$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json) Hash identifier: 7r7HNlxucfKYKb3PBIsNmpYIV3yvu6yQjnkMfw2P5aU= Subject key identifier: C2:41:4B:80:A0:75:6C:6F:B2:13:3D:52:85:50:B4:8B:60:5D:69:F9 Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 06A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft Manifest number: 11E3 Signing time: Sat 02 Aug 2025 17:17:42 +0000 Manifest this update: Sat 02 Aug 2025 17:17:42 +0000 Manifest next update: Sat 09 Aug 2025 17:17:42 +0000 Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: pSmhXg7/BdVoI/lBEZHCQn5CoLRAQ81NTiYU5P4X7to=) 2: E4BB55347C4E11EBB889AF7EC4F9AE02.roa (hash: j4Rp5D2+LCtQywvaF1YDJd+cLnUdbw+y2x0d8ZW0p8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:17:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1697 (0x6a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: Aug 2 17:17:42 2025 GMT Not After : Aug 9 17:17:42 2025 GMT Subject: CN=688e4836-3e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:96:8d:2a:49:3f:b8:15:0e:64:0d:8f:1d:12: 1c:8c:b1:b1:73:d5:3a:e3:40:eb:13:9b:fc:d0:c7: 74:14:d3:de:b1:ee:ec:60:e4:ee:2e:75:21:72:6b: 45:11:d8:07:1c:98:d5:34:7f:89:b9:e0:a2:0d:03: 72:2f:16:8b:76:20:97:ed:21:56:c4:5b:77:81:56: bb:5e:dd:b9:4d:5c:4f:83:ac:96:bc:32:80:f4:7e: 6f:ea:56:db:79:05:13:80:ab:a7:e5:4e:17:3a:76: 35:28:fa:ab:6c:b7:5d:82:44:79:6a:ef:95:ba:81: df:e8:1a:bf:d3:b4:22:6c:0d:65:97:17:fa:00:bd: 4f:b5:ad:f9:24:65:79:81:95:f2:2b:08:09:c8:a4: 83:5a:2a:31:07:9c:ba:5d:8a:9b:14:aa:54:7f:00: 05:e6:c7:6e:ab:f4:68:41:0c:d7:b8:3a:b3:c8:d7: 3b:3d:eb:9e:ee:f2:d7:36:9e:d6:0e:8b:3c:68:0e: cf:0b:06:bc:2e:37:c2:ca:71:8a:bc:83:94:b9:ff: 4d:87:ef:e5:df:5e:2c:07:2a:5a:db:00:45:5d:a4: 48:d6:c8:ca:1f:9b:3a:31:06:2c:1b:c2:b9:b7:ce: fd:42:22:54:04:64:49:f7:b4:e4:90:7b:ee:80:18: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:41:4B:80:A0:75:6C:6F:B2:13:3D:52:85:50:B4:8B:60:5D:69:F9 X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0d:94:00:02:f4:fb:19:f8:da:48:ff:e9:50:64:73:ae:9d: 1c:4a:76:c1:9f:3c:af:7f:5a:b5:4c:1b:98:d5:1e:ef:34:a9: 1d:3c:78:29:48:26:b1:3f:15:38:ca:8f:25:db:37:27:f4:eb: 4b:03:96:60:5a:79:d1:ab:e5:2b:f5:f2:f7:3e:b3:ad:b2:ed: 32:c2:bc:d6:22:28:4b:57:e5:a1:4e:96:c8:05:a7:aa:dc:9d: 52:28:49:2e:6b:5e:db:d6:e8:db:ce:14:d8:2e:b1:45:81:e5: cb:ce:98:27:00:5b:d5:9c:7f:95:53:4c:f0:76:15:21:9c:12: 02:2d:03:d2:f2:18:ff:0d:62:7b:4d:e4:e7:f5:8a:63:f1:70: f2:ba:32:c2:2e:61:5a:c5:41:41:c2:27:8a:06:b3:ab:4d:02: 58:2d:aa:71:c6:20:71:2d:4b:da:bd:11:f5:cc:17:10:ae:8c: c3:8f:d7:52:31:80:1e:7f:ce:56:ba:e2:58:80:03:0c:01:a9: f7:75:31:e0:4e:47:07:d4:56:8f:8c:5d:fc:31:b0:f5:34:92: bb:e0:c9:81:c2:9a:c5:8f:78:d5:d1:c4:5b:92:f4:53:bf:e9: d9:2d:7a:92:93:af:cc:7d:c1:f3:e2:9a:80:5e:56:ee:e1:f4: ad:9f:ad:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjUwODAyMTcxNzQyWhcNMjUwODA5MTcxNzQyWjAYMRYwFAYD VQQDEw02ODhlNDgzNi0zZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZaNKkk/uBUOZA2PHRIcjLGxc9U640DrE5v80Md0FNPese7sYOTuLnUhcmtF EdgHHJjVNH+JueCiDQNyLxaLdiCX7SFWxFt3gVa7Xt25TVxPg6yWvDKA9H5v6lbb eQUTgKun5U4XOnY1KPqrbLddgkR5au+VuoHf6Bq/07QibA1llxf6AL1Pta35JGV5 gZXyKwgJyKSDWioxB5y6XYqbFKpUfwAF5sduq/RoQQzXuDqzyNc7Peue7vLXNp7W Dos8aA7PCwa8LjfCynGKvIOUuf9Nh+/l314sBypa2wBFXaRI1sjKH5s6MQYsG8K5 t879QiJUBGRJ97TkkHvugBge7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJBS4Cg dWxvshM9UoVQtItgXWn5MB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUE5Ri82NzM2RjMzNEUzM0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFR UmhScXdndWpKR0ZFWWFuTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtDZQAAvT7GfjaSP/pUGRzrp0cSnbBnzyvf1q1TBuY1R7vNKkdPHgp SCaxPxU4yo8l2zcn9OtLA5ZgWnnRq+Ur9fL3PrOtsu0ywrzWIihLV+WhTpbIBaeq 3J1SKEkua17b1ujbzhTYLrFFgeXLzpgnAFvVnH+VU0zwdhUhnBICLQPS8hj/DWJ7 TeTn9Ypj8XDyujLCLmFaxUFBwieKBrOrTQJYLapxxiBxLUvavRH1zBcQrozDj9dS MYAef85WuuJYgAMMAan3dTHgTkcH1FaPjF38MbD1NJK74MmBwprFj3jV0cRbkvRT v+nZLXqSk6/MfcHz4pqAXlbu4fStn60j -----END CERTIFICATE-----Generated at Mon Aug 4 14:00:25 2025 by rpki-client