$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: bKGTryU05thwpsuTEliCtmfN7m9QwP/z8sNDJRm2lR4= Subject key identifier: 2C:CE:A0:39:FC:86:B3:84:11:2D:04:FD:18:B3:48:28:02:4C:76:5E Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: 39 Signing time: Sat 09 Aug 2025 08:05:59 +0000 Manifest this update: Sat 09 Aug 2025 08:05:59 +0000 Manifest next update: Sat 16 Aug 2025 08:05:59 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: ZuqU3Xi3Qiqt5jiDE035wppK7UjZOtr9L+itzkxXCa4=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: Jax3Kvx2J0ODr5GgDNYrVUtv6/aFnopa2LSsnYbiSlg=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Aug 9 08:05:59 2025 GMT Not After : Aug 16 08:05:59 2025 GMT Subject: CN=68970167-7883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:ad:b4:2b:43:e4:83:29:a3:93:7e:a3:03: cf:51:7e:92:fa:3f:78:9b:b2:de:f9:f6:4d:e8:78: 9f:4b:36:0f:56:77:ef:c6:04:c4:38:a4:ca:3a:2f: 48:2a:85:dd:14:4b:83:e7:64:c1:65:c7:05:0e:4c: 9f:b4:e0:47:b5:a2:9c:32:36:52:55:83:f8:b5:24: 32:75:40:de:a4:2e:7c:eb:38:a9:90:0c:5f:ac:64: 20:94:e4:b5:2e:e3:31:98:a4:15:e6:f7:0e:d7:d4: 6f:ae:dd:d9:55:36:9d:dc:09:0c:97:09:69:1d:33: ca:91:45:d0:d6:3c:d4:f6:61:13:e5:f1:9d:0e:ac: ab:05:86:0a:58:b1:90:39:77:a1:59:a0:81:6b:92: f5:98:03:ba:3c:92:17:a4:fe:11:19:b1:6d:9e:14: 69:3e:8f:f5:3f:28:5a:f9:27:41:4c:bc:a5:1a:a0: a9:78:f8:11:00:64:01:92:3a:33:eb:29:ee:13:f1: ff:bd:a3:f4:a0:3a:24:45:c1:0a:4e:c3:c8:c7:36: 8d:3c:db:60:9f:5f:f2:84:57:ca:37:b6:97:07:ef: c8:2d:a4:57:70:38:3c:6d:1f:eb:6c:ef:1d:97:b0: 33:51:eb:9b:50:d3:95:35:cd:73:fc:55:88:17:3f: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:CE:A0:39:FC:86:B3:84:11:2D:04:FD:18:B3:48:28:02:4C:76:5E X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:c4:85:c7:ff:67:66:d1:bf:a4:e5:94:77:02:9a:6b:84:4c: b6:01:a3:09:8a:3a:eb:b4:ee:e5:21:a9:08:22:80:71:73:80: 7b:81:3b:32:4e:b1:77:f3:f0:c2:60:df:d3:c2:e7:1d:fd:4e: 4a:e1:84:63:7e:c8:a3:ee:d1:97:85:dc:64:de:3f:7d:8e:ba: 51:c6:c9:6b:35:6a:69:dd:2d:58:fb:3d:fe:8b:2e:e7:db:58: 79:38:95:1d:81:18:09:c1:71:19:78:21:26:c3:8a:c4:bf:14: a2:b4:ef:5c:00:5f:09:6b:07:94:e4:35:01:05:58:a3:ae:d0: 00:ec:f3:82:64:23:00:bc:5f:f9:bd:16:cf:11:67:d0:2d:8d: 06:e3:b7:b6:bf:c3:f5:80:26:ae:13:39:57:59:f6:d0:47:29: d4:fd:0c:50:52:c8:7a:ba:13:5f:eb:09:2b:8b:00:02:c6:30: 93:2a:40:e1:34:9d:10:cf:db:23:d8:db:28:f1:11:3e:d8:76: 94:89:a1:ef:da:28:64:9e:eb:1b:75:e6:44:64:ed:60:82:e5: a8:0b:6f:a1:83:8e:c1:88:c9:de:6e:bc:51:1e:1c:30:00:ed: 80:3d:21:2f:6d:e6:66:90:60:15:29:2f:a6:65:0a:8a:24:c5: 9d:74:0c:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzdBQjExMC8GA1UEBRMoOTRDOEVGM0YyQTkyMkVFMTQ0QUE2RjBCNjY0MzZDQTQ2 NkNDNEIwQTAeFw0yNTA4MDkwODA1NTlaFw0yNTA4MTYwODA1NTlaMBgxFjAUBgNV BAMTDTY4OTcwMTY3LTc4ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqb620K0Pkgymjk36jA89RfpL6P3ibst759k3oeJ9LNg9Wd+/GBMQ4pMo6L0gq hd0US4PnZMFlxwUOTJ+04Ee1opwyNlJVg/i1JDJ1QN6kLnzrOKmQDF+sZCCU5LUu 4zGYpBXm9w7X1G+u3dlVNp3cCQyXCWkdM8qRRdDWPNT2YRPl8Z0OrKsFhgpYsZA5 d6FZoIFrkvWYA7o8khek/hEZsW2eFGk+j/U/KFr5J0FMvKUaoKl4+BEAZAGSOjPr Ke4T8f+9o/SgOiRFwQpOw8jHNo0822CfX/KEV8o3tpcH78gtpFdwODxtH+ts7x2X sDNR65tQ05U1zXP8VYgXP3ztAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULM6gOfyG s4QRLQT9GLNIKAJMdl4wHwYDVR0jBBgwFoAUlMjvPyqSLuFEqm8LZkNspGbMSwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzN0FCLzI2NDg0NTkwMjFG MzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE1qdlB5cVNMdUZFcW04TFprTnNwR2JNU3dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz N0FCLzI2NDg0NTkwMjFGMzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVG RXFtOExaa05zcEdiTVN3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHDEhcf/Z2bRv6TllHcCmmuETLYBowmKOuu07uUhqQgigHFzgHuBOzJO sXfz8MJg39PC5x39TkrhhGN+yKPu0ZeF3GTeP32OulHGyWs1amndLVj7Pf6LLufb WHk4lR2BGAnBcRl4ISbDisS/FKK071wAXwlrB5TkNQEFWKOu0ADs84JkIwC8X/m9 Fs8RZ9AtjQbjt7a/w/WAJq4TOVdZ9tBHKdT9DFBSyHq6E1/rCSuLAALGMJMqQOE0 nRDP2yPY2yjxET7YdpSJoe/aKGSe6xt15kRk7WCC5agLb6GDjsGIyd5uvFEeHDAA 7YA9IS9t5maQYBUpL6ZlCookxZ10DGc= -----END CERTIFICATE-----Generated at Sat Aug 9 23:19:38 2025 by rpki-client