$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft File: lFlKrsbtZqaAoVv-tc2leC1MLYg.mft (raw, json) Hash identifier: vu5BRZl2BsZ+UDSjn0nIUnfSp7vQ8UJ+zLtNqJe06n0= Subject key identifier: FE:D7:08:AF:B5:C8:32:E9:5F:AD:7B:E0:68:06:84:56:4B:4B:39:5F Authority key identifier: 94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 Certificate issuer: /CN=A91E2EF9/serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft Manifest number: B9 Signing time: Thu 07 Aug 2025 06:35:39 +0000 Manifest this update: Thu 07 Aug 2025 06:35:39 +0000 Manifest next update: Thu 14 Aug 2025 06:35:39 +0000 Files and hashes: 1: lFlKrsbtZqaAoVv-tc2leC1MLYg.crl (hash: LHz/gTA8xndQgm7zSdBTQDlyPzrOnbxaXs4kYAhn8QY=) 2: D926DBDA605211EF90C2C621C4F9AE02.roa (hash: Cl2PJo7826qehYKKSG2/VdHV6kV/QSQl5KdRQS87oS0=) 3: E7C7DBF8A0E411EF98A7340EC4F9AE02.roa (hash: 7jEw+cOkWTAknu5PcBj2MNehVkDO0rbITl2EdNIaO7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EF9, serialNumber=94594AAEC6ED66A680A15BFEB5CDA5782D4C2D88 Validity Not Before: Aug 7 06:35:39 2025 GMT Not After : Aug 14 06:35:39 2025 GMT Subject: CN=6894493b-ec44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:40:a6:b3:b8:79:78:71:22:b0:75:b1:9f:5e: 8b:fc:c0:f3:8a:49:a7:16:40:16:32:05:16:36:b0: ff:d9:e9:67:13:b8:90:31:84:c7:ab:f3:24:bd:e1: 9e:42:f6:57:9f:4f:26:a7:08:e1:82:fb:90:2c:0f: f9:ac:00:27:34:46:9a:a4:61:ba:36:2a:08:24:1a: b1:30:d5:1e:e6:21:f0:91:f4:0b:78:53:d5:7d:29: 3f:9f:f3:5e:75:d8:d1:25:f1:f3:9f:e0:94:3d:ed: f1:46:00:c6:bb:18:ed:b2:31:6b:5e:54:47:5f:5d: 9e:25:fa:ae:8e:cb:87:d7:e1:79:ac:32:bb:a4:87: 2d:ed:4b:5b:59:f3:22:c8:7e:65:04:1c:b9:a9:88: e1:27:47:a9:84:62:33:c1:7c:39:b1:df:ee:1b:b9: 73:67:56:df:a6:ff:f5:63:3a:20:1e:6a:62:5e:86: 55:f2:e2:a8:f0:62:d2:24:39:a7:ec:ef:29:55:16: 70:09:00:87:02:04:9d:08:c1:99:18:48:cb:e0:70: 30:76:55:73:d1:f8:ca:1d:53:41:46:ff:29:c3:7d: 15:69:73:b5:d6:c3:6f:a2:ac:24:7e:f4:ff:06:24: 2c:b0:66:2e:1d:b8:c4:e1:ac:2b:b3:fa:10:6b:aa: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D7:08:AF:B5:C8:32:E9:5F:AD:7B:E0:68:06:84:56:4B:4B:39:5F X509v3 Authority Key Identifier: keyid:94:59:4A:AE:C6:ED:66:A6:80:A1:5B:FE:B5:CD:A5:78:2D:4C:2D:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFlKrsbtZqaAoVv-tc2leC1MLYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EF9/804D6BF0605211EFB286FD20C4F9AE02/lFlKrsbtZqaAoVv-tc2leC1MLYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:44:73:3c:40:72:2a:75:33:2d:55:8b:50:94:4e:c6:8e:3e: f6:5d:40:2a:32:b6:47:2e:f0:cb:37:5e:1b:84:2b:f0:c3:26: d7:9f:b8:fe:1e:65:db:36:8d:da:e7:56:03:45:47:f3:58:5d: ca:ce:14:6d:74:3a:41:40:a7:b3:98:8d:f9:63:bb:41:98:60: 40:b5:08:24:bd:c7:ed:80:8f:25:26:f3:bc:78:d4:15:ba:93: 92:ca:a8:82:f4:a6:bb:38:78:14:d5:08:00:98:ff:f1:2c:ef: dc:ee:0f:9e:2f:75:b3:40:8a:17:8b:ad:fe:a9:aa:58:d4:88: a3:19:3f:70:54:78:66:33:92:bb:53:29:25:e2:53:90:d2:ee: 31:6d:15:b1:76:c1:ea:55:dd:06:6b:4b:d8:e2:9d:5f:8d:f0: 31:b0:55:29:ab:d0:fb:ab:78:24:a0:1c:2f:c1:bd:49:25:c0: ee:27:50:3e:9a:e7:0c:aa:5e:6a:d3:c3:1e:41:b2:ae:9a:09: 5f:6a:c8:9d:ba:cf:2d:1f:be:35:88:10:dd:d0:ea:69:f2:a7: 35:6e:a1:33:0c:10:9c:41:37:37:14:74:dd:64:a2:4f:f9:15: a2:56:f6:c5:ab:2e:77:4b:2f:79:ce:40:d0:c4:06:46:31:fb: 01:81:b1:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRjkxMTAvBgNVBAUTKDk0NTk0QUFFQzZFRDY2QTY4MEExNUJGRUI1Q0RBNTc4 MkQ0QzJEODgwHhcNMjUwODA3MDYzNTM5WhcNMjUwODE0MDYzNTM5WjAYMRYwFAYD VQQDEw02ODk0NDkzYi1lYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkCms7h5eHEisHWxn16L/MDzikmnFkAWMgUWNrD/2elnE7iQMYTHq/MkveGe QvZXn08mpwjhgvuQLA/5rAAnNEaapGG6NioIJBqxMNUe5iHwkfQLeFPVfSk/n/Ne ddjRJfHzn+CUPe3xRgDGuxjtsjFrXlRHX12eJfqujsuH1+F5rDK7pIct7UtbWfMi yH5lBBy5qYjhJ0ephGIzwXw5sd/uG7lzZ1bfpv/1YzogHmpiXoZV8uKo8GLSJDmn 7O8pVRZwCQCHAgSdCMGZGEjL4HAwdlVz0fjKHVNBRv8pw30VaXO11sNvoqwkfvT/ BiQssGYuHbjE4awrs/oQa6pCzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7XCK+1 yDLpX6174GgGhFZLSzlfMB8GA1UdIwQYMBaAFJRZSq7G7WamgKFb/rXNpXgtTC2I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGOS84MDRENkJGMDYw NTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpxYUFvVnYtdGMybGVDMU1M WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xGbEtyc2J0WnFhQW9Wdi10YzJsZUMxTUxZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGOS84MDRENkJGMDYwNTIxMUVGQjI4NkZEMjBDNEY5QUUwMi9sRmxLcnNidFpx YUFvVnYtdGMybGVDMU1MWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAORHM8QHIqdTMtVYtQlE7Gjj72XUAqMrZHLvDLN14bhCvwwybXn7j+ HmXbNo3a51YDRUfzWF3KzhRtdDpBQKezmI35Y7tBmGBAtQgkvcftgI8lJvO8eNQV upOSyqiC9Ka7OHgU1QgAmP/xLO/c7g+eL3WzQIoXi63+qapY1IijGT9wVHhmM5K7 Uykl4lOQ0u4xbRWxdsHqVd0Ga0vY4p1fjfAxsFUpq9D7q3gkoBwvwb1JJcDuJ1A+ mucMql5q08MeQbKumglfasidus8tH741iBDd0Opp8qc1bqEzDBCcQTc3FHTdZKJP +RWiVvbFqy53Sy95zkDQxAZGMfsBgbF3 -----END CERTIFICATE-----Generated at Fri Aug 8 20:56:30 2025 by rpki-client