$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft File: LjBKPZJJnZ19M4o-oC98U0hCWxc.mft (raw, json) Hash identifier: Xx/ivYon6KlC41ZCZpbe7ZrXhwyiRvC0xQGs7Wx4xV8= Subject key identifier: 94:F9:F9:25:86:7A:E8:B4:E8:3F:D1:0E:F3:1A:2D:E2:46:55:DA:53 Authority key identifier: 2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 Certificate issuer: /CN=A91B5486/serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Certificate serial: 0981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft Manifest number: 0954 Signing time: Sun 10 Aug 2025 20:16:38 +0000 Manifest this update: Sun 10 Aug 2025 20:16:38 +0000 Manifest next update: Sun 17 Aug 2025 20:16:38 +0000 Files and hashes: 1: LjBKPZJJnZ19M4o-oC98U0hCWxc.crl (hash: vTGlmIl9nrR0mvkZ4az/pSXUoDRB3J2cYUO1Vc2/Qlk=) 2: E206DC460DEA11F0A924CF5CC4F9AE02.roa (hash: VB8lXHaRWCgJbChk21N3X1tByJzueb4oQFsyi3R2FSI=) 3: 570B25FA305111F0BED81784C4F9AE02.roa (hash: HRghPtYyJF7KhObZGzOSLoHVq6GqZy5jEHbcGyo6zuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5486, serialNumber=2E304A3D92499D9D7D338A3EA02F7C5348425B17 Validity Not Before: Aug 10 20:16:38 2025 GMT Not After : Aug 17 20:16:38 2025 GMT Subject: CN=6898fe26-436a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:a6:45:ef:46:a5:1f:de:d7:ca:c2:1e:85: b9:ac:be:c9:9f:87:59:0e:72:4c:86:3f:db:47:5c: 77:ac:dc:d7:aa:a2:35:1c:23:9e:5a:18:4f:df:bc: 31:8c:55:6f:a0:7d:b1:d5:a9:1c:49:ed:3c:eb:12: bf:23:1b:9b:e5:4a:2c:f5:be:69:fd:c7:b2:07:9f: b1:8c:6b:4c:3e:1f:cc:dc:13:29:5a:d5:fd:61:c5: 29:1b:d5:eb:a6:57:21:ce:b8:4b:b2:7e:a1:65:67: 96:eb:a5:d8:e8:d8:2d:c3:30:a0:62:33:95:93:05: 1a:c4:2f:b1:16:95:57:66:8c:50:7c:95:04:16:9b: 45:60:e7:5e:d3:4c:ca:59:bc:a2:3f:97:be:d8:45: 15:d5:6b:4a:ec:a5:ce:9f:46:15:10:48:2d:09:ee: 2e:b8:33:ae:9c:5a:a9:3d:2a:0f:9b:02:f0:f7:df: ae:49:dd:d9:5a:10:5e:8a:3f:42:e6:ed:7b:77:c1: ab:60:42:19:72:3e:42:76:76:ce:45:0f:62:92:67: 13:8e:26:d6:77:c4:2a:11:45:72:6e:66:65:22:e5: 0a:f9:1d:19:6f:5c:1f:e8:66:fa:95:e1:09:a1:d5: 46:d7:01:8f:3c:f5:2b:75:80:1d:70:db:82:63:ef: ec:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F9:F9:25:86:7A:E8:B4:E8:3F:D1:0E:F3:1A:2D:E2:46:55:DA:53 X509v3 Authority Key Identifier: keyid:2E:30:4A:3D:92:49:9D:9D:7D:33:8A:3E:A0:2F:7C:53:48:42:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LjBKPZJJnZ19M4o-oC98U0hCWxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5486/856A249CA98211EA932DEC54C4F9AE02/LjBKPZJJnZ19M4o-oC98U0hCWxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:12:c6:f4:17:d9:6f:d9:c3:9b:0b:c3:5f:71:d3:07:ae:4e: 4d:b2:5b:6e:60:79:82:9f:c8:c3:cd:ee:14:58:3a:5c:e9:ed: 2d:2a:41:9e:dc:48:9f:3f:87:90:3a:fb:af:40:78:d4:eb:ee: 5a:fd:17:e8:26:d4:f1:50:b7:60:25:47:9e:30:28:85:d2:d4: 52:b3:ef:e5:71:71:47:79:17:35:80:1c:bb:49:30:68:e2:73: 20:fc:ce:19:af:6c:cb:61:33:99:a0:d9:d9:e6:7f:e0:b3:1a: 40:57:2d:29:26:a1:cb:a4:5a:ec:26:0b:19:fb:3b:06:c2:71: 44:5c:ee:2d:b2:19:ab:f4:bd:be:c8:93:4c:24:9e:20:a0:e1: cc:a4:3b:1f:83:3c:6c:34:c8:9a:7b:b0:f2:64:6a:2f:a8:c2: 9d:25:97:72:b3:08:64:48:0f:38:4b:0d:d6:99:51:8b:75:10: 7d:9d:36:1a:4a:7c:86:78:1e:3f:69:20:16:2b:75:52:40:95: 13:61:94:9f:d6:27:bd:55:63:af:bb:0c:b5:ee:af:43:50:3f: 38:c3:1b:83:c6:d7:85:7f:e7:7a:0f:86:dc:ec:6a:56:c1:1e: 53:74:f6:18:6e:a5:9e:d3:2e:3d:46:1a:43:07:e5:e3:34:17: 72:bc:f5:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0ODYxMTAvBgNVBAUTKDJFMzA0QTNEOTI0OTlEOUQ3RDMzOEEzRUEwMkY3QzUz NDg0MjVCMTcwHhcNMjUwODEwMjAxNjM4WhcNMjUwODE3MjAxNjM4WjAYMRYwFAYD VQQDEw02ODk4ZmUyNi00MzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMemRe9GpR/e18rCHoW5rL7Jn4dZDnJMhj/bR1x3rNzXqqI1HCOeWhhP37wx jFVvoH2x1akcSe086xK/Ixub5Uos9b5p/ceyB5+xjGtMPh/M3BMpWtX9YcUpG9Xr plchzrhLsn6hZWeW66XY6NgtwzCgYjOVkwUaxC+xFpVXZoxQfJUEFptFYOde00zK WbyiP5e+2EUV1WtK7KXOn0YVEEgtCe4uuDOunFqpPSoPmwLw99+uSd3ZWhBeij9C 5u17d8GrYEIZcj5CdnbORQ9ikmcTjibWd8QqEUVybmZlIuUK+R0Zb1wf6Gb6leEJ odVG1wGPPPUrdYAdcNuCY+/sMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJT5+SWG eui06D/RDvMaLeJGVdpTMB8GA1UdIwQYMBaAFC4wSj2SSZ2dfTOKPqAvfFNIQlsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQ4Ni84NTZBMjQ5Q0E5 ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5aMTlNNG8tb0M5OFUwaENX eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xqQktQWkpKbloxOU00by1vQzk4VTBoQ1d4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQ4Ni84NTZBMjQ5Q0E5ODIxMUVBOTMyREVDNTRDNEY5QUUwMi9MakJLUFpKSm5a MTlNNG8tb0M5OFUwaENXeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3Esb0F9lv2cObC8NfcdMHrk5NsltuYHmCn8jDze4UWDpc6e0tKkGe 3EifP4eQOvuvQHjU6+5a/RfoJtTxULdgJUeeMCiF0tRSs+/lcXFHeRc1gBy7STBo 4nMg/M4Zr2zLYTOZoNnZ5n/gsxpAVy0pJqHLpFrsJgsZ+zsGwnFEXO4tshmr9L2+ yJNMJJ4goOHMpDsfgzxsNMiae7DyZGovqMKdJZdyswhkSA84Sw3WmVGLdRB9nTYa SnyGeB4/aSAWK3VSQJUTYZSf1ie9VWOvuwy17q9DUD84wxuDxteFf+d6D4bc7GpW wR5TdPYYbqWe0y49RhpDB+XjNBdyvPWm -----END CERTIFICATE-----Generated at Mon Aug 11 01:48:43 2025 by rpki-client