$ rpki-client -vvf rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft File: Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft (raw, json) Hash identifier: XQ5A30iGd0+7FiVrFLmr0w9cP0O8IaVKn5dbebJ8NMU= Subject key identifier: A6:0F:36:9E:DE:11:35:77:90:A1:85:51:88:94:EE:EA:08:BB:05:60 Authority key identifier: 2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 Certificate issuer: /CN=A91325FD/serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Certificate serial: 351F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft Manifest number: 34E4 Signing time: Sun 20 Jul 2025 14:15:37 +0000 Manifest this update: Sun 20 Jul 2025 14:15:37 +0000 Manifest next update: Sun 27 Jul 2025 14:15:37 +0000 Files and hashes: 1: Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl (hash: wDFu8hZGKjnRJXZ84lKNiT4qd4YoEF1DKfjhyF62PSY=) 2: 58C5CA92AF9411EE9774D74CC4F9AE02.roa (hash: kZ7lGqUSa7QDbdQn5Phtug9wEvqAopDp24gkxncZqms=) 3: 6A45D74E118811EE88E9FE46C4F9AE02.roa (hash: gPXM355jFI8rfBytnJ40meI4jOctz96q7otlI3dOULI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:15:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13599 (0x351f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325FD, serialNumber=2E8DAF49E27E4FC12BE05EF7DF1A82BB287126A1 Validity Not Before: Jul 20 14:15:37 2025 GMT Not After : Jul 27 14:15:37 2025 GMT Subject: CN=687cfa09-ee01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:9a:ea:8f:4c:c1:f7:a1:5c:5e:78:a6:42: cc:e7:45:f3:02:7e:ff:ea:f4:2d:b4:9a:b9:a8:ea: a0:97:6d:fd:60:b0:78:0d:b6:0e:e2:f3:15:dc:3b: 50:8d:88:97:e5:8e:a0:2f:5a:5f:4d:98:87:0e:a6: d6:9e:3c:f2:df:4b:ff:9f:82:55:dd:a2:69:98:74: a8:df:7f:4d:bc:d6:1d:a1:9a:6e:fb:9c:c1:53:4e: 5b:f8:8d:c6:41:72:70:64:fd:8d:ce:29:5a:ba:c3: 2d:92:90:69:04:77:c4:aa:55:6b:64:ea:85:88:9c: 7a:64:d1:fd:5c:cb:3e:2b:c9:8b:75:dd:b8:13:07: 12:69:f3:1b:79:0d:45:c8:e5:c9:ce:77:33:2a:62: dd:d2:33:b6:4a:56:a5:50:82:b1:93:00:1e:af:a8: 1b:7b:3b:b3:44:1b:af:eb:42:31:19:ff:cb:b7:84: d8:36:e9:8d:1c:2c:47:f8:fa:8f:8b:2e:04:01:d6: b4:c6:ef:d3:98:76:09:0f:a5:50:54:7b:9a:5b:66: 47:18:36:59:fc:40:01:f7:eb:45:e9:8f:a4:7e:84: 96:8c:1b:aa:e7:c1:64:96:da:43:1a:b6:4c:fb:46: 4f:2c:b3:24:5c:7e:25:19:c2:bf:85:10:50:1a:02: 91:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0F:36:9E:DE:11:35:77:90:A1:85:51:88:94:EE:EA:08:BB:05:60 X509v3 Authority Key Identifier: keyid:2E:8D:AF:49:E2:7E:4F:C1:2B:E0:5E:F7:DF:1A:82:BB:28:71:26:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325FD/BCE4D10A1D6811E2AD6494A508B02CD2/Lo2vSeJ-T8Er4F733xqCuyhxJqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:00:c2:02:0c:82:1f:26:8f:fd:d3:f3:4a:b1:c9:20:17:7c: 97:98:c9:11:4e:1d:f2:19:85:c4:9f:c4:09:e9:3a:a2:4d:a4: 96:e1:b6:e3:a4:2b:44:28:f9:6c:fa:85:04:b8:06:ea:35:63: 4e:2f:9c:22:b9:b4:ff:1d:02:31:91:ea:1a:aa:0b:a5:04:a6: 09:7c:dd:81:4c:c5:87:8f:b2:c2:d5:22:0f:69:25:b2:61:5b: 8b:f1:1a:d5:2b:df:e9:b9:00:a1:99:3e:02:cc:01:ad:25:6f: 64:50:d8:36:da:b2:e6:f6:c4:58:0e:01:18:ec:0c:ea:f2:39: 95:7a:08:da:04:62:c1:2d:5d:dc:15:77:60:4c:36:b5:22:c9: 3f:7e:b0:26:6a:19:56:98:a1:0b:5c:3f:86:bc:83:1c:8f:3d: 68:ea:9c:44:0c:c3:56:3a:3e:8d:9e:d6:15:1e:5d:e5:d1:f8: f9:d7:a1:f3:06:fa:c4:37:6e:16:c3:a2:a9:3d:c8:9d:09:17: 02:fb:8b:15:11:e9:90:c5:45:f9:86:f7:86:33:f1:e6:fe:28: f5:7a:99:d7:3c:2d:cb:b0:11:db:c6:69:ae:e3:ac:4c:6f:8f: 52:b6:71:bf:c4:1d:ef:33:55:b7:39:85:58:ec:56:2c:69:ba: d6:7d:b7:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1RkQxMTAvBgNVBAUTKDJFOERBRjQ5RTI3RTRGQzEyQkUwNUVGN0RGMUE4MkJC Mjg3MTI2QTEwHhcNMjUwNzIwMTQxNTM3WhcNMjUwNzI3MTQxNTM3WjAYMRYwFAYD VQQDEw02ODdjZmEwOS1lZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZya6o9MwfehXF54pkLM50XzAn7/6vQttJq5qOqgl239YLB4DbYO4vMV3DtQ jYiX5Y6gL1pfTZiHDqbWnjzy30v/n4JV3aJpmHSo339NvNYdoZpu+5zBU05b+I3G QXJwZP2NzilausMtkpBpBHfEqlVrZOqFiJx6ZNH9XMs+K8mLdd24EwcSafMbeQ1F yOXJznczKmLd0jO2SlalUIKxkwAer6gbezuzRBuv60IxGf/Lt4TYNumNHCxH+PqP iy4EAda0xu/TmHYJD6VQVHuaW2ZHGDZZ/EAB9+tF6Y+kfoSWjBuq58FkltpDGrZM +0ZPLLMkXH4lGcK/hRBQGgKRxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYPNp7e ETV3kKGFUYiU7uoIuwVgMB8GA1UdIwQYMBaAFC6Nr0nifk/BK+Be998agrsocSah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVGRC9CQ0U0RDEwQTFE NjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4RXI0RjczM3hxQ3V5aHhK cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xvMnZTZUotVDhFcjRGNzMzeHFDdXloeEpxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVGRC9CQ0U0RDEwQTFENjgxMUUyQUQ2NDk0QTUwOEIwMkNEMi9MbzJ2U2VKLVQ4 RXI0RjczM3hxQ3V5aHhKcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbAMICDIIfJo/90/NKsckgF3yXmMkRTh3yGYXEn8QJ6TqiTaSW4bbj pCtEKPls+oUEuAbqNWNOL5wiubT/HQIxkeoaqgulBKYJfN2BTMWHj7LC1SIPaSWy YVuL8RrVK9/puQChmT4CzAGtJW9kUNg22rLm9sRYDgEY7Azq8jmVegjaBGLBLV3c FXdgTDa1Isk/frAmahlWmKELXD+GvIMcjz1o6pxEDMNWOj6NntYVHl3l0fj516Hz BvrEN24Ww6KpPcidCRcC+4sVEemQxUX5hveGM/Hm/ij1epnXPC3LsBHbxmmu46xM b49StnG/xB3vM1W3OYVY7FYsabrWfbcW -----END CERTIFICATE-----Generated at Sun Jul 20 18:49:28 2025 by rpki-client