$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft File: lMjvPyqSLuFEqm8LZkNspGbMSwo.mft (raw, json) Hash identifier: nBMhsaI/4lYg4gyl6mVhA4n8M2lSRNZblYAur5GFG5I= Subject key identifier: D9:BA:BA:81:E7:FF:E5:BB:88:21:D2:83:C8:E1:32:05:7A:1F:B6:E0 Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft Manifest number: 2E Signing time: Sat 19 Jul 2025 07:59:30 +0000 Manifest this update: Sat 19 Jul 2025 07:59:30 +0000 Manifest next update: Sat 26 Jul 2025 07:59:30 +0000 Files and hashes: 1: lMjvPyqSLuFEqm8LZkNspGbMSwo.crl (hash: MbGrYbRgTxOHTXC/gPvrZpj1iFzRUuMTxt0LoM/qyrI=) 2: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (hash: Jax3Kvx2J0ODr5GgDNYrVUtv6/aFnopa2LSsnYbiSlg=) 3: 3C2E004221F411F0848CDE7EC4F9AE02.roa (hash: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Jul 19 07:59:30 2025 GMT Not After : Jul 26 07:59:30 2025 GMT Subject: CN=687b5062-2664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:43:aa:2e:50:c0:58:04:a3:57:93:2c:2c:b9: 42:4c:3b:d8:d1:44:20:14:b8:86:37:d7:81:c1:56: c2:79:70:66:73:dd:28:55:a8:76:6f:35:4a:50:5e: a3:03:33:e3:09:98:b1:64:80:06:e4:ba:0d:eb:a5: d5:05:af:b9:07:bf:dc:fc:06:ec:fc:53:68:1e:38: e1:e2:00:c2:b8:de:de:09:f4:33:ea:8c:26:4a:a1: 5d:d8:cb:31:d0:b9:02:64:54:54:1b:5f:c1:9f:ba: 94:2c:5e:7c:55:4a:d2:5e:d8:50:be:c3:52:77:ef: 17:b2:f7:d9:23:e5:f9:e9:4b:a8:5b:4c:31:98:17: 19:e3:14:6d:87:92:5c:f9:89:65:7d:5c:62:d0:c1: 8f:a9:95:3d:d8:c5:79:1d:f4:37:9e:06:e3:6f:65: b5:2a:66:1a:96:f6:8c:48:6a:87:84:2f:49:5f:9f: b3:dc:c2:e0:83:15:f7:93:75:f3:cb:b0:ca:5f:09: 72:da:49:9f:0c:68:f2:cb:05:23:79:31:12:cc:fa: 83:8e:6c:fb:6d:6a:5b:16:9a:9c:89:73:3f:85:d0: a3:52:1d:11:19:12:fc:04:02:cd:d1:df:9a:a8:73: 7f:44:3e:8f:e0:7f:0d:a1:e3:50:f7:e8:5a:f2:d9: 27:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BA:BA:81:E7:FF:E5:BB:88:21:D2:83:C8:E1:32:05:7A:1F:B6:E0 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:07:db:b8:f4:cc:57:ce:b4:ca:2d:b9:44:ff:a8:e3:4d:79: a8:ef:b2:36:66:26:87:80:0e:f6:df:fc:bc:be:96:c8:7f:2a: 9a:fa:33:47:d1:eb:9d:52:63:28:1f:8d:c5:88:97:1c:b5:23: fc:3d:67:ba:93:84:f1:c8:c9:7d:81:f8:2d:9f:26:f4:3a:ab: 39:06:5d:30:d3:f2:ea:9a:c9:20:57:3d:59:0c:b5:af:a6:bb: 4b:22:52:ec:ae:48:ef:b1:97:42:dd:d6:68:6a:d2:a2:d4:79: a9:5c:bf:b3:4e:e7:08:21:75:57:30:99:45:0c:7e:f9:b7:f4: 39:35:b6:e3:e5:f5:d9:18:d8:97:b0:17:4a:dc:a2:54:6c:08: c2:90:d8:a3:a8:03:21:cf:ce:4b:b8:19:f1:9b:a3:f7:6a:94: 00:77:5b:4f:aa:6c:b9:6c:b8:73:3d:0e:9f:f9:d0:f4:02:2b: 03:c0:9a:36:6d:93:b9:4f:07:6f:e1:af:80:c1:95:80:0b:c8: 3c:d4:d7:30:02:82:cb:36:93:37:b1:51:90:08:b5:21:8e:b4: 27:b2:d4:c4:ee:54:1c:6d:0e:8b:c2:d5:a2:18:d9:3d:44:48: b6:bf:ee:d4:23:19:89:7c:83:a1:33:d2:27:f6:59:fb:7c:27: 3b:9c:b5:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzdBQjExMC8GA1UEBRMoOTRDOEVGM0YyQTkyMkVFMTQ0QUE2RjBCNjY0MzZDQTQ2 NkNDNEIwQTAeFw0yNTA3MTkwNzU5MzBaFw0yNTA3MjYwNzU5MzBaMBgxFjAUBgNV BAMTDTY4N2I1MDYyLTI2NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Q6ouUMBYBKNXkywsuUJMO9jRRCAUuIY314HBVsJ5cGZz3ShVqHZvNUpQXqMD M+MJmLFkgAbkug3rpdUFr7kHv9z8Buz8U2geOOHiAMK43t4J9DPqjCZKoV3YyzHQ uQJkVFQbX8GfupQsXnxVStJe2FC+w1J37xey99kj5fnpS6hbTDGYFxnjFG2Hklz5 iWV9XGLQwY+plT3YxXkd9DeeBuNvZbUqZhqW9oxIaoeEL0lfn7PcwuCDFfeTdfPL sMpfCXLaSZ8MaPLLBSN5MRLM+oOObPttalsWmpyJcz+F0KNSHREZEvwEAs3R35qo c39EPo/gfw2h41D36Fry2SdfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2bq6gef/ 5buIIdKDyOEyBXoftuAwHwYDVR0jBBgwFoAUlMjvPyqSLuFEqm8LZkNspGbMSwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzN0FCLzI2NDg0NTkwMjFG MzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE1qdlB5cVNMdUZFcW04TFprTnNwR2JNU3dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz N0FCLzI2NDg0NTkwMjFGMzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVG RXFtOExaa05zcEdiTVN3by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABMH27j0zFfOtMotuUT/qONNeajvsjZmJoeADvbf/Ly+lsh/Kpr6M0fR 651SYygfjcWIlxy1I/w9Z7qThPHIyX2B+C2fJvQ6qzkGXTDT8uqaySBXPVkMta+m u0siUuyuSO+xl0Ld1mhq0qLUealcv7NO5wghdVcwmUUMfvm39Dk1tuPl9dkY2Jew F0rcolRsCMKQ2KOoAyHPzku4GfGbo/dqlAB3W0+qbLlsuHM9Dp/50PQCKwPAmjZt k7lPB2/hr4DBlYALyDzU1zACgss2kzexUZAItSGOtCey1MTuVBxtDovC1aIY2T1E SLa/7tQjGYl8g6Ez0if2Wft8JzuctT0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:01:26 2025 by rpki-client