUfAnRyfMCz809sgXUizkDbaQScAor6mCtysvz6jl6j+x+NLIz/LSeeiUTDW TYHzcvxKJmYRObI+B6z8dm6oumH3e0Y8HzgRjUlHzqujhrwAzTUwwxnqfXpKtOPS 8euH5qY3OrNT5Mu9D9zmtOgWWTqhZf8cKcYZrxonMiRmugTcAAubFII4Q2HQnKrM qJCPl92MTSfgA1Z0Aw82PZ7hrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsViQNS Eb34TW/yI64Mf81iatx9MB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1 RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzM0RC8yN0U4NjFEODg1RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFF VG5UNnFsU1gwR2N3cmFYekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyzkx+qKy1H197+hbHya9lDTTU8/UsCDi8CodAYxqWOI3nrp38hFwc TOo65XT6ffiTmizgUwb3GsA6hh3xWMvefBlpRu98jTjHsk1Zb2SAtXJ5LZTbsnR6 ns95V4jGPCWSS0t7R0GwPviCbPtLdPTtsS+1jUAuS7sHiSM88sJpK5imG3mDoIYk Zq8z3/3Xl8l/7ubM0CUYiNOBMDY8VpSXZ7YNACMsKmZh1+11wvoTrJfdDPlJMFr9 7fk0hoLBqVwQ0VzPMmnWNJ7nE6jGuy78tMKaSyBEAiS/4RHvjsSAmBAIgZALUIxJ b0C9kL4TNc4QYVtLiFpIubg8hto51Luw -----END CERTIFICATE-----Generated at Sun Aug 10 16:02:46 2025 by rpki-client