$ rpki-client -vvf rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft File: lVqjNNYHfBfALW18rdIVmRIeTvo.mft (raw, json) Hash identifier: LvBQ/+3DvkPodQGsGjpzfw5tgc5o9uS59OY/d83mijk= Subject key identifier: 91:E1:92:45:5C:86:77:ED:5A:07:11:E4:DD:C8:19:D4:F9:05:5B:6B Authority key identifier: 95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA Certificate issuer: /CN=A91D01AF/serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA Certificate serial: 07FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft Manifest number: 07F6 Signing time: Wed 06 Aug 2025 21:15:23 +0000 Manifest this update: Wed 06 Aug 2025 21:15:22 +0000 Manifest next update: Wed 13 Aug 2025 21:15:22 +0000 Files and hashes: 1: lVqjNNYHfBfALW18rdIVmRIeTvo.crl (hash: wPUeKj3eVT7ZtJH6Eoocnp8Muby1vKQKuSVlA3zTQYo=) 2: AD797FA2F17E11EAA3CC597BC4F9AE02.roa (hash: h5ITx5pXE/9NCEhkkWyRU4Y7R0J0MFf0GXuloXcx21g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D01AF, serialNumber=955AA334D6077C17C02D6D7CADD21599121E4EFA Validity Not Before: Aug 6 21:15:22 2025 GMT Not After : Aug 13 21:15:22 2025 GMT Subject: CN=6893c5eb-2607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:67:b7:14:b3:5d:fb:e4:b9:16:9d:b0:53:b3: 2a:08:62:fd:9a:51:c7:02:27:1a:08:d4:7f:1c:40: 5f:48:54:82:39:21:38:76:9f:c6:23:7f:bc:97:a1: 72:b2:34:10:30:01:67:a6:d3:06:ef:f0:dc:92:9f: f6:78:c5:64:71:cf:80:a7:70:e1:d9:e7:11:74:bf: 08:7b:49:21:a7:56:df:57:37:9a:35:4a:29:fc:b2: ad:42:42:b4:b5:24:2f:6b:4c:e8:a7:b3:e0:6f:53: 94:9a:ee:70:84:76:61:c0:ee:73:75:b0:ca:6d:a2: 12:0a:82:83:18:42:dc:e9:be:6c:d0:d3:25:d9:73: f8:50:1d:2a:6a:d5:a7:5d:03:fa:13:4c:41:57:7c: 07:83:1c:60:52:81:45:93:b6:53:7e:a0:27:f4:fb: e5:b1:ff:20:2e:8b:8a:31:7c:4e:ff:92:7f:bf:f5: dd:4c:a1:95:45:8d:62:b1:12:66:31:29:53:37:5a: 90:ff:46:f6:aa:c9:7d:bd:4d:e2:a8:30:fc:db:ba: 60:16:97:8c:dc:e7:36:a1:d8:e3:0c:34:93:08:05: 9e:0c:16:92:d9:2b:dc:ba:c8:76:84:7d:60:95:b3: 8a:86:93:96:b8:e8:88:50:f9:84:f1:53:75:39:f1: ad:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E1:92:45:5C:86:77:ED:5A:07:11:E4:DD:C8:19:D4:F9:05:5B:6B X509v3 Authority Key Identifier: keyid:95:5A:A3:34:D6:07:7C:17:C0:2D:6D:7C:AD:D2:15:99:12:1E:4E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lVqjNNYHfBfALW18rdIVmRIeTvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D01AF/CD7E70D8F17D11EAAB392578C4F9AE02/lVqjNNYHfBfALW18rdIVmRIeTvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:f8:7d:fd:1a:7a:07:e9:00:79:7c:cd:d2:3d:cd:21:84:3e: 29:7f:01:b3:14:82:29:78:54:ca:66:64:cd:89:d3:36:3a:11: e8:2a:a8:fd:8b:79:b8:b5:14:f2:0c:42:3a:c7:83:cd:4f:d0: 56:b2:f6:42:c9:dc:32:59:f8:b6:ea:ed:c3:37:a2:bf:3a:fe: da:cd:c3:9e:18:32:01:52:af:d8:b4:2c:ad:d2:8a:7e:80:d7: 85:dd:55:bd:0f:77:ff:90:1b:cc:fc:15:4a:c0:f7:94:5c:42: a4:56:6d:dd:a0:f6:c0:da:8f:d8:9a:46:ea:88:61:2a:90:12: 74:71:c4:7e:57:4b:a1:c1:09:23:2d:0f:d1:33:30:c3:d0:d6: 79:c0:73:67:75:e9:ae:5f:da:8a:cd:e1:8b:76:2b:f2:b0:75: aa:37:71:cc:43:59:6c:fd:06:32:7f:0a:52:ec:a6:10:a5:37: e6:93:4b:bd:72:cd:7d:4f:c6:23:8f:92:10:38:a9:d6:8e:88: a3:e9:1c:c2:9b:0a:14:d9:78:8b:18:93:b3:a6:31:3b:cc:65: 9f:a5:0c:3c:9d:33:4c:14:ce:73:e0:dd:7d:11:67:c7:c3:31: 8e:bb:e0:8b:cd:5f:3a:ac:1f:45:1c:22:e7:7c:16:67:03:f1: ea:32:1e:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAxQUYxMTAvBgNVBAUTKDk1NUFBMzM0RDYwNzdDMTdDMDJENkQ3Q0FERDIxNTk5 MTIxRTRFRkEwHhcNMjUwODA2MjExNTIyWhcNMjUwODEzMjExNTIyWjAYMRYwFAYD VQQDEw02ODkzYzVlYi0yNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Ge3FLNd++S5Fp2wU7MqCGL9mlHHAicaCNR/HEBfSFSCOSE4dp/GI3+8l6Fy sjQQMAFnptMG7/Dckp/2eMVkcc+Ap3Dh2ecRdL8Ie0khp1bfVzeaNUop/LKtQkK0 tSQva0zop7Pgb1OUmu5whHZhwO5zdbDKbaISCoKDGELc6b5s0NMl2XP4UB0qatWn XQP6E0xBV3wHgxxgUoFFk7ZTfqAn9Pvlsf8gLouKMXxO/5J/v/XdTKGVRY1isRJm MSlTN1qQ/0b2qsl9vU3iqDD827pgFpeM3Oc2odjjDDSTCAWeDBaS2Svcush2hH1g lbOKhpOWuOiIUPmE8VN1OfGtsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHhkkVc hnftWgcR5N3IGdT5BVtrMB8GA1UdIwQYMBaAFJVaozTWB3wXwC1tfK3SFZkSHk76 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDFBRi9DRDdFNzBEOEYx N0QxMUVBQUIzOTI1NzhDNEY5QUUwMi9sVnFqTk5ZSGZCZkFMVzE4cmRJVm1SSWVU dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xWcWpOTllIZkJmQUxXMThyZElWbVJJZVR2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDFBRi9DRDdFNzBEOEYxN0QxMUVBQUIzOTI1NzhDNEY5QUUwMi9sVnFqTk5ZSGZC ZkFMVzE4cmRJVm1SSWVUdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA+H39GnoH6QB5fM3SPc0hhD4pfwGzFIIpeFTKZmTNidM2OhHoKqj9 i3m4tRTyDEI6x4PNT9BWsvZCydwyWfi26u3DN6K/Ov7azcOeGDIBUq/YtCyt0op+ gNeF3VW9D3f/kBvM/BVKwPeUXEKkVm3doPbA2o/YmkbqiGEqkBJ0ccR+V0uhwQkj LQ/RMzDD0NZ5wHNndemuX9qKzeGLdivysHWqN3HMQ1ls/QYyfwpS7KYQpTfmk0u9 cs19T8Yjj5IQOKnWjoij6RzCmwoU2XiLGJOzpjE7zGWfpQw8nTNMFM5z4N19EWfH wzGOu+CLzV86rB9FHCLnfBZnA/HqMh6H -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:57 2025 by rpki-client