$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft File: ljwgt9OATbgByuJXTDHXYNU9M0Q.mft (raw, json) Hash identifier: XKXLtY9LjlLA2iYYROxUXGnsTvYhQeNHqxt5oXKb4Dw= Subject key identifier: 71:2A:67:69:90:6A:F2:14:3F:7C:D3:9C:49:8F:09:BA:96:24:ED:16 Authority key identifier: 96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 Certificate issuer: /CN=A91C6744/serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Certificate serial: 0839 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft Manifest number: 0832 Signing time: Tue 12 Aug 2025 21:04:07 +0000 Manifest this update: Tue 12 Aug 2025 21:04:06 +0000 Manifest next update: Tue 19 Aug 2025 21:04:06 +0000 Files and hashes: 1: ljwgt9OATbgByuJXTDHXYNU9M0Q.crl (hash: QxB1/g1p6KzFWTJMENW81yL3Kc19pidewuUVDeVbNzw=) 2: E088B4E8E41B11ED8B0EFC0DC4F9AE02.roa (hash: o6F0EuKwlTrnUOxPf4ItfWLnrfcMDydYUClJAnjBios=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2105 (0x839) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6744, serialNumber=963C20B7D3804DB801CAE2574C31D760D53D3344 Validity Not Before: Aug 12 21:04:06 2025 GMT Not After : Aug 19 21:04:06 2025 GMT Subject: CN=689bac46-ddc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c0:d5:66:ee:47:b6:25:bd:ac:26:81:22:26: ca:69:5c:13:e8:e7:4e:57:89:f9:56:5d:42:c1:64: f0:b2:b0:37:18:0e:d4:70:80:b7:a3:cd:d5:10:85: 8e:1e:ef:1a:2c:4e:22:36:e7:52:2b:9a:8c:de:6a: 0c:cd:25:19:1d:8c:2b:a5:1f:b3:b2:54:4e:a9:f2: 4b:3d:0f:ab:f2:ab:0b:d2:8c:99:21:66:73:d5:64: 4f:89:02:05:e3:a6:a3:84:73:1f:9b:f6:b2:56:ed: 46:dd:e6:e3:27:23:34:a2:28:1f:08:68:26:34:19: 04:19:0d:7a:37:1d:7d:d4:ee:db:4d:c0:f4:15:e9: 04:4a:71:34:fa:82:1f:a8:47:22:79:73:ce:b5:2e: 8b:51:0c:e2:18:27:8e:f5:a7:12:c3:a8:2c:67:38: 78:a3:75:01:16:9f:8e:c5:57:d7:20:3f:7d:10:8f: 4e:22:9f:d9:25:6e:0e:a6:9f:ca:f4:95:08:f8:68: 98:5d:3f:c5:be:b9:96:63:ee:4c:aa:fb:5e:94:1c: 2d:be:99:ef:13:be:5f:0e:cb:3f:37:e9:13:43:74: 35:a2:8f:43:4b:1b:ee:e8:e0:6b:c4:61:47:7f:fb: f2:72:c1:6f:26:6c:91:e7:f2:ad:5a:e7:4e:9c:58: 14:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2A:67:69:90:6A:F2:14:3F:7C:D3:9C:49:8F:09:BA:96:24:ED:16 X509v3 Authority Key Identifier: keyid:96:3C:20:B7:D3:80:4D:B8:01:CA:E2:57:4C:31:D7:60:D5:3D:33:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljwgt9OATbgByuJXTDHXYNU9M0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6744/33E78FACDBAE11EAAD966723C4F9AE02/ljwgt9OATbgByuJXTDHXYNU9M0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:60:f8:c1:ee:df:ad:a3:c0:da:8a:a4:5d:43:6e:20:03:7c: 2a:46:f3:27:0e:64:16:54:5a:7d:51:93:46:89:c2:08:f5:30: d0:da:b9:fa:a7:54:14:f7:4e:d2:1f:27:ce:de:1e:75:50:b3: d3:e0:4d:0b:2b:88:f0:a7:ce:4a:05:03:42:39:b3:d3:8e:0a: 68:40:b7:42:cd:f9:46:19:48:c3:d8:b1:b8:f6:e1:f1:66:a9: 6d:db:3f:b5:d0:3f:ac:f8:ae:78:36:a9:0a:d3:db:18:c1:7b: 24:ea:94:4a:d4:92:47:4d:b1:dd:19:f7:be:26:62:27:26:50: a8:4c:10:ce:8b:5b:18:49:a8:94:a8:01:33:ce:7e:ef:17:07: 44:b4:45:d3:11:1c:9b:72:84:63:e7:9f:bb:27:3b:44:5a:54: a7:e7:95:00:54:06:1b:73:bc:7e:30:93:a2:8a:30:f6:29:a9: 8d:d3:7c:c0:30:62:0c:a3:b1:f2:cb:79:11:24:f4:16:bb:c4: ca:e7:90:7b:60:ed:ee:d8:a1:76:39:0f:fa:ce:a1:2f:48:71: d4:1a:2c:f8:56:d0:36:d0:3a:47:e0:c4:80:a4:5e:1c:1c:71: 74:42:ad:cb:8b:49:9e:f0:2c:54:db:f2:b4:2a:a8:4c:04:d4: b9:e4:c4:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY3NDQxMTAvBgNVBAUTKDk2M0MyMEI3RDM4MDREQjgwMUNBRTI1NzRDMzFENzYw RDUzRDMzNDQwHhcNMjUwODEyMjEwNDA2WhcNMjUwODE5MjEwNDA2WjAYMRYwFAYD VQQDEw02ODliYWM0Ni1kZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sDVZu5HtiW9rCaBIibKaVwT6OdOV4n5Vl1CwWTwsrA3GA7UcIC3o83VEIWO Hu8aLE4iNudSK5qM3moMzSUZHYwrpR+zslROqfJLPQ+r8qsL0oyZIWZz1WRPiQIF 46ajhHMfm/ayVu1G3ebjJyM0oigfCGgmNBkEGQ16Nx191O7bTcD0FekESnE0+oIf qEcieXPOtS6LUQziGCeO9acSw6gsZzh4o3UBFp+OxVfXID99EI9OIp/ZJW4Opp/K 9JUI+GiYXT/FvrmWY+5MqvtelBwtvpnvE75fDss/N+kTQ3Q1oo9DSxvu6OBrxGFH f/vycsFvJmyR5/KtWudOnFgUuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEqZ2mQ avIUP3zTnEmPCbqWJO0WMB8GA1UdIwQYMBaAFJY8ILfTgE24AcriV0wx12DVPTNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjc0NC8zM0U3OEZBQ0RC QUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRiZ0J5dUpYVERIWFlOVTlN MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xqd2d0OU9BVGJnQnl1SlhUREhYWU5VOU0wUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njc0NC8zM0U3OEZBQ0RCQUUxMUVBQUQ5NjY3MjNDNEY5QUUwMi9sandndDlPQVRi Z0J5dUpYVERIWFlOVTlNMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGYPjB7t+to8DaiqRdQ24gA3wqRvMnDmQWVFp9UZNGicII9TDQ2rn6 p1QU907SHyfO3h51ULPT4E0LK4jwp85KBQNCObPTjgpoQLdCzflGGUjD2LG49uHx Zqlt2z+10D+s+K54NqkK09sYwXsk6pRK1JJHTbHdGfe+JmInJlCoTBDOi1sYSaiU qAEzzn7vFwdEtEXTERybcoRj55+7JztEWlSn55UAVAYbc7x+MJOiijD2KamN03zA MGIMo7Hyy3kRJPQWu8TK55B7YO3u2KF2OQ/6zqEvSHHUGiz4VtA20DpH4MSApF4c HHF0Qq3Li0me8CxU2/K0KqhMBNS55MQj -----END CERTIFICATE-----Generated at Wed Aug 13 05:32:56 2025 by rpki-client