$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft File: LJM3XsY801R8z5PRPhK1urgy_Zw.mft (raw, json) Hash identifier: MeIqjUTxAG9ZHwsvQj+0DCkN5rSyLw/08ML0BIcXXNY= Subject key identifier: 61:4C:94:04:8A:4F:C9:48:21:4F:3E:6A:FB:2B:3C:32:96:E2:9F:7D Authority key identifier: 2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C Certificate issuer: /CN=A91E0C5F/serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Certificate serial: 0F81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft Manifest number: 1652 Signing time: Sun 20 Jul 2025 17:34:35 +0000 Manifest this update: Sun 20 Jul 2025 17:34:34 +0000 Manifest next update: Sun 27 Jul 2025 17:34:34 +0000 Files and hashes: 1: LJM3XsY801R8z5PRPhK1urgy_Zw.crl (hash: /IhUe0Nkf0FL5q8r/I1BE5Lu0M6cAMzKnobnlT17oAI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3969 (0xf81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0C5F, serialNumber=2C93375EC63CD3547CCF93D13E12B5BAB832FD9C Validity Not Before: Jul 20 17:34:34 2025 GMT Not After : Jul 27 17:34:34 2025 GMT Subject: CN=687d28aa-2169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:69:9a:15:3d:44:3f:2c:cb:be:62:91:f1: 59:21:1a:11:e6:38:9a:1d:53:9f:17:05:b1:f1:5c: f9:6c:8e:2e:6b:10:38:de:f8:4f:9c:6e:34:90:39: 62:27:1e:ef:59:56:2e:01:95:fd:5b:8b:6e:54:29: 56:03:12:09:92:ec:21:9a:85:3f:c5:78:c8:c4:8c: a0:3d:ab:39:a5:e1:0b:42:6f:59:6a:fa:a4:e4:5e: 6c:79:80:1b:b3:2e:09:c7:14:06:cf:dc:66:1d:97: 37:77:5a:72:b8:9d:fa:bc:72:42:7a:7f:7e:98:03: f1:fc:c2:fd:b4:c1:c6:10:79:6c:1e:0c:6d:aa:dc: c8:43:4b:86:bf:9d:dc:48:03:eb:03:b1:cc:c5:72: e2:79:2f:c5:73:24:4b:6b:44:18:b2:ee:e2:81:df: 74:c9:9d:48:99:8e:2f:f6:8e:98:cc:26:b5:45:ac: 46:21:44:ef:87:27:e1:4c:f7:79:29:04:54:56:3b: 76:4f:16:9d:f7:44:48:d5:d8:6e:73:83:7c:0f:e5: 53:e4:03:e9:5a:59:25:cd:c3:b1:4b:38:08:05:2a: 3c:18:94:4e:16:0f:c4:78:89:59:9f:36:71:9f:41: 95:77:8a:b2:db:18:86:c1:18:52:f0:87:ac:53:4f: cb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4C:94:04:8A:4F:C9:48:21:4F:3E:6A:FB:2B:3C:32:96:E2:9F:7D X509v3 Authority Key Identifier: keyid:2C:93:37:5E:C6:3C:D3:54:7C:CF:93:D1:3E:12:B5:BA:B8:32:FD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LJM3XsY801R8z5PRPhK1urgy_Zw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/LJM3XsY801R8z5PRPhK1urgy_Zw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:75:fa:99:63:bb:39:bc:29:07:26:89:7f:e2:95:e3:02:fb: ce:a8:63:8a:4a:0a:ec:1d:0c:03:d4:08:3f:63:70:92:10:bf: f1:63:c1:93:7f:37:24:37:8e:f8:ab:4c:45:2f:4f:d8:24:d2: 0c:c4:5e:39:1e:5e:e7:51:ac:7d:e4:cb:63:74:14:ce:c9:03: 11:a6:e0:b4:7a:58:f3:b5:06:2d:11:d1:71:24:67:d7:a8:bc: 90:77:ac:63:f6:38:aa:16:16:7e:92:f9:d7:d8:c5:95:bf:bb: 03:ac:a3:d5:66:aa:03:ad:6f:3c:d2:41:b8:14:09:c7:44:14: 68:e1:2b:d4:21:a2:71:ff:76:9a:df:cd:45:fa:7b:75:99:d9: db:ec:c0:ac:41:6f:d2:7b:3e:b5:fc:6c:c9:c4:bc:ca:d1:ef: 34:65:1c:2b:85:32:eb:0e:21:1a:ad:87:e4:f2:f2:0a:6c:84: f6:c4:cf:92:06:61:88:88:bc:94:db:a8:31:55:5a:7f:ec:16: c3:e6:0d:9b:d6:ad:22:a8:24:5e:00:9c:8d:12:8a:13:b8:5c: ad:3b:ce:ce:6e:38:15:12:8f:17:96:b9:ab:3f:2d:5e:a7:b6: f3:0c:e7:61:5a:bc:19:57:f8:0f:92:99:34:69:a7:13:6f:6e: 4b:dd:ef:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDNUYxMTAvBgNVBAUTKDJDOTMzNzVFQzYzQ0QzNTQ3Q0NGOTNEMTNFMTJCNUJB QjgzMkZEOUMwHhcNMjUwNzIwMTczNDM0WhcNMjUwNzI3MTczNDM0WjAYMRYwFAYD VQQDEw02ODdkMjhhYS0yMTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBlpmhU9RD8sy75ikfFZIRoR5jiaHVOfFwWx8Vz5bI4uaxA43vhPnG40kDli Jx7vWVYuAZX9W4tuVClWAxIJkuwhmoU/xXjIxIygPas5peELQm9Zavqk5F5seYAb sy4JxxQGz9xmHZc3d1pyuJ36vHJCen9+mAPx/ML9tMHGEHlsHgxtqtzIQ0uGv53c SAPrA7HMxXLieS/FcyRLa0QYsu7igd90yZ1ImY4v9o6YzCa1RaxGIUTvhyfhTPd5 KQRUVjt2Txad90RI1dhuc4N8D+VT5APpWlklzcOxSzgIBSo8GJROFg/EeIlZnzZx n0GVd4qy2xiGwRhS8IesU0/L2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFMlASK T8lIIU8+avsrPDKW4p99MB8GA1UdIwQYMBaAFCyTN17GPNNUfM+T0T4Stbq4Mv2c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEM1Ri84QjU0N0E3MjY2 NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAxUjh6NVBSUGhLMXVyZ3lf WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xKTTNYc1k4MDFSOHo1UFJQaEsxdXJneV9ady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEM1Ri84QjU0N0E3MjY2NjQxMUU5ODJEMDU5NzRDNEY5QUUwMi9MSk0zWHNZODAx Ujh6NVBSUGhLMXVyZ3lfWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVdfqZY7s5vCkHJol/4pXjAvvOqGOKSgrsHQwD1Ag/Y3CSEL/xY8GT fzckN474q0xFL0/YJNIMxF45Hl7nUax95MtjdBTOyQMRpuC0eljztQYtEdFxJGfX qLyQd6xj9jiqFhZ+kvnX2MWVv7sDrKPVZqoDrW880kG4FAnHRBRo4SvUIaJx/3aa 381F+nt1mdnb7MCsQW/Sez61/GzJxLzK0e80ZRwrhTLrDiEarYfk8vIKbIT2xM+S BmGIiLyU26gxVVp/7BbD5g2b1q0iqCReAJyNEooTuFytO87ObjgVEo8XlrmrPy1e p7bzDOdhWrwZV/gPkpk0aacTb25L3e+m -----END CERTIFICATE-----Generated at Mon Jul 21 13:24:04 2025 by rpki-client