$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft File: lfCdXluLzW9LTWm1yTbJEvd9LP0.mft (raw, json) Hash identifier: SJ7Oo07DJkIPC/d5wrkUwnJXgnwmBre1BRZxwrYLTxI= Subject key identifier: BB:99:0C:43:5E:BB:00:43:02:EB:9F:35:91:21:18:C8:39:A0:7E:2F Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft Manifest number: B6 Signing time: Sat 09 Aug 2025 06:30:22 +0000 Manifest this update: Sat 09 Aug 2025 06:30:21 +0000 Manifest next update: Sat 16 Aug 2025 06:30:21 +0000 Files and hashes: 1: lfCdXluLzW9LTWm1yTbJEvd9LP0.crl (hash: shTRVCH+5965yp5BPcKiHAV0eno9IRjBT2l5h2AQDmg=) 2: B23569E2756511EFB018F20DC4F9AE02.roa (hash: gjYfNXF3GpcKnZuP/+eurz+VLiW4skkCjGj8XhdhHuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Aug 9 06:30:21 2025 GMT Not After : Aug 16 06:30:21 2025 GMT Subject: CN=6896eafd-4c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:04:c7:e8:67:30:4c:3f:4a:bd:7a:8d:1e:2e: 01:84:0b:b3:15:bb:fa:f6:ec:99:64:74:73:c3:37: 86:31:1d:48:00:b4:c9:5c:01:7e:43:35:8b:42:03: 66:7a:40:53:9a:3f:ac:cc:21:1d:bc:9c:4e:6a:13: c9:0f:5f:48:82:22:b8:e6:66:38:09:cf:50:a8:69: f7:20:cc:15:97:7b:11:98:ca:3a:b8:9f:89:f5:8c: 15:7e:f9:61:4a:b4:f8:c6:04:86:96:2e:52:ed:ff: 44:ae:d9:8f:b8:a9:55:00:9f:6b:0d:68:af:9a:68: 2a:af:89:2d:eb:5c:1c:1a:5c:d5:8a:8f:84:31:4e: c5:bb:d0:da:74:f9:bf:cd:93:6d:2c:30:4f:7e:5c: 06:f5:67:03:db:2e:40:4c:a9:c0:65:5b:f5:77:ab: 7d:9f:1f:b4:fb:1f:a9:55:f3:c7:87:6c:72:2f:4e: e0:fb:76:e9:b3:e5:84:97:f9:ea:97:88:93:87:dd: e0:51:b8:51:90:a4:2e:f5:15:0e:a5:62:99:52:35: 89:a0:0a:ea:f1:58:f6:72:64:ea:f7:08:84:28:88: fe:0a:fc:be:22:37:3e:80:4e:04:9b:43:70:2e:6d: 55:06:cb:6b:ad:10:09:72:39:f2:f4:db:f8:81:76: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:99:0C:43:5E:BB:00:43:02:EB:9F:35:91:21:18:C8:39:A0:7E:2F X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7b:1f:10:46:1f:b1:ab:cd:51:b4:6e:b4:22:a6:69:f1:8e: 52:c1:c0:09:fa:0d:1c:12:7d:cb:e6:7b:e7:97:cc:75:4d:c0: 76:d5:8f:77:a7:0a:82:46:d4:73:5a:94:c4:61:38:9c:1a:d5: 77:4c:4a:40:0a:ca:69:e2:d3:44:af:c0:c4:70:50:5c:c1:62: 1c:6b:1b:ee:cc:ee:21:8f:af:55:8c:e8:07:02:9c:fe:45:6e: 14:ba:18:3b:ce:74:57:b9:4a:57:eb:3a:40:28:cb:cb:6b:00: 9f:a9:06:cf:a7:a2:6b:36:83:3a:a7:3d:f2:4c:aa:68:e8:e7: 5b:69:d8:ad:a6:b6:42:53:93:9f:9e:86:dc:60:26:21:be:f8: da:1f:54:cf:7c:ea:a1:1a:0e:c9:7d:bd:ea:26:e2:89:82:68: 99:0a:1e:ce:96:5f:9c:ad:20:59:a9:54:c9:d2:53:c3:6b:87: 53:41:ae:23:c0:11:6e:ff:bc:c6:75:62:51:5f:74:ea:3e:09: 37:f6:cf:27:e1:d2:e8:19:b8:9c:94:09:00:d0:38:ec:46:1d: 85:4f:5f:f8:c7:b3:d3:6d:a7:5f:a9:dc:f4:77:35:b2:d4:16: af:a8:3d:58:0a:15:5b:5b:df:93:fb:bf:0d:fc:7b:fd:1f:34: 28:4d:4e:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjUwODA5MDYzMDIxWhcNMjUwODE2MDYzMDIxWjAYMRYwFAYD VQQDEw02ODk2ZWFmZC00YzJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ATH6GcwTD9KvXqNHi4BhAuzFbv69uyZZHRzwzeGMR1IALTJXAF+QzWLQgNm ekBTmj+szCEdvJxOahPJD19IgiK45mY4Cc9QqGn3IMwVl3sRmMo6uJ+J9YwVfvlh SrT4xgSGli5S7f9ErtmPuKlVAJ9rDWivmmgqr4kt61wcGlzVio+EMU7Fu9DadPm/ zZNtLDBPflwG9WcD2y5ATKnAZVv1d6t9nx+0+x+pVfPHh2xyL07g+3bps+WEl/nq l4iTh93gUbhRkKQu9RUOpWKZUjWJoArq8Vj2cmTq9wiEKIj+Cvy+Ijc+gE4Em0Nw Lm1VBstrrRAJcjny9Nv4gXZBIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuZDENe uwBDAuufNZEhGMg5oH4vMB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDRCRS8wMjhBQkU0MjY5MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpX OUxUV20xeVRiSkV2ZDlMUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMex8QRh+xq81RtG60IqZp8Y5SwcAJ+g0cEn3L5nvnl8x1TcB21Y93 pwqCRtRzWpTEYTicGtV3TEpACspp4tNEr8DEcFBcwWIcaxvuzO4hj69VjOgHApz+ RW4Uuhg7znRXuUpX6zpAKMvLawCfqQbPp6JrNoM6pz3yTKpo6OdbaditprZCU5Of nobcYCYhvvjaH1TPfOqhGg7Jfb3qJuKJgmiZCh7Oll+crSBZqVTJ0lPDa4dTQa4j wBFu/7zGdWJRX3TqPgk39s8n4dLoGbiclAkA0DjsRh2FT1/4x7PTbadfqdz0dzWy 1BavqD1YChVbW9+T+78N/Hv9HzQoTU7P -----END CERTIFICATE-----Generated at Sun Aug 10 04:21:39 2025 by rpki-client