$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft File: LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft (raw, json) Hash identifier: FubiPTQNz0ynna8NVGnPblPKeta21rcKVewajdSg5mU= Subject key identifier: E9:CD:E3:75:51:AB:8E:61:7D:A5:A7:98:6A:F3:19:E0:E6:A3:15:B9 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 054D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft Manifest number: 0512 Signing time: Sat 19 Jul 2025 00:07:05 +0000 Manifest this update: Sat 19 Jul 2025 00:07:04 +0000 Manifest next update: Sat 26 Jul 2025 00:07:04 +0000 Files and hashes: 1: LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl (hash: 6cZUEosowU9V0kayFpDl7tw74fyN2J1jZUiQUdMP4oI=) 2: CE988D80FB7311EC97CD7F85C4F9AE02.roa (hash: c5X0bRS1v3BmM8+viPXYxx/gJz2nVR8k5o+BxqMhvNI=) 3: BD4E85B09E6311ECA6EC8071C4F9AE02.roa (hash: 2jfJLAfv4sSmTjn+t4R2DbosLO6LZGV4JERzq1/IuT0=) 4: F88F642285E411EEB951413BC4F9AE02.roa (hash: 5XS7gAJ1w57LGdHifEwdGpT41QuHVgx3tURmBIG/Ph0=) 5: 1CD7BEFC4D0E11EEA09FBF12C4F9AE02.roa (hash: ZVXIXb68LMeIyoHASYy5oVFyflHWdmoVD7FAYMUQOp4=) 6: BBDA9B429E6311ECA6EC8071C4F9AE02.roa (hash: WiSL38A4AfTZxujdbevnM0BHhlMtOQknr2QyeEfpbeg=) 7: 95C12B8E21A111EE8360C139C4F9AE02.roa (hash: ANarnw7th2betqTUJ1dSr/6kmM20Z4BPNu0RmkGVouY=) 8: D6C060C27E1811EEB9B4FE4AC4F9AE02.roa (hash: H6lUECWs/LnmCnEJB/ye5BlXZoehdKlxdmR5+P/1VOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1357 (0x54d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Jul 19 00:07:04 2025 GMT Not After : Jul 26 00:07:04 2025 GMT Subject: CN=687ae1a8-3e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:22:b6:c2:93:7d:00:22:62:b1:2a:6c:0e: 84:16:29:aa:8f:5d:3e:8b:e6:7a:15:3c:bb:c3:6d: 3c:e1:4d:aa:99:24:4c:33:31:89:05:3d:39:6f:e1: b7:b4:bc:0d:f1:ae:7f:a6:75:93:e9:f0:a1:cf:d6: 7b:a1:8e:4b:6b:62:20:d5:8d:75:43:c1:6c:9b:70: cc:55:b9:0a:cd:4c:da:cb:89:31:68:f1:22:48:d3: 3f:31:7a:6b:d2:f3:88:56:6b:89:2c:7f:11:2e:b6: dd:c9:73:11:c3:dc:01:c3:37:78:d4:05:71:ca:20: 98:9b:f7:2f:c5:a6:d6:c9:d1:85:8b:29:f1:53:80: 78:1f:7b:bb:60:81:9a:3a:0f:c5:79:9f:79:15:82: 78:4e:ce:63:66:9c:1f:c2:49:c9:e7:11:64:1e:dc: ac:5b:33:99:cd:97:b7:46:ea:ff:47:0d:5d:5e:04: e2:d5:a9:ba:0c:84:d3:c1:15:a8:4a:6f:a0:67:5a: 68:99:ce:14:94:9b:7a:e6:d2:6f:2b:a0:de:2e:08: 91:9a:48:fb:ab:76:55:52:51:b7:a6:e7:c7:12:ff: b2:46:6e:f8:0f:f7:3e:6c:38:9a:a9:39:9f:d5:62: cc:87:29:54:b3:ef:9d:25:9d:da:62:88:f1:75:42: a5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CD:E3:75:51:AB:8E:61:7D:A5:A7:98:6A:F3:19:E0:E6:A3:15:B9 X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b9:39:19:73:5b:40:b8:dc:f5:1f:95:2a:57:08:3b:a6:24: a5:a3:ee:8e:83:75:16:39:ae:05:75:e1:32:5f:2a:66:81:1f: 25:8b:c3:fe:3f:7c:30:ea:dc:5a:0b:3f:1b:a6:b2:10:0d:2d: cd:49:f1:4a:55:e1:e2:a7:a4:2e:39:0c:80:ba:55:93:90:e6: 19:cd:5f:9f:0b:f3:94:2b:1e:ca:2f:41:8d:2b:1d:bc:4a:a7: 2e:2a:0b:82:73:fd:4d:d6:2f:3b:dc:0c:e7:c6:8e:1c:45:e0: 9b:89:d3:90:3d:62:6f:bc:62:4c:4d:a8:42:b6:80:c4:08:9a: aa:f0:e3:dc:82:21:68:4c:dc:71:45:66:e7:cb:67:a8:70:1a: 94:60:4e:03:e1:f2:aa:cd:bc:9b:35:e8:7d:84:c4:60:ae:dd: 81:b2:f8:b2:6e:31:b3:d8:d4:82:58:9f:ef:63:c6:64:c2:b8: ff:85:d3:9d:7a:db:39:bf:e6:cf:d9:a1:02:e3:63:d3:28:0f: 93:a4:08:e1:ac:32:71:8d:99:b5:3f:5b:6d:d2:ac:f0:4d:a2: 37:97:6c:06:95:81:d0:02:e4:2f:be:bb:37:32:27:d5:e6:7c: 82:4d:1f:db:b3:c4:87:98:9d:76:da:43:96:1b:92:87:47:fe: 38:3d:45:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjUwNzE5MDAwNzA0WhcNMjUwNzI2MDAwNzA0WjAYMRYwFAYD VQQDEw02ODdhZTFhOC0zZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDcitsKTfQAiYrEqbA6EFimqj10+i+Z6FTy7w2084U2qmSRMMzGJBT05b+G3 tLwN8a5/pnWT6fChz9Z7oY5La2Ig1Y11Q8Fsm3DMVbkKzUzay4kxaPEiSNM/MXpr 0vOIVmuJLH8RLrbdyXMRw9wBwzd41AVxyiCYm/cvxabWydGFiynxU4B4H3u7YIGa Og/FeZ95FYJ4Ts5jZpwfwknJ5xFkHtysWzOZzZe3Rur/Rw1dXgTi1am6DITTwRWo Sm+gZ1pomc4UlJt65tJvK6DeLgiRmkj7q3ZVUlG3pufHEv+yRm74D/c+bDiaqTmf 1WLMhylUs++dJZ3aYojxdUKlLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnN43VR q45hfaWnmGrzGeDmoxW5MB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q3Mi80NTc2QTY3MjI2MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgy d0x0WS1TRVo1bGdneVAxWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsuTkZc1tAuNz1H5UqVwg7piSlo+6Og3UWOa4FdeEyXypmgR8li8P+ P3ww6txaCz8bprIQDS3NSfFKVeHip6QuOQyAulWTkOYZzV+fC/OUKx7KL0GNKx28 SqcuKguCc/1N1i873Aznxo4cReCbidOQPWJvvGJMTahCtoDECJqq8OPcgiFoTNxx RWbny2eocBqUYE4D4fKqzbybNeh9hMRgrt2BsviybjGz2NSCWJ/vY8Zkwrj/hdOd ets5v+bP2aEC42PTKA+TpAjhrDJxjZm1P1tt0qzwTaI3l2wGlYHQAuQvvrs3MifV 5nyCTR/bs8SHmJ122kOWG5KHR/44PUVl -----END CERTIFICATE-----Generated at Sun Jul 20 14:36:12 2025 by rpki-client