$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft File: lTUaGSeo8Q660c48bEpaxGUVynA.mft (raw, json) Hash identifier: 4PR43iqis8L13z5e6xjQkvKCJgouHz7VsTr8SWPHavA= Subject key identifier: E0:23:10:29:F2:54:73:F9:FE:B9:E7:0A:F0:EF:85:E3:96:5D:C5:02 Authority key identifier: 95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 Certificate issuer: /CN=A91D4E15/serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft Manifest number: 01A7 Signing time: Mon 11 Aug 2025 03:21:41 +0000 Manifest this update: Mon 11 Aug 2025 03:21:40 +0000 Manifest next update: Mon 18 Aug 2025 03:21:40 +0000 Files and hashes: 1: lTUaGSeo8Q660c48bEpaxGUVynA.crl (hash: hEWt0KqmvuD7UcSffp20Vb22MM4vObYRAdQEP5FV0kI=) 2: 90F09734F1B311EDA789BB57C4F9AE02.roa (hash: nQOUg9YX4u69ZrVdmC/H632YznQdnlGcTOZN3JI/5dE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 03:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E15, serialNumber=95351A1927A8F10EBAD1CE3C6C4A5AC46515CA70 Validity Not Before: Aug 11 03:21:40 2025 GMT Not After : Aug 18 03:21:40 2025 GMT Subject: CN=689961c4-c6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:16:2e:c1:f1:07:04:6d:4c:3d:fb:cf:33:e6: b6:61:6a:17:e3:f1:68:32:26:5e:95:06:55:a9:ad: 5b:19:17:13:9d:d1:f3:04:59:a1:5e:28:1a:9b:85: 9d:97:de:03:50:39:7a:b5:cf:77:4a:f0:0a:2a:65: 91:b8:b8:99:4d:cd:68:d5:12:76:9c:b0:3a:dd:a7: 89:46:80:80:f9:cd:cf:f9:b1:0a:3a:a7:0c:d5:a7: 48:09:cc:6a:2a:89:bf:25:8b:94:9e:1e:e5:ca:94: e2:ea:64:96:93:fe:7d:80:a1:b4:9b:88:27:1f:4b: 4b:3f:ec:98:10:58:f4:5a:c3:12:59:0b:24:b0:31: 01:7a:e0:6c:d3:ab:62:bd:b8:56:9e:98:af:0e:96: f0:2e:aa:68:ac:b6:26:da:f6:9c:a3:25:35:e0:00: 35:1a:e4:39:a8:a0:f5:76:20:65:e9:b1:c3:01:35: 19:5d:f3:7b:bd:ee:6d:24:94:b6:d3:df:79:78:42: 3d:85:dd:af:bb:d2:26:34:44:bf:2a:76:94:1e:f3: 9d:14:21:21:8d:bc:62:1f:89:18:1d:af:33:9b:e6: d3:fb:9b:0d:c8:18:44:f3:dc:90:ab:40:25:99:67: a8:1e:02:93:96:3f:00:5f:ee:9e:7d:f2:28:e8:2a: ae:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:23:10:29:F2:54:73:F9:FE:B9:E7:0A:F0:EF:85:E3:96:5D:C5:02 X509v3 Authority Key Identifier: keyid:95:35:1A:19:27:A8:F1:0E:BA:D1:CE:3C:6C:4A:5A:C4:65:15:CA:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTUaGSeo8Q660c48bEpaxGUVynA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E15/5DDB4440F1AC11EDA3D1B74FC4F9AE02/lTUaGSeo8Q660c48bEpaxGUVynA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:f9:c0:8c:ad:d6:a3:2c:2a:8d:7a:9f:e1:9f:a2:20:94:a3: 8c:49:5f:1c:ec:fa:46:6c:3f:b3:f0:9f:81:94:81:e2:d5:68: 96:1a:55:73:54:6e:5f:f0:ef:79:84:d3:ea:95:f9:41:fc:98: 52:e8:46:7b:d6:34:28:f4:75:2d:76:3c:35:4e:2a:76:14:82: d4:3e:53:43:e1:16:49:43:ae:44:f5:22:4a:87:15:44:39:33: 46:cd:79:5a:ae:ae:29:a4:5d:e6:ef:ad:3b:63:b1:fc:2d:6e: d8:0a:b6:be:70:dd:40:41:c3:29:bc:fa:49:5b:52:f7:29:de: 88:37:44:15:91:e9:42:51:ca:06:4d:7a:32:05:19:97:0d:64: 29:1b:6c:1c:b0:27:29:8e:51:fe:22:bc:ba:f8:59:83:23:d0: d0:39:18:e2:10:7b:68:7d:98:62:bc:03:e3:be:d4:4f:66:ca: 6d:ad:08:d7:12:7b:6b:53:0c:14:99:42:ad:5d:48:37:fb:15: 74:df:d5:97:62:59:0f:3f:8d:09:d2:56:39:65:cd:97:9e:b2: f6:52:17:7f:cd:cd:d5:69:cb:69:61:e0:b1:b7:e3:83:90:a5: 45:aa:44:7d:2b:09:4e:e5:cb:a1:36:5b:1c:56:3e:14:4d:4e: 22:c4:c1:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFMTUxMTAvBgNVBAUTKDk1MzUxQTE5MjdBOEYxMEVCQUQxQ0UzQzZDNEE1QUM0 NjUxNUNBNzAwHhcNMjUwODExMDMyMTQwWhcNMjUwODE4MDMyMTQwWjAYMRYwFAYD VQQDEw02ODk5NjFjNC1jNmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlhYuwfEHBG1MPfvPM+a2YWoX4/FoMiZelQZVqa1bGRcTndHzBFmhXigam4Wd l94DUDl6tc93SvAKKmWRuLiZTc1o1RJ2nLA63aeJRoCA+c3P+bEKOqcM1adICcxq Kom/JYuUnh7lypTi6mSWk/59gKG0m4gnH0tLP+yYEFj0WsMSWQsksDEBeuBs06ti vbhWnpivDpbwLqporLYm2vacoyU14AA1GuQ5qKD1diBl6bHDATUZXfN7ve5tJJS2 0995eEI9hd2vu9ImNES/KnaUHvOdFCEhjbxiH4kYHa8zm+bT+5sNyBhE89yQq0Al mWeoHgKTlj8AX+6effIo6CquuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAjECny VHP5/rnnCvDvheOWXcUCMB8GA1UdIwQYMBaAFJU1GhknqPEOutHOPGxKWsRlFcpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEUxNS81RERCNDQ0MEYx QUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhRNjYwYzQ4YkVwYXhHVVZ5 bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUVWFHU2VvOFE2NjBjNDhiRXBheEdVVnluQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEUxNS81RERCNDQ0MEYxQUMxMUVEQTNEMUI3NEZDNEY5QUUwMi9sVFVhR1NlbzhR NjYwYzQ4YkVwYXhHVVZ5bkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB+cCMrdajLCqNep/hn6IglKOMSV8c7PpGbD+z8J+BlIHi1WiWGlVz VG5f8O95hNPqlflB/JhS6EZ71jQo9HUtdjw1Tip2FILUPlND4RZJQ65E9SJKhxVE OTNGzXlarq4ppF3m7607Y7H8LW7YCra+cN1AQcMpvPpJW1L3Kd6IN0QVkelCUcoG TXoyBRmXDWQpG2wcsCcpjlH+Iry6+FmDI9DQORjiEHtofZhivAPjvtRPZsptrQjX EntrUwwUmUKtXUg3+xV039WXYlkPP40J0lY5Zc2XnrL2Uhd/zc3VactpYeCxt+OD kKVFqkR9KwlO5cuhNlscVj4UTU4ixMEA -----END CERTIFICATE-----Generated at Wed Aug 13 00:27:36 2025 by rpki-client