$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft File: LJM3XsY801R8z5PRPhK1urgy_Zw.mft (raw, json) Hash identifier: GjYMhpM6BDzftfZIZcnI8YrB+Dpc0cSuhmNtBhsBFtQ= Subject key identifier: 47:4E:E3:A3:4E:71:DA:C4:BA:53:5F:20:4B:10:5D:EA:A3:4D:9B:A4 Authority key identifier: 2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C Certificate issuer: /CN=A91E0C5F/serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Certificate serial: 0F8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft Manifest number: 1668 Signing time: Sun 10 Aug 2025 17:33:01 +0000 Manifest this update: Sun 10 Aug 2025 17:33:00 +0000 Manifest next update: Sun 17 Aug 2025 17:33:00 +0000 Files and hashes: 1: LJM3XsY801R8z5PRPhK1urgy_Zw.crl (hash: BDVTNFUCh2F+Kx2xIWuF0h5Ctw8AK2POERnNHaCAsE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3980 (0xf8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Validity Not Before: Aug 10 17:33:00 2025 GMT Not After : Aug 17 17:33:00 2025 GMT Subject: CN=6898d7cd-26c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8f:c0:7c:5a:69:b7:aa:7e:b2:9d:d4:d2:0b: c0:7b:86:58:32:c1:fd:b9:f3:03:25:d5:3e:b8:cd: 5c:c3:cc:af:54:54:bf:22:b4:4b:c0:07:46:aa:98: 79:be:05:a8:5a:48:7d:fd:02:9f:30:ea:9f:6d:ad: 11:4f:96:45:91:33:0b:1b:fa:23:16:f7:7b:fd:c6: 2f:ab:e0:1d:be:11:9a:09:d8:95:4c:60:6e:d8:d1: c3:f0:d8:0a:34:d9:99:74:16:a8:17:95:c6:1b:5c: 3d:d5:86:0d:5d:fd:5a:e3:01:47:b5:7a:3b:9e:cb: 3e:81:d2:b8:20:25:78:54:fd:38:02:53:81:27:f9: c4:42:19:62:d3:1e:7f:8e:28:d6:42:e2:8a:b6:58: 84:eb:4f:77:d4:97:61:c1:41:e7:a1:58:e8:c3:11: c4:7e:6a:c6:f7:76:8f:e0:24:0d:f5:ba:d3:98:b7: 43:7a:14:a7:e7:72:53:6c:0e:fa:2b:e3:f4:20:4b: b5:9e:1b:db:69:b4:97:8a:9a:c0:9b:01:ba:20:6b: 83:87:43:67:06:ae:56:cb:08:76:70:e2:eb:57:f0: 18:0e:a4:33:15:b9:83:82:a6:0b:ff:ec:cd:f0:61: bf:84:3c:44:4e:28:58:37:9e:37:90:09:99:f6:10: a4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4E:E3:A3:4E:71:DA:C4:BA:53:5F:20:4B:10:5D:EA:A3:4D:9B:A4 X509v3 Authority Key Identifier: keyid:2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b6:32:1d:7f:0b:fb:13:ab:80:5e:df:a3:b3:96:b7:1d:91: ec:cc:7b:1f:45:16:35:ef:c2:ec:97:fb:72:5d:2a:ab:77:b4: e2:f0:fd:f1:7c:c8:17:73:a2:7d:f1:5c:6b:0e:70:c9:fc:bf: 83:40:c7:8a:df:89:63:55:d5:7a:06:1b:92:b4:a1:52:f1:60: 97:c8:a3:54:3a:14:50:2d:0d:1a:11:aa:ab:66:10:cf:2a:c4: ed:2a:2c:48:92:f7:84:7f:23:e1:9f:f9:16:c4:d2:73:3d:1b: 9a:f0:b3:90:3a:bd:8a:0c:d6:f6:bf:ab:28:5d:3d:93:84:59: 66:cf:7d:66:c2:09:b5:dd:78:08:c7:26:7f:d1:4d:53:37:e6: 37:a1:23:db:1a:87:cd:b5:6e:55:36:b7:69:6d:50:dc:f1:b2: a5:19:b9:d3:e5:51:2e:6c:71:c1:d9:e3:8d:a9:82:2b:df:69: 75:4c:11:a7:97:1b:39:38:4d:b7:37:56:53:c6:a7:70:7c:db: 36:af:23:5f:b7:f3:ce:a3:2f:4c:4f:12:42:f0:f8:80:ea:78: 6f:4b:2a:f5:9d:22:c8:f9:25:ec:25:b1:22:4d:77:70:43:a6: 50:d7:75:4f:53:a8:e2:25:db:ea:55:4e:af:25:ee:44:97:83: dd:f6:ff:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKDJDOTMzNzVFQzYzQ0QzNTQ3Q0NGOTNEMTNFMTJCNUJB QjgzMkZEOUMwHhcNMjUwODEwMTczMzAwWhcNMjUwODE3MTczMzAwWjAYMRYwFAYD VQQDEw02ODk4ZDdjZC0yNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4/AfFppt6p+sp3U0gvAe4ZYMsH9ufMDJdU+uM1cw8yvVFS/IrRLwAdGqph5 vgWoWkh9/QKfMOqfba0RT5ZFkTMLG/ojFvd7/cYvq+AdvhGaCdiVTGBu2NHD8NgK NNmZdBaoF5XGG1w91YYNXf1a4wFHtXo7nss+gdK4ICV4VP04AlOBJ/nEQhli0x5/ jijWQuKKtliE60931JdhwUHnoVjowxHEfmrG93aP4CQN9brTmLdDehSn53JTbA76 K+P0IEu1nhvbabSXiprAmwG6IGuDh0NnBq5Wywh2cOLrV/AYDqQzFbmDgqYL/+zN 8GG/hDxETihYN543kAmZ9hCkfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdO46NO cdrEulNfIEsQXeqjTZukMB8GA1UdIwQYMBaAFCyTN17GPNNUfM+T0T4Stbq4Mv2c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAxUjh6NVBSUGhLMXVyZ3lf WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xKTTNYc1k4MDFSOHo1UFJQaEsxdXJneV9ady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAx Ujh6NVBSUGhLMXVyZ3lfWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCetjIdfwv7E6uAXt+js5a3HZHszHsfRRY178Lsl/tyXSqrd7Ti8P3x fMgXc6J98VxrDnDJ/L+DQMeK34ljVdV6BhuStKFS8WCXyKNUOhRQLQ0aEaqrZhDP KsTtKixIkveEfyPhn/kWxNJzPRua8LOQOr2KDNb2v6soXT2ThFlmz31mwgm13XgI xyZ/0U1TN+Y3oSPbGofNtW5VNrdpbVDc8bKlGbnT5VEubHHB2eONqYIr32l1TBGn lxs5OE23N1ZTxqdwfNs2ryNft/POoy9MTxJC8PiA6nhvSyr1nSLI+SXsJbEiTXdw Q6ZQ13VPU6jiJdvqVU6vJe5El4Pd9v84 -----END CERTIFICATE-----Generated at Mon Aug 11 07:33:30 2025 by rpki-client