$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft File: LnKDqP3Vzws9n6or6XQogZiRk6U.mft (raw, json) Hash identifier: 4/yNTzzyb2+JZH8X0I2dy96exqgk0A5X7sNycmqYcgw= Subject key identifier: AB:D7:94:D6:AD:D4:82:83:9C:30:46:41:D4:80:20:2F:94:73:D4:EB Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 09D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft Manifest number: 09C7 Signing time: Sun 10 Aug 2025 20:01:36 +0000 Manifest this update: Sun 10 Aug 2025 20:01:35 +0000 Manifest next update: Sun 17 Aug 2025 20:01:35 +0000 Files and hashes: 1: LnKDqP3Vzws9n6or6XQogZiRk6U.crl (hash: 7Pav1zc9TGD0ZlbcwRVmOlO29omjIjTARwWFniBM+oM=) 2: 651384A6766811EF96E4115EC4F9AE02.roa (hash: VFpsjuU9PDSH64UL2gEPWAoxtpRrzaaut6Rewkzu2Xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2521 (0x9d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: Aug 10 20:01:35 2025 GMT Not After : Aug 17 20:01:35 2025 GMT Subject: CN=6898fa9f-0441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6a:af:a7:0b:94:71:9c:09:fc:7c:88:0b:57: b3:b1:9b:0b:9f:28:bc:c4:2d:2c:22:b8:be:21:4f: 39:99:34:02:97:b1:18:9f:3b:22:9c:aa:04:74:7e: 63:88:fc:96:0c:e1:62:7d:66:49:32:29:21:5c:63: 85:91:3b:82:2a:b7:7c:1a:e5:b7:1b:53:58:fa:d0: 0b:33:a3:14:3d:eb:95:be:de:27:00:b8:83:cd:db: 9f:5e:58:81:35:12:48:0f:b8:1b:82:35:99:d0:2d: 8d:cc:55:cf:25:1f:37:fd:7b:7a:b9:d7:e8:ef:8e: 83:a8:37:91:85:30:6c:2e:6c:59:5d:a4:98:33:a7: f3:a4:92:8d:27:6c:45:52:5f:ec:aa:5c:30:26:84: ee:89:96:4a:43:87:f6:07:a9:e4:f3:7a:68:6a:90: df:d8:d4:05:c1:b5:d6:c8:13:0e:06:87:e9:64:65: a8:b8:dd:ec:c4:a3:cb:b6:29:49:e2:c5:28:f5:6b: f7:39:47:fc:40:1c:5c:f2:ab:bf:57:2f:a9:87:8d: fa:9d:b8:93:dd:93:61:44:1d:96:d8:0e:d9:89:2a: b7:e7:65:e7:3c:b2:09:e2:3b:54:52:7c:e7:9f:6a: a2:9d:46:a9:40:7b:c3:01:02:e6:07:d2:c5:47:27: d4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D7:94:D6:AD:D4:82:83:9C:30:46:41:D4:80:20:2F:94:73:D4:EB X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f0:6e:61:46:99:ad:59:49:30:1f:e9:d6:ea:fc:ec:5e:50: 0c:f2:c4:15:23:bb:f0:d9:ef:59:d6:4b:4f:3f:4f:f2:5d:51: a0:08:a6:a1:1b:e2:66:75:17:ec:59:54:09:93:fa:df:5b:9c: 7b:fb:22:c0:ed:85:8d:d5:47:3b:74:89:59:ee:ee:96:12:ec: a3:23:2d:f9:68:ac:fe:42:da:f4:0f:31:26:dc:f5:c3:22:8d: 63:03:88:f5:25:fd:f2:2c:27:a3:f7:2a:31:f0:13:25:5e:1f: 2a:1d:cf:62:a2:31:ec:a7:d3:c9:f8:f2:24:63:ef:dc:af:b2: 6a:d8:bd:48:81:21:84:16:ba:8c:c5:5d:89:f4:74:a6:28:04: 3b:a5:9c:ad:25:d0:3b:9a:a2:44:6e:e3:30:96:a2:36:f7:13: ac:eb:34:dc:d5:2a:aa:5c:d9:57:ae:18:5e:a3:14:f6:5c:03: a8:9e:e1:2d:c1:b2:f4:6e:83:dc:52:b6:91:d5:4c:19:e6:99: 0a:8e:f2:8b:89:16:87:5a:22:f4:d6:d7:01:12:85:ba:6c:90: 79:b6:93:55:8a:0f:b8:ee:cf:a6:85:b2:59:00:82:04:23:d0: e9:4e:d3:44:cd:48:ef:da:64:a7:c5:3f:a4:6c:1d:4b:5f:ed: cc:5b:05:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjUwODEwMjAwMTM1WhcNMjUwODE3MjAwMTM1WjAYMRYwFAYD VQQDEw02ODk4ZmE5Zi0wNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2qvpwuUcZwJ/HyIC1ezsZsLnyi8xC0sIri+IU85mTQCl7EYnzsinKoEdH5j iPyWDOFifWZJMikhXGOFkTuCKrd8GuW3G1NY+tALM6MUPeuVvt4nALiDzdufXliB NRJID7gbgjWZ0C2NzFXPJR83/Xt6udfo746DqDeRhTBsLmxZXaSYM6fzpJKNJ2xF Ul/sqlwwJoTuiZZKQ4f2B6nk83poapDf2NQFwbXWyBMOBofpZGWouN3sxKPLtilJ 4sUo9Wv3OUf8QBxc8qu/Vy+ph436nbiT3ZNhRB2W2A7ZiSq352XnPLIJ4jtUUnzn n2qinUapQHvDAQLmB9LFRyfUvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvXlNat 1IKDnDBGQdSAIC+Uc9TrMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkFERi81ODUzMjBERThCRDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3 czluNm9yNlhRb2daaVJrNlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM8G5hRpmtWUkwH+nW6vzsXlAM8sQVI7vw2e9Z1ktPP0/yXVGgCKah G+JmdRfsWVQJk/rfW5x7+yLA7YWN1Uc7dIlZ7u6WEuyjIy35aKz+Qtr0DzEm3PXD Io1jA4j1Jf3yLCej9yox8BMlXh8qHc9iojHsp9PJ+PIkY+/cr7Jq2L1IgSGEFrqM xV2J9HSmKAQ7pZytJdA7mqJEbuMwlqI29xOs6zTc1SqqXNlXrhheoxT2XAOonuEt wbL0boPcUraR1UwZ5pkKjvKLiRaHWiL01tcBEoW6bJB5tpNVig+47s+mhbJZAIIE I9DpTtNEzUjv2mSnxT+kbB1LX+3MWwVW -----END CERTIFICATE-----Generated at Mon Aug 11 10:06:53 2025 by rpki-client