$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft File: LsoZlE2psLqHJb5wu-9Unl0huTc.mft (raw, json) Hash identifier: hsG8dM8U+WqWaxSZ2ZSLKdsdSuIqsQ5JmSlGyYtvK7M= Subject key identifier: 1F:6E:45:7A:FE:6A:8C:41:65:54:14:CC:21:B6:45:37:4D:A9:CE:B3 Authority key identifier: 2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 Certificate issuer: /CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft Manifest number: 07CA Signing time: Fri 08 Aug 2025 21:30:50 +0000 Manifest this update: Fri 08 Aug 2025 21:30:50 +0000 Manifest next update: Fri 15 Aug 2025 21:30:50 +0000 Files and hashes: 1: LsoZlE2psLqHJb5wu-9Unl0huTc.crl (hash: gT4yUgzuo6WWbrkUDxU5RQmHb93Wxi9N/OVy6ZPXZ0c=) 2: 29B0FABC031511EB8CE8EF17C4F9AE02.roa (hash: UDBTwJHFIDnykm5WO4HER1SExnJLtd1inkUNEKV6P8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C55, serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Validity Not Before: Aug 8 21:30:50 2025 GMT Not After : Aug 15 21:30:50 2025 GMT Subject: CN=68966c8a-7fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:02:4a:8c:d7:19:88:9b:2d:80:0a:c1:51: 1e:1e:65:e5:1d:30:09:30:38:09:53:c4:83:00:08: a9:35:35:ff:fc:e5:79:0d:ba:30:a9:bb:d3:da:85: cb:a3:fb:fd:3e:08:16:b0:b0:53:7b:ec:1e:9a:65: 4d:31:de:82:6a:33:92:80:c5:ae:25:12:12:18:15: 2a:d7:06:f0:e7:37:0f:40:ce:13:c4:3a:9d:47:1d: 75:f8:79:57:72:b7:b8:0e:06:9d:49:b5:fe:63:85: 94:e9:64:d7:cf:8a:9f:fc:e9:9c:4a:24:10:45:94: 22:7e:67:6b:d9:86:4a:69:ab:59:dd:83:72:3b:14: 62:af:73:bf:4d:40:c2:77:a3:10:20:eb:9b:a8:1e: 35:f1:84:3a:dc:d7:af:65:6a:d5:fc:7c:51:e7:98: 5d:6e:39:22:db:71:6d:ca:6a:e3:c2:7a:f5:cf:3a: f9:fb:e8:1a:6f:04:49:c6:53:59:5f:23:51:9f:b3: ea:3d:6e:74:85:8f:a4:cf:bd:9e:15:ee:41:3d:08: 0f:3c:f3:9d:b9:af:8e:f8:35:76:76:6f:ad:09:7a: 4c:21:9e:bc:a2:15:96:66:80:9e:ab:66:21:8a:a6: 5b:b6:99:6d:77:fa:05:11:32:13:01:a6:52:76:2f: 63:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6E:45:7A:FE:6A:8C:41:65:54:14:CC:21:B6:45:37:4D:A9:CE:B3 X509v3 Authority Key Identifier: keyid:2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:83:d2:19:63:41:52:42:3d:6d:56:e3:de:d3:ff:04:34:f9: a5:69:a1:2e:d2:5a:da:d0:4a:f2:6b:13:e4:ae:a2:44:ab:16: 0a:da:d3:90:6f:1d:4b:b3:dc:9c:8c:39:f7:16:56:03:28:33: 6b:bd:56:4c:db:fd:35:45:ba:43:d5:db:9e:88:49:5d:08:a2: 75:8f:4f:48:f1:e9:16:3a:c2:e8:05:95:ed:12:7b:1f:58:54: eb:b2:16:53:53:be:68:eb:f8:00:38:5c:a6:ba:32:ef:c2:f2: 11:9e:de:eb:a6:2e:e5:a7:7f:11:66:01:6a:28:1a:1e:16:ba: 61:c7:62:6e:aa:cb:a5:02:27:eb:25:25:81:45:8f:e6:b7:fa: 06:18:75:09:00:f5:02:68:68:01:67:2b:0b:de:25:66:9a:62: 92:d5:75:b3:91:c1:8d:98:c8:81:e4:ce:97:66:6d:70:57:92: 63:3c:5f:89:75:f6:f7:03:0e:c7:c3:18:e1:00:07:19:aa:d4: 6a:36:7f:df:3a:46:4d:02:f1:b7:41:b9:db:72:1f:45:1e:44: 89:2a:14:0a:4c:e5:5a:60:5e:eb:43:96:12:7d:e3:8b:8f:b5: 28:5e:a4:ab:36:ec:06:37:71:b9:bf:2c:af:10:37:90:11:94: 91:a0:ab:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNTUxMTAvBgNVBAUTKDJFQ0ExOTk0NERBOUIwQkE4NzI1QkU3MEJCRUY1NDlF NUQyMUI5MzcwHhcNMjUwODA4MjEzMDUwWhcNMjUwODE1MjEzMDUwWjAYMRYwFAYD VQQDEw02ODk2NmM4YS03ZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQQCSozXGYibLYAKwVEeHmXlHTAJMDgJU8SDAAipNTX//OV5DbowqbvT2oXL o/v9PggWsLBTe+wemmVNMd6CajOSgMWuJRISGBUq1wbw5zcPQM4TxDqdRx11+HlX cre4DgadSbX+Y4WU6WTXz4qf/OmcSiQQRZQifmdr2YZKaatZ3YNyOxRir3O/TUDC d6MQIOubqB418YQ63NevZWrV/HxR55hdbjki23Ftymrjwnr1zzr5++gabwRJxlNZ XyNRn7PqPW50hY+kz72eFe5BPQgPPPOdua+O+DV2dm+tCXpMIZ68ohWWZoCeq2Yh iqZbtpltd/oFETITAaZSdi9jKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9uRXr+ aoxBZVQUzCG2RTdNqc6zMB8GA1UdIwQYMBaAFC7KGZRNqbC6hyW+cLvvVJ5dIbk3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM1NS80MTU3RkY5NjAz MTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNMcUhKYjV3dS05VW5sMGh1 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzb1psRTJwc0xxSEpiNXd1LTlVbmwwaHVUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM1NS80MTU3RkY5NjAzMTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNM cUhKYjV3dS05VW5sMGh1VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVg9IZY0FSQj1tVuPe0/8ENPmlaaEu0lra0EryaxPkrqJEqxYK2tOQ bx1Ls9ycjDn3FlYDKDNrvVZM2/01RbpD1dueiEldCKJ1j09I8ekWOsLoBZXtEnsf WFTrshZTU75o6/gAOFymujLvwvIRnt7rpi7lp38RZgFqKBoeFrphx2JuqsulAifr JSWBRY/mt/oGGHUJAPUCaGgBZysL3iVmmmKS1XWzkcGNmMiB5M6XZm1wV5JjPF+J dfb3Aw7HwxjhAAcZqtRqNn/fOkZNAvG3Qbnbch9FHkSJKhQKTOVaYF7rQ5YSfeOL j7UoXqSrNuwGN3G5vyyvEDeQEZSRoKt4 -----END CERTIFICATE-----Generated at Sat Aug 9 01:19:13 2025 by rpki-client