$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft File: LsoZlE2psLqHJb5wu-9Unl0huTc.mft (raw, json) Hash identifier: +BwvLVlozI/QI156b1YChdQFKVuDY8fR9cb7KMpddVw= Subject key identifier: 67:22:5A:82:AD:09:58:D9:35:83:58:92:83:47:E5:DA:6E:FB:60:F7 Authority key identifier: 2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 Certificate issuer: /CN=A91F0C55/serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Certificate serial: 07CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft Manifest number: 07C4 Signing time: Mon 28 Jul 2025 21:34:48 +0000 Manifest this update: Mon 28 Jul 2025 21:34:47 +0000 Manifest next update: Mon 04 Aug 2025 21:34:47 +0000 Files and hashes: 1: LsoZlE2psLqHJb5wu-9Unl0huTc.crl (hash: iI7UCeTuS4JuXEqB645SblRaTWFNuw+86iKdghRsGvg=) 2: 29B0FABC031511EB8CE8EF17C4F9AE02.roa (hash: UDBTwJHFIDnykm5WO4HER1SExnJLtd1inkUNEKV6P8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Aug 2025 21:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C55, serialNumber=2ECA19944DA9B0BA8725BE70BBEF549E5D21B937 Validity Not Before: Jul 28 21:34:47 2025 GMT Not After : Aug 4 21:34:47 2025 GMT Subject: CN=6887ecf8-eaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:97:30:e0:53:85:95:65:49:aa:7f:64:80: 21:5d:49:62:e0:62:7c:50:b2:18:16:fa:bf:63:17: 73:30:ae:f0:58:83:60:63:ee:3f:3c:d1:69:97:12: fd:7b:fd:77:d0:52:9e:0c:6d:2d:0c:16:44:87:53: a2:af:2a:56:7c:c8:20:97:f1:2c:40:2d:1e:bd:f0: de:2d:9a:3f:e2:c2:fa:11:fc:60:9e:39:47:a1:f8: 08:46:5b:ee:5e:cb:68:24:27:dd:27:cd:e7:64:30: a9:dc:6e:5e:bd:c7:b8:bc:86:7d:36:17:f8:b7:f1: 5a:3e:e0:aa:53:27:32:e2:70:9c:dd:e6:04:83:ad: 13:d3:9e:6e:ad:8e:bc:52:0b:56:67:03:53:c1:71: 57:07:0c:46:26:3a:14:32:e4:e6:57:5b:ff:b7:5d: 8e:f2:ef:16:43:8d:88:d8:a4:36:76:08:79:a8:3a: e9:c1:08:81:a0:1c:bd:f8:84:09:9e:71:e7:82:af: 08:b7:b4:18:cb:7b:35:2a:e1:43:02:35:fb:9e:18: cd:73:77:e5:5c:26:bc:d2:08:40:c5:a4:bd:d3:f2: 13:83:45:c0:fc:a6:9e:cb:70:6a:cb:64:b7:11:e1: f5:0b:12:3a:9a:0b:3a:70:79:3d:94:43:b1:3e:d8: d7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:22:5A:82:AD:09:58:D9:35:83:58:92:83:47:E5:DA:6E:FB:60:F7 X509v3 Authority Key Identifier: keyid:2E:CA:19:94:4D:A9:B0:BA:87:25:BE:70:BB:EF:54:9E:5D:21:B9:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LsoZlE2psLqHJb5wu-9Unl0huTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C55/4157FF96031311EBA70CC812C4F9AE02/LsoZlE2psLqHJb5wu-9Unl0huTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c3:e6:40:29:8d:b5:6c:21:37:0f:20:d5:92:fe:5b:55:97: ad:62:e1:ca:6b:15:74:6b:b1:84:d4:34:72:f5:11:4b:51:f8: 13:5a:47:96:8c:ec:79:21:e6:34:d4:c2:8f:fd:45:6e:39:4a: 04:b6:53:6a:18:73:38:17:ea:f7:22:b0:71:49:28:f9:2f:1e: f9:7a:85:5e:77:a0:39:2b:37:9f:25:02:9b:ee:1f:f4:e4:13: 37:30:75:96:f0:74:74:08:c6:14:87:fb:93:16:a6:3e:af:4d: 24:6d:58:6e:02:cc:7e:3e:12:ac:15:5c:05:07:07:9e:82:9a: 63:3f:5a:c5:ff:36:3b:f4:0f:55:90:7a:d8:52:4a:1c:d0:92: 18:f2:bd:c4:6e:ef:f3:fa:98:d4:03:0a:8f:8e:ae:09:19:4e: 3c:ff:a0:6e:f3:ae:1e:49:54:71:36:ce:a0:40:6d:0d:cb:0b: ac:bd:9f:fd:30:08:10:de:0a:b9:0b:73:cd:08:6f:c8:57:c1: 4b:ce:17:f7:ac:31:7e:07:2d:f5:6c:53:5e:a3:d4:ab:22:ef: 87:41:98:cb:c6:87:46:14:e6:4f:7e:bf:0c:24:b6:d1:5e:f1: 15:a5:4f:16:62:5f:f1:8e:3e:2a:bc:bc:33:6a:11:60:ab:38: fc:31:6b:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDNTUxMTAvBgNVBAUTKDJFQ0ExOTk0NERBOUIwQkE4NzI1QkU3MEJCRUY1NDlF NUQyMUI5MzcwHhcNMjUwNzI4MjEzNDQ3WhcNMjUwODA0MjEzNDQ3WjAYMRYwFAYD VQQDEw02ODg3ZWNmOC1lYWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/2XMOBThZVlSap/ZIAhXUli4GJ8ULIYFvq/YxdzMK7wWINgY+4/PNFplxL9 e/130FKeDG0tDBZEh1OirypWfMggl/EsQC0evfDeLZo/4sL6EfxgnjlHofgIRlvu XstoJCfdJ83nZDCp3G5evce4vIZ9Nhf4t/FaPuCqUycy4nCc3eYEg60T055urY68 UgtWZwNTwXFXBwxGJjoUMuTmV1v/t12O8u8WQ42I2KQ2dgh5qDrpwQiBoBy9+IQJ nnHngq8It7QYy3s1KuFDAjX7nhjNc3flXCa80ghAxaS90/ITg0XA/Kaey3Bqy2S3 EeH1CxI6mgs6cHk9lEOxPtjXDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGciWoKt CVjZNYNYkoNH5dpu+2D3MB8GA1UdIwQYMBaAFC7KGZRNqbC6hyW+cLvvVJ5dIbk3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEM1NS80MTU3RkY5NjAz MTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNMcUhKYjV3dS05VW5sMGh1 VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xzb1psRTJwc0xxSEpiNXd1LTlVbmwwaHVUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEM1NS80MTU3RkY5NjAzMTMxMUVCQTcwQ0M4MTJDNEY5QUUwMi9Mc29abEUycHNM cUhKYjV3dS05VW5sMGh1VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8w+ZAKY21bCE3DyDVkv5bVZetYuHKaxV0a7GE1DRy9RFLUfgTWkeW jOx5IeY01MKP/UVuOUoEtlNqGHM4F+r3IrBxSSj5Lx75eoVed6A5KzefJQKb7h/0 5BM3MHWW8HR0CMYUh/uTFqY+r00kbVhuAsx+PhKsFVwFBweegppjP1rF/zY79A9V kHrYUkoc0JIY8r3Ebu/z+pjUAwqPjq4JGU48/6Bu864eSVRxNs6gQG0NywusvZ/9 MAgQ3gq5C3PNCG/IV8FLzhf3rDF+By31bFNeo9SrIu+HQZjLxodGFOZPfr8MJLbR XvEVpU8WYl/xjj4qvLwzahFgqzj8MWvL -----END CERTIFICATE-----Generated at Wed Jul 30 14:47:26 2025 by rpki-client