$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft File: lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft (raw, json) Hash identifier: HcXmmICLqV0q1v0KdDAsjKh2HUL2qbX16aQhNUfT+yA= Subject key identifier: 4C:84:EB:7E:7A:60:C7:1C:48:52:D6:33:9E:AC:41:7A:8A:F6:4F:55 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft Manifest number: 0B40 Signing time: Wed 06 Aug 2025 19:28:42 +0000 Manifest this update: Wed 06 Aug 2025 19:28:41 +0000 Manifest next update: Wed 13 Aug 2025 19:28:41 +0000 Files and hashes: 1: lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl (hash: 77U5cpNTkvFy1eNFInIeRv2ZKyinhyvCcVcD5eu2+/g=) 2: A2055C2E57D911F0BD42DB6DC4F9AE02.roa (hash: TqYpv2WwUkuRYuB5QyDoQVNiTgsmONzJzREbUEtpPrE=) 3: E64F585A060111F0BCBC7237C4F9AE02.roa (hash: vpWpUnXP3M0kRZXRJe9IPBkx6ZqY5gGfHE6hnKUPIZE=) 4: 6DEA717805F811F0833EAC2FC4F9AE02.roa (hash: CCycuwjR/zG8JMtLvZuunOXdbHVwvFPn+/QALmHYm1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Aug 6 19:28:41 2025 GMT Not After : Aug 13 19:28:41 2025 GMT Subject: CN=6893acea-ec1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:ab:0e:86:7e:f1:3e:55:9d:67:22:e9:db: 17:a9:81:29:65:a3:27:6f:b6:06:86:67:65:fb:d0: b0:d0:67:1d:b2:99:8a:f6:56:6a:e7:33:00:3f:94: a7:46:4a:42:08:2a:0e:0f:20:fc:aa:77:27:40:80: a0:47:41:b5:4f:96:90:7a:5a:a5:40:8c:df:1b:ec: 41:68:dc:8c:ed:cb:85:07:6d:79:a1:7f:54:9c:e9: 4e:eb:dc:e3:62:45:44:12:59:4e:c0:00:09:b3:70: bc:fe:e2:51:14:da:64:0e:63:cd:64:92:f2:42:1c: 94:65:c9:4f:62:b8:0c:04:7d:0f:e7:5b:23:c2:bc: b7:fa:5e:5f:99:3c:25:7e:88:d2:ad:44:f8:eb:8e: 13:3c:d3:56:b4:d6:bb:99:71:1d:7f:69:8d:17:18: a1:f8:c7:b8:d0:2a:60:62:18:23:41:41:a3:d4:4e: 6e:6d:f3:3d:32:10:48:20:9c:68:bc:22:53:c1:26: 5d:a4:56:a3:65:1f:e0:c5:62:49:a6:de:6c:dd:02: 55:20:35:52:9d:e5:1c:69:fa:c3:e8:a1:fb:51:58: 06:e6:13:ab:f3:fc:27:a3:f8:f4:85:6e:7d:56:1c: 0b:61:c7:e2:7f:46:1f:5b:5d:53:02:7d:43:d9:5c: 84:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:84:EB:7E:7A:60:C7:1C:48:52:D6:33:9E:AC:41:7A:8A:F6:4F:55 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:f2:3c:65:34:4f:e5:17:24:a8:f6:75:0e:a7:0d:50:89:99: 5b:d9:cc:a1:14:2a:12:2f:4a:fd:f1:e3:fb:da:c4:39:d5:d4: 0b:17:b2:30:4f:bd:e8:ca:cd:26:15:9d:3d:a6:25:10:fb:ad: 12:f4:53:64:73:d0:20:0b:17:f6:7c:d6:ce:eb:a1:24:78:a1: 7d:86:f5:47:7c:6a:2f:e6:c2:41:a0:1f:b7:c5:cb:2c:14:80: b4:74:ee:25:bc:1e:3a:8e:5e:6a:1e:87:37:57:dc:b6:63:0f: 01:38:9e:ca:57:8c:fd:04:ec:ec:b1:69:f3:e5:54:c3:ae:fb: 3c:b1:f0:1c:75:10:aa:7d:ef:41:2c:02:1a:6b:af:75:27:9e: cb:32:9e:3e:c5:1b:af:91:6c:f1:47:42:25:46:9b:1f:db:66: 85:91:37:44:3b:1e:bf:fe:5b:5a:8a:aa:c9:b5:f9:9b:7a:f5: d3:fa:24:98:d0:84:31:52:17:84:dc:3c:05:af:8b:3d:d1:05: 69:34:2a:eb:1a:44:fd:60:18:a7:58:b3:d9:ed:6e:25:62:04: 1b:21:17:ec:47:74:88:c4:bd:c5:67:60:10:03:c7:e3:5a:31: 02:f8:46:e1:34:54:5a:5d:aa:00:1a:e9:ad:1e:07:88:48:06: f6:ba:71:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjUwODA2MTkyODQxWhcNMjUwODEzMTkyODQxWjAYMRYwFAYD VQQDEw02ODkzYWNlYS1lYzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7+rDoZ+8T5VnWci6dsXqYEpZaMnb7YGhmdl+9Cw0GcdspmK9lZq5zMAP5Sn RkpCCCoODyD8qncnQICgR0G1T5aQelqlQIzfG+xBaNyM7cuFB215oX9UnOlO69zj YkVEEllOwAAJs3C8/uJRFNpkDmPNZJLyQhyUZclPYrgMBH0P51sjwry3+l5fmTwl fojSrUT4644TPNNWtNa7mXEdf2mNFxih+Me40CpgYhgjQUGj1E5ubfM9MhBIIJxo vCJTwSZdpFajZR/gxWJJpt5s3QJVIDVSneUcafrD6KH7UVgG5hOr8/wno/j0hW59 VhwLYcfif0YfW11TAn1D2VyE+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyE6356 YMccSFLWM56sQXqK9k9VMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkI1Qi8yOURFNzQ4QTQxOUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3 dC1YeG56elU4N1VOX2ZZdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq8jxlNE/lFySo9nUOpw1QiZlb2cyhFCoSL0r98eP72sQ51dQLF7Iw T73oys0mFZ09piUQ+60S9FNkc9AgCxf2fNbO66EkeKF9hvVHfGov5sJBoB+3xcss FIC0dO4lvB46jl5qHoc3V9y2Yw8BOJ7KV4z9BOzssWnz5VTDrvs8sfAcdRCqfe9B LAIaa691J57LMp4+xRuvkWzxR0IlRpsf22aFkTdEOx6//ltaiqrJtfmbevXT+iSY 0IQxUheE3DwFr4s90QVpNCrrGkT9YBinWLPZ7W4lYgQbIRfsR3SIxL3FZ2AQA8fj WjEC+EbhNFRaXaoAGumtHgeISAb2unEI -----END CERTIFICATE-----Generated at Fri Aug 8 20:47:40 2025 by rpki-client