$ rpki-client -vvf rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft File: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft (raw, json) Hash identifier: EGw2w3ntElaIe/ipi3zxu5Fl/yPri4QPig/vK1peYoA= Subject key identifier: C3:FF:55:17:D7:C7:C8:28:94:FF:0F:7B:33:2C:81:4E:1B:96:2B:D5 Authority key identifier: 2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A Certificate issuer: /CN=A91618E1/serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft Manifest number: 024C Signing time: Sat 19 Jul 2025 02:16:31 +0000 Manifest this update: Sat 19 Jul 2025 02:16:30 +0000 Manifest next update: Sat 26 Jul 2025 02:16:30 +0000 Files and hashes: 1: LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl (hash: CS3fbZusZTfNqLZsufvmS4cEkYfUpyKDX9EFJwcnaiI=) 2: 9917A4D6285311ED9DD8324EC4F9AE02.roa (hash: l2W7FJxUViOnExRcyTKGhj9MZSuDCp14Nj5oTAGxPHw=) 3: 9891A3A4285311ED9DD8324EC4F9AE02.roa (hash: 4W6/p+0KqdQzOWI5KzYsI4xB+6G+0sO88djovDswBB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91618E1, serialNumber=2D0CB0E98F562E9366D5A995FB26F666A8C0A95A Validity Not Before: Jul 19 02:16:30 2025 GMT Not After : Jul 26 02:16:30 2025 GMT Subject: CN=687afffe-a3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:19:3f:57:c9:63:12:7f:91:23:91:48:28:2b: f4:07:bc:b6:98:ed:66:d5:b1:a0:62:05:b8:2c:bc: b7:f7:b7:34:f5:a6:65:70:ff:18:d0:38:12:9f:dc: 9a:fc:9e:45:24:af:86:7a:c9:e5:7e:ad:fa:62:68: c0:75:2a:30:db:aa:fa:54:77:13:64:86:2d:c2:84: b7:77:d6:38:4a:5a:d4:c6:96:ed:35:1f:a7:72:1a: d7:b3:d6:06:0b:94:de:b8:d3:a8:9b:4e:bb:b0:a4: d9:2a:f5:75:85:ea:ae:87:c7:07:66:d5:8b:0e:ec: 18:ae:dc:e1:a6:83:d1:cc:2c:bf:26:d8:91:1e:56: c0:e6:a0:39:05:fd:57:e2:c6:65:33:b7:85:8f:f4: cc:a0:44:07:35:2c:8b:c0:b5:ce:3b:97:27:cc:0a: d0:21:9e:85:6b:76:98:e8:e2:d3:25:6f:1f:39:70: 46:be:11:ac:ed:d0:40:26:4c:71:39:09:1d:97:b5: a6:55:65:ed:59:30:54:32:8f:1d:df:df:b6:73:00: a6:71:1e:5a:c6:45:86:23:85:c2:02:8d:4d:4b:48: f4:c0:1e:3e:f3:ee:a1:06:07:4a:cd:00:91:53:f2: f8:3d:f6:65:8e:1a:8c:54:ac:c3:06:5f:bb:1a:d9: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FF:55:17:D7:C7:C8:28:94:FF:0F:7B:33:2C:81:4E:1B:96:2B:D5 X509v3 Authority Key Identifier: keyid:2D:0C:B0:E9:8F:56:2E:93:66:D5:A9:95:FB:26:F6:66:A8:C0:A9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618E1/1131662C285011ED8C89794AC4F9AE02/LQyw6Y9WLpNm1amV-yb2ZqjAqVo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:6c:38:9e:06:30:ad:32:4e:5e:5f:5e:1f:aa:0d:12:b3:a4: dc:6d:eb:d4:42:0b:b1:e9:80:8a:80:6e:57:eb:ca:d8:18:a6: ca:ed:fd:c0:5f:d5:54:2a:fa:fb:25:ed:de:10:66:94:10:6f: 0c:e9:2a:00:54:e7:68:49:4f:72:7d:73:f5:1d:67:2c:69:32: f0:21:df:26:ad:3c:5b:fb:6b:cd:9a:ba:87:55:b1:d6:49:1c: 5b:a1:f7:8a:a8:32:c5:92:60:0b:05:b3:cd:80:21:c3:73:af: 4e:c9:48:9a:48:8d:72:b2:60:06:c7:98:c8:b2:68:cc:c6:a3: 0e:8b:59:97:9a:c8:a0:cc:85:37:06:fd:23:9c:c6:d5:cd:2a: 3e:7a:8e:65:fc:c7:de:99:b1:b0:9d:0f:66:aa:cc:ee:52:81: 45:29:c7:db:43:9b:85:98:62:83:70:c5:ee:a5:de:83:d4:bc: 64:0c:f7:9f:09:92:53:00:d7:00:ab:e7:9e:65:1c:ae:25:30: 8c:7a:80:5a:8e:ba:cf:0f:7c:7e:55:d3:ab:ed:e7:65:2f:00: 83:60:f7:3f:07:ee:41:50:ea:6d:15:13:fe:8f:0f:28:37:b7: f9:63:6a:82:6b:16:2f:c6:5e:80:e6:df:f8:62:4d:aa:cc:10: 50:7a:98:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE4RTExMTAvBgNVBAUTKDJEMENCMEU5OEY1NjJFOTM2NkQ1QTk5NUZCMjZGNjY2 QThDMEE5NUEwHhcNMjUwNzE5MDIxNjMwWhcNMjUwNzI2MDIxNjMwWjAYMRYwFAYD VQQDEw02ODdhZmZmZS1hM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Rk/V8ljEn+RI5FIKCv0B7y2mO1m1bGgYgW4LLy397c09aZlcP8Y0DgSn9ya /J5FJK+Gesnlfq36YmjAdSow26r6VHcTZIYtwoS3d9Y4SlrUxpbtNR+nchrXs9YG C5TeuNOom067sKTZKvV1hequh8cHZtWLDuwYrtzhpoPRzCy/JtiRHlbA5qA5Bf1X 4sZlM7eFj/TMoEQHNSyLwLXOO5cnzArQIZ6Fa3aY6OLTJW8fOXBGvhGs7dBAJkxx OQkdl7WmVWXtWTBUMo8d39+2cwCmcR5axkWGI4XCAo1NS0j0wB4+8+6hBgdKzQCR U/L4PfZljhqMVKzDBl+7GtnNsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP/VRfX x8golP8PezMsgU4blivVMB8GA1UdIwQYMBaAFC0MsOmPVi6TZtWplfsm9maowKla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MThFMS8xMTMxNjYyQzI4 NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xwTm0xYW1WLXliMlpxakFx Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xReXc2WTlXTHBObTFhbVYteWIyWnFqQXFWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MThFMS8xMTMxNjYyQzI4NTAxMUVEOEM4OTc5NEFDNEY5QUUwMi9MUXl3Nlk5V0xw Tm0xYW1WLXliMlpxakFxVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTbDieBjCtMk5eX14fqg0Ss6TcbevUQgux6YCKgG5X68rYGKbK7f3A X9VUKvr7Je3eEGaUEG8M6SoAVOdoSU9yfXP1HWcsaTLwId8mrTxb+2vNmrqHVbHW SRxbofeKqDLFkmALBbPNgCHDc69OyUiaSI1ysmAGx5jIsmjMxqMOi1mXmsigzIU3 Bv0jnMbVzSo+eo5l/MfembGwnQ9mqszuUoFFKcfbQ5uFmGKDcMXupd6D1LxkDPef CZJTANcAq+eeZRyuJTCMeoBajrrPD3x+VdOr7edlLwCDYPc/B+5BUOptFRP+jw8o N7f5Y2qCaxYvxl6A5t/4Yk2qzBBQephY -----END CERTIFICATE-----Generated at Sun Jul 20 15:10:47 2025 by rpki-client