$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft File: lrZQExL54S6xmmT2IuF81Ced8M8.mft (raw, json) Hash identifier: FFIeJ4FI+dx9Sw2LoP6f1RWqqFUwTXA6BN07/fjC910= Subject key identifier: E4:9C:E6:EE:38:16:70:84:D0:D1:B1:EB:41:F5:AE:EB:B7:05:DD:0B Authority key identifier: 96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF Certificate issuer: /CN=A91FBE5E/serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft Manifest number: F5 Signing time: Sat 09 Aug 2025 05:41:43 +0000 Manifest this update: Sat 09 Aug 2025 05:41:43 +0000 Manifest next update: Sat 16 Aug 2025 05:41:43 +0000 Files and hashes: 1: lrZQExL54S6xmmT2IuF81Ced8M8.crl (hash: uKRHi4VMlqkxKOERbdzyWmFm/bFwOo22Lzm6dPFpL9U=) 2: 78A6163A03A111EF8B02B62AC4F9AE02.roa (hash: MhVCwr+DLav+lA/a+EyaekFbp041Ik8QtWt4lKnp/qM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBE5E, serialNumber=96B6501312F9E12EB19A64F622E17CD4279DF0CF Validity Not Before: Aug 9 05:41:43 2025 GMT Not After : Aug 16 05:41:43 2025 GMT Subject: CN=6896df97-9369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:fc:37:d0:8d:25:05:41:3f:99:2a:8e:e3: 16:c6:e5:42:0e:d4:d6:1b:98:51:00:ac:49:78:83: ea:8b:e6:e6:c6:e9:4b:d0:78:22:99:de:fd:43:38: d7:5b:70:ed:ee:66:68:1d:1d:4f:79:0f:60:06:a6: 95:0d:8a:d2:e7:33:d3:45:1d:95:d7:30:65:49:f4: 5e:a6:9d:18:52:1a:70:1c:13:49:89:03:90:10:54: d7:d8:ae:bb:03:ff:22:5e:be:e6:05:21:9a:de:fd: 28:8f:ec:14:d2:d6:57:0a:58:81:b3:79:a6:1a:35: ca:45:8f:cb:d6:b4:40:7c:2c:7b:cf:46:c3:d8:86: 4b:48:61:28:73:5b:67:cc:b9:23:89:42:54:70:ab: 8d:ad:60:99:94:5b:75:56:f0:20:43:ed:88:3e:b5: 26:7c:62:0f:67:92:5c:1b:af:f6:83:46:b6:2c:d4: a1:52:ce:fd:22:af:01:61:c4:0e:c3:2d:f6:de:35: 7c:3f:74:3d:a1:76:37:75:ce:f9:7f:e4:f9:40:b4: cb:d7:68:93:76:50:82:2e:21:b9:1d:b3:e0:01:44: e1:25:c7:10:e3:11:c3:dd:5c:ab:e7:af:31:a4:ba: 30:a0:60:86:b3:f1:c0:ff:b9:9b:47:77:24:78:c0: bb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9C:E6:EE:38:16:70:84:D0:D1:B1:EB:41:F5:AE:EB:B7:05:DD:0B X509v3 Authority Key Identifier: keyid:96:B6:50:13:12:F9:E1:2E:B1:9A:64:F6:22:E1:7C:D4:27:9D:F0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lrZQExL54S6xmmT2IuF81Ced8M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBE5E/83B872F4039F11EF90F66227C4F9AE02/lrZQExL54S6xmmT2IuF81Ced8M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:92:12:a5:73:8d:5a:9a:35:ff:9b:c1:d4:a6:59:53:eb:0e: 1a:82:ec:53:5a:1c:17:b5:5f:0b:96:3f:63:5c:ff:5c:b6:5d: 9b:08:58:62:ac:f3:43:70:94:e2:c3:85:a7:de:03:16:7d:6e: 9b:71:1b:f1:e3:38:90:32:a3:a9:3e:19:69:5f:6d:89:70:07: e0:b9:61:f2:c6:e2:27:fb:85:bb:e4:cd:fd:23:cd:9d:0f:2d: 45:9f:72:2b:c0:7a:96:6d:10:c5:d5:2f:9d:05:ce:f8:69:cf: a7:94:ee:2f:4b:84:15:14:d3:34:a5:87:2f:c6:92:27:21:4b: 81:55:2f:eb:3d:a1:28:a0:1a:17:26:66:41:9b:06:3e:3d:de: 1d:36:fc:54:f8:3e:1f:56:b1:bf:4b:9e:ec:97:fe:55:9c:42: b7:02:6d:b7:17:63:c0:5a:34:fb:ae:34:ec:8d:14:d2:36:ed: 75:40:e5:b7:7d:97:57:3e:ab:db:58:40:09:af:81:09:a9:1b: 98:d8:f6:b8:9c:71:7d:68:04:b6:2d:43:6b:bd:a6:c8:3d:bc: c2:5b:14:9c:54:8a:4c:82:6c:01:b2:6a:f3:a6:22:43:6f:f4: b2:1e:38:2b:41:67:f1:1b:82:d4:61:11:0c:03:40:2c:bc:13: b4:89:6d:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJFNUUxMTAvBgNVBAUTKDk2QjY1MDEzMTJGOUUxMkVCMTlBNjRGNjIyRTE3Q0Q0 Mjc5REYwQ0YwHhcNMjUwODA5MDU0MTQzWhcNMjUwODE2MDU0MTQzWjAYMRYwFAYD VQQDEw02ODk2ZGY5Ny05MzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqf/8N9CNJQVBP5kqjuMWxuVCDtTWG5hRAKxJeIPqi+bmxulL0Hgimd79QzjX W3Dt7mZoHR1PeQ9gBqaVDYrS5zPTRR2V1zBlSfRepp0YUhpwHBNJiQOQEFTX2K67 A/8iXr7mBSGa3v0oj+wU0tZXCliBs3mmGjXKRY/L1rRAfCx7z0bD2IZLSGEoc1tn zLkjiUJUcKuNrWCZlFt1VvAgQ+2IPrUmfGIPZ5JcG6/2g0a2LNShUs79Iq8BYcQO wy323jV8P3Q9oXY3dc75f+T5QLTL12iTdlCCLiG5HbPgAUThJccQ4xHD3Vyr568x pLowoGCGs/HA/7mbR3ckeMC7rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSc5u44 FnCE0NGx60H1ruu3Bd0LMB8GA1UdIwQYMBaAFJa2UBMS+eEusZpk9iLhfNQnnfDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkU1RS84M0I4NzJGNDAz OUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRTNnhtbVQySXVGODFDZWQ4 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xyWlFFeEw1NFM2eG1tVDJJdUY4MUNlZDhNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkU1RS84M0I4NzJGNDAzOUYxMUVGOTBGNjYyMjdDNEY5QUUwMi9sclpRRXhMNTRT NnhtbVQySXVGODFDZWQ4TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBakhKlc41amjX/m8HUpllT6w4aguxTWhwXtV8Llj9jXP9ctl2bCFhi rPNDcJTiw4Wn3gMWfW6bcRvx4ziQMqOpPhlpX22JcAfguWHyxuIn+4W75M39I82d Dy1Fn3IrwHqWbRDF1S+dBc74ac+nlO4vS4QVFNM0pYcvxpInIUuBVS/rPaEooBoX JmZBmwY+Pd4dNvxU+D4fVrG/S57sl/5VnEK3Am23F2PAWjT7rjTsjRTSNu11QOW3 fZdXPqvbWEAJr4EJqRuY2Pa4nHF9aAS2LUNrvabIPbzCWxScVIpMgmwBsmrzpiJD b/SyHjgrQWfxG4LUYREMA0AsvBO0iW04 -----END CERTIFICATE-----Generated at Sun Aug 10 13:48:05 2025 by rpki-client