$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft File: LsRLn8Flw7yChYEsMTzHgBmI_zE.mft (raw, json) Hash identifier: tTYrhnsxscbN/Hrzp0b7KLXMnXnrjaMn7/G8Rm715Jc= Subject key identifier: E8:81:7F:C7:01:E1:D6:2F:15:78:A1:BF:25:AB:5D:56:5D:6D:FF:A2 Authority key identifier: 2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 Certificate issuer: /CN=A91BA164/serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Certificate serial: 1215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft Manifest number: 11F5 Signing time: Sun 10 Aug 2025 17:10:24 +0000 Manifest this update: Sun 10 Aug 2025 17:10:24 +0000 Manifest next update: Sun 17 Aug 2025 17:10:24 +0000 Files and hashes: 1: LsRLn8Flw7yChYEsMTzHgBmI_zE.crl (hash: 5XNaa5txsVOp2lBOwBjeGP7znwCD3i1YbJ7XOV1jmsw=) 2: 96D571D41FEB11F0A2AEE444C4F9AE02.roa (hash: AHDoKb/llb+LLqKjO48bsoYIkNNC05Md7hDccepwp54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4629 (0x1215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA164, serialNumber=2EC44B9FC165C3BC8285812C313CC7801988FF31 Validity Not Before: Aug 10 17:10:24 2025 GMT Not After : Aug 17 17:10:24 2025 GMT Subject: CN=6898d280-de00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:ca:b6:77:3a:31:30:b1:c1:49:eb:25:6c: 04:39:ba:7f:b1:8d:71:7b:0c:04:20:fc:a9:26:b2: 1f:02:e0:7c:66:ac:0e:15:ed:4d:62:05:86:01:92: b1:52:74:e5:b8:57:6a:b7:f2:11:c3:73:64:73:b2: 56:0a:48:0a:31:f5:8f:29:f6:f4:e2:de:03:38:0b: ea:df:55:0f:a8:81:11:bd:b3:70:0d:cc:c1:c9:ab: 34:09:6c:10:1a:1b:b9:30:4a:f1:0d:ec:6a:0b:31: b3:30:c9:a5:a0:b3:35:4d:52:0f:9b:f8:b4:79:0d: 56:42:42:8c:c8:5b:1b:12:07:64:42:eb:69:c6:2c: ad:9d:60:9c:24:95:72:2d:14:39:20:bd:c9:e1:e4: c8:9f:8d:80:97:47:2b:7e:5a:47:5e:65:3a:ef:2c: bb:f9:86:a8:35:8d:05:13:d9:13:d9:28:a2:1d:d3: 06:6d:63:42:9f:28:fb:b7:01:f2:4e:b4:8b:cc:17: 27:c7:b9:fc:b0:80:89:12:1c:a4:5f:cb:a9:80:a9: 6b:3e:cb:e4:e2:80:2f:9a:83:92:ef:f4:45:dd:50: 7e:ef:9b:12:f7:f3:03:5e:cd:c0:a7:e9:26:31:3b: 21:bc:f5:1c:53:11:b9:25:14:29:9e:1d:49:78:55: 0e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:81:7F:C7:01:E1:D6:2F:15:78:A1:BF:25:AB:5D:56:5D:6D:FF:A2 X509v3 Authority Key Identifier: keyid:2E:C4:4B:9F:C1:65:C3:BC:82:85:81:2C:31:3C:C7:80:19:88:FF:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsRLn8Flw7yChYEsMTzHgBmI_zE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA164/AFC592ECF31E11E883EB7B79C4F9AE02/LsRLn8Flw7yChYEsMTzHgBmI_zE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:40:19:f1:39:f8:ef:89:0f:c9:da:63:13:a3:1d:4c:61:83: e5:21:dd:d0:eb:2f:71:71:26:4f:86:57:b6:0f:ef:13:64:74: 1a:38:cd:a8:82:35:c5:eb:66:a9:41:b6:92:a7:c8:d5:be:c4: 83:45:35:c7:9a:2a:a1:c5:66:fb:44:b3:32:06:37:cb:e8:0b: 8b:48:9b:07:f5:01:15:19:73:8c:2b:f8:0d:53:c4:7c:6f:54: 8a:89:d7:7a:22:b5:0e:fb:cb:ee:2c:28:93:9e:21:4c:f8:09: 6d:4a:a7:b2:9e:7b:09:40:7d:8d:b9:f4:73:f9:07:66:dd:37: 57:b4:ae:69:d1:2c:5e:74:08:e2:d1:67:b1:b2:aa:86:9b:52: 65:88:6c:4a:74:d9:a6:69:d0:de:71:5e:f1:31:e6:ee:55:3d: ca:e5:63:dd:96:0c:e5:8f:18:af:b2:d0:41:85:cd:a6:d8:0b: b1:0a:08:d0:f8:04:1b:9f:8c:ac:2d:ec:af:00:94:36:18:1f: e9:27:57:1a:b0:24:5d:4e:11:15:d8:f5:76:10:7b:92:f2:81: bc:28:1c:2e:5f:7d:f0:10:a5:46:12:43:b3:a0:9c:7f:bc:ae: 38:50:63:25:79:bc:e8:1e:37:1f:92:b9:98:3c:30:55:b7:89: 5c:82:9e:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkExNjQxMTAvBgNVBAUTKDJFQzQ0QjlGQzE2NUMzQkM4Mjg1ODEyQzMxM0NDNzgw MTk4OEZGMzEwHhcNMjUwODEwMTcxMDI0WhcNMjUwODE3MTcxMDI0WjAYMRYwFAYD VQQDEw02ODk4ZDI4MC1kZTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunbKtnc6MTCxwUnrJWwEObp/sY1xewwEIPypJrIfAuB8ZqwOFe1NYgWGAZKx UnTluFdqt/IRw3Nkc7JWCkgKMfWPKfb04t4DOAvq31UPqIERvbNwDczByas0CWwQ Ghu5MErxDexqCzGzMMmloLM1TVIPm/i0eQ1WQkKMyFsbEgdkQutpxiytnWCcJJVy LRQ5IL3J4eTIn42Al0crflpHXmU67yy7+YaoNY0FE9kT2SiiHdMGbWNCnyj7twHy TrSLzBcnx7n8sICJEhykX8upgKlrPsvk4oAvmoOS7/RF3VB+75sS9/MDXs3Ap+km MTshvPUcUxG5JRQpnh1JeFUOsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiBf8cB 4dYvFXihvyWrXVZdbf+iMB8GA1UdIwQYMBaAFC7ES5/BZcO8goWBLDE8x4AZiP8x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTE2NC9BRkM1OTJFQ0Yz MUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3eUNoWUVzTVR6SGdCbUlf ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzUkxuOEZsdzd5Q2hZRXNNVHpIZ0JtSV96RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTE2NC9BRkM1OTJFQ0YzMUUxMUU4ODNFQjdCNzlDNEY5QUUwMi9Mc1JMbjhGbHc3 eUNoWUVzTVR6SGdCbUlfekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/QBnxOfjviQ/J2mMTox1MYYPlId3Q6y9xcSZPhle2D+8TZHQaOM2o gjXF62apQbaSp8jVvsSDRTXHmiqhxWb7RLMyBjfL6AuLSJsH9QEVGXOMK/gNU8R8 b1SKidd6IrUO+8vuLCiTniFM+AltSqeynnsJQH2NufRz+Qdm3TdXtK5p0SxedAji 0WexsqqGm1JliGxKdNmmadDecV7xMebuVT3K5WPdlgzljxivstBBhc2m2AuxCgjQ +AQbn4ysLeyvAJQ2GB/pJ1casCRdThEV2PV2EHuS8oG8KBwuX33wEKVGEkOzoJx/ vK44UGMlebzoHjcfkrmYPDBVt4lcgp7y -----END CERTIFICATE-----Generated at Mon Aug 11 07:26:15 2025 by rpki-client