$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft File: LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft (raw, json) Hash identifier: xf5ypulJVbKi4z9s2hxwJeMaggbJa2EcrhUOwG4DVvw= Subject key identifier: 9C:DD:D6:D1:8B:C8:64:F5:DD:B3:D2:ED:5F:4C:C5:BD:60:F0:67:4E Authority key identifier: 2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 Certificate issuer: /CN=A91B9EBB/serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Certificate serial: 0BB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft Manifest number: 0BAB Signing time: Fri 08 Aug 2025 19:13:53 +0000 Manifest this update: Fri 08 Aug 2025 19:13:53 +0000 Manifest next update: Fri 15 Aug 2025 19:13:53 +0000 Files and hashes: 1: LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl (hash: Heb1YxfxabwMfChjxlJXYSk5LcrHafYCnSjJxb6XGkg=) 2: E40A00021F9311ECAF64925DC4F9AE02.roa (hash: Rji9v2vl0PMJCU+S/aNCxihdmwOiSNCJIoglgTlCMfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2996 (0xbb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9EBB, serialNumber=2D64FA3478C99491768E66E6E997E9FAA95CA2D3 Validity Not Before: Aug 8 19:13:53 2025 GMT Not After : Aug 15 19:13:53 2025 GMT Subject: CN=68964c71-8418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:89:9a:ac:29:ce:10:c5:a5:b6:4d:f1:60: c0:9c:ea:61:38:cc:85:6a:28:96:43:4f:b9:d2:e6: 4f:80:3d:6d:5e:a5:7d:0b:e8:2c:ed:99:d9:13:b8: f5:b8:0c:27:cc:6d:7d:06:a5:9d:a9:9c:73:ae:ed: 45:89:e9:82:2c:19:d2:b7:10:44:a7:17:5c:15:9a: a2:f5:46:1f:ad:fc:97:07:2f:a4:d8:d1:36:4b:a6: 88:16:8d:3d:c7:9b:bc:ab:1e:2a:fd:16:a4:2c:e9: 6b:01:26:17:a3:ce:08:1a:48:87:9b:01:60:02:c8: b9:1a:f8:d8:a4:56:53:44:fc:f7:d9:78:e7:cc:85: ab:2b:ac:04:c2:23:f9:27:93:ae:16:bc:f0:f2:bd: 4d:e6:01:34:a3:35:62:4c:76:38:56:49:56:2b:ae: a0:e7:d6:c0:5d:3b:53:ca:e3:d7:41:13:7a:0e:21: 3b:fa:7c:4e:0f:2f:0a:e6:ac:95:f4:70:c9:33:b0: a4:ee:b6:a4:b6:8e:27:d9:7f:37:17:a9:d6:3f:2c: 7e:4b:90:e0:e6:24:60:16:d0:79:1f:40:dd:cb:72: 47:f4:b8:82:d3:40:31:c3:47:7a:2a:29:4e:a6:5b: bf:ac:1c:3b:2b:84:4e:35:d1:21:70:a3:dd:e6:4b: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DD:D6:D1:8B:C8:64:F5:DD:B3:D2:ED:5F:4C:C5:BD:60:F0:67:4E X509v3 Authority Key Identifier: keyid:2D:64:FA:34:78:C9:94:91:76:8E:66:E6:E9:97:E9:FA:A9:5C:A2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWT6NHjJlJF2jmbm6Zfp-qlcotM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EBB/F9263D162B0711EAB85BB87CC4F9AE02/LWT6NHjJlJF2jmbm6Zfp-qlcotM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ca:05:f6:1c:bf:e7:4a:21:ef:33:5d:08:4b:7f:ba:a4:d6: d6:5d:78:d3:19:a1:21:d6:1e:81:5e:26:4c:fc:a7:d6:18:cf: 4e:68:6c:e9:0f:f3:33:d1:82:c0:a7:d7:b9:8c:e8:d8:53:d1: 0e:81:74:e9:12:8d:e7:f2:bc:84:ad:ad:43:48:fe:fd:08:83: e7:07:3f:40:6c:36:ae:05:f0:c5:fb:78:27:b4:58:27:11:f9: 81:a1:e2:ed:d7:e6:21:43:4b:97:5b:65:68:89:7f:34:8e:3e: 65:c3:4f:d7:26:d0:9b:e4:26:c3:f9:49:a5:42:b7:6f:91:24: f6:2c:04:1d:93:52:b1:63:62:71:28:3e:25:64:4d:4e:ba:bb: 3a:cc:93:68:b1:f4:24:5b:07:73:c9:c0:97:25:49:de:4b:d0: 70:01:66:65:89:ee:fd:ea:2b:cd:4c:dc:cc:01:11:9c:8d:13: 3a:e5:a4:b8:60:c7:9e:e8:00:91:4c:8f:1c:07:25:26:92:d0: 9e:62:fe:24:90:44:f7:f3:ff:f7:f1:d9:39:7e:02:51:70:6d: 81:62:c1:b8:81:4c:a7:a0:0f:ad:8b:05:10:09:e1:29:c0:2c: 03:51:e1:fd:c3:a9:89:a7:03:b1:47:e1:65:02:12:cf:50:b0: 07:02:67:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFQkIxMTAvBgNVBAUTKDJENjRGQTM0NzhDOTk0OTE3NjhFNjZFNkU5OTdFOUZB QTk1Q0EyRDMwHhcNMjUwODA4MTkxMzUzWhcNMjUwODE1MTkxMzUzWjAYMRYwFAYD VQQDEw02ODk2NGM3MS04NDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFSJmqwpzhDFpbZN8WDAnOphOMyFaiiWQ0+50uZPgD1tXqV9C+gs7ZnZE7j1 uAwnzG19BqWdqZxzru1FiemCLBnStxBEpxdcFZqi9UYfrfyXBy+k2NE2S6aIFo09 x5u8qx4q/RakLOlrASYXo84IGkiHmwFgAsi5GvjYpFZTRPz32XjnzIWrK6wEwiP5 J5OuFrzw8r1N5gE0ozViTHY4VklWK66g59bAXTtTyuPXQRN6DiE7+nxODy8K5qyV 9HDJM7Ck7rakto4n2X83F6nWPyx+S5Dg5iRgFtB5H0Ddy3JH9LiC00Axw0d6KilO plu/rBw7K4RONdEhcKPd5kshfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzd1tGL yGT13bPS7V9Mxb1g8GdOMB8GA1UdIwQYMBaAFC1k+jR4yZSRdo5m5umX6fqpXKLT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUVCQi9GOTI2M0QxNjJC MDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxKRjJqbWJtNlpmcC1xbGNv dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXVDZOSGpKbEpGMmptYm02WmZwLXFsY290TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUVCQi9GOTI2M0QxNjJCMDcxMUVBQjg1QkI4N0NDNEY5QUUwMi9MV1Q2TkhqSmxK RjJqbWJtNlpmcC1xbGNvdE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNygX2HL/nSiHvM10IS3+6pNbWXXjTGaEh1h6BXiZM/KfWGM9OaGzp D/Mz0YLAp9e5jOjYU9EOgXTpEo3n8ryEra1DSP79CIPnBz9AbDauBfDF+3gntFgn EfmBoeLt1+YhQ0uXW2VoiX80jj5lw0/XJtCb5CbD+UmlQrdvkST2LAQdk1KxY2Jx KD4lZE1Ours6zJNosfQkWwdzycCXJUneS9BwAWZlie796ivNTNzMARGcjRM65aS4 YMee6ACRTI8cByUmktCeYv4kkET38//38dk5fgJRcG2BYsG4gUynoA+tiwUQCeEp wCwDUeH9w6mJpwOxR+FlAhLPULAHAmfS -----END CERTIFICATE-----Generated at Sat Aug 9 02:45:43 2025 by rpki-client