$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft File: LPF-aFt4j16uSgHViDUmG18LLqQ.mft (raw, json) Hash identifier: KZLMFhXfqcv4W2ORVHnLvi8yZCTpwY3BsUzq5KlgKAA= Subject key identifier: 67:99:D3:8A:48:B7:9B:EE:1A:73:15:B0:D9:44:B7:29:62:27:CC:1F Authority key identifier: 2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4 Certificate issuer: /CN=A91FABEF/serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft Manifest number: 0111 Signing time: Sun 03 Aug 2025 05:14:40 +0000 Manifest this update: Sun 03 Aug 2025 05:14:40 +0000 Manifest next update: Sun 10 Aug 2025 05:14:40 +0000 Files and hashes: 1: LPF-aFt4j16uSgHViDUmG18LLqQ.crl (hash: 7yeP+qKIeXcuLANL77m7XNA8mRmGJfA2VB8tjAc2GAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FABEF, serialNumber=2CF17E685B788F5EAE4A01D58835261B5F0B2EA4 Validity Not Before: Aug 3 05:14:40 2025 GMT Not After : Aug 10 05:14:40 2025 GMT Subject: CN=688ef040-b027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:5b:5b:80:38:79:59:59:f8:a2:8a:4b:c2: 15:ec:27:e5:73:ed:ac:36:bb:f5:ae:1a:fb:9c:5d: 5d:d2:56:65:09:81:af:76:5e:1b:4e:df:e5:6f:da: 88:a6:0c:bd:eb:84:79:da:03:9e:06:93:a7:b8:a2: 92:b7:07:29:09:87:83:3a:de:3b:b9:40:cb:6b:95: e9:3c:cd:8a:90:2d:ff:34:97:1e:74:2a:f5:fc:23: 15:1b:e9:bb:df:b4:6b:81:18:7f:7b:3f:2d:80:e4: 58:7a:e3:17:c1:71:31:df:c2:42:4e:58:0b:78:ec: 2a:6f:7d:7a:d4:de:83:8b:72:7c:48:ab:74:38:5d: 7f:4a:f3:fc:ec:13:95:b3:4d:5d:de:c3:1d:fe:68: 03:18:95:19:b1:5a:f4:35:a2:bf:dc:5b:06:36:03: 0b:33:a5:c1:74:62:08:5f:0b:77:7b:91:7a:4f:c1: 3d:25:4d:60:bd:0d:72:1f:a2:b9:30:0d:26:10:7b: 0e:68:78:9a:fb:15:b6:bf:7f:8c:50:94:01:79:23: 86:77:b2:0b:ef:bc:be:9a:3c:a8:6a:a5:d6:c7:47: a3:c4:fb:a4:3f:32:43:c7:ac:92:96:98:2a:9f:4e: f5:df:33:52:1b:d8:28:49:d6:19:54:78:23:ef:d9: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:99:D3:8A:48:B7:9B:EE:1A:73:15:B0:D9:44:B7:29:62:27:CC:1F X509v3 Authority Key Identifier: keyid:2C:F1:7E:68:5B:78:8F:5E:AE:4A:01:D5:88:35:26:1B:5F:0B:2E:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPF-aFt4j16uSgHViDUmG18LLqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C9AF5D2CCB1911EE815FAB68C4F9AE02/LPF-aFt4j16uSgHViDUmG18LLqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d0:3d:e0:35:ad:b0:89:68:f5:36:03:7d:c7:83:4b:70:e9: 58:d1:45:dc:60:08:2e:f7:2d:5c:a6:58:85:80:92:0a:f2:46: c0:d4:91:40:27:de:70:26:7f:90:54:83:6f:26:f2:28:61:61: 6e:6a:66:93:0b:2a:d4:2a:f7:a2:13:37:5a:85:f3:70:ee:f7: d1:e4:52:bd:ba:cd:06:b4:0b:a6:06:92:e5:31:99:b7:39:21: 1c:17:9f:03:d4:91:d9:47:38:06:dd:d0:42:36:00:9a:d8:d5: 6a:07:17:40:90:6c:9c:2e:78:7b:39:ce:1b:77:3a:a1:f1:33: 8f:3a:54:4e:2d:ce:ba:13:a6:fa:56:f3:a0:2d:45:06:81:af: d5:8e:a7:07:e5:72:b4:38:92:62:51:91:3a:a9:db:06:24:c4: 6a:60:8a:56:cf:32:f4:ea:fd:01:2b:fd:6b:f5:d1:94:08:78: 7d:62:5e:72:a4:80:c0:9b:d9:bf:14:6a:ab:ff:b3:13:2f:f1: 4a:34:c4:29:9e:f2:8a:af:e9:a4:1b:a6:ad:57:d4:30:3b:61: f6:10:dd:13:58:b5:3f:cc:d0:53:16:09:83:5f:aa:32:19:f0: a9:0b:94:f7:10:0c:f0:ff:b0:a5:ef:76:6c:8c:aa:2d:83:d9: 10:a2:5b:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCRUYxMTAvBgNVBAUTKDJDRjE3RTY4NUI3ODhGNUVBRTRBMDFENTg4MzUyNjFC NUYwQjJFQTQwHhcNMjUwODAzMDUxNDQwWhcNMjUwODEwMDUxNDQwWjAYMRYwFAYD VQQDEw02ODhlZjA0MC1iMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKRbW4A4eVlZ+KKKS8IV7Cflc+2sNrv1rhr7nF1d0lZlCYGvdl4bTt/lb9qI pgy964R52gOeBpOnuKKStwcpCYeDOt47uUDLa5XpPM2KkC3/NJcedCr1/CMVG+m7 37RrgRh/ez8tgORYeuMXwXEx38JCTlgLeOwqb3161N6Di3J8SKt0OF1/SvP87BOV s01d3sMd/mgDGJUZsVr0NaK/3FsGNgMLM6XBdGIIXwt3e5F6T8E9JU1gvQ1yH6K5 MA0mEHsOaHia+xW2v3+MUJQBeSOGd7IL77y+mjyoaqXWx0ejxPukPzJDx6ySlpgq n0713zNSG9goSdYZVHgj79nPTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeZ04pI t5vuGnMVsNlEtyliJ8wfMB8GA1UdIwQYMBaAFCzxfmhbeI9erkoB1Yg1JhtfCy6k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DOUFGNUQyQ0NC MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGoxNnVTZ0hWaURVbUcxOExM cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xQRi1hRnQ0ajE2dVNnSFZpRFVtRzE4TExxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUJFRi9DOUFGNUQyQ0NCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9MUEYtYUZ0NGox NnVTZ0hWaURVbUcxOExMcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm0D3gNa2wiWj1NgN9x4NLcOlY0UXcYAgu9y1cpliFgJIK8kbA1JFA J95wJn+QVINvJvIoYWFuamaTCyrUKveiEzdahfNw7vfR5FK9us0GtAumBpLlMZm3 OSEcF58D1JHZRzgG3dBCNgCa2NVqBxdAkGycLnh7Oc4bdzqh8TOPOlROLc66E6b6 VvOgLUUGga/VjqcH5XK0OJJiUZE6qdsGJMRqYIpWzzL06v0BK/1r9dGUCHh9Yl5y pIDAm9m/FGqr/7MTL/FKNMQpnvKKr+mkG6atV9QwO2H2EN0TWLU/zNBTFgmDX6oy GfCpC5T3EAzw/7Cl73ZsjKotg9kQolvU -----END CERTIFICATE-----Generated at Mon Aug 4 11:13:40 2025 by rpki-client