$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json) Hash identifier: IHX8bWrA39atw2B4H7ct/rkCqkwVVZCphpXhh1KpxxQ= Subject key identifier: 40:F2:02:0A:5B:2E:EA:C4:45:62:C8:57:47:7A:91:4F:D2:A1:F2:C1 Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft Manifest number: 94 Signing time: Sat 09 Aug 2025 06:54:01 +0000 Manifest this update: Sat 09 Aug 2025 06:54:01 +0000 Manifest next update: Sat 16 Aug 2025 06:54:01 +0000 Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: xtorXLx4mmJCzMqzTpr5vpoat8/xG+W33w0rfmRJ4xw=) 2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: gWk0VsOcbG73/lmCIcmaJtgvf1O8GLTJ+JuzqZmFgTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Validity Not Before: Aug 9 06:54:01 2025 GMT Not After : Aug 16 06:54:01 2025 GMT Subject: CN=6896f089-336c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:57:c9:1b:35:11:00:6b:5d:5c:91:13:76: 49:5e:07:03:da:bf:8f:11:7b:7f:44:ec:3e:99:fc: bc:1f:cb:fc:63:fe:ba:f5:3a:14:75:24:98:01:44: 3e:40:da:4c:4c:dc:a0:cd:07:ef:0e:3c:ea:6f:25: 2c:e3:02:90:44:da:4c:20:f3:2f:d6:c4:fe:2b:71: 97:02:f3:e4:f7:dc:91:8c:b4:40:3b:bf:24:58:04: f3:d4:7b:ca:c3:0b:c6:16:f7:92:04:dc:28:53:2f: 40:cc:b9:79:33:82:c0:26:f4:9e:ff:24:b6:19:45: d6:79:a7:61:eb:5c:2a:d5:4a:22:36:2f:10:fb:87: 3b:53:cf:9e:e0:b8:07:ac:f6:2b:9e:bf:54:b0:25: d7:b6:c8:59:93:33:7d:51:0e:80:f0:c0:59:4c:aa: a0:08:41:63:a5:8f:88:cd:b6:2e:fe:79:1d:d3:a6: 31:1b:93:fd:44:0e:97:bb:bf:1b:12:2b:39:7d:4d: 2f:24:28:c9:53:d5:67:d1:e4:4e:ac:d1:ee:40:71: c2:0d:46:44:04:7d:6e:02:b8:80:98:c4:5c:63:2d: 67:e7:c8:51:ac:9f:1a:63:60:2c:ca:cf:f8:18:18: 11:fe:89:de:21:28:d9:a1:ec:6d:07:7c:e4:e4:60: d4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F2:02:0A:5B:2E:EA:C4:45:62:C8:57:47:7A:91:4F:D2:A1:F2:C1 X509v3 Authority Key Identifier: keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:56:3b:2d:6c:f5:13:96:5a:7e:1f:82:5a:ff:d7:39:54:f6: 07:15:b4:4a:58:3c:5c:6f:cd:6c:33:97:e8:ad:49:9e:f7:da: f3:d5:4b:ab:95:3d:bc:8b:eb:4e:97:79:3f:b4:cf:3b:16:ee: f7:7b:01:c5:c6:29:b5:17:66:c0:bc:fa:b4:4e:ab:74:ac:90: 34:87:76:6c:10:10:79:41:80:20:82:09:b2:48:ce:42:34:0f: 70:e5:ec:e3:fa:d9:b5:88:22:c0:31:5b:6b:d4:20:92:9b:a7: 60:7e:62:f8:9d:82:36:4f:52:91:bb:62:b0:fc:33:87:ce:7d: b9:f5:01:00:bf:46:39:26:a4:2f:cb:05:c0:8f:d9:c7:7a:0a: 59:5f:f3:66:25:49:98:ae:55:22:1f:cf:97:a5:da:1d:76:7c: 30:74:f4:b5:6d:ec:b0:07:35:39:db:88:17:ba:76:c1:1d:fa: d4:c8:b5:65:7f:8d:c8:97:d5:76:15:1c:10:8f:2a:16:6c:da: 85:e1:9e:ed:54:0a:c5:7c:40:d3:d6:eb:5b:d2:c5:a0:ec:34: 8d:01:f1:68:61:76:6d:48:1d:ec:d4:20:68:19:ed:e7:19:09: da:6e:07:30:57:aa:52:9b:cb:a3:9a:20:96:ca:85:8b:36:a4: 99:57:a1:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKEFDQjcwMjUxRUIxNUI3NUQ0MjI5QUEyMTMxRTNEOUE4 N0MyOTQ1QzAwHhcNMjUwODA5MDY1NDAxWhcNMjUwODE2MDY1NDAxWjAYMRYwFAYD VQQDEw02ODk2ZjA4OS0zMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBlXyRs1EQBrXVyRE3ZJXgcD2r+PEXt/ROw+mfy8H8v8Y/669ToUdSSYAUQ+ QNpMTNygzQfvDjzqbyUs4wKQRNpMIPMv1sT+K3GXAvPk99yRjLRAO78kWATz1HvK wwvGFveSBNwoUy9AzLl5M4LAJvSe/yS2GUXWeadh61wq1UoiNi8Q+4c7U8+e4LgH rPYrnr9UsCXXtshZkzN9UQ6A8MBZTKqgCEFjpY+IzbYu/nkd06YxG5P9RA6Xu78b Eis5fU0vJCjJU9Vn0eROrNHuQHHCDUZEBH1uAriAmMRcYy1n58hRrJ8aY2Asys/4 GBgR/oneISjZoextB3zk5GDUPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDyAgpb LurERWLIV0d6kU/SofLBMB8GA1UdIwQYMBaAFKy3AlHrFbddQimqITHj2ah8KUXA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9CMTQ0OUM0RTk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQxMUNLYW9oTWVQWnFId3BS Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JMY0NVZXNWdDExQ0thb2hNZVBacUh3cFJjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9CMTQ0OUM0RTk0REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQx MUNLYW9oTWVQWnFId3BSY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATVjstbPUTllp+H4Ja/9c5VPYHFbRKWDxcb81sM5forUme99rz1Uur lT28i+tOl3k/tM87Fu73ewHFxim1F2bAvPq0Tqt0rJA0h3ZsEBB5QYAgggmySM5C NA9w5ezj+tm1iCLAMVtr1CCSm6dgfmL4nYI2T1KRu2Kw/DOHzn259QEAv0Y5JqQv ywXAj9nHegpZX/NmJUmYrlUiH8+XpdoddnwwdPS1beywBzU524gXunbBHfrUyLVl f43Il9V2FRwQjyoWbNqF4Z7tVArFfEDT1utb0sWg7DSNAfFoYXZtSB3s1CBoGe3n GQnabgcwV6pSm8ujmiCWyoWLNqSZV6Hb -----END CERTIFICATE-----Generated at Sat Aug 9 23:19:36 2025 by rpki-client